Warning: Permanently added '10.128.0.240' (ED25519) to the list of known hosts. 2024/03/31 11:45:53 fuzzer started 2024/03/31 11:45:54 dialing manager at 10.128.0.169:30013 [ 160.657707][ T5014] cgroup: Unknown subsys name 'net' [ 160.819305][ T5014] cgroup: Unknown subsys name 'rlimit' 2024/03/31 11:46:41 syscalls: 3815 2024/03/31 11:46:41 code coverage: enabled 2024/03/31 11:46:41 comparison tracing: enabled 2024/03/31 11:46:41 extra coverage: enabled 2024/03/31 11:46:41 delay kcov mmap: enabled 2024/03/31 11:46:41 setuid sandbox: enabled 2024/03/31 11:46:41 namespace sandbox: enabled 2024/03/31 11:46:41 Android sandbox: /sys/fs/selinux/policy does not exist 2024/03/31 11:46:41 fault injection: enabled 2024/03/31 11:46:41 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2024/03/31 11:46:41 net packet injection: enabled 2024/03/31 11:46:41 net device setup: enabled 2024/03/31 11:46:41 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/03/31 11:46:41 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/03/31 11:46:41 NIC VF setup: PCI device 0000:00:11.0 is not available 2024/03/31 11:46:41 USB emulation: enabled 2024/03/31 11:46:41 hci packet injection: enabled 2024/03/31 11:46:41 wifi device emulation: enabled 2024/03/31 11:46:41 802.15.4 emulation: enabled 2024/03/31 11:46:41 swap file: enabled [ 207.015813][ T5014] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k 2024/03/31 11:46:42 starting 5 executor processes [ 208.800439][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.811144][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.821289][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.854483][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.865960][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.875341][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 209.062230][ T4400] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.076210][ T4400] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.086570][ T4400] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.103885][ T4400] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.183592][ T5034] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 209.191871][ T5042] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 209.223606][ T5043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.232775][ T5034] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.233609][ T5043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.243304][ T5034] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.249417][ T5046] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.257422][ T5034] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.268211][ T5046] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.282708][ T5046] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 209.292196][ T5046] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.321952][ T5046] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.351906][ T5046] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 209.368495][ T4400] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.419088][ T5042] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.429387][ T5042] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.446405][ T5042] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.459584][ T5042] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.602803][ T5042] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 209.615456][ T5042] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 210.135039][ T5032] chnl_net:caif_netlink_parms(): no params data found [ 210.684277][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 210.972965][ T4400] Bluetooth: hci0: command tx timeout [ 211.002211][ T5040] chnl_net:caif_netlink_parms(): no params data found [ 211.299490][ T4400] Bluetooth: hci1: command tx timeout [ 211.372797][ T4400] Bluetooth: hci2: command tx timeout [ 211.413516][ T5036] chnl_net:caif_netlink_parms(): no params data found [ 211.452957][ T4400] Bluetooth: hci3: command tx timeout [ 211.651631][ T5045] chnl_net:caif_netlink_parms(): no params data found [ 211.672284][ T5032] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.680523][ T5032] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.688574][ T5032] bridge_slave_0: entered allmulticast mode [ 211.699732][ T5032] bridge_slave_0: entered promiscuous mode [ 211.703961][ T4400] Bluetooth: hci4: command tx timeout [ 211.848836][ T5032] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.856710][ T5032] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.864656][ T5032] bridge_slave_1: entered allmulticast mode [ 211.874689][ T5032] bridge_slave_1: entered promiscuous mode [ 211.894724][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.902861][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.910696][ T5049] bridge_slave_0: entered allmulticast mode [ 211.920365][ T5049] bridge_slave_0: entered promiscuous mode [ 212.005287][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.013263][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.021027][ T5049] bridge_slave_1: entered allmulticast mode [ 212.030392][ T5049] bridge_slave_1: entered promiscuous mode [ 212.160112][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.305782][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.325879][ T5032] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.382689][ T5040] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.390532][ T5040] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.400967][ T5040] bridge_slave_0: entered allmulticast mode [ 212.410365][ T5040] bridge_slave_0: entered promiscuous mode [ 212.439489][ T5032] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.453388][ T5040] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.461112][ T5040] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.469330][ T5040] bridge_slave_1: entered allmulticast mode [ 212.480963][ T5040] bridge_slave_1: entered promiscuous mode [ 212.661778][ T5049] team0: Port device team_slave_0 added [ 212.798058][ T5049] team0: Port device team_slave_1 added [ 212.899402][ T5032] team0: Port device team_slave_0 added [ 212.919900][ T5040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.003705][ T5036] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.011636][ T5036] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.020879][ T5036] bridge_slave_0: entered allmulticast mode [ 213.030209][ T5036] bridge_slave_0: entered promiscuous mode [ 213.047667][ T5032] team0: Port device team_slave_1 added [ 213.055921][ T5036] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.066290][ T5036] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.074441][ T5036] bridge_slave_1: entered allmulticast mode [ 213.083725][ T5036] bridge_slave_1: entered promiscuous mode [ 213.094299][ T4400] Bluetooth: hci0: command tx timeout [ 213.104275][ T5040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.340991][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.349010][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.357041][ T5045] bridge_slave_0: entered allmulticast mode [ 213.366070][ T5045] bridge_slave_0: entered promiscuous mode [ 213.381019][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.383845][ T4400] Bluetooth: hci1: command tx timeout [ 213.389683][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.422095][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.441077][ T5040] team0: Port device team_slave_0 added [ 213.453959][ T4400] Bluetooth: hci2: command tx timeout [ 213.497379][ T5036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.509412][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.516811][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.543418][ T5032] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.559026][ T4400] Bluetooth: hci3: command tx timeout [ 213.563174][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.571994][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.580013][ T5045] bridge_slave_1: entered allmulticast mode [ 213.588133][ T5045] bridge_slave_1: entered promiscuous mode [ 213.633987][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.641484][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.667917][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.723932][ T5040] team0: Port device team_slave_1 added [ 213.743620][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 213.761333][ T5036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.773655][ T4400] Bluetooth: hci4: command tx timeout [ 213.808533][ T5032] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.815836][ T5032] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.842561][ T5032] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.908314][ T5036] team0: Port device team_slave_0 added [ 213.958152][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.989748][ T5036] team0: Port device team_slave_1 added [ 214.211253][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.218701][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.245698][ T5036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.259515][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.266928][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.294098][ T5040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 214.319721][ T5045] team0: Port device team_slave_0 added [ 214.403028][ T5036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.410378][ T5036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.437360][ T5036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.462383][ T5049] hsr_slave_0: entered promiscuous mode [ 214.471432][ T5049] hsr_slave_1: entered promiscuous mode [ 214.484656][ T5040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 214.491869][ T5040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.519593][ T5040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 214.569705][ T5045] team0: Port device team_slave_1 added [ 214.590086][ T5032] hsr_slave_0: entered promiscuous mode [ 214.601467][ T5032] hsr_slave_1: entered promiscuous mode [ 214.611429][ T5032] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 214.622740][ T5032] Cannot create hsr debugfs directory [ 214.857048][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 214.864471][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 214.891086][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.037196][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.044715][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.071868][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 215.143019][ T4400] Bluetooth: hci0: command tx timeout [ 215.226376][ T5036] hsr_slave_0: entered promiscuous mode [ 215.239773][ T5036] hsr_slave_1: entered promiscuous mode [ 215.248369][ T5036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.256253][ T5036] Cannot create hsr debugfs directory [ 215.319979][ T5040] hsr_slave_0: entered promiscuous mode [ 215.329386][ T5040] hsr_slave_1: entered promiscuous mode [ 215.339376][ T5040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.347382][ T5040] Cannot create hsr debugfs directory [ 215.453554][ T4400] Bluetooth: hci1: command tx timeout [ 215.551893][ T4400] Bluetooth: hci2: command tx timeout [ 215.613551][ T4400] Bluetooth: hci3: command tx timeout [ 215.645925][ T5045] hsr_slave_0: entered promiscuous mode [ 215.658490][ T5045] hsr_slave_1: entered promiscuous mode [ 215.666821][ T5045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 215.674808][ T5045] Cannot create hsr debugfs directory [ 215.871151][ T4400] Bluetooth: hci4: command tx timeout [ 216.477180][ T5049] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.510932][ T5049] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.594976][ T5032] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.625067][ T5049] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.688507][ T5032] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.707974][ T5049] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.776267][ T5032] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.872859][ T5032] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 217.087678][ T5040] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 217.167784][ T5040] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 217.193512][ T5040] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 217.213890][ T4400] Bluetooth: hci0: command tx timeout [ 217.326311][ T5040] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 217.388672][ T5036] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.466780][ T5036] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.512784][ T5045] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 217.532959][ T4400] Bluetooth: hci1: command tx timeout [ 217.556441][ T5036] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.610299][ T5045] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 217.613813][ T4400] Bluetooth: hci2: command tx timeout [ 217.646720][ T5045] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 217.671699][ T5036] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 217.692985][ T4400] Bluetooth: hci3: command tx timeout [ 217.723733][ T5045] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 217.934378][ T4400] Bluetooth: hci4: command tx timeout [ 218.356773][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.431958][ T5032] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.688580][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.708193][ T5032] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.809693][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.817658][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.907147][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.915779][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.932451][ T5084] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.940259][ T5084] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.006775][ T5084] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.014609][ T5084] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.077302][ T5040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.155170][ T1219] ieee802154 phy0 wpan0: encryption failed: -22 [ 219.162027][ T1219] ieee802154 phy1 wpan1: encryption failed: -22 [ 219.195155][ T5036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.338849][ T5040] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.519491][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.527442][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.564313][ T5036] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.587943][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 219.708973][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.717409][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.739924][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.747810][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.765522][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.773577][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.975007][ T5045] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.147526][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.155530][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.290234][ T5040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 220.302849][ T5040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 220.400503][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.408463][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.549625][ T5036] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 221.548584][ T5032] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.059461][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.206695][ T5032] veth0_vlan: entered promiscuous mode [ 222.390350][ T5032] veth1_vlan: entered promiscuous mode [ 222.587766][ T5040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.629996][ T5049] veth0_vlan: entered promiscuous mode [ 222.837127][ T5032] veth0_macvtap: entered promiscuous mode [ 222.849642][ T5049] veth1_vlan: entered promiscuous mode [ 222.881108][ T5036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.951436][ T5032] veth1_macvtap: entered promiscuous mode [ 222.981701][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 223.199452][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.322643][ T5049] veth0_macvtap: entered promiscuous mode [ 223.365496][ T5032] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.446562][ T5032] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.459359][ T5032] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.469170][ T5032] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.478415][ T5032] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.557082][ T5049] veth1_macvtap: entered promiscuous mode [ 223.688806][ T5036] veth0_vlan: entered promiscuous mode [ 223.751940][ T5045] veth0_vlan: entered promiscuous mode [ 223.775662][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.786649][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.802063][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.884314][ T5036] veth1_vlan: entered promiscuous mode [ 223.916946][ T5045] veth1_vlan: entered promiscuous mode [ 223.979905][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.991237][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.006630][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.210675][ T5049] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.220244][ T5049] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.229691][ T5049] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.239008][ T5049] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.358307][ T5036] veth0_macvtap: entered promiscuous mode [ 224.391332][ T5045] veth0_macvtap: entered promiscuous mode [ 224.457876][ T5045] veth1_macvtap: entered promiscuous mode [ 224.482626][ T5036] veth1_macvtap: entered promiscuous mode [ 224.709963][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.722997][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.735295][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.748946][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.765009][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.887676][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.900641][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.912676][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.924544][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.934895][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.945994][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.961250][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.022100][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.035122][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.046222][ T5045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.057147][ T5045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.072873][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.222188][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.233785][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.246948][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.258028][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.268327][ T5036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.279223][ T5036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.296949][ T5036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.309371][ T5045] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.319650][ T5045] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.328738][ T5045] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.337825][ T5045] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.391465][ T5036] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.401510][ T5036] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.413305][ T5036] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.422334][ T5036] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.818264][ T5040] veth0_vlan: entered promiscuous mode [ 225.978674][ T5040] veth1_vlan: entered promiscuous mode [ 226.465636][ T5040] veth0_macvtap: entered promiscuous mode [ 226.551593][ T5040] veth1_macvtap: entered promiscuous mode [ 226.758814][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.770074][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.780562][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.791629][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.804274][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.817548][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.828887][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.839769][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.855597][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 227.002030][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.013262][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.023720][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.034617][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.044835][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.059617][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.070943][ T5040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 227.082119][ T5040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.097693][ T5040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 227.398901][ T5040] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.409615][ T5040] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.418960][ T5040] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.428716][ T5040] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.484256][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.493796][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.761902][ T1043] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.771015][ T1043] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:05 executing program 0: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000100)=0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)) [ 231.464096][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.472232][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:06 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x14d) write$binfmt_script(r0, &(0x7f0000000000)=ANY=[], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) [ 231.743120][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.751210][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.081372][ T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.090040][ T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.228496][ T1078] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.236726][ T1078] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:06 executing program 3: syz_emit_ethernet(0x7c, &(0x7f0000000080)={@broadcast, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "b80b00", 0x46, 0x2f, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8100, 0x0, 0x0, [0x0]}}}}}}}, 0x0) [ 232.368566][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.377897][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.620812][ T777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.631288][ T777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:07 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x7}, 0x6) 11:47:07 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) [ 232.744773][ T5214] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:0000:0000:0000 with DS=0xb 11:47:07 executing program 1: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff02f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/95, 0x7ffff000}, {&(0x7f0000001140)=""/4096}, {&(0x7f0000000200)=""/239}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11:47:07 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x10) syz_clone3(&(0x7f0000000680)={0x386305100, &(0x7f0000000200), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:47:07 executing program 2: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000540)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461002018bbdecde39739fcd1df176dde746ec834120600000000003b048000000000000072462abc30ef5b65c70f73ecea54b5e5bec5aca9836c319f653557e79a002208ceae6dda659bd5ba0f4ce5c2080002223dc60000000000000044cd0a1e36868736000000f6a55493b4b81d5b9fa9b40fe4d76afc3a989c6d60044e89eb96e44d01a1174e3797ffa86870b82939f4c4c766a7eb77cc369c71e57fafab52f325ca91e684160191acf5ae7469c82ab4145b595b987d75912afdcc1c061816f58e561403265e04f8adaa20c80108d356cd887ba217c8f569e6d0caf75052a77056b06e7068c40f807d9e539f8f5b64a8ee0725aa8d00000000007cb6ac0d90ea79b8027cf75964dd86c2ed2b5e75779677a28c76b848dd03dab190b5f02ec52830f3ff01eaae1c3df076000000000000000000000000000083a48a6b926c668b9ba42490175018ea3619f9d80a0b894e212178e1a19909d764666264fa29e2c055fd7f8e67c2acfb75f0a8d41692f4542a575ee42ed94a0014fba44985cca9df12fe93bfaccf0122a6e7e593613ac011170182f99766e86fb125cc6799c43aa4dc708dc4a00a6decad26f0378072a571da000000aec3dfbae348b5b494f6fddb9f56142a47a40ef81690a7eca421bd0ad198afa58ce69d61c29deaa93c0efea0f1415e90fd0400bad5f796374bb196e60e537b8ffca80a5ec3c5c063aab2c87a7824c4fbfab7264185e1b2e59012acbf3732abe75b84f755b18292f98f838de8ec4aaba2e3c8cd14dd9bf9499952815b9fb34057a585a9c18a11f3d496825b3fcb0c8aa89e079fd78997da864b302139b2b10597100846b55f7d0b050b7b0ef7e9c897c50b53404acdd701425323201b33465fddec69c37cb13fd441a830af5ea73f4ac82d7926eb0db1141003d148473077a76c3bee7e37dc799abb47bd67cde7958c50fb2d15c9cc196e4bff1d00000000000000000000006658aee1a500"/729], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, r0, 0x0, 0xf03affff) 11:47:07 executing program 0: io_setup(0x2007, &(0x7f0000000200)) 11:47:08 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @generic={0x4, 0x3, "fa"}]}}}}}}}}, 0x0) 11:47:08 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r0, @ANYBLOB="010028057000fcdbdf253b0000000b000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) [ 234.384046][ T778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.392459][ T778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.589215][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.597543][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 11:47:09 executing program 3: syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=") keyctl$dh_compute(0x17, &(0x7f0000000000), &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:09 executing program 0: r0 = syz_open_dev$media(&(0x7f0000001a80), 0x3, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000040)={0x80000000, 0x0, &(0x7f0000000140)}) ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f00000002c0)) [ 235.024754][ T5238] loop3: detected capacity change from 0 to 8 11:47:09 executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) 11:47:09 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:10 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 11:47:10 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0xfffc, 0x0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x4}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@empty}, {@loopback}, {@local}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}) 11:47:10 executing program 3: open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r3 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[], [], 0x6b}}) 11:47:10 executing program 4: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f00000025c0)={&(0x7f0000000000)=@in6={0x1c, 0x1c, 0x3}, 0x1c, &(0x7f0000002500)=[{&(0x7f0000000040)="e3", 0x1}, {0x0}, {&(0x7f0000002280)}], 0x3}, 0x0) [ 236.341997][ T5250] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list 11:47:11 executing program 0: r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000200)={0x10, 0x2}, 0x3) 11:47:11 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) 11:47:11 executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000140)={0x1d, r2, 0x3}, 0x18) 11:47:11 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11:47:12 executing program 3: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x24, 0x0, &(0x7f00000004c0)=[@request_death, @enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000340)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='U'}) 11:47:12 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 11:47:12 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 11:47:12 executing program 4: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000280)="ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) 11:47:12 executing program 3: r0 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCGSW(r0, 0x80084504, 0x0) 11:47:13 executing program 0: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0x0, 0x7}, 0x6) 11:47:13 executing program 2: syz_emit_ethernet(0x0, 0x0, 0x0) [ 238.842960][ T5272] binder: 5271:5272 unknown command 0 [ 238.848691][ T5272] binder: 5271:5272 ioctl c0306201 20000080 returned -22 [ 239.014939][ T5275] binder: 5271:5275 unknown command 0 [ 239.020591][ T5275] binder: 5271:5275 ioctl c0306201 200001c0 returned -22 11:47:13 executing program 3: r0 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:13 executing program 2: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0x24, 0x0, &(0x7f00000004c0)=[@request_death, @enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000340)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='U'}) 11:47:14 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x4) 11:47:14 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c01000024000b0f0000000000000000000012", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f"], 0x14c}}, 0x0) 11:47:14 executing program 4: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x1) pwritev(r0, &(0x7f0000000280), 0x0, 0x0, 0x0) 11:47:14 executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r0, &(0x7f00000000c0)={0x10, 0x2}, 0x10) 11:47:14 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32315559, 0xf00, 0x870, 0x0, @stepwise}) 11:47:14 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0xfffc, 0x0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x4}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@empty}, {}, {@local}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}) [ 240.466801][ T5289] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 11:47:15 executing program 4: fchmod(0xffffffffffffffff, 0x0) socket$igmp(0x2, 0x3, 0x2) r0 = creat(&(0x7f0000000300)='./file0\x00', 0x6) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7ffc0001}]}) r1 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) renameat2(0xffffffffffffffff, 0x0, r0, 0x0, 0x0) execve(&(0x7f0000000080)='./file0\x00', &(0x7f00000003c0)=[&(0x7f0000000100)='ext4\x00', &(0x7f0000000140)='({\x00', &(0x7f00000001c0)='/dev/vcsu\x00', &(0x7f0000000200)='/dev/vcsu\x00', &(0x7f0000000280)='{\\\x00', &(0x7f00000002c0)='/dev/vcsu\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='ext4\x00', &(0x7f0000000500)='/dev/vcsu\x00']) getdents64(0xffffffffffffffff, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000001140)='ext4\x00', &(0x7f00000007c0)='./file1\x00', 0x400c84, &(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYRES64=0x0, @ANYRES16=0x0, @ANYRES8, @ANYRES64=0x0, @ANYRES32, @ANYRES64=r1, @ANYRESDEC, @ANYBLOB="c6090a2bed672b3a2a1146e397e4a964d388b029e7f55c8768a728e2ea30af65f6bddd9e9f6858c5b8acc83457d844a5143888060e8f8b780f3a8108e5fe373b79489dcc38ec64e930608a7c142077d23d5715e5", @ANYRES32=r1], 0x1, 0x775, &(0x7f0000001180)="$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") epoll_wait(0xffffffffffffffff, &(0x7f0000000340)=[{}], 0x1, 0x0) 11:47:15 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0463"], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f0000000000)=[@register_looper], 0x1, 0x0, &(0x7f0000000280)="ff"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x20, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0e630c40"], 0x0, 0x0, 0x0}) 11:47:15 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11:47:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) 11:47:15 executing program 1: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000340)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='U'}) [ 241.222887][ T28] audit: type=1326 audit(1711885635.686:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72b6579 code=0x7ffc0000 [ 241.225370][ T5300] binder: 5298:5300 unknown command 25348 [ 241.245518][ T28] audit: type=1326 audit(1711885635.686:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72b6579 code=0x7ffc0000 [ 241.274573][ T5300] binder: 5298:5300 ioctl c0306201 20000080 returned -22 [ 241.331648][ T5303] binder: 5298:5303 unknown command 0 [ 241.337610][ T5303] binder: 5298:5303 ioctl c0306201 200001c0 returned -22 11:47:15 executing program 0: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff02f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/95, 0x7ffff000}, {&(0x7f0000001140)=""/4096}, {&(0x7f0000000200)=""/239}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) [ 241.451888][ T5299] loop4: detected capacity change from 0 to 2048 11:47:16 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000003c0)={r1}) 11:47:16 executing program 3: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c01000024000b0f0000000000000000000012", @ANYRES32=r1, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f"], 0x14c}}, 0x0) [ 241.674249][ T5299] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. 11:47:16 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x40) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)=0x81) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)) [ 241.833289][ T28] audit: type=1326 audit(1711885636.226:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=256 compat=1 ip=0xf72b6579 code=0x7ffc0000 [ 241.856311][ T28] audit: type=1326 audit(1711885636.236:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5295 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf72b6579 code=0x7ffc0000 11:47:16 executing program 1: shutdown(0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 242.035932][ T5040] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 242.321073][ T5319] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 11:47:16 executing program 2: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = dup(r0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[], [], 0x6b}}) 11:47:17 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) 11:47:17 executing program 3: open$dir(&(0x7f0000000b80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x0) r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0) symlinkat(&(0x7f0000000300)='./file0\x00', r0, &(0x7f0000000c80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') linkat(r0, &(0x7f0000000040)='./file0\x00', r0, &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f0000000dc0)='./file0\x00', r0, &(0x7f0000000ec0)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') mkdirat(r0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) symlinkat(&(0x7f00000002c0)='./file0\x00', r0, &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000980)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000a80)='./file0\x00') rmdir(&(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000340)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') symlink(&(0x7f0000000500)='./file0\x00', &(0x7f0000000fc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 11:47:17 executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xc, &(0x7f0000001a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f}, 0xb) [ 243.004800][ T5325] 9pnet_fd: Insufficient options for proto=fd 11:47:17 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x4) 11:47:17 executing program 1: r0 = syz_open_dev$video(&(0x7f0000000000), 0x7ff, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32315559, 0xf00, 0x870, 0x0, @stepwise}) 11:47:17 executing program 3: sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 11:47:18 executing program 4: shutdown(0xffffffffffffffff, 0x1) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:47:18 executing program 2: mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$nfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000040)={[{'\x01\x00\x00\x00&'}]}) 11:47:18 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCSPASS(r0, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) 11:47:18 executing program 3: syz_emit_ethernet(0x0, 0x0, 0x0) 11:47:18 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @generic={0x4, 0x3, "fa"}]}}}}}}}}, 0x0) 11:47:19 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000900)={&(0x7f0000000740)=@in={0x10, 0x2}, 0x10, 0x0}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x105, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, r2}, 0x10) 11:47:19 executing program 1: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32315559, 0xf00, 0x870, 0x0, @stepwise}) 11:47:19 executing program 3: r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000340)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='U'}) 11:47:19 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000f40)={0x2c, &(0x7f0000000d80)={0x0, 0x0, 0x7, {0xfc8d, 0x0, "a200004474"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 11:47:19 executing program 1: sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 11:47:19 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xd}, @alu={0x7, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11:47:20 executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000540)=@req3={0xfff, 0x8000, 0x1, 0x3ff, 0x7, 0x0, 0x6}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0) write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88) 11:47:20 executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb", 0x94, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 11:47:20 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) [ 245.843080][ T777] usb 5-1: new high-speed USB device number 2 using dummy_hcd 11:47:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x13, 0x4, 0x0, 0x0, 0x4c, 0x0, 0xfffc, 0x0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x4}, @timestamp_prespec={0x44, 0x34, 0x0, 0x3, 0x0, [{@loopback}, {}, {@local}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}) [ 246.223393][ T777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.235187][ T777] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.245571][ T777] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 246.255092][ T777] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.321394][ T777] usb 5-1: config 0 descriptor?? 11:47:20 executing program 0: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) 11:47:21 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x5) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000000)) 11:47:21 executing program 2: r0 = syz_open_dev$loop(&(0x7f0000000040), 0x6, 0x1) pwritev(r0, &(0x7f0000000280)=[{&(0x7f0000000080)}], 0x1, 0x0, 0x0) [ 246.834379][ T777] elecom 0003:056E:010C.0001: unbalanced collection at end of report description [ 246.884364][ T777] elecom 0003:056E:010C.0001: probe with driver elecom failed with error -22 [ 247.011466][ T777] usb 5-1: USB disconnect, device number 2 [ 247.018716][ T5376] mkiss: ax0: crc mode is auto. 11:47:21 executing program 3: r0 = getpid() process_vm_readv(r0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff02f}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)=""/95, 0x7ffff000}, {&(0x7f0000001140)=""/4096}, {&(0x7f0000000200)=""/239}], 0x286, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x0) mbind(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2) 11:47:21 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 11:47:21 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:21 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) [ 247.562544][ C1] hrtimer: interrupt took 208059 ns 11:47:22 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 11:47:22 executing program 0: openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000002a00)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 11:47:22 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000040)=""/25, &(0x7f0000000000)=0x1) 11:47:22 executing program 1: ioctl$VIDIOC_ENUM_FRAMEINTERVALS(0xffffffffffffffff, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32315559, 0xf00, 0x870, 0x0, @stepwise}) 11:47:23 executing program 2: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3fe, 0x401, 0x9}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000f0000) syz_clone3(&(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) 11:47:23 executing program 4: ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) 11:47:23 executing program 1: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89e9, 0x0) 11:47:23 executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x2, 0x7, 0x801}, 0x14}}, 0x0) 11:47:23 executing program 1: ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000001080)={0x0, 0x0, 0x0, {0x0, 0x1}, {0x4f, 0x2}, @cond=[{}, {0x7}]}) r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x12d8) ioctl$EVIOCGKEY(r0, 0x80404518, 0x0) 11:47:24 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11:47:24 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x2, 0x6, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 11:47:24 executing program 4: r0 = socket$inet(0x2, 0x0, 0x0) shutdown(r0, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 11:47:24 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)) ioctl$KDGKBTYPE(r0, 0x4b33, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') read$nci(r1, &(0x7f0000000600)=""/4096, 0x1000) 11:47:24 executing program 0: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'sit0\x00', &(0x7f0000000140)={'gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x14, 0x4, 0x0, 0x0, 0x50, 0x0, 0xfffc, 0x0, 0x4, 0x0, @multicast1, @remote, {[@timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@empty}, {@loopback}, {}, {@local}, {@broadcast}, {@initdev={0xac, 0x1e, 0x0, 0x0}}, {}]}]}}}}}) 11:47:25 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000100)=0x40) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x81) 11:47:25 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(0xffffffffffffffff, 0xc00464b4, &(0x7f00000003c0)={r1}) 11:47:25 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x3, &(0x7f0000000000)={0x0, 0x1f}, 0x8) 11:47:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110081"], 0x7c}}, 0x0) close(r0) 11:47:25 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="660cd0f49ce62072ac7c843353f2b11da615aab08e4623de9a598785033e9ac26ab265a09f334723ccc66055f97e7ffb9a7a3750cf1f609bcc8dcfcff0a25e52fd2494059d70a081ad0a408c54cd55aa", 0x50}, {&(0x7f0000000440)="2e6cf72d60a302fe18e669cb342b05bfe4fc7f40cf31ba9e", 0x18}], 0x2}, 0x0) 11:47:26 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 11:47:26 executing program 0: ioctl$SIOCX25SSUBSCRIP(0xffffffffffffffff, 0x89e9, 0x0) 11:47:26 executing program 1: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) 11:47:27 executing program 0: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c0100330009040100"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x644, &(0x7f00000006c0)=ANY=[]) 11:47:27 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20008881, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:47:27 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000008ef0e0100400001020301090224000101002000090400e2ff02010003092100000001220000090581e340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 11:47:27 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, 0x0, 0x0) [ 253.429643][ T778] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 253.532870][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd 11:47:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 11:47:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110081"], 0x7c}}, 0x0) close(r0) 11:47:28 executing program 4: prctl$PR_SET_MM_MAP(0x41, 0x3, 0x0, 0x0) mprotect(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0xe) [ 253.708109][ T778] usb 1-1: Using ep0 maxpacket: 32 [ 253.791799][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 253.891156][ T778] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 253.900366][ T778] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 253.909949][ T778] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 253.921212][ T778] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 253.930768][ T778] usb 1-1: config 1 has no interface number 0 [ 253.941681][ T778] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 253.951294][ T778] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.023394][ T9] usb 2-1: too many endpoints for config 1 interface 0 altsetting 226: 255, using maximum allowed: 30 [ 254.035087][ T9] usb 2-1: config 1 interface 0 altsetting 226 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 254.046889][ T9] usb 2-1: config 1 interface 0 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 254.066906][ T9] usb 2-1: config 1 interface 0 has no altsetting 0 11:47:28 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) [ 254.176122][ T778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 254.283039][ T9] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 254.296879][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.306567][ T9] usb 2-1: Product: syz [ 254.311066][ T9] usb 2-1: Manufacturer: syz [ 254.316189][ T9] usb 2-1: SerialNumber: syz 11:47:28 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x4) [ 254.430397][ T778] snd_usb_pod 1-1:1.1: endpoint not available, using fallback values [ 254.439981][ T778] snd_usb_pod 1-1:1.1: invalid control EP [ 254.446554][ T778] snd_usb_pod 1-1:1.1: cannot start listening: -22 [ 254.453866][ T778] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 254.468328][ T778] snd_usb_pod 1-1:1.1: probe with driver snd_usb_pod failed with error -22 11:47:29 executing program 3: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) [ 254.676533][ T778] usb 1-1: USB disconnect, device number 2 [ 254.916312][ T9] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 11:47:29 executing program 2: syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=") r0 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:29 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x5, &(0x7f0000000000)=@framed={{}, [@jmp={0x5, 0x0, 0xd}, @alu={0x7, 0x0, 0x1}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) [ 255.142254][ T5462] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 255.174920][ T5084] usb 2-1: USB disconnect, device number 2 11:47:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) io_submit(0x0, 0x1, &(0x7f0000000040)=[&(0x7f0000002040)={0xf, 0x400000000000, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x0}]) socket$packet(0x11, 0x0, 0x300) io_cancel(0x0, 0x0, &(0x7f0000000140)) fcntl$lock(r0, 0x26, &(0x7f0000000000)={0x1}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) fcntl$lock(r1, 0x26, &(0x7f0000000000)={0x1}) socket$inet6_dccp(0xa, 0x6, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000040), 0x0) dup(0xffffffffffffffff) io_pgetevents(0x0, 0x0, 0x3, &(0x7f0000001600)=[{}, {}, {}], 0x0, &(0x7f0000001740)={&(0x7f0000001700), 0x8}) io_submit(0x0, 0x0, 0x0) fcntl$lock(r0, 0x25, &(0x7f0000000080)={0x0, 0x0, 0x2}) timer_create(0x0, &(0x7f0000066000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f00009b1ffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000240)={0x0, 0x0, 0x0, [], [0x1, 0x0, 0x6, 0x1, 0x1f, 0x401, 0x9, 0xba1, 0x200000000000000, 0x200, 0x3, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x6, 0x8, 0x0, 0x0, 0x0, 0x0, 0xd37, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x6b, 0x3, 0x0, 0x0, 0x1, 0x0, 0x40, 0x0, 0x59, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x20, 0x7fffffff, 0x3f, 0x5, 0xfffffffffffffffa, 0x1ff, 0x9c4, 0x6, 0x400, 0x401, 0x2, 0x9, 0x8, 0x1, 0x8000000000000001, 0x0, 0x0, 0x2, 0xfffffffffffffff8, 0x5, 0x4, 0x0, 0x4000000000000000, 0x0, 0x8, 0x4, 0x8000000000000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0xe2]}) ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000700)={0x0, 0x0, @start={r2, 0x0, "c02819d623c26dab0d6f8098467d862d4599df1e5051bc06e0e0df9b3ce6251c4c423020377e0add8654c264224d89df25041c14b47314dcc5ab1a600d039e4fb27122933bc2e37640f2e357cb1cbf9842220468c549f85b356db5be5c1c041894459b4c66c77afb7467aeac7543877941933dbdf2e6bc7ae0b32a5b92b5e662056b4905f263a82dfa46459d53051b314c19998d997bb5aa73df7ac247596cee8c534e12cbb10b6ffeec9cf166a94a8871f4a23567acc68aa1df185df170a65ef77b1a392c466fb1d31a56eedfae994e9461415bf01bc31ca6df7de18149bc85806ca81e84f29248aaf95daa4d84c0ad3786704221b0bedac249e5ca809dd7dea5b6cb5ac272df8982c9dbe80c1e621229723c8e8ab92933c63d43366ab7bcfcfa7d9feb4a94a2f40182bacb524b1f891d9267a2feddea86a0f36853b821d09afc22719147d416feff449420f4b4a14b4074a7f981f336307080e72869591002d9b3f4d23fa15c2bbfb805e2d6b2e9fd3c25b6567b631997e9854899aa7adc1fe00652ad425480f970da9eb66861610621ec885f8af6669d2a53fa9079cde48b4f94f7d1c46641381dcfffa31a1dad48bc2846865af24c0b25dab3ba3c656afd2e5a1d1cb7c9eb259692c0db1855032c0c43e6586af787c2113a1599bafcd92c2e1917764267aa29735fcc5267a3540df4fdf39aae87b15153670258359cdf51a64ee0ec1930d363deeb48f4f413e16ab9ed7cb354f9e441609a695cda26d81e9b12feb7052ec2dba0d20b43d6d957244890e3991f9f66318209d7160a6db8790d90d28fc2a0433a5434246aa340e3ec231c51a8742a4b1092a31d7b4ad0c06274594acbbbee9e449ff1182ea5ef86559cb8d14524fca83c0c9e5441c8fcce353f6d45edd585409febabea6ae7335a0124fc1a0621563145a58a3aabb907b114784380c4226d6da78f0daac6ac386627ad54fcbd1abdc177a5d38d5bbf1f35418e5875ac4ed5eec173d38628fec4dfac916b170f027343ccd8c1ee5291feb708975649d9bc1225820857d7699fd62e2546c7a7b1f2f8111e09ee2213acd492e161430fbe4cb9f6af3df05869018025514648844799dfba7543f74939649b72d9e5d326a9f9c3abb85bb789490a74746d80dc6defd3c94a68bb1db48d8c935fd890f1ae688cb2e7102be0b3249bcb1af0ff7ed3f340817b06833affa5077b1f89a2ef77131b54b4cdda6d8b2999ade2ead4b0e8d484e4226581e32782e562ec81d23ba41bdac7f1aabec66aa68de786ebc8a60f43cbbf0be19353fea38cb8cd5624968e61db3755308939ab2f605a53f188203c01b7589ede277735141fbc3b3fdaa2263c5f77e9802fabb5640da91c716644aef010676cd747bb6d31a3dae3bfb2e3195964836db4a6777757b4f305d8f51fb6d3cf23b04fd502e7503683617dba", "1834302fed08913c31591c4f0aa7c969b198c51b8af0ab94ce6b7d54ab63653c118405510703d3618e68c77e1dcc2c90a18086bcf370514346e4a0a2879853b0577ef2bec787701b31e1a053d5848b5cef3d033b782d38e9c17b1dc03ee06aec2313e559f1cb2ef4b9e9e5d8761fa3cb0c0095146844ca664f72cb7efcd368ee0346c0c2388d26fe5c3d873511b6d5c3bb40f873b395dd75134661937c9a36d2e30ef96015b8bda2e36fa4f172753e038c2747e7d3a7b4f50020bcc74bd3ebf8f0569c3dcf40a5db03a512d7f8ace74b3808b3f51f84ec7e61dcdf5cdfac3283765007588231265564fddb07bccdea3ab095c8123ee123315e66087e1b76e3d8413dcb3f5c80c994899cab0fd2b6fbb329d9abd6037b64505c669baaa77f53173f9f5938ef1019aa58ae170fbfc37367af5451de12f656655f45705ed566a5e9a3c6038e13cbdaf01a740ae6692e4a46a8689cfbacea9b1defc3c30297e443d716e6ec402cd0963969e6cc6308c32803ccde8828503a04938f2bc3cbac9dc99c8fb7b9f0ccf18dd5dac3df4c5b69c33cb74eaf7be0ec1ab391bb151726c01f6176a351245366ba78402e3660124f8e76545e147d9a155ec51e03f847e1ea885a5740f422555fd04ea2e20a917833a86fdc12bb1e21f6c28b3df026e4139cc8c11229b272bb8a2b7a66e7c7a703eeeffd4281329aac81d4b20d3253ff9d4a2fc57105c5524ce911838cb257919e58789b31e01bf3b79294e850c4dc86b1f8f35a2b125adb81b8e071fa78d802ee5570637fac76a0f45c42bd843c6dcaf2d81dd7ea1d09f7568a4d0a58651d667e8b3a750d5315d891fb1c10747bf1c424029a627bd8988a043e26cc770b12cda9614ef470db027631d76565a4e73a78c76dff3988d22f902b239b93fb57aae097d92e6a1d1574ac611d35d4b97b6567e4af191abaaa0c760251084b95320feb9cb21d0e9f79dfc9518c4f7bf35dee75417d3bb28939b80648c90917af04dc6f6784b5945bed555d661fc51fc06e600665e122abb69dd4f4ab48f51fc8c525389be86083020b9d650798ff3fc0c77b444239c1d30c3ce248526a24b822b224c675dc4ebbedb9ec99f900df11a34979a364895068f1cd1dea335c6e988e639cd43299432b62de077a606e37414ed9d4b7ae20d8e6b48604f9d21ab1a6ba60432a97dc12cd6cb32f47d979bbac7161e339dc61647cb2d89372595a8fa6ad1f8bc47b1fb6c33c27af9b05688f833213b6b94cfc798d94ca14f1874b82be13bcf6fa3b3ad5af8ed9b142868288fbd86cb580473dc2d23020a388783b0d4f48c362cf952ef5c18356a6b9619e6ff70f5834a7cfdf8934f58cba0b9ae8c5b861bfc1f73869810890126208404d5d994373cf890d3021444c14de214ef4f4a0e3a0babb70281ddaf96518b5e0c6fb87dbdedd4bf9ba4ad626"}, [0x1, 0x4, 0x0, 0x85d, 0x1200000000000000, 0x80000001, 0x7fffffff, 0x0, 0x3, 0x20, 0x0, 0x5, 0x400, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0xffffffffffff6118, 0x1000, 0x0, 0x0, 0x885, 0x0, 0x0, 0xe1, 0x2, 0x2, 0x0, 0x1000, 0x80000000, 0x8, 0x1, 0xde6, 0x2, 0x3f, 0x0, 0x0, 0x9, 0x8000, 0x3, 0x10000, 0x400, 0xcad, 0x3ff, 0x5, 0x5, 0xfffffffffffffff7, 0x7f, 0x5a, 0xeae4, 0x100000000, 0x48c, 0xff, 0xf, 0xe8f, 0x200, 0x0, 0x7b5, 0x0, 0x0, 0x9, 0x2]}) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14}, &(0x7f0000000200)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) 11:47:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000022c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110081"], 0x7c}}, 0x0) close(r0) [ 255.602700][ T5465] loop2: detected capacity change from 0 to 8 11:47:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) 11:47:30 executing program 1: syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r0, 0xc00464b4, &(0x7f00000003c0)) 11:47:30 executing program 4: creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000480)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 11:47:30 executing program 3: syz_open_dev$media(&(0x7f00000002c0), 0x103, 0x0) ioctl$MEDIA_IOC_ENUM_LINKS(0xffffffffffffffff, 0xc0287c02, 0x0) 11:47:31 executing program 2: syz_emit_ethernet(0x7e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) 11:47:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e986", 0xa4, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 11:47:31 executing program 4: syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=") r0 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={r0, r0, r0}, &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:31 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000008ef0e0100400001020301090224000101002000090400e2ff02010003092100000001220000090581e340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 11:47:31 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x18, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@jmp={0x5, 0x0, 0xd}]}, &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) 11:47:31 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) [ 257.184059][ T5485] loop4: detected capacity change from 0 to 8 11:47:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, 0x0, 0x0) 11:47:31 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000500)=[@in={0x2, 0x0, @rand_addr=0x64010100}]}, &(0x7f0000000180)=0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x8) 11:47:32 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SSUBSCRIP(r0, 0x89ea, 0x0) [ 257.763112][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd 11:47:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) 11:47:32 executing program 1: creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, 0x0, 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 11:47:32 executing program 4: r0 = socket$inet(0x2, 0x2, 0x0) shutdown(0xffffffffffffffff, 0x1) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 258.047520][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 258.214820][ T9] usb 1-1: too many endpoints for config 1 interface 0 altsetting 226: 255, using maximum allowed: 30 [ 258.226343][ T9] usb 1-1: config 1 interface 0 altsetting 226 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 258.238153][ T9] usb 1-1: config 1 interface 0 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 258.251752][ T9] usb 1-1: config 1 interface 0 has no altsetting 0 11:47:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e986", 0xa4, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) 11:47:32 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000000), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000040)={0x80000001, 0x32315559, 0xf00, 0x870, 0x0, @stepwise}) [ 258.453978][ T9] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 258.463684][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.472045][ T9] usb 1-1: Product: syz [ 258.476817][ T9] usb 1-1: Manufacturer: syz [ 258.481669][ T9] usb 1-1: SerialNumber: syz 11:47:33 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="660cd0f49ce62072ac7c843353f2b11da615aab08e4623de9a598785033e9ac26ab265a09f334723ccc66055f97e7ffb9a7a3750cf1f609bcc8dcfcff0a25e52fd2494059d70a081ad0a408c54cd55aa", 0x50}, {&(0x7f0000000440)="2e6cf72d60a302fe18e669cb342b05bfe4fc7f40cf31ba9e", 0x18}], 0x2}, 0x0) 11:47:33 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @generic={0x4, 0x3, "fa"}]}}}}}}}}, 0x0) 11:47:33 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 11:47:33 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)) ptrace$getregset(0x420f, r0, 0x0, 0x0) [ 259.158636][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input6 11:47:33 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x7ff, 0xef9, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000100)={0x3fe, 0x401, 0x9}) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r0, 0x1000f0000) 11:47:33 executing program 4: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) [ 259.527161][ T5125] usb 1-1: USB disconnect, device number 3 11:47:34 executing program 2: syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="009c74fbdedb35410b0a6de396c7bea11d8b5f893831d2a79603aed32d7ed8d926063b9f40074d75df684430d7b4338a30dcd937fa4f95c2d6f0fccafe7535ed73b6a95946bbc501924a4d5d5f3b49768815e3e9061703b0593aacbfd021e97dd21c57cd0eb981eae095faf8e832ca2776a7ee234498d7fb60323bac6950556d9752fbaa76afb0d0cc6508b9d4b242b8d3e12e082ae92c9d962e84670bd313cc143d2398b5ebd6d0524acee51dc3d3c7695c6c7364e7670401815dff78247efa07267e0914eb626ac1a7d26cfb2f0ba975a612d008a813f852e8dbb91540c5a5168cd87464b5be0865f3b3e31356b42f8fc15cbf1dc096415b5b865f97bcb190f310fe569f4321b2cc0c16b7"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=") add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:34 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="4ace", 0x2}], 0x1, 0x0) 11:47:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = timerfd_create(0x0, 0x0) ioctl$TFD_IOC_SET_TICKS(r1, 0x40085400, 0x0) 11:47:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4, 0x0, 0x0}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r1, 0xc00464b4, &(0x7f00000003c0)={r0}) 11:47:34 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000003c0)="660cd0f49ce62072ac7c843353f2b11da615aab08e4623de9a598785033e9ac26ab265a09f334723ccc66055f97e7ffb9a7a3750cf1f609bcc8dcfcff0a25e52fd2494059d70a081ad0a408c54cd55aa", 0x50}, {&(0x7f0000000440)="2e6cf72d60a302fe18e669cb342b05bfe4fc7f40cf31ba9e", 0x18}], 0x2}, 0x0) [ 260.321320][ T5523] loop2: detected capacity change from 0 to 8 11:47:35 executing program 2: ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, 0x0) 11:47:35 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x80, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r0, &(0x7f00000000c0)=""/28, 0x1c) 11:47:35 executing program 3: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$setregs(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)) ptrace$getregset(0x420f, r0, 0x0, 0x0) 11:47:35 executing program 0: sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) 11:47:35 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640)={0xffffffffffffffff}, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x0, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}, r3}}, 0x48) 11:47:35 executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000008ef0e0100400001020301090224000101002000090400e2ff02010003092100000001220000090581e340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 11:47:36 executing program 2: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="60000000300001000000000000000000090000004c000100480001000b00010073616d706c6500001c000280180002"], 0x60}}, 0x0) 11:47:36 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x29, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000300)=0x8281336) r2 = dup(r1) write$cgroup_subtree(r2, &(0x7f00000002c0)={[{0x0, 'freezer'}, {0x2b, 'hugetlb'}, {0x0, 'hugetlb'}, {0x2b, 'hugetlb'}]}, 0x24) 11:47:36 executing program 3: ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="04630440"], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000640)={0x24, 0x0, &(0x7f00000004c0)=[@request_death, @enter_looper, @clear_death], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x54, 0x0, &(0x7f0000000340)=[@increfs, @reply_sg={0x40486312, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x1, 0x0, &(0x7f0000000500)='U'}) 11:47:36 executing program 4: r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000380)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x7fff0003}]}) syncfs(r0) [ 262.063881][ T5549] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.073744][ T5549] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.142932][ T5084] usb 2-1: new high-speed USB device number 3 using dummy_hcd 11:47:36 executing program 0: syz_emit_ethernet(0x7a, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0x14, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @cipso={0x86, 0x1e, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0x5, "4eb8a6"}, {0x0, 0x4, "9606"}, {0x0, 0x2}]}]}}}}}}}, 0x0) [ 262.422889][ T5084] usb 2-1: Using ep0 maxpacket: 8 11:47:36 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 11:47:37 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(r0, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) [ 262.598363][ T5084] usb 2-1: too many endpoints for config 1 interface 0 altsetting 226: 255, using maximum allowed: 30 [ 262.610097][ T5084] usb 2-1: config 1 interface 0 altsetting 226 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 262.622218][ T5084] usb 2-1: config 1 interface 0 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 262.636182][ T5084] usb 2-1: config 1 interface 0 has no altsetting 0 11:47:37 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x9602, 0x80, 0x1}, 0x48) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo/3\x00') read$char_usb(r0, &(0x7f00000000c0)=""/28, 0x1c) [ 262.903225][ T5084] usb 2-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 262.913529][ T5084] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 262.921907][ T5084] usb 2-1: Product: syz [ 262.926685][ T5084] usb 2-1: Manufacturer: syz [ 262.931557][ T5084] usb 2-1: SerialNumber: syz 11:47:37 executing program 0: openat$sysfs(0xffffff9c, &(0x7f00000033c0)='/sys/module/firewire_ohci', 0x0, 0x0) 11:47:37 executing program 2: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') read$nci(r0, &(0x7f0000000600)=""/4096, 0x1000) 11:47:37 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000f9ff00000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x4) 11:47:38 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000a850000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x21, &(0x7f0000000040), 0x4) sendmsg$tipc(r2, &(0x7f0000001000)={0x0, 0x0, 0x0}, 0x0) dup2(r0, r2) sendmsg$tipc(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) 11:47:38 executing program 0: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r1, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) vmsplice(r0, &(0x7f0000000440)=[{&(0x7f0000000140)="4ace", 0x2}], 0x1, 0x0) [ 263.599515][ T5084] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input7 11:47:38 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000000040)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0000ce", 0x24, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x9, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@syn={0x1e, 0xc}, @generic={0x4, 0x3, "fa"}]}}}}}}}}, 0x0) 11:47:38 executing program 3: r0 = syz_open_dev$dri(0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4, 0x0, 0x0}) r2 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_DESTROY_DUMB(r2, 0xc00464b4, &(0x7f00000003c0)={r1}) [ 263.989799][ T9] usb 2-1: USB disconnect, device number 3 11:47:38 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(0x0, r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000640), 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x2, 0x0, @loopback}, {0xa, 0x0, 0x0, @dev}}}, 0x48) 11:47:38 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000001c0), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x20008881, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 11:47:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) 11:47:39 executing program 1: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b2b, &(0x7f0000000000)={'wlan1\x00'}) [ 265.014218][ T5584] Zero length message leads to an empty skb 11:47:39 executing program 0: syz_mount_image$cramfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x1, 0x140, &(0x7f0000000200)="$eJzszEFLImEcx/Hv7Myuy66uLhlYkAUdGhJzHLFbB40kIRsovHQSbKJAMxKiYwXdOvQCPFRCJ/EQHTuUdbEUwl6H0CHoWIwjiBEdOj+fyzDf/8Nvbqap4gEZ22whv7VtFovm6tiSkUosX1xe/bO6A/jdd7ffX8dg3foq0N4HK9+6YG0jZ05lCznrvx0DFYj/tbuG/faP1bx2C3ebOg61Qbvpn7RItw0rEHf39t5OYcLa+9/bewF2S4Fq5X6xUU8GJ89HZA6TgdEBqb/7zSM9MVR2+mTS5t0Z8c79KVQPPoaqlVazkVowUkYzouvTES2sadGW8dBIRveOUeadO7DyYe8XPr+ShgMJShJUOvf2jeQCaievRt7t8ALPmx6QvrpkM76f5YzX8wNZRUIQBEEQBEEQBEEQvuk9AAD//2iQbNs=") r0 = add_key$user(&(0x7f0000000640), &(0x7f0000000540), &(0x7f00000000c0), 0xc6, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r0, r0}, &(0x7f0000000040)=""/224, 0xe0, &(0x7f0000000440)={&(0x7f0000000380)={'sha3-384-generic\x00'}}) 11:47:39 executing program 4: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r2, 0x400, 0x0) read$FUSE(r1, &(0x7f00000057c0)={0x2020}, 0x2020) 11:47:39 executing program 3: creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 11:47:39 executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x6db6e559) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x82, &(0x7f0000000000), &(0x7f0000000080)=0x8) [ 265.578712][ T5588] loop0: detected capacity change from 0 to 8 11:47:40 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, 0x0) ioctl$PPPIOCSPASS(r0, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) 11:47:40 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000008ef0e0100400001020301090224000101002000090400e2ff02010003092100000001220000090581e340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, 0x0) 11:47:40 executing program 3: pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) write$bt_hci(r0, 0x0, 0x6) vmsplice(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000140)="4ace", 0x2}], 0x1, 0x0) 11:47:40 executing program 1: syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x1000840, &(0x7f0000000440)={[{@shortname_win95}, {@fat=@debug}, {@numtail}, {@numtail}, {@numtail}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'maccenteuro'}}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@uni_xlateno}, {@fat=@debug}, {@numtail}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp864'}}]}, 0x3, 0x388, &(0x7f0000000600)="$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") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) 11:47:40 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='sys_enter\x00', r0}, 0x35) readv(0xffffffffffffffff, 0x0, 0x0) 11:47:41 executing program 3: r0 = socket(0x400000000010, 0x3, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030011000500e1000c0400070080000700", 0x33a) 11:47:41 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) [ 266.741138][ T5604] loop1: detected capacity change from 0 to 256 [ 266.802991][ T42] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 266.914762][ T5604] ======================================================= [ 266.914762][ T5604] WARNING: The mand mount option has been deprecated and [ 266.914762][ T5604] and is ignored by this kernel. Remove the mand [ 266.914762][ T5604] option from the mount to silence this warning. [ 266.914762][ T5604] ======================================================= [ 267.082935][ T42] usb 1-1: Using ep0 maxpacket: 8 11:47:41 executing program 2: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01003300090401001186eee200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x644, &(0x7f00000006c0)=ANY=[]) [ 267.193842][ T5608] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.213590][ T42] usb 1-1: too many endpoints for config 1 interface 0 altsetting 226: 255, using maximum allowed: 30 [ 267.225453][ T42] usb 1-1: config 1 interface 0 altsetting 226 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.236901][ T42] usb 1-1: config 1 interface 0 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 267.250715][ T42] usb 1-1: config 1 interface 0 has no altsetting 0 11:47:41 executing program 3: syz_emit_ethernet(0x5e, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0x0, 0x6, {0xd, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @local, @multicast2, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{}, {@private}, {@remote}]}, @lsrr={0x83, 0x3}]}}}}}}}, 0x0) [ 267.474776][ T42] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 267.485081][ T42] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.493781][ T42] usb 1-1: Product: syz [ 267.498232][ T42] usb 1-1: Manufacturer: syz [ 267.507261][ T42] usb 1-1: SerialNumber: syz 11:47:42 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, 0x0) read$nci(r0, &(0x7f0000000600)=""/4096, 0x1000) [ 267.671275][ T5604] FAT-fs (loop1): Directory bread(block 64) failed [ 267.679041][ T5604] FAT-fs (loop1): Directory bread(block 65) failed [ 267.686754][ T5604] FAT-fs (loop1): Directory bread(block 66) failed [ 267.694182][ T5604] FAT-fs (loop1): Directory bread(block 67) failed [ 267.701137][ T5604] FAT-fs (loop1): Directory bread(block 68) failed [ 267.713516][ T5604] FAT-fs (loop1): Directory bread(block 69) failed [ 267.720497][ T5604] FAT-fs (loop1): Directory bread(block 70) failed [ 267.729202][ T5604] FAT-fs (loop1): Directory bread(block 71) failed [ 267.736408][ T5604] FAT-fs (loop1): Directory bread(block 72) failed [ 267.743476][ T5604] FAT-fs (loop1): Directory bread(block 73) failed 11:47:42 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000013c0)=0x80000000001, 0x4) connect$inet6(r0, &(0x7f00000015c0)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r0, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d1186776dc1779b5c50ac82d0fa8f9e42074b5b6079207fb21e718080907964669be539791e3e98687ee0598", 0xa8, 0x840, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) r2 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x13, r2, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/4096, 0xfffffffffffffeea, 0x0, 0x0}, &(0x7f0000000280)=0x40) [ 267.983076][ T5084] usb 3-1: new high-speed USB device number 2 using dummy_hcd 11:47:42 executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56e, 0x10c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 11:47:42 executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', '', [{0x20, 'e\x8fj\xd3\x06\xb4\fh:|L\xe4\x8b\x06\xdf3\x80\xe7\xcb\x03\x167;/\x0e\x8f\xc7\xd5\x8c\x84\xeb=)\xa2\xd9\x18\xa1\x1a^\xa6\xaa\xc2\"\xfc.\x1cv\xeb\x81\xc6\xe2\t8\xacR\xadG\xb0\xae\xb4\x12\x10\x00=-\x9e\xffN\x8e\xfd\xa9\xbb\ne\xe7q\xb8\xacLl\xd5z\xab\xa1\x9b.\xc1\x80\xd2\xfej\xb1z\xaf\t\xfdf\t\x9cXTL\'5|/N\xcc\xf7\x85\x88\xdbN\xe1\xea`&\x010m\x9eI\xdeR\xa2]?\x9c\xbd\xf1V\x03\x98\xd8\xe2\x00\x00'}]}, 0x8e) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) [ 268.104386][ T42] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input8 [ 268.264761][ T5084] usb 3-1: Using ep0 maxpacket: 32 [ 268.393492][ T5084] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 268.400564][ T9] usb 1-1: USB disconnect, device number 4 [ 268.402045][ T5084] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 268.417205][ T5084] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 268.431640][ T5084] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 268.442374][ T5084] usb 3-1: config 1 has no interface number 0 [ 268.448810][ T5084] usb 3-1: config 1 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 268.462938][ T5084] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 268.472316][ T5084] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.697711][ T5084] snd_usb_pod 3-1:1.1: Line 6 Pocket POD found 11:47:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x34, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_IE={0x5, 0x3, "85"}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x34}}, 0x0) [ 268.856265][ T5125] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 268.978247][ T5084] snd_usb_pod 3-1:1.1: endpoint not available, using fallback values [ 268.987766][ T5084] snd_usb_pod 3-1:1.1: invalid control EP [ 268.993880][ T5084] snd_usb_pod 3-1:1.1: cannot start listening: -22 [ 269.000883][ T5084] snd_usb_pod 3-1:1.1: Line 6 Pocket POD now disconnected [ 269.010888][ T5084] snd_usb_pod 3-1:1.1: probe with driver snd_usb_pod failed with error -22 11:47:43 executing program 0: openat$cuse(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) [ 269.178318][ T9] usb 3-1: USB disconnect, device number 2 11:47:43 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) shutdown(r0, 0x1) connect$inet(r0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 269.344121][ T5125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 269.359739][ T5125] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 269.371456][ T5125] usb 5-1: New USB device found, idVendor=056e, idProduct=010c, bcdDevice= 0.00 [ 269.382707][ T5125] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.465283][ T5125] usb 5-1: config 0 descriptor?? 11:47:44 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x4008744b, &(0x7f00000001c0)={0x0, 0x0}) 11:47:44 executing program 2: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') read$nci(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) [ 270.073485][ T5125] usbhid 5-1:0.0: can't add hid device: -71 [ 270.080275][ T5125] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 11:47:44 executing program 1: r0 = openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x480, 0x0) fsetxattr$trusted_overlay_upper(r0, &(0x7f0000000040), &(0x7f0000000080)={0x0, 0xfb, 0x18, 0xf, 0x92, "a3232bf882fb081ad6293ba125a3c032", "837528"}, 0x18, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, 0x0) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000240)={0x0, 0x0, {}, {0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000640)={{}, 0x0, 0x0, @inherit={0x0, 0x0}, @devid}) ioctl$SNDCTL_MIDI_PRETIME(0xffffffffffffffff, 0xc0046d00, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_TESTMODE(0xffffffffffffffff, 0x0, 0x400a1) ioctl$F2FS_IOC_START_VOLATILE_WRITE(r0, 0xf503, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY(0xffffffffffffffff, 0x5000940f, 0x0) r2 = openat$procfs(0xffffff9c, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000004940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000004980)={'wlan0\x00'}) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r2, &(0x7f0000006480)={&(0x7f0000004900), 0xc, 0x0}, 0x0) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) open_by_handle_at(0xffffffffffffffff, 0x0, 0x0) fsetxattr$security_evm(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, 0x0, 0x20088) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, 0x0, 0x6c97538ce90880bb) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000006840)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000068c0)={r3}, 0x8) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(0xffffffffffffffff, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, 0x0, 0x24040881) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r2, 0x0, 0x0) [ 270.194167][ T5125] usb 5-1: USB disconnect, device number 3 11:47:44 executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000000000008ef0e0100400001020301090224000101002000090400e2ff02010003092100000001220000090581e340"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000380)={0x24, 0x0, &(0x7f0000000280)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 11:47:45 executing program 2: semctl$IPC_RMID(0x0, 0x0, 0x0) semget(0x3, 0x3, 0x200) 11:47:45 executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000080)={'#! ', '', [{0x20, 'e\x8fj\xd3\x06\xb4\fh:|L\xe4\x8b\x06\xdf3\x80\xe7\xcb\x03\x167;/\x0e\x8f\xc7\xd5\x8c\x84\xeb=)\xa2\xd9\x18\xa1\x1a^\xa6\xaa\xc2\"\xfc.\x1cv\xeb\x81\xc6\xe2\t8\xacR\xadG\xb0\xae\xb4\x12\x10\x00=-\x9e\xffN\x8e\xfd\xa9\xbb\ne\xe7q\xb8\xacLl\xd5z\xab\xa1\x9b.\xc1\x80\xd2\xfej\xb1z\xaf\t\xfdf\t\x9cXTL\'5|/N\xcc\xf7\x85\x88\xdbN\xe1\xea`&\x010m\x9eI\xdeR\xa2]?\x9c\xbd\xf1V\x03\x98\xd8\xe2\x00\x00'}]}, 0x8e) close(0xffffffffffffffff) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) 11:47:45 executing program 4: seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) rmdir(0x0) 11:47:45 executing program 1: r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r0, &(0x7f0000001100)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) [ 270.917851][ T5084] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 271.233218][ T5084] usb 1-1: Using ep0 maxpacket: 8 11:47:45 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1af8ff00000000bfa10000000000000701ecfff7ffffffb702000008000000b7030000000000008500000006000000660000000000000095"], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r0}, 0x10) [ 271.379264][ T5084] usb 1-1: too many endpoints for config 1 interface 0 altsetting 226: 255, using maximum allowed: 30 [ 271.391123][ T5084] usb 1-1: config 1 interface 0 altsetting 226 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 271.406904][ T5084] usb 1-1: config 1 interface 0 altsetting 226 has 1 endpoint descriptor, different from the interface descriptor's value: 255 [ 271.422226][ T5084] usb 1-1: config 1 interface 0 has no altsetting 0 11:47:46 executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000f9ff00000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x12, 0x0, 0x4) 11:47:46 executing program 2: creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000080)='./file0\x00', 0x0) 11:47:46 executing program 1: open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r0, 0x0, 0x15) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000380)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) [ 271.625731][ T5084] usb 1-1: New USB device found, idVendor=0eef, idProduct=0001, bcdDevice= 0.40 [ 271.635320][ T5084] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.643731][ T5084] usb 1-1: Product: syz [ 271.648289][ T5084] usb 1-1: Manufacturer: syz [ 271.656526][ T5084] usb 1-1: SerialNumber: syz [ 271.837056][ T5647] 9pnet_fd: Insufficient options for proto=fd 11:47:46 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_trie\x00') read$nci(0xffffffffffffffff, &(0x7f0000000600)=""/4096, 0x1000) [ 272.028295][ T5649] ===================================================== [ 272.035747][ T5649] BUG: KMSAN: uninit-value in strnchr+0x90/0xd0 [ 272.042182][ T5649] strnchr+0x90/0xd0 [ 272.046254][ T5649] bpf_bprintf_prepare+0x1c2/0x23c0 [ 272.052117][ T5649] bpf_trace_printk+0xec/0x3e0 [ 272.057078][ T5649] ___bpf_prog_run+0x13fe/0xe0f0 [ 272.062176][ T5649] __bpf_prog_run32+0xb2/0xe0 [ 272.067103][ T5649] bpf_trace_run2+0x116/0x300 [ 272.072019][ T5649] __bpf_trace_tlb_flush+0x2c/0x40 [ 272.077321][ T5649] switch_mm_irqs_off+0x9d2/0x1010 [ 272.082700][ T5649] __text_poke+0xb4e/0xfb0 [ 272.087322][ T5649] text_poke_bp_batch+0x17f/0x960 [ 272.092544][ T5649] text_poke_finish+0x7d/0xd0 [ 272.097426][ T5649] arch_jump_label_transform_apply+0x23/0x40 [ 272.103667][ T5649] __jump_label_update+0x6af/0x6d0 [ 272.109190][ T5649] jump_label_update+0x6a0/0x7a0 [ 272.114331][ T5649] static_key_enable_cpuslocked+0x229/0x260 [ 272.120511][ T5649] static_key_enable+0x23/0x30 [ 272.125637][ T5649] tracepoint_add_func+0x1084/0x1280 [ 272.131163][ T5649] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 272.138199][ T5649] bpf_probe_register+0x201/0x250 [ 272.143405][ T5649] bpf_raw_tp_link_attach+0x627/0x8a0 [ 272.149078][ T5649] bpf_raw_tracepoint_open+0x485/0x8a0 [ 272.154743][ T5649] __sys_bpf+0x5a6/0xd90 [ 272.159156][ T5649] __ia32_sys_bpf+0xa0/0xe0 [ 272.163920][ T5649] __do_fast_syscall_32+0xba/0x120 [ 272.169335][ T5649] do_fast_syscall_32+0x38/0x80 [ 272.174637][ T5649] do_SYSENTER_32+0x1f/0x30 [ 272.179504][ T5649] entry_SYSENTER_compat_after_hwframe+0x7f/0x89 [ 272.186184][ T5649] [ 272.188766][ T5649] Local variable stack created at: [ 272.193984][ T5649] __bpf_prog_run32+0x43/0xe0 [ 272.198820][ T5649] bpf_trace_run2+0x116/0x300 [ 272.203644][ T5649] [ 272.206229][ T5649] CPU: 0 PID: 5649 Comm: syz-executor.3 Not tainted 6.9.0-rc1-syzkaller-00355-g712e14250dd2 #0 [ 272.216722][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 272.226994][ T5649] ===================================================== [ 272.234020][ T5649] Disabling lock debugging due to kernel taint [ 272.240350][ T5649] Kernel panic - not syncing: kmsan.panic set ... [ 272.246883][ T5649] CPU: 0 PID: 5649 Comm: syz-executor.3 Tainted: G B 6.9.0-rc1-syzkaller-00355-g712e14250dd2 #0 [ 272.258988][ T5649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 272.269222][ T5649] Call Trace: [ 272.272575][ T5649] [ 272.275581][ T5649] dump_stack_lvl+0x216/0x2d0 [ 272.280512][ T5649] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 272.286643][ T5649] dump_stack+0x1e/0x30 [ 272.290937][ T5649] panic+0x4e2/0xcd0 [ 272.295006][ T5649] ? kmsan_get_metadata+0x91/0x1d0 [ 272.300255][ T5649] kmsan_report+0x2d5/0x2e0 [ 272.304956][ T5649] ? __msan_warning+0x95/0x120 [ 272.310132][ T5649] ? strnchr+0x90/0xd0 [ 272.314342][ T5649] ? bpf_bprintf_prepare+0x1c2/0x23c0 [ 272.320060][ T5649] ? bpf_trace_printk+0xec/0x3e0 [ 272.325142][ T5649] ? ___bpf_prog_run+0x13fe/0xe0f0 [ 272.330473][ T5649] ? __bpf_prog_run32+0xb2/0xe0 [ 272.335455][ T5649] ? bpf_trace_run2+0x116/0x300 [ 272.340429][ T5649] ? __bpf_trace_tlb_flush+0x2c/0x40 [ 272.345854][ T5649] ? switch_mm_irqs_off+0x9d2/0x1010 [ 272.351272][ T5649] ? __text_poke+0xb4e/0xfb0 [ 272.356005][ T5649] ? text_poke_bp_batch+0x17f/0x960 [ 272.361357][ T5649] ? text_poke_finish+0x7d/0xd0 [ 272.366707][ T5649] ? arch_jump_label_transform_apply+0x23/0x40 [ 272.373051][ T5649] ? __jump_label_update+0x6af/0x6d0 [ 272.378485][ T5649] ? jump_label_update+0x6a0/0x7a0 [ 272.383739][ T5649] ? static_key_enable_cpuslocked+0x229/0x260 [ 272.390135][ T5649] ? static_key_enable+0x23/0x30 [ 272.395294][ T5649] ? tracepoint_add_func+0x1084/0x1280 [ 272.400994][ T5649] ? tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 272.408125][ T5649] ? bpf_probe_register+0x201/0x250 [ 272.413538][ T5649] ? bpf_raw_tp_link_attach+0x627/0x8a0 [ 272.419241][ T5649] ? bpf_raw_tracepoint_open+0x485/0x8a0 [ 272.425018][ T5649] ? __sys_bpf+0x5a6/0xd90 [ 272.429635][ T5649] ? __ia32_sys_bpf+0xa0/0xe0 [ 272.434423][ T5649] ? __do_fast_syscall_32+0xba/0x120 [ 272.439870][ T5649] ? do_fast_syscall_32+0x38/0x80 [ 272.445212][ T5649] ? do_SYSENTER_32+0x1f/0x30 [ 272.450024][ T5649] ? entry_SYSENTER_compat_after_hwframe+0x7f/0x89 [ 272.456778][ T5649] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 272.463358][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.469111][ T5649] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 272.475149][ T5649] ? _raw_spin_unlock_irqrestore+0x3f/0x60 [ 272.481256][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.486611][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.491948][ T5649] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 272.498001][ T5649] __msan_warning+0x95/0x120 [ 272.502800][ T5649] strnchr+0x90/0xd0 [ 272.506862][ T5649] bpf_bprintf_prepare+0x1c2/0x23c0 [ 272.512347][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.517865][ T5649] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 272.524286][ T5649] ? __msan_memcpy+0x108/0x1c0 [ 272.529207][ T5649] bpf_trace_printk+0xec/0x3e0 [ 272.534122][ T5649] ? __bpf_prog_run32+0x5c/0xe0 [ 272.539121][ T5649] ? kmsan_get_shadow_origin_ptr+0x4d/0xb0 [ 272.545196][ T5649] ___bpf_prog_run+0x13fe/0xe0f0 [ 272.550308][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.556005][ T5649] __bpf_prog_run32+0xb2/0xe0 [ 272.560832][ T5649] ? __pfx___bpf_prog_run32+0x10/0x10 [ 272.566434][ T5649] bpf_trace_run2+0x116/0x300 [ 272.571236][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.576653][ T5649] __bpf_trace_tlb_flush+0x2c/0x40 [ 272.581994][ T5649] switch_mm_irqs_off+0x9d2/0x1010 [ 272.587269][ T5649] __text_poke+0xb4e/0xfb0 [ 272.591839][ T5649] ? __pfx_text_poke_memcpy+0x10/0x10 [ 272.597378][ T5649] ? switch_mm_irqs_off+0x920/0x1010 [ 272.602893][ T5649] ? switch_mm_irqs_off+0x920/0x1010 [ 272.608329][ T5649] text_poke_bp_batch+0x17f/0x960 [ 272.613617][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.618953][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.624301][ T5649] ? kmsan_report+0x2a6/0x2e0 [ 272.629160][ T5649] text_poke_finish+0x7d/0xd0 [ 272.634811][ T5649] arch_jump_label_transform_apply+0x23/0x40 [ 272.641037][ T5649] __jump_label_update+0x6af/0x6d0 [ 272.646549][ T5649] jump_label_update+0x6a0/0x7a0 [ 272.651948][ T5649] ? kmsan_report+0x240/0x2e0 [ 272.657313][ T5649] static_key_enable_cpuslocked+0x229/0x260 [ 272.663504][ T5649] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 272.669850][ T5649] static_key_enable+0x23/0x30 [ 272.674940][ T5649] ? __SCT__tp_func_exit_mmap+0x8/0x8 [ 272.680730][ T5649] tracepoint_add_func+0x1084/0x1280 [ 272.686858][ T5649] ? kmsan_internal_set_shadow_origin+0x66/0xe0 [ 272.693486][ T5649] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 272.699462][ T5649] tracepoint_probe_register_prio_may_exist+0xa8/0xf0 [ 272.706602][ T5649] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 272.712837][ T5649] ? __pfx___bpf_trace_tlb_flush+0x10/0x10 [ 272.718908][ T5649] bpf_probe_register+0x201/0x250 [ 272.724129][ T5649] bpf_raw_tp_link_attach+0x627/0x8a0 [ 272.729801][ T5649] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 272.736036][ T5649] ? kmsan_get_metadata+0x146/0x1d0 [ 272.741515][ T5649] bpf_raw_tracepoint_open+0x485/0x8a0 [ 272.747180][ T5649] __sys_bpf+0x5a6/0xd90 [ 272.751563][ T5649] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 272.757892][ T5649] __ia32_sys_bpf+0xa0/0xe0 [ 272.762522][ T5649] __do_fast_syscall_32+0xba/0x120 [ 272.767881][ T5649] ? switch_fpu_return+0x17/0x20 [ 272.773180][ T5649] do_fast_syscall_32+0x38/0x80 [ 272.778377][ T5649] do_SYSENTER_32+0x1f/0x30 [ 272.783264][ T5649] entry_SYSENTER_compat_after_hwframe+0x7f/0x89 [ 272.789766][ T5649] RIP: 0023:0xf72e3579 [ 272.793924][ T5649] Code: Unable to access opcode bytes at 0xf72e354f. [ 272.800781][ T5649] RSP: 002b:00000000f5edd5ac EFLAGS: 00000206 ORIG_RAX: 0000000000000165 [ 272.809446][ T5649] RAX: ffffffffffffffda RBX: 0000000000000011 RCX: 0000000020000080 [ 272.817712][ T5649] RDX: 0000000000000010 RSI: 0000000000000000 RDI: 0000000000000000 [ 272.825791][ T5649] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 272.833861][ T5649] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 272.841960][ T5649] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 272.850083][ T5649] [ 274.256112][ T5649] Shutting down cpus with NMI [ 274.261309][ T5649] Kernel Offset: disabled [ 274.265695][ T5649] Rebooting in 86400 seconds..