last executing test programs: 36m20.325493226s ago: executing program 32 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r0}, &(0x7f0000000800), &(0x7f0000000840)=r1}, 0x20) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) io_pgetevents(0x0, 0x9, 0x0, 0x0, 0x0, 0x0) 35m44.582740149s ago: executing program 33 (id=118): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x18) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffff9]}, 0x0, 0x8) r2 = gettid() r3 = gettid() tkill(r2, 0x12) tkill(r2, 0x2d) tkill(r3, 0x14) 34m57.53074541s ago: executing program 34 (id=249): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0xa, 0x300) syz_emit_ethernet(0x36, &(0x7f00000002c0)={@local, @remote, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "25351d", 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local}}}}, 0x0) 34m10.829697013s ago: executing program 35 (id=348): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000080)='task_rename\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r1}, &(0x7f00000004c0), &(0x7f0000000540)=r0}, 0x20) 33m19.230856s ago: executing program 36 (id=424): fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x108041a, &(0x7f0000000340)=ANY=[@ANYRES16=0x0, @ANYRESHEX], 0x1, 0x550b, &(0x7f0000000540)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, &(0x7f0000000040)=""/247, 0x26, 0xf7, 0x1, 0x0, 0x0, @void, @value=0xf6}, 0x20) 32m23.254420083s ago: executing program 37 (id=551): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d000000850000000800000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(0x0, r4) sendmsg$IPSET_CMD_HEADER(0xffffffffffffffff, 0x0, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) rename(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)='./file0\x00') epoll_create1(0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) sync() 31m22.616828218s ago: executing program 38 (id=637): socket(0x3, 0x2, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) shutdown(r1, 0x0) 30m15.219747352s ago: executing program 39 (id=750): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0b00000008000000070000000900000001"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfff}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x4, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x3004d91, &(0x7f0000000080)={[{@noinit_itable}]}, 0x1, 0x523, &(0x7f0000000a80)="$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") socket$inet6(0xa, 0x3, 0x3a) 28m56.712168581s ago: executing program 40 (id=927): accept4$unix(0xffffffffffffffff, 0x0, &(0x7f00000000c0), 0x180000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) readlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)=""/176, 0xa) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() getpeername$inet6(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0xa02000000000000, 0x60, 0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="e80100000001050500000011000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da8000680040003800800020064010101240003800600"], 0x1e8}}, 0x48040) socket$nl_xfrm(0x10, 0x3, 0x6) 27m17.144522976s ago: executing program 41 (id=1182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) sendmmsg$unix(r2, &(0x7f0000001a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, {{&(0x7f0000000a80)=@abs={0x1, 0x0, 0x4e24}, 0x6e, 0x0, 0x0, &(0x7f0000001940), 0x0, 0x90}}], 0x2, 0x40) ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r3}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x3, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x2}]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) r5 = socket(0x11, 0x3, 0x1000) ioctl$sock_inet_SIOCADDRT(r5, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x1, @dev}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) 26m27.256172092s ago: executing program 42 (id=1265): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000001c0)='sched_switch\x00', r2}, 0x10) 26m2.212346486s ago: executing program 6 (id=1314): syz_mount_image$msdos(&(0x7f0000000080), &(0x7f0000000000)='./file1\x00', 0x2000000, &(0x7f00000025c0)=ANY=[@ANYBLOB="646f74732c747a3d5554432c646f74732c646f74732c6e6f646f74732c666c7573682c646f74732c6e6f646f74732c71756965742c00b3d27234e95eb4b44190021bbbe89ab824d38c571641668d362b4dff6e47bdf1638c7462a3bd66a53b404ae08c32af6843a2469c7210381b9d48047c77540b6447a8e50c44cb44f91e4264a37e0209c3a234f4803ba56b7a24536ee396f4838f4143b92ad909efb23eb22dce6477c2bb5b8f793b9e07c2120d566cf1f6ba51e4d01e8ef223a2ba72cfb3127844c045765149fb1219f433feb977426596e07082254e9930296256df143ff96377d8c28c533724fbd9fdad260e7d875d0f17374141abc60c8e3c07e4a7bc381791172c217f00964aaf6e213a252b9689ae38342862d27437921e13229d407e1a6037e3f16a2cdab8f9c76a66a72ccc67015c9435e200f9fbb9d78ce426b37310b9f127e7b1207c74eff7b853de7043a001de85931463c7fc7c78be9eb9b5f88c0067aabb3a5d1f94bcc90537c1c1ce509450160c"], 0x3, 0x17b, &(0x7f0000000300)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x40) mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x100000b, 0x2013, r0, 0x0) write$cgroup_subtree(r0, &(0x7f00000000c0)=ANY=[], 0x32600) 26m0.875150622s ago: executing program 6 (id=1317): munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000480)='./file0\x00', 0x2000002, &(0x7f0000000880)=ANY=[@ANYRES64, @ANYRES8, @ANYRESOCT, @ANYBLOB="ac82fa3da8cb64cc9eacb70c5918a0fd0f53ab333860bfb7988f9b8200a0d9b5f31f4d5b386152286170eda7f0291b03bafde1116c6f4799c9f36b7247c9664cfa9b290a30352b971c", @ANYRESHEX], 0x8, 0x30b, &(0x7f0000000900)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$uinput_user_dev(r5, &(0x7f0000000380)={'syz1\x00', {0xff, 0x6, 0x7fff, 0x8d5}, 0x2, [0x10000, 0xeba, 0x7, 0x9, 0x8, 0x1, 0x6, 0x7ff, 0x54, 0x7fffdfff, 0x2, 0xc, 0x8, 0x1, 0x9, 0xfffffff7, 0x7, 0x40000, 0x842, 0x24, 0x4, 0x0, 0x3ff, 0xfffffff4, 0x1, 0xda6, 0x3, 0xa7, 0x4, 0x2, 0x9, 0x76c9, 0x200, 0x1, 0x3, 0x1, 0x7, 0x80009, 0x1000f, 0xb, 0x9, 0x7ffffffc, 0x9, 0xb50, 0x0, 0x800, 0x3, 0x0, 0x7, 0xfffffffe, 0xfffffffa, 0x8, 0x24, 0x7fff, 0x8, 0x1, 0x200, 0x0, 0x0, 0x7f, 0x964e, 0x2d5, 0x149, 0x1], [0x266ac, 0xfffffff9, 0x4, 0x3, 0x8e, 0x7, 0x80000001, 0x9, 0x4, 0x85, 0x0, 0x7, 0x8, 0x8001, 0x6, 0x8, 0x2, 0x8, 0x6, 0x7ff, 0x7ff, 0x5, 0x9, 0xc00, 0x89, 0x7ff, 0x0, 0x1, 0x10000, 0x9, 0x9, 0x4d26, 0x10000, 0x8, 0x1, 0x7, 0xfffffffc, 0x4, 0x4c, 0x9, 0x3b, 0x5, 0xe66, 0x8, 0x2, 0x81, 0x4b, 0x7d, 0x6, 0xb, 0x4, 0x9, 0x1, 0x8d1, 0x100008fd, 0x1, 0xe0, 0x8e, 0x10001, 0x4, 0x401, 0xade, 0x7f], [0x8396, 0xb, 0x10000, 0x9, 0x8000, 0x0, 0x9, 0xe, 0x8, 0xff, 0x7f, 0x400, 0x1000, 0x9, 0x6e, 0x8001, 0x7, 0x3, 0x6, 0x5, 0x4, 0xcb, 0x2, 0x3, 0x0, 0x2, 0x8001, 0xc, 0x5, 0xb0f, 0x1e, 0x1, 0x800, 0x80008, 0x9, 0x3, 0x200, 0xfc, 0x4, 0xe, 0x464b, 0x6, 0x2e7, 0x7ff, 0x1ff, 0x6, 0x7f, 0x2, 0x7fffffff, 0xffffffff, 0x4, 0xffff, 0xd5d, 0xa0c787d, 0xffffff4e, 0x9, 0x4, 0x3c, 0x3, 0x0, 0x1fc1, 0x9, 0x1, 0x6], [0x10000010, 0x7, 0x9, 0x2, 0xa5e, 0xfe, 0xff, 0x6, 0x80000000, 0x0, 0xe, 0x2, 0x4, 0x7, 0x7, 0x0, 0xfffffffd, 0x7ff, 0xdaa, 0x4, 0x3, 0x103, 0x3, 0xcc, 0x6, 0x4000400, 0xffffffff, 0xfffffffb, 0x40, 0x80000000, 0x3, 0x7, 0xfff, 0x4, 0x9, 0x0, 0x9, 0x1, 0x0, 0x7, 0x8ac1, 0x3, 0x1, 0x3, 0x27df, 0xff, 0x6, 0x3, 0xfffff801, 0xffefffff, 0x37d, 0xfffffff8, 0xd, 0x7, 0xd, 0x8, 0x6eaf, 0x6, 0x8, 0x5e02, 0x2, 0x3, 0x5, 0x400]}, 0x45c) ioctl$UI_DEV_CREATE(r5, 0x5501) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r7}, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) sendmsg$nl_route_sched(r8, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 25m59.51928808s ago: executing program 6 (id=1320): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000340)='configfs\x00', 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) socket$inet6(0x10, 0x3, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo\x00') getdents64(r6, &(0x7f0000002f40)=""/4084, 0x1007) 25m57.344499387s ago: executing program 6 (id=1325): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000b40)={[{@errors_remount}, {@mblk_io_submit}, {@data_journal}, {@sysvgroups}, {@barrier}, {@jqfmt_vfsv0}, {@nogrpid}]}, 0x3, 0x461, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 25m55.728276298s ago: executing program 6 (id=1329): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fbff000000004000001d8500000007000000440000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4d, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='mm_page_free\x00', r0, 0x0, 0x8080000001}, 0x18) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb2570000) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 25m53.507589962s ago: executing program 6 (id=1335): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 25m53.045838678s ago: executing program 43 (id=1335): openat$binderfs(0xffffffffffffff9c, 0x0, 0x1802, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) shutdown(r0, 0x1) recvfrom$inet(r0, 0x0, 0x0, 0x40000042, 0x0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r5, &(0x7f0000514ff4)={0x10, 0x0, 0xffffffff, 0x2ffffffff}, 0xc) syz_clone(0x42000000, 0x0, 0x0, 0x0, 0x0, 0x0) 22m30.966084723s ago: executing program 7 (id=1957): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000e20000001801000020786c2500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000000400"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) io_setup(0x3ff, &(0x7f0000000500)) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000003680)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 22m26.189993422s ago: executing program 7 (id=1972): mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x9) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x78bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r9, {0x4, 0xa}, {0x7, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x24041080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r10}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022}) 22m24.147214819s ago: executing program 7 (id=1976): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) pipe2$9p(&(0x7f00000001c0), 0x0) r1 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e00000020000280060002003000000014000600"], 0x5c}}, 0x0) 22m22.246885687s ago: executing program 7 (id=1979): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000b40)={[{@errors_remount}, {@mblk_io_submit}, {@data_journal}, {@sysvgroups}, {@barrier}, {@jqfmt_vfsv0}, {@nogrpid}]}, 0x3, 0x461, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 22m20.802547498s ago: executing program 7 (id=1980): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000bc0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x2, 0x0, 0x0, 0x0, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1, 0x0, 0x7fff}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8}]}, 0x3c}}, 0x0) 22m19.815952296s ago: executing program 7 (id=1985): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 22m19.215493071s ago: executing program 44 (id=1985): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1e, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_connect$rtl8150(0x1, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) 22m16.458660959s ago: executing program 0 (id=2000): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000b00)={0xa, 0xfdfe, 0xfa, @private2, 0xa}, 0x1c) connect$pppl2tp(r0, &(0x7f0000000300)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x0, 0x2, 0x0, {0xa, 0x0, 0xf9d, @private2={0xfc, 0x2, '\x00', 0x1}}}}, 0x32) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x1, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r3, 0x0, 0x2}, 0x18) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) rmdir(&(0x7f0000000140)='./cgroup/../file0\x00') sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=ANY=[], 0x28}}], 0x1, 0x4000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) socket$packet(0x11, 0x2, 0x300) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000001700000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r6, 0x0, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0xfdef, &(0x7f0000000280)=ANY=[], 0x0) 22m13.42344549s ago: executing program 0 (id=2003): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSKBSENT(r0, 0x4b49, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = fsopen(&(0x7f0000001240)='9p\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x3, &(0x7f0000000000)='source', &(0x7f0000000100)='[\x8b\xa4[\x13\x9b\x00w#\x9b\x94\xb6@\x874L\xf5U\xd7\xcb+3,\x999\xa9\":|\x98\xc5\x93\xba\x8d\xff\x14\x8ag+\xcd\xb1\x96d&\x8dn\x00\xdb\xd2\r!A\x1dZ\x16\xa3\x84\xa1\f\\%$\xd3\x9f\xf4a\xdb\x10\xd1&\x83\xba\x9d\x91\xf7\x92\xfb}\x91\x8d\xfav5{\xe4M;\xa2:\xe0\xfc\xa2G\xd3bBM\xe3i\xfc\x01\xc2\xa1|\x90\xd5\x8d;U\xe2', 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) signalfd(r0, &(0x7f0000000040)={[0xd5]}, 0x8) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) recvmmsg(r1, &(0x7f00000003c0)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000008c0)=""/4111, 0x100f}], 0x1}, 0x100}], 0x1, 0x10002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d00)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180100000100a7d9000000000020b200850000007b00000095"], 0x0, 0x0, 0xe6, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) r3 = socket$inet(0x2, 0x2, 0x1) connect$inet(r3, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r3, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="08001497733f5d3e", 0x8}], 0x1}}, {{0x0, 0x0, &(0x7f0000000440)}}], 0x2, 0x2004000) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180200000300000000000000000000008500000027000000850000000800000095000000000000001644ac29e83946cfc7968102c7dc48c4a4fbacec981fda152b00c5ebc7733d2ed95abd36a3210100000000000000e3368079af8ecb3664"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe3f}, 0x46) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth1_to_bond\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r5, 0x2, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x39}}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r7, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="0100288c7000fddbdf256f00000008000300", @ANYRES32=r9], 0x1c}, 0x1, 0x0, 0x0, 0x20004050}, 0x440) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000280)={r5, 0x2, 0x6, @local}, 0x10) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000540)={'bond_slave_1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000000)={r11, 0x1, 0x6, @local}, 0x10) sync() 22m12.334748528s ago: executing program 0 (id=2008): bpf$MAP_CREATE(0x0, &(0x7f0000001740)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000001800)={0x11, 0xc, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000", @ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x26, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r0}, 0x18) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) 22m11.971387572s ago: executing program 0 (id=2011): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000b40)={[{@errors_remount}, {@mblk_io_submit}, {@data_journal}, {@sysvgroups}, {@barrier}, {@jqfmt_vfsv0}, {@nogrpid}]}, 0x3, 0x461, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 22m10.270683135s ago: executing program 0 (id=2016): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0x1f, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x5) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r1, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 22m9.143609888s ago: executing program 9 (id=2018): dup2(0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000140)="438d9ea065cba4", 0x7}], 0x1, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xda02}) close(r0) socket$inet_udp(0x2, 0x2, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 22m8.667650153s ago: executing program 9 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x7, 0x0, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000400)=""/71, 0x47}], 0x1, 0x0, 0x0) 22m8.19841233s ago: executing program 9 (id=2023): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0100000040fc51c64400000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x80}}, 0x0) sendmsg$can_bcm(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000019c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="01000000080800"/16, @ANYRESDEC=r2, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES16=r1], 0x80}}, 0x0) 22m7.783376098s ago: executing program 9 (id=2026): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x88e, &(0x7f0000000b40)={[{@errors_remount}, {@mblk_io_submit}, {@data_journal}, {@sysvgroups}, {@barrier}, {@jqfmt_vfsv0}, {@nogrpid}]}, 0x3, 0x461, &(0x7f0000001100)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) gettid() sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]}) 22m6.575597749s ago: executing program 0 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 22m5.73406944s ago: executing program 45 (id=2029): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x200000000006, 0x0, 0x0, 0x7ffc0001}]}) socket(0x28, 0x5, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000cc0)='kmem_cache_free\x00', r2}, 0x18) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) syz_open_procfs(0x0, &(0x7f0000000040)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r3, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) 22m5.715628439s ago: executing program 9 (id=2032): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x88, &(0x7f0000000140)={[{@nogrpid}, {@min_batch_time={'min_batch_time', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nodiscard}, {@quota}]}, 0x3, 0x438, &(0x7f0000000580)="$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") socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x1b, &(0x7f0000000180)={@remote, 0x7, 0x0, 0x1}, 0x20) r4 = syz_open_procfs(0x0, &(0x7f0000000080)='net/anycast6\x00') preadv(r4, &(0x7f0000000200)=[{&(0x7f0000000400)=""/71, 0x47}], 0x1, 0x0, 0x0) 22m3.394131273s ago: executing program 9 (id=2042): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @private=0xa010100, 0x1, "34d5fdb244787aae1037b3cc0dfd25debc5e463e671f467a7381248bf19b3846", 0xe7, 0x9, 0x8, 0x8}, 0x3c) 22m3.054242632s ago: executing program 46 (id=2042): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @empty}, 0x10) setsockopt$inet_mreq(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) connect$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000080), 0xc, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000080)={@broadcast, @private=0xa010100, 0x1, "34d5fdb244787aae1037b3cc0dfd25debc5e463e671f467a7381248bf19b3846", 0xe7, 0x9, 0x8, 0x8}, 0x3c) 19m54.131668224s ago: executing program 4 (id=2660): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000280)={0x68, r1, 0x1, 0x0, 0xfffffffc, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40040}, 0x0) 19m53.905775312s ago: executing program 4 (id=2661): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x8, 0x2, 0x4, 0x5}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r3, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xe, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xeb}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) io_setup(0x7, &(0x7f0000000280)) close(0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000004001004000024001a80200002801c00018008001a00060000000800160002000000080010000004000008001b"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) 19m52.708324468s ago: executing program 4 (id=2666): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x110, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0xb}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_CVLAN_ID={0x6, 0x4d, 0xfa7}, @TCA_FLOWER_KEY_ETH_DST={0xa}, @TCA_FLOWER_KEY_ICMPV4_CODE_MASK={0x5}, @TCA_FLOWER_KEY_ARP_SIP_MASK={0x8, 0x3a, 0xffffffff}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff000000, 0x0, 0xffffffff, 0xffffff00]}, @TCA_FLOWER_KEY_UDP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_MPLS_LABEL={0x8, 0x46, 0xa1}]}}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x7c, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x3}, @TCA_BPF_ACT={0x68, 0x1, [@m_ctinfo={0x64, 0x19, 0x0, 0x0, {{0xb}, {0x4}, {0x35, 0x6, "ed5c1eb99390e7d0a8730c2f4ad7eab8a255351b763e5585c30ef05596ff09fd3ea6975074d4baa7805a08bfdd7f7fa263"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x110}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x403, 0x70bd28, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40800}, [@IFLA_ADDRESS={0xa, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @IFLA_TARGET_NETNSID={0x8}]}, 0x34}, 0x1, 0xba01, 0x0, 0x400c002}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 19m52.475636117s ago: executing program 4 (id=2669): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() socket$inet_tcp(0x2, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00'}, 0x18) socket$pptp(0x18, 0x1, 0x2) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006) mkdir(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) 19m51.328010651s ago: executing program 4 (id=2675): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x2000000) prctl$PR_SET_MM(0x23, 0x2, &(0x7f0000ffa000/0x3000)=nil) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1, 0x68}]}, &(0x7f0000000080)='syzkaller\x00'}, 0x80) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000001c0)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x9) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@gettfilter={0x24, 0x2e, 0x121, 0x78bd29, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0x4, 0xa}, {0x7, 0xfff1}, {0x7, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x24041080) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @mcast1, @dev={0xfe, 0x80, '\x00', 0x36}, 0x1, 0x6, 0x0, 0x100, 0x4, 0x2080005, r11}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@dev={0xfe, 0x80, '\x00', 0x2d}, @dev={0xfe, 0x80, '\x00', 0x20}, @private0, 0x80000001, 0x6, 0x0, 0x100, 0x6, 0x110022}) 19m48.593915594s ago: executing program 4 (id=2683): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) listen(r2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$eJzsmb9v00AUx793dhy3ICQWBhaQqESRWsd2AHVhKP8ASC2/NiJqqoLboNQDjYTAYmHhz+BfYMiUgY2NFQZAQmIgI/OhO5/tI3EC5IcY+j7D5eu7d+/evbOfJQcEQRxbvn75+fn19Y3tNQAnsYK67v9ulTbcsP/kavHxzbuDU896w/6kLctkf3S1emUM/U0LidZCCGGOrejfbfBC3wLHJa3vgMHT+j44bmsdgeGe1o8M3V7SIo68B+145+FeHPmyCWQTyqZprm8DGKQMOwBcHR8zxg+Puo9bcRx1hkVN5OuMDFUJW/ursqlMWhmfPdjkuGbkT57B3VcvU3md58Y38heAI9C6CYYtrTdQh+d58pCylBj7P2uX/q2/2f804kZtlulpkT4HWc/p9Umz1uYS85TCAbAQz/nhzNdz+lvP8/+RsfkJZvQsSSEf6KLnzKD3fnTWtz94zsvKVIGdX9ROs8cT7phb4sPybEs4etOVNmX9lLm5aNQnG3ZRPxrJ/pPG4VF3fW+/tRvtRgdh2LzqX/b9K2FD1easnVD/XFWflg3/tTG2DnNQjCWdQF6fQJJ0wqct2RoVd+tt+4cy46r+caxeyKbJW0Vtu/pVpsZZ8R6UatUaGzxBEARBEARBEARBEARBEMQ/cQ5MfQXVf1QJIfAiGxEi/+4qhAhvKvUrAAD//+x/QCM=") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 19m33.204635176s ago: executing program 47 (id=2683): openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x180, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) chown(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) listen(r2, 0x0) r3 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$ARPT_SO_SET_REPLACE(r3, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3f0, 0x110, 0x1f8, 0x1f8, 0x308, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @empty, @rand_addr, @rand_addr, 0x8}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x5}}}, {{@arp={@remote, @private, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x0, 'gre0\x00', 'pimreg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@random="8249ca4ee4e7", @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x2}}}}, 0x440) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) madvise(&(0x7f000052f000/0x4000)=nil, 0x4000, 0x15) syz_mount_image$erofs(&(0x7f00000000c0), &(0x7f0000000140)='./bus\x00', 0x0, &(0x7f0000000080)=ANY=[], 0xfd, 0x206, &(0x7f0000000600)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0) syz_usb_connect(0x2, 0x6b, &(0x7f00000000c0)=ANY=[@ANYRES16=r4], &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}) 18.219708877s ago: executing program 5 (id=7048): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e000000200"/43], 0xb8}}, 0x4004) r3 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r3, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, 0x0, 0x0) write$vhost_msg_v2(r3, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r3, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$vhost_msg_v2(r3, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000340)=""/115, 0x73, &(0x7f0000000240)=""/31, 0x1, 0x1}}, 0x48) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r4 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r4, 0x1, 0x2e, 0x0, 0x0) shutdown(r4, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 17.306296417s ago: executing program 5 (id=7049): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newqdisc={0x58, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x8000, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x6, 0x6}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x4, 0x8002}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x9, 0xc, 0xc89f, 0xffff5ef5, 0x0, 0x19, 0x3}}, {0x4}}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x803}, 0x20004004) 13.187121716s ago: executing program 5 (id=7057): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x4, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0x9, 0x4}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c0e9}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 12.87359549s ago: executing program 5 (id=7061): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c0017800400040004000300040006000400"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 12.096708934s ago: executing program 5 (id=7063): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r2, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x10, 0x5, 0x0, 0x10001, 0x0}) 10.17947373s ago: executing program 2 (id=7066): socket$inet6(0xa, 0x3, 0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) syz_open_dev$sndctrl(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x1, 0x10000000}}, 0x10) bind$tipc(r6, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x1fb553244e946098, {{0x41, 0x2}, 0x1}}, 0x10) syz_io_uring_submit(r4, r5, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd=r2, 0xffffffffffffffff, &(0x7f0000000580)=""/207, 0xcf, 0x2, 0x1}) io_uring_enter(r3, 0x627, 0x4c1, 0x43, 0x0, 0x30) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, 0x41, 0x107, 0xfffffffe, 0x25dfdbfb, {0x4, 0x7c}, [@nested={0x8, 0x142, 0x0, 0x1, [@typed={0x4, 0x8}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x5f, 0x7ffc0002}]}) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000240)={0x1c, 0x5e, 0x1, 0x0, 0x25dfdbfd, "", [@typed={0x8, 0x0, 0x0, 0x0, @u32=0x1}, @nested={0x4}]}, 0x1c}], 0x1}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000022d00090027bd700000000000040000000800180001ac0f00"], 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84) r8 = socket$inet(0x2, 0x1, 0x100) getsockopt$MRT(r8, 0x0, 0xd0, 0x0, 0x0) sched_getattr(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 8.189159621s ago: executing program 8 (id=7067): ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000080)={0x0, 0x3}, 0x8) 8.056325315s ago: executing program 5 (id=7068): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r2, 0x0, &(0x7f00000000c0)=@tcp6}, 0x20) bind$unix(0xffffffffffffffff, 0x0, 0x0) r3 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500, 0x1882}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) close(0xffffffffffffffff) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) execveat$binfmt(0xffffffffffffff9c, r3, 0x0, 0x0, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0x9}}, 0x10) execveat$binfmt(0xffffffffffffff9c, r3, &(0x7f00000004c0)={[0x0, 0x0]}, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xc) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0xffa1, &(0x7f0000000380)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001300a7cc4a372eaf541d002007000000", @ANYRES32=r7, @ANYBLOB="00000000100000001c001a80080002802d00ff0008000200", @ANYBLOB="35874207"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) 8.011027094s ago: executing program 8 (id=7069): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}}}, 0x30) syz_open_dev$video(0x0, 0x7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) tee(r4, r5, 0x6, 0x0) 7.71963408s ago: executing program 8 (id=7072): r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2) ioctl$VIDIOC_DQBUF(r0, 0xc0585611, &(0x7f00000001c0)=@fd={0x9, 0x9, 0x4, 0x1, 0xc, {}, {0x1, 0x2, 0xda, 0xf, 0x3, 0x10, "50628600"}, 0x9, 0x4, {}, 0x2000000}) 7.706638951s ago: executing program 1 (id=7073): fsopen(&(0x7f0000000380)='binfmt_misc\x00', 0x0) r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r3, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000640)={0x28, 0x0, 0x2710, @local}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x20900, 0x0) close(r5) syz_clone(0x89205480, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNGETDEVNETNS(r5, 0xff07, 0x0) recvmmsg(r4, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000005c0)=""/77, 0x4d}], 0x1}, 0x5}], 0x40000, 0x0, 0x0) 7.693680637s ago: executing program 3 (id=7074): unshare(0x6a040000) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) socket$packet(0x11, 0x3, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newlink={0x60, 0x10, 0x2, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x2031}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}, @IFLA_EXT_MASK={0x8, 0x1d, 0x9}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'vlan0\x00'}]}, @IFLA_BROADCAST={0xa, 0x2, @random="1cd94e1bf434"}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1122}]}, 0x60}}, 0x0) syz_open_procfs(0x0, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='cubic', 0x6) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r5, &(0x7f0000000580)="17", 0xfdef, 0x10008095, 0x0, 0x0) socket(0x11, 0x800000002, 0x0) 7.584984933s ago: executing program 2 (id=7075): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$char_usb(r3, &(0x7f0000000940)=""/79, 0x4f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000021850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 7.519560093s ago: executing program 8 (id=7076): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e000000200"/43], 0xb8}}, 0x4004) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000340)=""/115, 0x73, &(0x7f0000000240)=""/31, 0x1, 0x1}}, 0x48) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r5 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r5, 0x1, 0x2e, 0x0, 0x0) shutdown(r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 6.35764997s ago: executing program 2 (id=7077): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x0) wait4(0x0, 0x0, 0x40000000, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000002040)=ANY=[@ANYBLOB="12010000fe76181004160780a6af011703010902120001000000000904"], 0x0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(0xffffffffffffffff, 0x80dc5521, &(0x7f00000011c0)=""/230) 5.556503504s ago: executing program 1 (id=7078): socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000808000400", @ANYRES32=r1, @ANYBLOB="06001500070000000c00168008000100", @ANYRES64=r0], 0x38}}, 0x10) 5.268080254s ago: executing program 1 (id=7079): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x10, 0x5, 0x0, 0x10001, 0x0}) 5.022574622s ago: executing program 8 (id=7080): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41) prctl$PR_SET_NAME(0xf, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r4}, 0x10) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000010961b080000000000000109022400010000000109040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r5, 0x0, 0x0) syz_usb_control_io$hid(r5, &(0x7f0000000c80)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002207000000ab3c06de86a95b"], 0x0}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073794f310000000008000440080000000900010073797a3000000000080003400000000114000000110001"], 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03f5000000000000000002000000"], 0x34}, 0x1, 0x0, 0x0, 0x66df5cfbe53006d1}, 0x0) openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdir(&(0x7f0000000040)='./file0/file0\x00', 0xe0) semget$private(0x0, 0x3, 0x102) r6 = add_key$user(&(0x7f0000000000), &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000080)="01", 0x1, 0xffffffffffffffff) r7 = add_key$user(&(0x7f0000000140), &(0x7f0000002840)={'syz', 0x2}, &(0x7f0000000180)="f40fc24077021c9b084c60ffc2e78d62988fbb26edb4a5e3cc0942ed8c584f4fe84b9462feffffffffffff0000002945ffebbfea11dd3d0df936a10285eccabb40ab5c96cb5d81da1f41c1ad2243d878dde6cfd6ea08d5abcb00bb35436929ddab", 0x61, 0xfffffffffffffffb) keyctl$dh_compute(0x17, &(0x7f0000000500)={r7, r7, r6}, &(0x7f0000000b40)=""/4111, 0x100f, 0x0) 5.010256411s ago: executing program 1 (id=7081): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$user(&(0x7f0000000140), &(0x7f0000000180)={'syz', 0x0}, &(0x7f00000002c0)="00147167cc5745bf66c109b429963bf976a107a35753021bbb55e6bf0f33ba28fdbe58f595feefc4636d1d3006f26963e6248b47749d7d7bcab7ada59b7427976048040c059429fec135235e56d46527cbb6f6f7ee0462dcb36a2f84bdde34ec3e2f7d796b608f1dffc2b03324f7ae3f1a7365c06e8f5b6d289c3219f44171993468aa0fd8deee47314ebf101893ca30667a38bf4ec85b3d2a0b17cf9c2c", 0x9e, 0xfffffffffffffffd) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x0, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r2, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) ioctl$vim2m_VIDIOC_QBUF(r2, 0xc058560f, &(0x7f0000000180)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x0, {0x77359400}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'y)\x00'}, 0x0, 0x1, {0x0}, 0xea}) ioctl$vim2m_VIDIOC_STREAMOFF(r2, 0x40045612, &(0x7f0000000080)=0x2) 4.847732624s ago: executing program 2 (id=7082): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0xe, @empty, 0x2}, {0xa, 0x4e23, 0x7, @remote, 0x3}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_SET_OPTION(r0, 0x0, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f00000001c0)={0xe, 0x18, 0xfa00, @id_resuseaddr={&(0x7f0000000180)=0x1, 0xffffffffffffffff, 0x0, 0x1, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f00000002c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e23, 0xfffffffd, @empty, 0x5}}}, 0x30) syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) close(r4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r6) tee(r4, r5, 0x6, 0x0) 4.795422642s ago: executing program 2 (id=7083): r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') lseek(r0, 0x3, 0x0) getdents64(r0, &(0x7f0000003440)=""/92, 0x5c) 4.384073754s ago: executing program 2 (id=7084): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000100), 0x80800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x1) sendmsg(r1, 0x0, 0x0) r2 = getpgid(0x0) kcmp(r2, 0x0, 0x6, 0xffffffffffffffff, 0xffffffffffffffff) sched_setattr(r2, &(0x7f0000000240)={0x38, 0x5, 0x0, 0x0, 0x0, 0x2, 0x350, 0x8, 0x40, 0x3}, 0x0) prctl$PR_MCE_KILL(0x4e, 0x1, 0x4000) openat$sysfs(0xffffff9c, 0x0, 0x42, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000680)=ANY=[@ANYBLOB="12010000cf8bed20d90f21004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000180)={0x1, 0x9, 0x4, &(0x7f0000000040)={0x51, "c6c1f7b51030c4b7c54bf28facb1ed3ee2dfe17a04bc517b5452b3b94bce47509d"}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_IRQCHIP(r6, 0x4020aeb2, &(0x7f0000000300)={0x0, 0x12c, @ioapic={0xffff1000, 0x8000, 0x2, 0x80000001, 0x0, [{0x1, 0x85, 0x1, '\x00', 0x4}, {0x5, 0x3, 0x0, '\x00', 0x6}, {0x7, 0x3, 0xe, '\x00', 0x3b}, {0x4e, 0xe, 0xd6, '\x00', 0x86}, {0xc, 0xb, 0x6, '\x00', 0x4}, {0xf, 0x8, 0xf5, '\x00', 0x3}, {0x2, 0xa, 0x50, '\x00', 0x8}, {0x88, 0x3, 0x2a, '\x00', 0x80}, {0x4, 0x0, 0xd, '\x00', 0x1}, {0x8, 0x9, 0x3, '\x00', 0x8}, {0x3, 0x6, 0x3, '\x00', 0x6}, {0x2, 0x9, 0x0, '\x00', 0x7f}, {0x14, 0x51, 0xa, '\x00', 0xfc}, {0xe, 0xfc, 0x5, '\x00', 0x1}, {0x9, 0x2, 0x6, '\x00', 0x9}, {0x1, 0x3, 0xfe, '\x00', 0x3}, {0x2, 0xb, 0xd6, '\x00', 0x7f}, {0x7, 0x15, 0xca, '\x00', 0x6}, {0x0, 0x1, 0x4, '\x00', 0x13}, {0x4, 0x0, 0x40, '\x00', 0xda}, {0x3, 0x3, 0x6, '\x00', 0x9}, {0x9, 0x3, 0x1, '\x00', 0x2}, {0xf9, 0x1, 0x4, '\x00', 0x8}, {0x8, 0xc, 0x0, '\x00', 0x6}]}}) ioctl$KVM_SET_CPUID(r7, 0x4008ae8a, &(0x7f0000000040)=ANY=[]) ioctl$KVM_RUN(r7, 0xae80, 0x0) 4.299941937s ago: executing program 3 (id=7085): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) openat$autofs(0xffffffffffffff9c, 0x0, 0x200040, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) close(r0) 3.647305042s ago: executing program 1 (id=7086): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$random(0xffffffffffffff9c, &(0x7f00000007c0), 0x202, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x10010) 2.155651468s ago: executing program 3 (id=7087): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) read$char_usb(r3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071113100000000008510000002000021850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="09000000070000000080000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) 2.148726097s ago: executing program 8 (id=7088): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4084}, 0x80) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="80000000", @ANYRES16=r1, @ANYBLOB="050027bd7000fedbdf250600000008000300", @ANYRES32=r2, @ANYBLOB="0800050006000000100017800400020500000000000000000c00178004000200040006001c0017800400040004000300040006000400"], 0x80}, 0x1, 0x0, 0x0, 0x40048}, 0x0) 2.096524781s ago: executing program 1 (id=7089): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000000000010d804dd000000000000010902240001000000e90904000001030000000921050000012205000905810300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_RDWR(r1, 0x707, &(0x7f00000001c0)={&(0x7f00000000c0)=[{0x1, 0x4011, 0x0, 0x0}, {0x1, 0xda01, 0x0, 0x0}, {0x8, 0x801, 0x0, 0x0}], 0x3}) 1.137185004s ago: executing program 3 (id=7090): pipe2$watch_queue(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000440)={'wlan0\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b80000001900010027bd700000000000e000000200"/43], 0xb8}}, 0x4004) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000140)=0x200000000) write$vhost_msg_v2(r4, &(0x7f0000000980)={0x2, 0x0, {0x0, 0x4b, 0x0, 0x0, 0x2}}, 0x48) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, 0x0, 0x0) write$vhost_msg_v2(r4, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000540)=""/224, 0xe0, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r4, &(0x7f00000003c0)={0x2, 0x0, {&(0x7f00000002c0)=""/119, 0xfca2, 0x0, 0x0, 0x3}}, 0x48) write$vhost_msg_v2(r4, &(0x7f0000000640)={0x2, 0x0, {&(0x7f0000000340)=""/115, 0x73, &(0x7f0000000240)=""/31, 0x1, 0x1}}, 0x48) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f00000006c0)) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r5 = socket$inet(0x2, 0x3, 0x9) setsockopt$sock_int(r5, 0x1, 0x2e, 0x0, 0x0) shutdown(r5, 0x0) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r0, 0x5761, &(0x7f0000000840)=ANY=[@ANYBLOB]) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 42.334678ms ago: executing program 3 (id=7091): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r0, 0xc0105500, &(0x7f0000000000)={0x0, 0xb, 0x10, 0x5, 0x0, 0x10001, 0x0}) 0s ago: executing program 3 (id=7092): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$xdp(0x2c, 0x3, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000002cc0)={0x401, 0x101, 0x4, 0x7, 0x990}, 0x14) sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r5}, 0x18) socket$pptp(0x18, 0x1, 0x2) r6 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) r9 = dup(r8) write$UHID_INPUT(r9, &(0x7f0000001040)={0xfc, {"a2e3ad09edfc09f91b44090987f70e06d038e7ff7fc6e5539b0d3d0e8b089b0732306c090890e0879b0a0ac6e70a9b3361959b4b9a240d5b0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d074a0936cd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb000000002f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d6ced5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed700129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb21fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000008000000000000039209333bcfcb72", @ANYRES32=r4, @ANYBLOB="0300"/20, @ANYRES32=r7, @ANYRES32=r9, @ANYBLOB="0500000004000000070000000f00"/28], 0x50) mkdir(0x0, 0x0) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000200), 0x2, 0x0) syz_clone(0x41200100, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 9266] syz.8.6310: attempt to access beyond end of device [ 2038.935181][T29266] loop8: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 2038.950976][T29266] syz.8.6310: attempt to access beyond end of device [ 2038.950976][T29266] loop8: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 2038.979179][T29266] syz.8.6310: attempt to access beyond end of device [ 2038.979179][T29266] loop8: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 2038.993663][T29266] Buffer I/O error on dev loop8, logical block 99, lost async page write [ 2038.994145][T29269] netlink: 'syz.8.6310': attribute type 4 has an invalid length. [ 2039.010300][T29266] syz.8.6310: attempt to access beyond end of device [ 2039.010300][T29266] loop8: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 2039.010337][T29266] Buffer I/O error on dev loop8, logical block 100, lost async page write [ 2039.035547][T29266] Buffer I/O error on dev loop8, logical block 111, lost async page write [ 2039.044676][T29266] Buffer I/O error on dev loop8, logical block 112, lost async page write [ 2039.055280][T29266] Buffer I/O error on dev loop8, logical block 115, lost async page write [ 2039.064334][T29266] Buffer I/O error on dev loop8, logical block 116, lost async page write [ 2039.314645][T26786] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2039.326914][T26786] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2039.338782][T26786] bond0 (unregistering): Released all slaves [ 2039.501298][T26786] tipc: Left network mode [ 2039.622439][T29212] bridge0: port 1(bridge_slave_0) entered blocking state [ 2039.639932][T29212] bridge0: port 1(bridge_slave_0) entered disabled state [ 2039.651858][T29212] bridge_slave_0: entered allmulticast mode [ 2039.660026][T29212] bridge_slave_0: entered promiscuous mode [ 2039.699067][T29212] bridge0: port 2(bridge_slave_1) entered blocking state [ 2039.707449][T29212] bridge0: port 2(bridge_slave_1) entered disabled state [ 2039.714976][T29212] bridge_slave_1: entered allmulticast mode [ 2039.723558][T29212] bridge_slave_1: entered promiscuous mode [ 2039.812424][T29212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2039.878480][T26786] hsr_slave_0: left promiscuous mode [ 2039.887842][T26786] hsr_slave_1: left promiscuous mode [ 2039.902243][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2039.910512][T26786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2039.922715][T26786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2039.934267][T26786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2039.943989][T26786] batman_adv: batadv0: Removing interface: virt_wifi0 [ 2039.979876][T26786] veth1_macvtap: left promiscuous mode [ 2039.985847][T26786] veth0_macvtap: left promiscuous mode [ 2039.991969][T26786] veth1_vlan: left promiscuous mode [ 2040.002238][T26786] veth0_vlan: left promiscuous mode [ 2040.163107][T12187] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 2040.363144][T12187] usb 4-1: Using ep0 maxpacket: 32 [ 2040.407378][T12187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2040.460823][T12187] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2040.577269][T12187] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 2040.634565][T12187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2040.653604][T17172] Bluetooth: hci1: command tx timeout [ 2040.738111][T12187] usb 4-1: config 0 descriptor?? [ 2040.789006][T12020] usb 6-1: USB disconnect, device number 12 [ 2040.927261][T29289] loop8: detected capacity change from 0 to 256 [ 2041.493841][T29309] netlink: 'syz.1.6322': attribute type 4 has an invalid length. [ 2041.875123][T29305] could not allocate digest TFM handle rmd320 [ 2042.143223][T20610] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 2042.384052][T20610] usb 6-1: Using ep0 maxpacket: 16 [ 2042.400660][T26786] team0 (unregistering): Port device team_slave_1 removed [ 2042.408841][T20610] usb 6-1: no configurations [ 2042.416719][T20610] usb 6-1: can't read configurations, error -22 [ 2042.567168][T26786] team0 (unregistering): Port device team_slave_0 removed [ 2042.585874][T20610] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 2042.738746][T17172] Bluetooth: hci1: command tx timeout [ 2042.777920][T20610] usb 6-1: Using ep0 maxpacket: 16 [ 2042.784310][T20610] usb 6-1: no configurations [ 2042.789261][T20610] usb 6-1: can't read configurations, error -22 [ 2042.800167][T20610] usb usb6-port1: attempt power cycle [ 2042.834765][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2043.211782][T20610] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 2043.233642][T20610] usb 6-1: Using ep0 maxpacket: 16 [ 2043.240606][T20610] usb 6-1: no configurations [ 2043.245750][T20610] usb 6-1: can't read configurations, error -22 [ 2043.375054][T20610] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 2043.397503][T12187] usbhid 4-1:0.0: can't add hid device: -71 [ 2043.420931][T12187] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2043.429625][T20610] usb 6-1: Using ep0 maxpacket: 16 [ 2043.446761][T20610] usb 6-1: no configurations [ 2043.451564][T20610] usb 6-1: can't read configurations, error -22 [ 2043.483713][T12187] usb 4-1: USB disconnect, device number 27 [ 2043.490431][T20610] usb usb6-port1: unable to enumerate USB device [ 2044.151532][T29212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2044.327701][T29212] team0: Port device team_slave_0 added [ 2044.347905][T29212] team0: Port device team_slave_1 added [ 2044.473918][T29212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2044.497164][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2044.523206][ C0] vkms_vblank_simulate: vblank timer overrun [ 2044.531122][T29212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2044.560105][T29212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2044.567433][T29212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2044.610033][T29212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2044.967659][T29212] hsr_slave_0: entered promiscuous mode [ 2044.974983][T29212] hsr_slave_1: entered promiscuous mode [ 2044.981647][T29212] debugfs: 'hsr0' already exists in 'hsr' [ 2044.987955][T29212] Cannot create hsr debugfs directory [ 2045.712357][T29353] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 2045.810184][T26786] IPVS: stop unused estimator thread 0... [ 2048.258027][T29374] random: crng reseeded on system resumption [ 2048.764790][T29212] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2048.781430][T29212] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2048.882144][T29212] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2049.123884][T29212] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2049.797983][T29392] binder: BINDER_SET_CONTEXT_MGR already set [ 2049.804123][T29392] binder: 29376:29392 ioctl 4018620d 2000000002c0 returned -16 [ 2050.005140][T29212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2050.036751][T29212] 8021q: adding VLAN 0 to HW filter on device team0 [ 2050.102189][ T1106] bridge0: port 1(bridge_slave_0) entered blocking state [ 2050.109585][ T1106] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2050.171179][ T1106] bridge0: port 2(bridge_slave_1) entered blocking state [ 2050.178365][ T1106] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2050.738526][T29212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2051.220085][T29212] veth0_vlan: entered promiscuous mode [ 2051.357147][T29212] veth1_vlan: entered promiscuous mode [ 2051.469427][T29212] veth0_macvtap: entered promiscuous mode [ 2051.526817][T29212] veth1_macvtap: entered promiscuous mode [ 2051.834938][T29408] syzkaller0: entered promiscuous mode [ 2051.840503][T29408] syzkaller0: entered allmulticast mode [ 2051.886843][T29417] __nla_validate_parse: 45 callbacks suppressed [ 2051.886864][T29417] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6346'. [ 2052.617834][T29422] could not allocate digest TFM handle rmd320 [ 2053.376106][T29441] netlink: 59 bytes leftover after parsing attributes in process `syz.1.6350'. [ 2056.256738][T29448] binder: BINDER_SET_CONTEXT_MGR already set [ 2056.262790][T29448] binder: 29445:29448 ioctl 4018620d 2000000002c0 returned -16 [ 2057.839030][T29212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2057.919459][T29212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2057.977852][T29464] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6359'. [ 2057.996625][T26788] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.051534][T26788] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.099255][T26788] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.145692][T26788] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2058.209590][T29470] netlink: 16 bytes leftover after parsing attributes in process `syz.5.6362'. [ 2058.517864][T26786] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.572989][T26786] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2058.721067][T26788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2058.754857][T26788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2059.009063][T29486] netlink: 16 bytes leftover after parsing attributes in process `syz.3.6367'. [ 2059.046511][T29486] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6367'. [ 2059.082823][T29486] vlan1: entered allmulticast mode [ 2059.107088][T29486] veth0_vlan: entered allmulticast mode [ 2059.733346][T18347] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 2059.871581][T29501] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2059.924092][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2059.936836][T18347] usb 4-1: unable to get BOS descriptor or descriptor too short [ 2059.950458][T18347] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 16 [ 2059.961460][T18347] usb 4-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 2059.971971][T18347] usb 4-1: config 1 interface 0 has no altsetting 0 [ 2059.981663][T18347] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2059.991326][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2060.011115][T18347] usb 4-1: Product: syz [ 2060.024029][T18347] usb 4-1: Manufacturer: syz [ 2060.042862][T18347] usb 4-1: SerialNumber: syz [ 2060.050323][T29508] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6374'. [ 2060.074878][T29499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2060.102068][T29499] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2060.387650][T18347] usb 4-1: bad CDC descriptors [ 2060.417302][T18347] usb 4-1: USB disconnect, device number 28 [ 2061.093299][T29520] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6377'. [ 2061.632677][T29529] random: crng reseeded on system resumption [ 2062.858061][T29542] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2063.239191][T29553] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2063.257204][T29560] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 2065.257358][T29581] netlink: 'syz.3.6395': attribute type 10 has an invalid length. [ 2065.863031][T18347] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 2066.092440][T18347] usb 3-1: Using ep0 maxpacket: 16 [ 2066.106365][T18347] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2066.138280][T18347] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2066.161194][T18347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2066.193410][T18347] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2066.229290][T18347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2066.262217][T18347] usb 3-1: config 0 descriptor?? [ 2066.746419][T18347] usbhid 3-1:0.0: can't add hid device: -71 [ 2066.755148][T18347] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2066.775908][T29599] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6399'. [ 2066.808385][T18347] usb 3-1: USB disconnect, device number 17 [ 2067.516063][T29602] tipc: Enabled bearer , priority 0 [ 2067.528076][T29602] tipc: Resetting bearer [ 2067.697122][T29601] tipc: Disabling bearer [ 2068.091973][T29615] netlink: 'syz.2.6403': attribute type 4 has an invalid length. [ 2069.124533][T29631] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6409'. [ 2069.341217][T29623] vivid-002: disconnect [ 2069.559048][T29617] vivid-002: reconnect [ 2069.979679][T29645] random: crng reseeded on system resumption [ 2070.803163][T23565] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 2070.939795][T29657] tipc: Enabled bearer , priority 0 [ 2070.953282][T23565] usb 2-1: Using ep0 maxpacket: 32 [ 2070.977263][T23565] usb 2-1: config 0 has an invalid interface number: 2 but max is 0 [ 2071.080168][T29657] tipc: Resetting bearer [ 2071.097290][T23565] usb 2-1: config 0 has no interface number 0 [ 2071.136562][T23565] usb 2-1: New USB device found, idVendor=108c, idProduct=0168, bcdDevice=84.b2 [ 2071.163429][T23565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2071.171668][T23565] usb 2-1: Product: syz [ 2071.176289][T23565] usb 2-1: Manufacturer: syz [ 2071.181001][T23565] usb 2-1: SerialNumber: syz [ 2071.191187][T23565] usb 2-1: config 0 descriptor?? [ 2072.210550][T12020] tipc: Node number set to 2687438225 [ 2072.224660][T23565] etas_es58x 2-1:0.2: Starting syz syz (Serial Number syz) [ 2072.246095][T23565] usb 2-1: USB disconnect, device number 21 [ 2074.313772][T29655] tipc: Disabling bearer [ 2075.775532][T29681] fuse: Bad value for 'fd' [ 2076.552541][T29699] loop5: detected capacity change from 0 to 256 [ 2076.824694][T29697] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6427'. [ 2076.953063][T18347] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 2077.779322][T18347] usb 6-1: Using ep0 maxpacket: 16 [ 2077.786857][T18347] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2077.868869][T18347] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2077.953022][T18347] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2077.959682][T18347] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2077.983940][T18347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2078.046898][T18347] usb 6-1: config 0 descriptor?? [ 2078.507527][T18347] usbhid 6-1:0.0: can't add hid device: -71 [ 2078.513610][T18347] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2078.528198][T18347] usb 6-1: USB disconnect, device number 17 [ 2081.316568][T29763] could not allocate digest TFM handle rmd320 [ 2081.559783][T29771] tipc: Enabling of bearer rejected, failed to enable media [ 2082.347590][T29784] tipc: Enabled bearer , priority 0 [ 2082.386669][T29784] tipc: Resetting bearer [ 2082.505587][T29782] tipc: Disabling bearer [ 2082.582287][T29786] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6449'. [ 2084.490098][T29814] tipc: Enabling of bearer rejected, failed to enable media [ 2084.573144][T12187] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 2084.591173][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6457'. [ 2084.780800][T12187] usb 9-1: Using ep0 maxpacket: 16 [ 2084.824586][T12187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2084.888729][T12187] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2084.953073][T12187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.009318][T12187] usb 9-1: config 0 descriptor?? [ 2085.545212][T12187] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 2085.595095][T12187] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 2085.602174][T12187] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 2085.663062][T12187] mcp2221 0003:04D8:00DD.0012: unknown main item tag 0x0 [ 2085.687808][T12187] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2085.733228][ C0] usb 9-1: input irq status -75 received [ 2085.946447][T29816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2085.983470][T29816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.020027][T29816] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2086.063768][T29816] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2086.107160][T20610] usb 9-1: USB disconnect, device number 12 [ 2091.153031][T20610] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 2091.383044][T20610] usb 2-1: Using ep0 maxpacket: 16 [ 2091.469697][T20610] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2091.532532][T20610] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2091.634701][T20610] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2091.668147][T29897] loop5: detected capacity change from 0 to 128 [ 2091.684040][T29897] bio_check_eod: 31 callbacks suppressed [ 2091.684056][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.684056][T29897] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 2091.709353][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.709353][T29897] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 2091.723521][T29897] buffer_io_error: 17 callbacks suppressed [ 2091.723544][T29897] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 2091.741048][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.741048][T29897] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 2091.755706][T29897] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 2091.766120][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.766120][T29897] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 2091.782356][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.782356][T29897] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 2091.802639][T29900] netlink: 'syz.5.6477': attribute type 4 has an invalid length. [ 2091.814223][T29897] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 2091.824541][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.824541][T29897] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 2091.841386][T29897] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 2091.852700][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.852700][T29897] loop5: rw=2049, sector=186, nr_sectors = 8 limit=128 [ 2091.876482][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.876482][T29897] loop5: rw=2049, sector=194, nr_sectors = 6 limit=128 [ 2091.893761][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.893761][T29897] loop5: rw=2049, sector=198, nr_sectors = 2 limit=128 [ 2091.911725][T29897] Buffer I/O error on dev loop5, logical block 99, lost async page write [ 2091.921965][T29897] syz.5.6477: attempt to access beyond end of device [ 2091.921965][T29897] loop5: rw=2049, sector=200, nr_sectors = 2 limit=128 [ 2091.923684][T20610] usb 2-1: config 0 descriptor?? [ 2091.945412][T29897] Buffer I/O error on dev loop5, logical block 100, lost async page write [ 2091.957500][T29897] Buffer I/O error on dev loop5, logical block 111, lost async page write [ 2091.974004][T29897] Buffer I/O error on dev loop5, logical block 112, lost async page write [ 2091.989017][T29897] Buffer I/O error on dev loop5, logical block 115, lost async page write [ 2092.001989][T29897] Buffer I/O error on dev loop5, logical block 116, lost async page write [ 2092.426499][T20610] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 2092.433990][T20610] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 2092.441205][T20610] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 2092.450147][T20610] mcp2221 0003:04D8:00DD.0013: unknown main item tag 0x0 [ 2092.459707][T20610] mcp2221 0003:04D8:00DD.0013: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2092.632359][ C0] usb 2-1: input irq status -75 received [ 2092.834110][T29893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.862401][T29893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.923156][T20610] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 2092.935635][T29893] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2092.944819][T29893] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2092.956136][T18347] usb 2-1: USB disconnect, device number 22 [ 2093.060985][ T30] audit: type=1326 audit(1759257427.896:5505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.084545][ T30] audit: type=1326 audit(1759257427.896:5506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.107395][T20610] usb 6-1: Using ep0 maxpacket: 8 [ 2093.113390][ T30] audit: type=1326 audit(1759257427.896:5507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.141665][T20610] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 2093.156409][ T30] audit: type=1326 audit(1759257427.896:5508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.180092][T20610] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2093.199900][T20610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2093.208161][ T30] audit: type=1326 audit(1759257427.896:5509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.232173][T20610] usb 6-1: Product: syz [ 2093.239621][ T30] audit: type=1326 audit(1759257427.896:5510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.251521][T20610] usb 6-1: Manufacturer: syz [ 2093.262790][ T30] audit: type=1326 audit(1759257427.896:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.290053][ T30] audit: type=1326 audit(1759257427.896:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2093.317956][T20610] usb 6-1: SerialNumber: syz [ 2093.351002][ T30] audit: type=1326 audit(1759257427.896:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=30 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2094.096095][ T30] audit: type=1326 audit(1759257427.896:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29921 comm="syz.8.6487" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2094.122812][T20610] usb 6-1: config 0 descriptor?? [ 2094.174603][T20610] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2094.220199][T20610] usb 6-1: setting power ON [ 2094.233948][T20610] dvb-usb: bulk message failed: -22 (2/0) [ 2094.262119][T20610] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2094.303819][T20610] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2094.330198][T20610] usb 6-1: media controller created [ 2094.480422][T20610] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2094.544524][T20610] usb 6-1: selecting invalid altsetting 6 [ 2094.553137][T20610] usb 6-1: digital interface selection failed (-22) [ 2094.570681][T20610] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2094.590852][T20610] usb 6-1: setting power OFF [ 2094.603577][T18347] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 2094.616260][T20610] dvb-usb: bulk message failed: -22 (2/0) [ 2094.645427][T20610] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2094.686078][T20610] (NULL device *): no alternate interface [ 2094.741535][T20610] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2094.773014][T18347] usb 2-1: Using ep0 maxpacket: 16 [ 2094.790956][T18347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2094.828503][T20610] usb 6-1: USB disconnect, device number 18 [ 2094.829019][T18347] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2094.895011][T18347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.920228][T18347] usb 2-1: config 0 descriptor?? [ 2095.346097][T18347] mcp2221 0003:04D8:00DD.0014: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 2095.542458][T29946] i2c i2c-1: unsupported multi-msg i2c transaction [ 2095.562074][T18347] usb 2-1: USB disconnect, device number 23 [ 2095.633121][T20610] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 2095.819676][T20610] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2095.872056][T20610] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2095.894954][T20610] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2095.921797][T20610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2095.992734][T29960] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2096.022615][T20610] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2096.399453][T18347] usb 3-1: USB disconnect, device number 18 [ 2097.663054][T12187] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 2097.843230][T12187] usb 9-1: Using ep0 maxpacket: 16 [ 2097.854112][T12187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2097.933082][T12187] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2097.964225][T18347] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 2097.964242][T12187] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2097.990053][T12187] usb 9-1: config 0 descriptor?? [ 2098.189990][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2098.204283][T18347] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 2098.225362][T18347] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 2098.244336][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2098.252391][T18347] usb 4-1: Product: syz [ 2098.281330][T18347] usb 4-1: Manufacturer: syz [ 2098.286052][T18347] usb 4-1: SerialNumber: syz [ 2098.296222][T18347] usb 4-1: config 0 descriptor?? [ 2098.305093][T18347] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 2098.338858][T18347] usb 4-1: setting power ON [ 2098.343552][T18347] dvb-usb: bulk message failed: -22 (2/0) [ 2098.352768][T18347] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2098.383738][T18347] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 2098.392267][T18347] usb 4-1: media controller created [ 2098.439404][T12187] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2098.450014][T18347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2098.453066][T12187] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2098.468648][T12187] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2098.482231][T12187] mcp2221 0003:04D8:00DD.0015: unknown main item tag 0x0 [ 2098.507182][T12187] mcp2221 0003:04D8:00DD.0015: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2098.523417][T18347] usb 4-1: selecting invalid altsetting 6 [ 2098.531361][T18347] usb 4-1: digital interface selection failed (-22) [ 2098.538251][T18347] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 2098.596200][T18347] usb 4-1: setting power OFF [ 2098.601309][T18347] dvb-usb: bulk message failed: -22 (2/0) [ 2098.617605][T18347] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 2098.622022][ C0] usb 9-1: input irq status -75 received [ 2098.656221][T18347] (NULL device *): no alternate interface [ 2098.819362][T18347] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 2098.863517][T18347] usb 4-1: USB disconnect, device number 29 [ 2098.909927][T29981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2098.941504][T29981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.117031][T29981] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2099.188556][T29981] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2099.230319][T18347] usb 9-1: USB disconnect, device number 13 [ 2101.317621][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 2101.317643][ T30] audit: type=1326 audit(1759257436.156:5535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2101.551354][ T30] audit: type=1326 audit(1759257436.156:5536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2101.764927][ T30] audit: type=1326 audit(1759257436.156:5537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2101.811940][ T30] audit: type=1326 audit(1759257436.156:5538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2101.839300][ T30] audit: type=1326 audit(1759257436.166:5539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2101.959294][ T30] audit: type=1326 audit(1759257436.186:5540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2102.120196][ T30] audit: type=1326 audit(1759257436.186:5541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2102.184508][ T30] audit: type=1326 audit(1759257436.196:5542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2102.270980][ T30] audit: type=1326 audit(1759257436.196:5543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2102.517174][ T30] audit: type=1326 audit(1759257436.196:5544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30021 comm="syz.8.6514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2104.113094][T18347] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 2104.263355][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2105.014588][T18347] usb 9-1: Using ep0 maxpacket: 16 [ 2105.028794][T18347] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2105.136881][T18347] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2105.153597][T18347] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2105.164906][T18347] usb 9-1: config 0 descriptor?? [ 2105.458503][T30071] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6528'. [ 2105.627153][T18347] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2105.664918][T18347] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2105.708598][T18347] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2105.731454][T18347] mcp2221 0003:04D8:00DD.0016: unknown main item tag 0x0 [ 2105.757317][T18347] mcp2221 0003:04D8:00DD.0016: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.8-1/input0 [ 2105.921819][ C1] usb 9-1: input irq status -75 received [ 2106.796231][T30055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2106.843547][T30055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2106.868672][T30055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2106.898241][T30055] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2107.217762][T30101] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6536'. [ 2108.089236][T18347] usb 9-1: USB disconnect, device number 14 [ 2109.203194][T30119] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2109.756489][T30116] could not allocate digest TFM handle rmd320 [ 2110.087628][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2110.087648][ T30] audit: type=1326 audit(1759257444.906:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.179741][ T30] audit: type=1326 audit(1759257444.906:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.326282][T30132] netlink: 36 bytes leftover after parsing attributes in process `syz.3.6543'. [ 2110.421173][ T30] audit: type=1326 audit(1759257444.906:5556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.597039][ T30] audit: type=1326 audit(1759257444.906:5557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.619776][ T30] audit: type=1326 audit(1759257444.906:5558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.664215][ T30] audit: type=1326 audit(1759257444.906:5559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.823023][T12187] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 2110.840358][ T30] audit: type=1326 audit(1759257444.916:5560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2110.973740][T12187] usb 4-1: Using ep0 maxpacket: 8 [ 2110.982530][T12187] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 2111.012760][T12187] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2111.031452][ T30] audit: type=1326 audit(1759257444.916:5561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2111.093235][T12187] pvrusb2: Hardware description: Terratec Grabster AV400 [ 2111.113092][T12187] pvrusb2: ********** [ 2111.143467][T12187] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 2111.168417][ T30] audit: type=1326 audit(1759257444.916:5562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2111.177431][T12187] pvrusb2: Important functionality might not be entirely working. [ 2111.227001][T12187] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 2111.269223][T12187] pvrusb2: ********** [ 2111.332121][ T2347] pvrusb2: Invalid write control endpoint [ 2111.343178][ T30] audit: type=1326 audit(1759257444.916:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30123 comm="syz.3.6541" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2111.581116][ T2347] pvrusb2: Invalid write control endpoint [ 2111.620138][ T2347] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 2111.661877][ T2347] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 2111.716684][ T2347] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 2112.012453][ T2347] pvrusb2: Device being rendered inoperable [ 2112.060310][ T2347] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 2112.150591][ T2347] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 2112.223376][ T2347] pvrusb2: Attached sub-driver cx25840 [ 2112.251739][ T2347] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 2112.307432][ T2347] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 2113.273003][T12187] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 2113.453070][T12187] usb 2-1: Using ep0 maxpacket: 16 [ 2113.490337][T12187] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 2113.498948][T12187] usb 2-1: config 0 has no interface number 0 [ 2113.514032][T12187] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 2113.528816][T12187] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2113.557946][T12187] usb 2-1: Product: syz [ 2113.638446][T12187] usb 2-1: Manufacturer: syz [ 2113.675033][T12187] usb 2-1: SerialNumber: syz [ 2113.718774][T12187] usb 2-1: config 0 descriptor?? [ 2113.734862][T12187] usb-storage 2-1:0.102: USB Mass Storage device detected [ 2113.781488][T12187] usb-storage 2-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 2113.815888][T12187] usb-storage 2-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2113.815888][T12187] Please send a copy of this message to and [ 2113.994527][T20610] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 2114.177861][T20610] usb 3-1: Using ep0 maxpacket: 16 [ 2114.231426][T20610] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2114.315451][T20610] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2114.396945][T20610] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2114.439431][T20610] usb 3-1: config 0 descriptor?? [ 2114.911187][T20610] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2114.990560][T20610] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2115.012240][T18347] usb 4-1: USB disconnect, device number 30 [ 2115.054205][T20610] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2115.096128][T20610] mcp2221 0003:04D8:00DD.0017: unknown main item tag 0x0 [ 2115.159804][T20610] mcp2221 0003:04D8:00DD.0017: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 2115.293389][ C0] usb 3-1: input irq status -75 received [ 2115.317258][T30156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.371637][T30156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.399252][T30156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2115.494382][T30156] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2115.552389][T18347] usb 3-1: USB disconnect, device number 19 [ 2116.658311][T30176] could not allocate digest TFM handle rmd320 [ 2116.715882][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 2116.715904][ T30] audit: type=1326 audit(1759257451.546:5574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2116.772049][ T30] audit: type=1326 audit(1759257451.556:5575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2116.900701][ T30] audit: type=1326 audit(1759257451.556:5576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2116.971348][ T30] audit: type=1326 audit(1759257451.556:5577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2116.982321][T30182] netlink: 36 bytes leftover after parsing attributes in process `syz.5.6554'. [ 2117.041651][ T30] audit: type=1326 audit(1759257451.556:5578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.113101][ T30] audit: type=1326 audit(1759257451.586:5579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.175818][ T30] audit: type=1326 audit(1759257451.586:5580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.283794][ T30] audit: type=1326 audit(1759257451.606:5581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.503183][ T30] audit: type=1326 audit(1759257451.606:5582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.601874][ T30] audit: type=1326 audit(1759257451.606:5583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30173 comm="syz.3.6553" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1e6398eec9 code=0x7ffc0000 [ 2117.947499][T12187] usb 2-1: USB disconnect, device number 24 [ 2122.694262][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 2122.694277][ T30] audit: type=1326 audit(1759257457.536:5593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.776558][ T30] audit: type=1326 audit(1759257457.536:5594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.799682][ T30] audit: type=1326 audit(1759257457.576:5595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.823310][ T30] audit: type=1326 audit(1759257457.576:5596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.853557][ T30] audit: type=1326 audit(1759257457.576:5597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.895405][ T30] audit: type=1326 audit(1759257457.586:5598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.931695][ T30] audit: type=1326 audit(1759257457.586:5599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2122.983615][ T30] audit: type=1326 audit(1759257457.586:5600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2123.034099][ T30] audit: type=1326 audit(1759257457.586:5601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2123.105077][ T30] audit: type=1326 audit(1759257457.586:5602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30233 comm="syz.2.6566" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2123.139146][T30237] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6567'. [ 2123.378592][T30231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6565'. [ 2125.422798][T30263] fuse: Bad value for 'user_id' [ 2125.438258][T30263] fuse: Bad value for 'user_id' [ 2125.741880][T30267] netlink: 24 bytes leftover after parsing attributes in process `syz.3.6576'. [ 2126.040531][T30278] netlink: 36 bytes leftover after parsing attributes in process `syz.8.6580'. [ 2126.140852][T30280] netlink: 60 bytes leftover after parsing attributes in process `syz.1.6579'. [ 2127.623094][T12020] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 2128.471024][T12020] usb 6-1: Using ep0 maxpacket: 16 [ 2128.484621][T12020] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2128.592140][T12020] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2128.601472][T12020] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2128.613096][T12020] usb 6-1: config 0 descriptor?? [ 2129.099715][T12020] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2129.116983][T12020] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2129.135737][T12020] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2129.143268][T12020] mcp2221 0003:04D8:00DD.0018: unknown main item tag 0x0 [ 2129.151230][T12020] mcp2221 0003:04D8:00DD.0018: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2129.162557][T30330] Failed to get privilege flags for destination (handle=0x2:0x0) [ 2129.315823][ C1] usb 6-1: input irq status -75 received [ 2129.519251][T30310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2129.544015][T30310] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2129.557586][T12020] usb 6-1: USB disconnect, device number 19 [ 2130.452814][T30343] xt_socket: unknown flags 0x50 [ 2130.468286][T30343] netlink: 'syz.5.6598': attribute type 3 has an invalid length. [ 2132.379302][T30376] netlink: 'syz.2.6607': attribute type 4 has an invalid length. [ 2132.592995][T12187] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 2132.773030][T12187] usb 6-1: Using ep0 maxpacket: 16 [ 2132.834605][T12187] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2132.866798][T12187] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2132.967362][T12187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2133.032813][T12187] usb 6-1: config 0 descriptor?? [ 2133.516143][T12187] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2133.557061][T12187] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2133.564118][T30380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6609'. [ 2133.612987][T12187] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2133.633017][T12187] mcp2221 0003:04D8:00DD.0019: unknown main item tag 0x0 [ 2133.661419][T12187] mcp2221 0003:04D8:00DD.0019: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0 [ 2133.730279][ C0] usb 6-1: input irq status -75 received [ 2133.917717][T30375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2134.132727][T30375] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2134.154461][T28286] usb 6-1: USB disconnect, device number 20 [ 2134.253370][T12187] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 2134.428446][T12187] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2134.448311][T12187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2134.470875][T12187] usb 4-1: Product: syz [ 2134.486891][T12187] usb 4-1: Manufacturer: syz [ 2134.502274][T12187] usb 4-1: SerialNumber: syz [ 2134.524224][T12187] usb 4-1: config 0 descriptor?? [ 2134.757192][T12187] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2136.053015][T18347] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 2136.194174][T12187] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2136.235967][T18347] usb 2-1: config 8 has an invalid interface number: 177 but max is 0 [ 2136.253157][T18347] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2136.253357][T12187] usb 4-1: USB disconnect, device number 31 [ 2136.315018][T18347] usb 2-1: config 8 has no interface number 0 [ 2136.332131][T30417] fuse: Bad value for 'fd' [ 2136.340482][T18347] usb 2-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2136.451874][T18347] usb 2-1: config 8 interface 177 has no altsetting 0 [ 2136.481249][T18347] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2136.511231][T18347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2136.534486][T18347] ir_toy 2-1:8.177: required endpoints not found [ 2138.928399][T18347] usb 2-1: USB disconnect, device number 25 [ 2139.070781][T30457] fuse: Bad value for 'fd' [ 2139.843066][T18347] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 2140.233437][T18347] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2140.242515][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2140.261203][T18347] usb 4-1: Product: syz [ 2140.270772][T18347] usb 4-1: Manufacturer: syz [ 2140.340889][T30478] random: crng reseeded on system resumption [ 2141.064324][T18347] usb 4-1: SerialNumber: syz [ 2141.107417][T18347] usb 4-1: config 0 descriptor?? [ 2141.443106][T18347] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2142.881796][T18347] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 2142.903035][T12020] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 2143.257431][T18347] usb 4-1: USB disconnect, device number 32 [ 2143.394942][T12020] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2143.402809][T30504] fuse: Bad value for 'fd' [ 2143.451755][T12020] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2143.482234][T12020] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2143.513021][T12020] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2143.712590][T30495] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2143.764194][T12020] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2145.698633][T30516] loop8: detected capacity change from 0 to 40427 [ 2147.777707][T30516] F2FS-fs (loop8): Failed to start F2FS issue_checkpoint_thread (-4) [ 2148.071933][T12020] usb 3-1: USB disconnect, device number 20 [ 2148.275544][T30519] tipc: Enabled bearer , priority 0 [ 2148.294235][T30519] syzkaller0: entered promiscuous mode [ 2148.299773][T30519] syzkaller0: entered allmulticast mode [ 2148.347719][T30519] tipc: Resetting bearer [ 2148.553058][T30518] tipc: Resetting bearer [ 2148.859959][T30518] tipc: Disabling bearer [ 2149.574856][T30541] fuse: Bad value for 'fd' [ 2149.879605][ T30] kauditd_printk_skb: 96 callbacks suppressed [ 2149.879625][ T30] audit: type=1326 audit(1759257484.716:5699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.130894][ T30] audit: type=1326 audit(1759257484.746:5700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.158831][ T30] audit: type=1326 audit(1759257484.756:5701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.187252][ T30] audit: type=1326 audit(1759257484.756:5702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.217675][ T30] audit: type=1326 audit(1759257484.756:5703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.382584][ T30] audit: type=1326 audit(1759257484.766:5704): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.405248][ T30] audit: type=1326 audit(1759257484.766:5705): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.427992][ T30] audit: type=1326 audit(1759257484.776:5706): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2150.451042][ T30] audit: type=1326 audit(1759257484.776:5707): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7bfb58d710 code=0x7ffc0000 [ 2151.469257][T30550] loop8: detected capacity change from 0 to 40427 [ 2151.489540][T30550] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 2151.497780][T30550] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 2151.506324][ T30] audit: type=1326 audit(1759257484.776:5708): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30544 comm="syz.8.6659" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7bfb58eec9 code=0x7ffc0000 [ 2151.535295][T30550] F2FS-fs (loop8): invalid crc value [ 2151.621197][T30550] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2151.631890][T30550] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 2151.638974][T30550] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 2151.852673][T30554] binder: BINDER_SET_CONTEXT_MGR already set [ 2151.859077][T30554] binder: 30552:30554 ioctl 4018620d 200000000040 returned -16 [ 2154.443207][T12020] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 2154.663598][T12020] usb 4-1: device descriptor read/64, error -71 [ 2154.893354][T30598] syzkaller0: entered promiscuous mode [ 2154.918632][T30598] syzkaller0: entered allmulticast mode [ 2154.966946][T12020] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 2155.133658][T12020] usb 4-1: device descriptor read/64, error -71 [ 2155.203141][T18347] usb 3-1: new low-speed USB device number 21 using dummy_hcd [ 2155.263443][T12020] usb usb4-port1: attempt power cycle [ 2155.380442][T18347] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2155.395139][T18347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2155.427474][T18347] usb 3-1: config 0 descriptor?? [ 2155.653006][T12020] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 2155.748041][T12020] usb 4-1: device descriptor read/8, error -71 [ 2156.030023][T12020] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 2156.094194][T12020] usb 4-1: device descriptor read/8, error -71 [ 2156.225124][T12020] usb usb4-port1: unable to enumerate USB device [ 2157.402739][T30631] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6685'. [ 2157.559432][T17172] Bluetooth: hci1: command 0x0406 tx timeout [ 2158.449793][T30635] could not allocate digest TFM handle rmd320 [ 2158.546240][T18347] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 2158.586995][T18347] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 2158.653731][T18347] asix 3-1:0.0: probe with driver asix failed with error -71 [ 2158.698922][T18347] usb 3-1: USB disconnect, device number 21 [ 2161.661151][T30687] random: crng reseeded on system resumption [ 2162.361880][T30656] bridge_slave_0: left allmulticast mode [ 2162.367802][T30656] bridge_slave_0: left promiscuous mode [ 2162.376024][T30656] bridge0: port 1(bridge_slave_0) entered disabled state [ 2162.912087][T30656] bridge_slave_1: left allmulticast mode [ 2162.918051][T30656] bridge_slave_1: left promiscuous mode [ 2162.927559][T30656] bridge0: port 2(bridge_slave_1) entered disabled state [ 2163.270219][T30656] bond0: (slave bond_slave_0): Releasing backup interface [ 2163.372292][T30656] bond0: (slave bond_slave_1): Releasing backup interface [ 2163.383533][T18347] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 2163.418694][T30656] team0: Port device team_slave_0 removed [ 2163.640350][T30656] team0: Port device team_slave_1 removed [ 2163.649978][T30656] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2163.657908][T30656] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2163.674808][T18347] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2163.688315][T30656] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2163.713022][T18347] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2163.719237][T30656] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2163.771832][T18347] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2164.009561][T18347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2164.021439][T30689] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 2164.061342][T18347] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 2164.290569][T18347] usb 3-1: USB disconnect, device number 22 [ 2164.364970][T30656] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2165.705860][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2168.658220][T30757] netlink: 'syz.5.6716': attribute type 4 has an invalid length. [ 2169.023029][T18347] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 2169.105325][T23565] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 2169.192704][T18347] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2169.211982][T18347] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2169.242992][T23565] usb 2-1: device descriptor read/64, error -71 [ 2169.254082][T18347] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2169.273030][T18347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2169.297667][T30758] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2169.328794][T18347] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 2169.493067][T23565] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 2169.643083][T23565] usb 2-1: device descriptor read/64, error -71 [ 2169.756465][T23565] usb usb2-port1: attempt power cycle [ 2169.955058][T28286] usb 6-1: new full-speed USB device number 21 using dummy_hcd [ 2170.112963][T18347] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 2170.117802][T28286] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2170.145120][T28286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2170.170807][T28286] usb 6-1: Product: syz [ 2170.210083][T28286] usb 6-1: Manufacturer: syz [ 2170.234864][T28286] usb 6-1: SerialNumber: syz [ 2170.276674][T28286] usb 6-1: config 0 descriptor?? [ 2170.283210][T18347] usb 3-1: Using ep0 maxpacket: 16 [ 2170.334747][T23565] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 2170.364299][T18347] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2170.384453][T18347] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2170.398865][T23565] usb 2-1: device descriptor read/8, error -71 [ 2170.408182][T18347] usb 3-1: config 0 interface 0 has no altsetting 0 [ 2170.429942][T18347] usb 3-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2170.439903][T18347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2170.452348][T18347] usb 3-1: config 0 descriptor?? [ 2170.500320][T28286] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2170.643030][T23565] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 2170.794590][T23565] usb 2-1: device descriptor read/8, error -71 [ 2170.915617][T23565] usb usb2-port1: unable to enumerate USB device [ 2171.938667][T30780] could not allocate digest TFM handle rmd320 [ 2172.010011][T28286] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2172.045645][T28286] usb 6-1: USB disconnect, device number 21 [ 2172.154783][T23565] usb 4-1: USB disconnect, device number 37 [ 2172.236206][T18347] usbhid 3-1:0.0: can't add hid device: -71 [ 2172.253141][T18347] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2172.267638][T18347] usb 3-1: USB disconnect, device number 23 [ 2172.805568][T30797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.6728'. [ 2173.441054][T30809] vivid-004: disconnect [ 2174.165417][T30807] vivid-004: reconnect [ 2174.275087][T18347] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 2174.462964][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2174.473709][T18347] usb 4-1: no configurations [ 2174.478423][T18347] usb 4-1: can't read configurations, error -22 [ 2174.522775][T30827] netlink: 68 bytes leftover after parsing attributes in process `syz.8.6739'. [ 2174.651736][T18347] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 2174.882961][T28286] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 2175.023653][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2175.029656][T18347] usb 4-1: no configurations [ 2175.034458][T18347] usb 4-1: can't read configurations, error -22 [ 2175.045500][T18347] usb usb4-port1: attempt power cycle [ 2175.117090][T28286] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2175.198821][T28286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2175.216861][T12187] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2175.236374][T28286] usb 2-1: Product: syz [ 2175.246977][T28286] usb 2-1: Manufacturer: syz [ 2175.251987][T28286] usb 2-1: SerialNumber: syz [ 2175.271498][T28286] usb 2-1: config 0 descriptor?? [ 2175.393307][T12187] usb 6-1: Using ep0 maxpacket: 16 [ 2175.403042][T18347] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 2175.405179][T12187] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2175.458831][T12187] usb 6-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.473567][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2175.487324][T18347] usb 4-1: no configurations [ 2175.495573][T18347] usb 4-1: can't read configurations, error -22 [ 2175.555252][T28286] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2175.583007][T12187] usb 6-1: config 0 interface 0 has no altsetting 0 [ 2175.591839][T12187] usb 6-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2175.623033][T12187] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2175.642970][T18347] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 2175.662148][T12187] usb 6-1: config 0 descriptor?? [ 2175.684452][T18347] usb 4-1: Using ep0 maxpacket: 8 [ 2175.698536][T18347] usb 4-1: no configurations [ 2175.708010][T18347] usb 4-1: can't read configurations, error -22 [ 2175.723540][T18347] usb usb4-port1: unable to enumerate USB device [ 2176.482173][T30841] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6742'. [ 2176.839750][T30848] netlink: 'syz.2.6743': attribute type 1 has an invalid length. [ 2176.930887][T30851] gretap1: entered promiscuous mode [ 2176.942634][T30851] bond1: (slave gretap1): making interface the new active one [ 2176.961814][T30851] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 2176.991197][T30848] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6743'. [ 2177.010288][T28286] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2177.033081][T28286] usb 2-1: USB disconnect, device number 30 [ 2177.041162][T30848] macvlan2: entered promiscuous mode [ 2177.051137][T30848] macvlan2: entered allmulticast mode [ 2177.295574][T12187] usbhid 6-1:0.0: can't add hid device: -71 [ 2177.377234][T12187] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2177.465390][T12187] usb 6-1: USB disconnect, device number 22 [ 2177.789553][T30865] vivid-000: disconnect [ 2177.820811][T30863] vivid-000: reconnect [ 2180.207702][T30892] dlm: plock device version mismatch: kernel (1.2.0), user (1.8192.0) [ 2180.434755][T28286] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 2180.632960][T28286] usb 4-1: Using ep0 maxpacket: 8 [ 2180.651847][T28286] usb 4-1: no configurations [ 2180.671970][T28286] usb 4-1: can't read configurations, error -22 [ 2180.869097][T30906] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 2181.048865][T28286] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 2181.102287][T30909] vivid-002: disconnect [ 2181.163218][T20610] vivid-002: reconnect [ 2181.293009][T28286] usb 4-1: Using ep0 maxpacket: 8 [ 2181.304257][T28286] usb 4-1: no configurations [ 2181.317874][T30903] could not allocate digest TFM handle rmd320 [ 2181.336682][T28286] usb 4-1: can't read configurations, error -22 [ 2181.363054][T28286] usb usb4-port1: attempt power cycle [ 2181.753025][T28286] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 2181.835689][T28286] usb 4-1: Using ep0 maxpacket: 8 [ 2181.872504][T28286] usb 4-1: no configurations [ 2181.898162][T28286] usb 4-1: can't read configurations, error -22 [ 2182.063378][T28286] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 2182.113726][T28286] usb 4-1: Using ep0 maxpacket: 8 [ 2182.138661][T28286] usb 4-1: no configurations [ 2182.163120][T28286] usb 4-1: can't read configurations, error -22 [ 2182.183505][T28286] usb usb4-port1: unable to enumerate USB device [ 2182.237440][T30923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6764'. [ 2183.912993][T20610] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2184.065533][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 2184.065554][ T30] audit: type=1326 audit(1759257518.906:5727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.152530][ T30] audit: type=1326 audit(1759257518.936:5728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.176177][T20610] usb 6-1: Using ep0 maxpacket: 32 [ 2184.209127][T20610] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2184.227588][ T30] audit: type=1326 audit(1759257518.966:5729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.274640][T20610] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 2184.277137][ T30] audit: type=1326 audit(1759257518.966:5730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.308617][ T30] audit: type=1326 audit(1759257518.966:5731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.331326][T20610] usb 6-1: config 4 has no interface number 0 [ 2184.331384][T20610] usb 6-1: config 4 interface 10 has no altsetting 0 [ 2184.358749][T20610] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 2184.388120][T20610] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2184.420396][T20610] usb 6-1: Product: syz [ 2184.427659][T20610] usb 6-1: Manufacturer: syz [ 2184.437570][T20610] usb 6-1: SerialNumber: syz [ 2184.547716][ T30] audit: type=1326 audit(1759257518.986:5732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.594422][ T30] audit: type=1326 audit(1759257518.986:5733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.617349][ T30] audit: type=1326 audit(1759257518.996:5734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.687717][ T30] audit: type=1326 audit(1759257518.996:5735): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.724172][T20610] radio-si470x 6-1:4.10: could not find interrupt in endpoint [ 2184.774848][T20610] radio-si470x 6-1:4.10: probe with driver radio-si470x failed with error -5 [ 2184.795800][T20610] usbhid 6-1:4.10: couldn't find an input interrupt endpoint [ 2184.804851][ T30] audit: type=1326 audit(1759257518.996:5736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30958 comm="syz.2.6776" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2184.832012][T20610] usb 6-1: USB disconnect, device number 23 [ 2185.036025][T30979] vivid-001: disconnect [ 2185.255779][T30981] kvm: kvm [30980]: vcpu0, guest rIP: 0x1be Unhandled WRMSR(0xc1) = 0x4000 [ 2185.850874][T30976] vivid-001: reconnect [ 2185.975022][T30994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6786'. [ 2187.313177][T12187] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 2187.423198][T20610] usb 9-1: new full-speed USB device number 15 using dummy_hcd [ 2187.503013][T12187] usb 3-1: Using ep0 maxpacket: 32 [ 2187.584729][T12187] usb 3-1: too many endpoints for config 64 interface 0 altsetting 8: 33, using maximum allowed: 30 [ 2187.606710][T12187] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2187.657011][T20610] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2187.720177][T12187] usb 3-1: config 64 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2187.740550][T20610] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2187.749004][T12187] usb 3-1: config 64 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 2187.762279][T20610] usb 9-1: Product: syz [ 2187.771105][T20610] usb 9-1: Manufacturer: syz [ 2187.781215][T20610] usb 9-1: SerialNumber: syz [ 2187.787669][T12187] usb 3-1: config 64 interface 0 has no altsetting 0 [ 2187.823393][T12187] usb 3-1: New USB device found, idVendor=17ef, idProduct=6085, bcdDevice= 0.00 [ 2187.834173][T20610] usb 9-1: config 0 descriptor?? [ 2187.851776][T12187] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2188.095034][T20610] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2188.203211][T18347] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2188.729943][T12187] usbhid 3-1:64.0: can't add hid device: -71 [ 2188.737050][T12187] usbhid 3-1:64.0: probe with driver usbhid failed with error -71 [ 2188.756084][T18347] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2188.789214][T12187] usb 3-1: USB disconnect, device number 24 [ 2188.807096][T18347] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 2188.893100][T18347] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2189.017378][T18347] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.047531][T31015] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 2189.060318][T18347] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 2189.416920][T31027] netlink: 40 bytes leftover after parsing attributes in process `syz.2.6797'. [ 2189.577810][ C0] raw-gadget.1 gadget.8: ignoring, device is not running [ 2189.585647][T20610] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2189.600248][T20610] usb 9-1: USB disconnect, device number 15 [ 2191.525950][T31044] No buffer was provided with the request [ 2191.628540][T31046] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6801'. [ 2192.542758][T31044] trusted_key: encrypted_key: insufficient parameters specified [ 2193.002010][T31044] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2193.165164][T31048] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2193.644974][T20610] usb 6-1: USB disconnect, device number 24 [ 2194.012258][T31064] netlink: 60 bytes leftover after parsing attributes in process `syz.5.6804'. [ 2195.847741][T31083] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6811'. [ 2197.361228][T12187] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2197.523094][T12187] usb 6-1: Using ep0 maxpacket: 16 [ 2197.542297][T12187] usb 6-1: config 0 has an invalid interface number: 102 but max is 0 [ 2197.603185][T12187] usb 6-1: config 0 has no interface number 0 [ 2197.654867][T12187] usb 6-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 2197.697637][T12187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2197.737124][T12187] usb 6-1: Product: syz [ 2197.756744][T12187] usb 6-1: Manufacturer: syz [ 2197.772010][T12187] usb 6-1: SerialNumber: syz [ 2197.839921][T12187] usb 6-1: config 0 descriptor?? [ 2197.885212][T12187] usb-storage 6-1:0.102: USB Mass Storage device detected [ 2197.937198][T12187] usb-storage 6-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 2197.954380][T12187] usb-storage 6-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2197.954380][T12187] Please send a copy of this message to and [ 2199.069984][T31131] netlink: 60 bytes leftover after parsing attributes in process `syz.2.6821'. [ 2199.326981][T31135] netlink: 40 bytes leftover after parsing attributes in process `syz.3.6824'. [ 2200.590533][T31153] bridge_slave_0: left allmulticast mode [ 2200.600099][T31153] bridge_slave_0: left promiscuous mode [ 2200.610532][T31153] bridge0: port 1(bridge_slave_0) entered disabled state [ 2200.804911][T28286] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2200.895687][T31153] bridge_slave_1: left allmulticast mode [ 2200.901977][T31153] bridge_slave_1: left promiscuous mode [ 2200.916415][T31153] bridge0: port 2(bridge_slave_1) entered disabled state [ 2200.977512][T31153] bond0: (slave bond_slave_0): Releasing backup interface [ 2200.993689][T28286] usb 4-1: Using ep0 maxpacket: 8 [ 2201.001583][T28286] usb 4-1: config 0 has no interfaces? [ 2201.010576][T28286] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2201.035405][T28286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2201.093452][T28286] usb 4-1: config 0 descriptor?? [ 2201.168426][T31153] bond0: (slave bond_slave_1): Releasing backup interface [ 2201.233515][T31153] team0: Port device team_slave_0 removed [ 2201.294055][T23565] usb 6-1: USB disconnect, device number 25 [ 2201.303549][T31153] team0: Port device team_slave_1 removed [ 2201.333421][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2201.340954][T31153] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2201.419301][T31155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2201.473738][T31153] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2201.481181][T31153] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2201.491875][T31155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2201.569509][T28286] usb 4-1: USB disconnect, device number 46 [ 2201.586204][T31153] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 2201.969255][T23565] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2202.157406][T23565] usb 6-1: Using ep0 maxpacket: 32 [ 2202.181861][T23565] usb 6-1: unable to get BOS descriptor or descriptor too short [ 2202.190021][T24027] Bluetooth: hci1: command 0x0406 tx timeout [ 2202.232303][T23565] usb 6-1: config 4 has an invalid interface number: 10 but max is 0 [ 2202.245780][T23565] usb 6-1: config 4 has no interface number 0 [ 2202.258628][T23565] usb 6-1: config 4 interface 10 has no altsetting 0 [ 2202.471088][T28286] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 2202.500660][T23565] usb 6-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15 [ 2203.143239][T23565] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2203.166046][T23565] usb 6-1: Product: syz [ 2203.170275][T23565] usb 6-1: Manufacturer: syz [ 2203.196097][T23565] usb 6-1: SerialNumber: syz [ 2203.427861][T23565] radio-si470x 6-1:4.10: could not find interrupt in endpoint [ 2203.433026][T28286] usb 9-1: Using ep0 maxpacket: 16 [ 2203.443363][T28286] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2203.449668][T23565] radio-si470x 6-1:4.10: probe with driver radio-si470x failed with error -5 [ 2203.465636][T23565] usbhid 6-1:4.10: couldn't find an input interrupt endpoint [ 2203.475675][T23565] usb 6-1: USB disconnect, device number 26 [ 2203.493427][T28286] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2203.515134][T28286] usb 9-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2203.524314][T28286] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2203.543600][T28286] usb 9-1: config 0 descriptor?? [ 2203.554548][T28286] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 2204.562990][T23565] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2204.575737][T31198] netlink: 'syz.5.6841': attribute type 20 has an invalid length. [ 2204.584511][T31198] IPv6: NLM_F_CREATE should be specified when creating new route [ 2204.592680][T31198] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2204.600007][T31198] IPv6: NLM_F_CREATE should be set when creating new route [ 2204.788244][T23565] usb 4-1: Using ep0 maxpacket: 16 [ 2204.839654][T23565] usb 4-1: config 0 has an invalid interface number: 102 but max is 0 [ 2204.877631][T23565] usb 4-1: config 0 has no interface number 0 [ 2204.888472][T23565] usb 4-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 2204.898523][T23565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2204.907913][T23565] usb 4-1: Product: syz [ 2204.912705][T23565] usb 4-1: Manufacturer: syz [ 2204.918718][T23565] usb 4-1: SerialNumber: syz [ 2204.926732][T23565] usb 4-1: config 0 descriptor?? [ 2204.936112][T23565] usb-storage 4-1:0.102: USB Mass Storage device detected [ 2204.951290][T23565] usb-storage 4-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 2204.959487][T23565] usb-storage 4-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2204.959487][T23565] Please send a copy of this message to and [ 2205.621865][T12187] usb 9-1: USB disconnect, device number 16 [ 2205.852992][T23565] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2206.025239][T23565] usb 6-1: Using ep0 maxpacket: 16 [ 2206.040289][T23565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2206.056434][T28286] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 2206.085472][T23565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2206.096743][T23565] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 2206.110206][T23565] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 2206.119697][T23565] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2206.132490][T23565] usb 6-1: config 0 descriptor?? [ 2206.133089][T12187] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 2206.229082][T28286] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2206.249024][T28286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.271059][T28286] usb 2-1: Product: syz [ 2206.281639][T28286] usb 2-1: Manufacturer: syz [ 2206.292590][T28286] usb 2-1: SerialNumber: syz [ 2206.302196][T28286] usb 2-1: config 0 descriptor?? [ 2206.310055][T12187] usb 9-1: Using ep0 maxpacket: 32 [ 2206.317986][T12187] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 2206.331921][T12187] usb 9-1: config 0 has no interface number 0 [ 2206.360859][T12187] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2206.378428][T12187] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.387702][T12187] usb 9-1: Product: syz [ 2206.392036][T12187] usb 9-1: Manufacturer: syz [ 2206.399165][T12187] usb 9-1: SerialNumber: syz [ 2206.409023][T12187] usb 9-1: config 0 descriptor?? [ 2206.425949][T12187] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2206.449419][T12187] usb 9-1: selecting invalid altsetting 1 [ 2206.463657][T12187] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2206.489194][T12187] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2206.500720][T12187] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2206.523063][T12187] usb 9-1: media controller created [ 2206.536730][T28286] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2206.559588][T23565] microsoft 0003:045E:07DA.001A: item fetching failed at offset 30/34 [ 2206.569789][T23565] microsoft 0003:045E:07DA.001A: parse failed [ 2206.576244][T23565] microsoft 0003:045E:07DA.001A: probe with driver microsoft failed with error -22 [ 2206.618439][T12187] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2206.685715][T12187] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2206.696820][T12187] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2206.716332][T12187] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2206.770765][T23565] usb 6-1: USB disconnect, device number 27 [ 2206.921704][T12187] usb 9-1: USB disconnect, device number 17 [ 2207.237613][T31234] random: crng reseeded on system resumption [ 2207.938906][T28286] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2208.238038][T31245] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2208.687811][T18347] usb 4-1: USB disconnect, device number 47 [ 2209.133084][T18347] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 2209.137316][T28286] usb 2-1: USB disconnect, device number 31 [ 2209.297944][T18347] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2209.347779][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2209.398732][T18347] usb 4-1: Product: syz [ 2209.411505][T18347] usb 4-1: Manufacturer: syz [ 2209.416495][T18347] usb 4-1: SerialNumber: syz [ 2209.438873][T18347] usb 4-1: config 0 descriptor?? [ 2209.465094][T31261] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6860'. [ 2209.620838][T31263] syzkaller0: entered promiscuous mode [ 2209.632584][T31263] syzkaller0: entered allmulticast mode [ 2209.742005][T18347] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2211.151019][T18347] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2211.162568][T18347] usb 4-1: USB disconnect, device number 48 [ 2211.516450][T31282] netlink: 24 bytes leftover after parsing attributes in process `syz.8.6866'. [ 2211.578180][T31283] random: crng reseeded on system resumption [ 2212.766613][T12187] usb 6-1: new full-speed USB device number 28 using dummy_hcd [ 2212.832970][T28286] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2212.938767][T12187] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2212.951012][T12187] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2213.007889][T12187] usb 6-1: Product: syz [ 2213.012414][T12187] usb 6-1: Manufacturer: syz [ 2213.017336][T12187] usb 6-1: SerialNumber: syz [ 2213.024849][T28286] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 2213.034423][T12187] usb 6-1: config 0 descriptor?? [ 2213.039796][T28286] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2213.072219][T28286] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2213.086800][T28286] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2213.124113][T28286] usb 4-1: Manufacturer: syz [ 2213.154135][T28286] usb 4-1: config 0 descriptor?? [ 2213.281692][T12187] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2213.302921][ T30] kauditd_printk_skb: 8 callbacks suppressed [ 2213.302988][ T30] audit: type=1800 audit(1759257548.136:5745): pid=31313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.6874" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 2213.362082][T31318] rtc_cmos 00:00: Alarms can be up to one day in the future [ 2213.373420][T28286] rc_core: IR keymap rc-hauppauge not found [ 2213.379453][T28286] Registered IR keymap rc-empty [ 2213.419137][T28286] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 2213.524828][T28286] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input48 [ 2213.955738][T12187] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2215.354010][T31336] tipc: Enabled bearer , priority 0 [ 2215.381601][T31336] syzkaller0: entered promiscuous mode [ 2215.388121][T31336] syzkaller0: entered allmulticast mode [ 2215.465877][T31338] syzkaller0: entered promiscuous mode [ 2215.493646][T31338] syzkaller0: entered allmulticast mode [ 2215.510265][T31340] tipc: Resetting bearer [ 2215.574501][T28286] usb 4-1: USB disconnect, device number 49 [ 2215.584688][T31335] tipc: Resetting bearer [ 2215.672690][T20610] usb 6-1: USB disconnect, device number 28 [ 2215.743926][T31335] tipc: Disabling bearer [ 2218.783451][T28286] usb 6-1: new full-speed USB device number 29 using dummy_hcd [ 2219.036285][T28286] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2219.120485][T28286] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2219.163964][T28286] usb 6-1: Product: syz [ 2219.179399][T28286] usb 6-1: Manufacturer: syz [ 2219.204565][T28286] usb 6-1: SerialNumber: syz [ 2219.242267][T28286] usb 6-1: config 0 descriptor?? [ 2219.476771][T28286] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2219.964677][T31399] syzkaller0: entered promiscuous mode [ 2219.970323][T31399] syzkaller0: entered allmulticast mode [ 2220.092546][T28286] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2220.614835][T31406] binder: BINDER_SET_CONTEXT_MGR already set [ 2220.620926][T31406] binder: 31400:31406 ioctl 4018620d 2000000002c0 returned -16 [ 2221.350829][T23565] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 2221.383371][T31397] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6893'. [ 2221.609321][T31413] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6898'. [ 2221.618381][T23565] usb 2-1: Using ep0 maxpacket: 32 [ 2221.630752][T18347] usb 6-1: USB disconnect, device number 29 [ 2221.681730][T23565] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 2221.704591][T23565] usb 2-1: config 0 has no interface number 0 [ 2221.715688][T23565] usb 2-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2221.725241][T23565] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2221.739124][T23565] usb 2-1: Product: syz [ 2221.746785][T23565] usb 2-1: Manufacturer: syz [ 2221.753896][T23565] usb 2-1: SerialNumber: syz [ 2221.767377][T23565] usb 2-1: config 0 descriptor?? [ 2221.776621][T23565] usb 2-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2221.801589][T23565] usb 2-1: selecting invalid altsetting 1 [ 2221.827883][T23565] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2221.867205][T23565] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2221.895313][T23565] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2221.905102][T23565] usb 2-1: media controller created [ 2221.944290][T23565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2222.042659][T23565] usb 2-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2222.049902][T23565] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2222.060096][T23565] usb 2-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2222.122949][T18347] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 2222.248939][T23565] usb 2-1: USB disconnect, device number 32 [ 2222.282939][T18347] usb 3-1: Using ep0 maxpacket: 16 [ 2222.290688][T18347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2222.360486][T18347] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2222.414504][T18347] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2222.454993][T18347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2222.551500][T18347] usb 3-1: config 0 descriptor?? [ 2222.585878][T18347] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 2222.878612][T31429] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6902'. [ 2224.093015][T23565] usb 9-1: new full-speed USB device number 18 using dummy_hcd [ 2224.260248][T23565] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2224.279776][T23565] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2224.297144][T23565] usb 9-1: Product: syz [ 2224.319330][T23565] usb 9-1: Manufacturer: syz [ 2224.334378][T23565] usb 9-1: SerialNumber: syz [ 2224.355603][T23565] usb 9-1: config 0 descriptor?? [ 2224.580186][T23565] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2224.926508][T18347] usb 3-1: USB disconnect, device number 25 [ 2225.294790][T31458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6912'. [ 2226.182020][T23565] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2226.483435][T18347] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2226.663844][T18347] usb 3-1: Using ep0 maxpacket: 32 [ 2226.677749][T18347] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 2226.694920][T18347] usb 3-1: config 0 has no interface number 0 [ 2226.719255][T18347] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2226.734610][T18347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2226.743358][T28286] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 2226.763128][T18347] usb 3-1: Product: syz [ 2226.774716][T18347] usb 3-1: Manufacturer: syz [ 2226.782965][T20610] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 2226.794622][T18347] usb 3-1: SerialNumber: syz [ 2226.815499][T18347] usb 3-1: config 0 descriptor?? [ 2226.833305][T18347] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2226.854940][T18347] usb 3-1: selecting invalid altsetting 1 [ 2226.871098][T18347] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2226.903285][T28286] usb 2-1: Using ep0 maxpacket: 16 [ 2226.910646][T18347] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2226.926868][T28286] usb 2-1: config 0 has an invalid interface number: 102 but max is 0 [ 2226.938999][T28286] usb 2-1: config 0 has no interface number 0 [ 2226.945305][T20610] usb 6-1: Using ep0 maxpacket: 16 [ 2226.954943][T18347] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2226.966641][T28286] usb 2-1: New USB device found, idVendor=04b3, idProduct=4001, bcdDevice= 1.10 [ 2226.977348][T20610] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2226.991499][T28286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2227.005923][T20610] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2227.012960][T18347] usb 3-1: media controller created [ 2227.025866][T28286] usb 2-1: Product: syz [ 2227.044173][T28286] usb 2-1: Manufacturer: syz [ 2227.051218][T20610] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2227.065426][T28286] usb 2-1: SerialNumber: syz [ 2227.085469][T28286] usb 2-1: config 0 descriptor?? [ 2227.091328][T20610] usb 6-1: config 0 descriptor?? [ 2227.098173][T18347] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2227.112440][T28286] usb-storage 2-1:0.102: USB Mass Storage device detected [ 2227.149863][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.160904][T28286] usb-storage 2-1:0.102: Quirks match for vid 04b3 pid 4001: 2000 [ 2227.169487][T28286] usb-storage 2-1:0.102: This device (04b3,4001,0110 S a4 P 01) has an unneeded Protocol entry in unusual_devs.h (kernel syzkaller) [ 2227.169487][T28286] Please send a copy of this message to and [ 2227.169547][T18347] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2227.228137][T23565] usb 9-1: USB disconnect, device number 18 [ 2227.304852][T18347] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2227.332803][T18347] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2227.472262][T18347] usb 3-1: USB disconnect, device number 26 [ 2227.753960][T31470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.771428][T31470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.820157][T31470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2227.885421][T31470] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2227.984698][T20610] usbhid 6-1:0.0: can't add hid device: -71 [ 2227.996407][T20610] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2228.034280][T20610] usb 6-1: USB disconnect, device number 30 [ 2231.240529][T18347] usb 2-1: USB disconnect, device number 33 [ 2231.610900][T31516] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6927'. [ 2232.419621][T31516] loop5: detected capacity change from 0 to 40427 [ 2232.442974][T31516] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 2232.450854][T31516] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 2232.475470][T31516] F2FS-fs (loop5): invalid crc value [ 2232.560155][T31516] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2232.578386][T31516] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 2232.585717][T31516] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 2232.933007][T18347] usb 2-1: new full-speed USB device number 34 using dummy_hcd [ 2233.131221][T18347] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2233.152968][T18347] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.161077][T18347] usb 2-1: Product: syz [ 2233.185807][T18347] usb 2-1: Manufacturer: syz [ 2233.190484][T18347] usb 2-1: SerialNumber: syz [ 2233.210939][T18347] usb 2-1: config 0 descriptor?? [ 2233.216153][T23565] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2233.416075][T23565] usb 4-1: Using ep0 maxpacket: 32 [ 2233.438841][T23565] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 2233.463066][T23565] usb 4-1: config 0 has no interface number 0 [ 2233.483040][T18347] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2233.509715][T23565] usb 4-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 2233.533089][T23565] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2233.558074][T23565] usb 4-1: Product: syz [ 2233.568753][T23565] usb 4-1: Manufacturer: syz [ 2233.578970][T23565] usb 4-1: SerialNumber: syz [ 2233.597098][T23565] usb 4-1: config 0 descriptor?? [ 2233.614866][T23565] usb 4-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 2233.703049][T23565] usb 4-1: selecting invalid altsetting 1 [ 2233.711579][T23565] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 2233.729480][T23565] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 2233.752810][T23565] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 2233.776963][T23565] usb 4-1: media controller created [ 2233.880627][T23565] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2234.054690][T23565] usb 4-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 2234.072078][T23565] zl10353_read_register: readreg error (reg=127, ret==-71) [ 2234.083591][T23565] usb 4-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 2234.165876][T23565] usb 4-1: USB disconnect, device number 50 [ 2234.518070][T18347] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2236.198890][T18347] usb 2-1: USB disconnect, device number 34 [ 2237.300848][T31557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6938'. [ 2238.046422][T31568] netlink: 20 bytes leftover after parsing attributes in process `syz.5.6942'. [ 2238.179515][T31571] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6941'. [ 2239.693204][T12187] usb 4-1: new full-speed USB device number 51 using dummy_hcd [ 2239.957031][T12187] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2240.019167][T12187] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2240.327852][T12187] usb 4-1: Product: syz [ 2240.336693][T12187] usb 4-1: Manufacturer: syz [ 2240.341354][T12187] usb 4-1: SerialNumber: syz [ 2240.413613][T12187] usb 4-1: config 0 descriptor?? [ 2240.672947][T12187] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2241.822705][T12187] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2241.903488][T31614] blktrace: Concurrent blktraces are not allowed on sg0 [ 2241.987094][T18347] usb 3-1: new full-speed USB device number 27 using dummy_hcd [ 2242.427989][T18347] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2242.437251][T18347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.454990][T18347] usb 3-1: Product: syz [ 2242.459257][T18347] usb 3-1: Manufacturer: syz [ 2242.503810][T18347] usb 3-1: SerialNumber: syz [ 2242.526282][T18347] usb 3-1: config 0 descriptor?? [ 2242.738395][T18347] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2242.908173][T23565] usb 4-1: USB disconnect, device number 51 [ 2244.206873][ C1] raw-gadget.1 gadget.2: ignoring, device is not running [ 2244.214417][T18347] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2244.281904][T18347] usb 3-1: USB disconnect, device number 27 [ 2247.663037][T18347] usb 4-1: new full-speed USB device number 52 using dummy_hcd [ 2247.826561][T18347] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2247.847732][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2247.862986][T18347] usb 4-1: Product: syz [ 2247.867419][T18347] usb 4-1: Manufacturer: syz [ 2247.872043][T18347] usb 4-1: SerialNumber: syz [ 2247.878891][T18347] usb 4-1: config 0 descriptor?? [ 2248.140488][T18347] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2249.540300][T18347] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2250.978117][T18347] usb 4-1: USB disconnect, device number 52 [ 2251.246073][T31722] tipc: Enabled bearer , priority 0 [ 2251.302746][T31725] syzkaller0: entered promiscuous mode [ 2251.335741][T31725] syzkaller0: entered allmulticast mode [ 2251.435368][T31722] tipc: Resetting bearer [ 2251.458942][T31721] tipc: Resetting bearer [ 2251.498882][T31721] tipc: Disabling bearer [ 2251.694344][T12187] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 2251.742985][T18347] usb 6-1: new full-speed USB device number 31 using dummy_hcd [ 2251.778191][T31735] netlink: 'syz.3.6988': attribute type 4 has an invalid length. [ 2251.886419][T12187] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2251.933220][T12187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2251.946672][T18347] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2251.972212][T18347] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2252.003647][T31737] vivid-001: disconnect [ 2252.011021][T18347] usb 6-1: Product: syz [ 2252.013477][T12187] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2252.043381][T31736] vivid-001: reconnect [ 2252.049696][T18347] usb 6-1: Manufacturer: syz [ 2252.050177][T12187] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2252.064115][T12187] usb 9-1: Manufacturer: syz [ 2252.073544][T12187] usb 9-1: config 0 descriptor?? [ 2252.083100][T18347] usb 6-1: SerialNumber: syz [ 2252.107836][T18347] usb 6-1: config 0 descriptor?? [ 2252.253079][T12187] rc_core: IR keymap rc-hauppauge not found [ 2252.270159][T12187] Registered IR keymap rc-empty [ 2252.284477][T12187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2252.319680][T12187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input49 [ 2252.342397][T18347] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2252.393032][T23565] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 2252.563007][T23565] usb 3-1: Using ep0 maxpacket: 16 [ 2252.592255][T23565] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2252.630823][T23565] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2252.657295][T23565] usb 3-1: Product: syz [ 2252.677500][T23565] usb 3-1: Manufacturer: syz [ 2252.736003][T23565] usb 3-1: SerialNumber: syz [ 2252.783909][T23565] usb 3-1: config 0 descriptor?? [ 2253.130405][T23565] usb 3-1: USB disconnect, device number 28 [ 2253.873665][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 2253.882966][T18347] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2253.899552][T18347] usb 6-1: USB disconnect, device number 31 [ 2254.547145][T12187] usb 9-1: USB disconnect, device number 19 [ 2254.657570][T18347] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 2255.170862][T18347] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2255.209941][T18347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2255.292402][T31778] vivid-001: disconnect [ 2255.299071][T18347] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2255.354649][T31777] vivid-001: reconnect [ 2255.500393][T18347] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2255.547744][T18347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2255.608909][T18347] usb 3-1: Product: syz [ 2255.619055][T18347] usb 3-1: Manufacturer: syz [ 2255.638041][T18347] usb 3-1: SerialNumber: syz [ 2255.697706][T18347] usb 3-1: config 0 descriptor?? [ 2255.791071][T31763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 2255.879603][T18347] usb 3-1: ucan: probing device on interface #0 [ 2255.960325][T18347] usb 3-1: ucan: invalid EP count (1) [ 2256.000573][T18347] usb 3-1: ucan: probe failed; try to update the device firmware [ 2256.143935][T31763] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2256.219177][T31763] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2256.284663][T18347] usb 3-1: USB disconnect, device number 29 [ 2256.489679][T31769] syz.5.6998 (31769): drop_caches: 2 [ 2256.884239][T31788] loop5: detected capacity change from 0 to 128 [ 2256.999274][T31788] bio_check_eod: 31 callbacks suppressed [ 2256.999293][T31788] syz.5.7004: attempt to access beyond end of device [ 2256.999293][T31788] loop5: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 2257.129010][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.129010][T31788] loop5: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 2257.180917][T31788] buffer_io_error: 17 callbacks suppressed [ 2257.180944][T31788] Buffer I/O error on dev loop5, logical block 79, lost async page write [ 2257.267052][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.267052][T31788] loop5: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 2257.305314][T31788] Buffer I/O error on dev loop5, logical block 80, lost async page write [ 2257.338536][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.338536][T31788] loop5: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 2257.414301][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.414301][T31788] loop5: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 2257.459825][T31788] Buffer I/O error on dev loop5, logical block 83, lost async page write [ 2257.525959][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.525959][T31788] loop5: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 2257.607298][T31788] Buffer I/O error on dev loop5, logical block 84, lost async page write [ 2257.617554][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.617554][T31788] loop5: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 2257.668146][T31788] syz.5.7004: attempt to access beyond end of device [ 2257.668146][T31788] loop5: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 2258.223037][T18347] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 2258.433116][T12187] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 2258.597466][T12187] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2258.619446][T18347] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 2258.651973][T18347] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2258.651997][T12187] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2258.737432][T18347] usb 4-1: Product: syz [ 2258.741872][T18347] usb 4-1: Manufacturer: syz [ 2258.754444][T12187] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2258.775069][T12187] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2258.796046][T12187] usb 9-1: Manufacturer: syz [ 2258.822135][T12187] usb 9-1: config 0 descriptor?? [ 2258.946878][T12187] rc_core: IR keymap rc-hauppauge not found [ 2258.976808][T12187] Registered IR keymap rc-empty [ 2258.993722][T12187] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2259.037752][T12187] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input50 [ 2259.272621][T31817] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 2259.620406][T18347] usb 4-1: SerialNumber: syz [ 2259.664277][T18347] usb 4-1: config 0 descriptor?? [ 2260.076255][T18347] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 2260.170303][T31822] vivid-002: disconnect [ 2260.192712][T31821] vivid-002: reconnect [ 2261.142066][T23565] usb 9-1: USB disconnect, device number 20 [ 2261.920514][T18347] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 2261.935442][T18347] usb 4-1: USB disconnect, device number 53 [ 2264.120851][T31840] loop8: detected capacity change from 0 to 40427 [ 2264.299976][T31840] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 2266.346695][T23565] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 2266.604900][T23565] usb 6-1: config index 0 descriptor too short (expected 23569, got 27) [ 2266.657219][T23565] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2266.719447][T23565] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2266.739865][T23565] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2266.758864][T23565] usb 6-1: Manufacturer: syz [ 2266.766301][T23565] usb 6-1: config 0 descriptor?? [ 2266.946219][T23565] rc_core: IR keymap rc-hauppauge not found [ 2266.952708][T23565] Registered IR keymap rc-empty [ 2266.958748][T23565] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 2266.989535][T23565] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input51 [ 2268.835596][T31899] loop8: detected capacity change from 0 to 128 [ 2268.872133][T31899] syz.8.7033: attempt to access beyond end of device [ 2268.872133][T31899] loop8: rw=2049, sector=154, nr_sectors = 6 limit=128 [ 2268.904696][T31899] syz.8.7033: attempt to access beyond end of device [ 2268.904696][T31899] loop8: rw=2049, sector=158, nr_sectors = 2 limit=128 [ 2268.940970][T31899] Buffer I/O error on dev loop8, logical block 79, lost async page write [ 2268.950122][ T30] audit: type=1800 audit(1759257603.786:5746): pid=31898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7032" name="file0" dev="fuse" ino=0 res=0 errno=0 [ 2268.951472][T31899] syz.8.7033: attempt to access beyond end of device [ 2268.951472][T31899] loop8: rw=2049, sector=160, nr_sectors = 2 limit=128 [ 2268.988175][T31899] Buffer I/O error on dev loop8, logical block 80, lost async page write [ 2269.021534][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.021534][T31899] loop8: rw=2049, sector=162, nr_sectors = 6 limit=128 [ 2269.122053][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.122053][T31899] loop8: rw=2049, sector=166, nr_sectors = 2 limit=128 [ 2269.172557][T12187] usb 6-1: USB disconnect, device number 32 [ 2269.260388][T31899] Buffer I/O error on dev loop8, logical block 83, lost async page write [ 2269.314557][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.314557][T31899] loop8: rw=2049, sector=168, nr_sectors = 2 limit=128 [ 2269.328142][T31899] Buffer I/O error on dev loop8, logical block 84, lost async page write [ 2269.343273][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.343273][T31899] loop8: rw=2049, sector=170, nr_sectors = 8 limit=128 [ 2269.358177][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.358177][T31899] loop8: rw=2049, sector=178, nr_sectors = 6 limit=128 [ 2269.462164][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.462164][T31899] loop8: rw=2049, sector=182, nr_sectors = 2 limit=128 [ 2269.492099][T31899] Buffer I/O error on dev loop8, logical block 91, lost async page write [ 2269.508405][T31899] syz.8.7033: attempt to access beyond end of device [ 2269.508405][T31899] loop8: rw=2049, sector=184, nr_sectors = 2 limit=128 [ 2269.522994][T31899] Buffer I/O error on dev loop8, logical block 92, lost async page write [ 2269.540172][T31899] Buffer I/O error on dev loop8, logical block 103, lost async page write [ 2269.553327][T31899] Buffer I/O error on dev loop8, logical block 104, lost async page write [ 2269.563452][T31899] Buffer I/O error on dev loop8, logical block 107, lost async page write [ 2269.572294][T31899] Buffer I/O error on dev loop8, logical block 108, lost async page write [ 2270.462934][T23565] usb 9-1: new full-speed USB device number 21 using dummy_hcd [ 2271.414803][T23565] usb 9-1: config 8 has an invalid interface number: 177 but max is 0 [ 2271.446243][T23565] usb 9-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 2271.482266][T23565] usb 9-1: config 8 has no interface number 0 [ 2271.533004][T23565] usb 9-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2271.577931][T23565] usb 9-1: config 8 interface 177 has no altsetting 0 [ 2271.585885][T23565] usb 9-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1 [ 2271.599612][T23565] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2271.715215][T23565] ir_toy 9-1:8.177: required endpoints not found [ 2272.033283][T20610] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 2272.379578][T28286] usb 9-1: USB disconnect, device number 21 [ 2273.043176][T20610] usb 3-1: config 0 has no interfaces? [ 2273.051869][T20610] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 2273.061760][T20610] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2273.070005][T20610] usb 3-1: Product: syz [ 2273.081998][T20610] usb 3-1: Manufacturer: syz [ 2273.087049][T20610] usb 3-1: SerialNumber: syz [ 2273.095115][T20610] usb 3-1: config 0 descriptor?? [ 2273.323038][T28286] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 2273.635202][T28286] usb 9-1: config index 0 descriptor too short (expected 23569, got 27) [ 2273.635243][T28286] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2273.636282][T28286] usb 9-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 2273.636304][T28286] usb 9-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 2273.636321][T28286] usb 9-1: Manufacturer: syz [ 2273.638295][T28286] usb 9-1: config 0 descriptor?? [ 2273.695516][T28286] rc_core: IR keymap rc-hauppauge not found [ 2273.695533][T28286] Registered IR keymap rc-empty [ 2273.696318][T28286] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 2273.697674][T28286] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input52 [ 2276.099860][T28286] usb 9-1: USB disconnect, device number 22 [ 2276.359052][T23565] usb 3-1: USB disconnect, device number 30 [ 2277.994685][T23565] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 2278.172978][T23565] usb 3-1: Using ep0 maxpacket: 16 [ 2278.220557][T23565] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2278.229727][T23565] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2278.255416][T23565] usb 3-1: Product: syz [ 2278.260386][T23565] usb 3-1: Manufacturer: syz [ 2278.265532][T23565] usb 3-1: SerialNumber: syz [ 2278.293875][T23565] usb 3-1: config 0 descriptor?? [ 2278.539460][T23565] usb 3-1: USB disconnect, device number 31 [ 2279.219357][T31979] syzkaller0: entered promiscuous mode [ 2279.227215][T31979] syzkaller0: entered allmulticast mode [ 2279.747206][T32000] netlink: 36 bytes leftover after parsing attributes in process `syz.5.7061'. [ 2279.817293][T32000] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7061'. [ 2280.102983][T28286] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 2280.266377][T28286] usb 2-1: Using ep0 maxpacket: 16 [ 2280.305990][T28286] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2280.370198][T28286] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2280.410707][T28286] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2280.443536][T28286] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 2280.493490][T28286] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2280.549270][T28286] usb 2-1: config 0 descriptor?? [ 2282.533074][T12187] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 2282.666118][ T30] audit: type=1326 audit(1759257617.506:5747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2282.814199][T12187] usb 9-1: Using ep0 maxpacket: 16 [ 2282.872925][T12187] usb 9-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2282.891939][ T30] audit: type=1326 audit(1759257617.536:5748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2282.947941][T12187] usb 9-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2282.996720][T12187] usb 9-1: Product: syz [ 2283.020103][T12187] usb 9-1: Manufacturer: syz [ 2283.041393][ T30] audit: type=1326 audit(1759257617.546:5749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.073030][T12187] usb 9-1: SerialNumber: syz [ 2283.104952][T12187] usb 9-1: config 0 descriptor?? [ 2283.244077][ T30] audit: type=1326 audit(1759257617.546:5750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.345159][ T30] audit: type=1326 audit(1759257617.546:5751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.508444][ T30] audit: type=1326 audit(1759257617.546:5752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.607304][ T30] audit: type=1326 audit(1759257617.546:5753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.616190][T23565] usb 9-1: USB disconnect, device number 23 [ 2283.733404][ T30] audit: type=1326 audit(1759257617.546:5754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.857736][ T30] audit: type=1326 audit(1759257617.556:5755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2283.973020][ T30] audit: type=1326 audit(1759257617.556:5756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32023 comm="syz.2.7066" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3efd78eec9 code=0x7ffc0000 [ 2284.109405][T28286] usbhid 2-1:0.0: can't add hid device: -71 [ 2284.183043][T28286] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2284.255149][T28286] usb 2-1: USB disconnect, device number 35 [ 2286.372936][T23565] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 2286.563188][T23565] usb 3-1: Using ep0 maxpacket: 16 [ 2286.587399][T23565] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 2286.617078][T23565] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 2286.642945][T23565] usb 3-1: Product: syz [ 2286.647143][T23565] usb 3-1: Manufacturer: syz [ 2286.672454][T23565] usb 3-1: SerialNumber: syz [ 2286.689350][T23565] usb 3-1: config 0 descriptor?? [ 2286.958986][T28286] usb 3-1: USB disconnect, device number 32 [ 2288.212937][T23565] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 2288.376655][T23565] usb 9-1: Using ep0 maxpacket: 16 [ 2288.389871][T23565] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2288.410283][T23565] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2288.463435][T23565] usb 9-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 2288.491130][T23565] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2288.554061][T23565] usb 9-1: config 0 descriptor?? [ 2288.652958][T28286] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 2288.654869][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 2288.843201][T28286] usb 3-1: Using ep0 maxpacket: 32 [ 2288.964927][T23565] ntrig 0003:1B96:0008.001B: nested delimiters [ 2288.985875][T23565] ntrig 0003:1B96:0008.001B: item 0 1 2 10 parsing failed [ 2289.002352][T23565] ntrig 0003:1B96:0008.001B: parse failed [ 2289.016494][T23565] ntrig 0003:1B96:0008.001B: probe with driver ntrig failed with error -22 [ 2289.133246][T28286] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0021, bcdDevice=29.40 [ 2289.153236][T28286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2289.167321][T32077] netlink: 4 bytes leftover after parsing attributes in process `syz.8.7080'. [ 2289.193239][T32077] netlink: 32 bytes leftover after parsing attributes in process `syz.8.7080'. [ 2289.254302][T23565] usb 9-1: USB disconnect, device number 24 [ 2289.277174][T28286] usb 3-1: config 0 descriptor?? [ 2289.715355][T28286] dvb-usb: found a 'Elgato EyeTV DTT' in warm state. [ 2289.746663][T28286] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 2289.819382][T28286] dvbdev: DVB: registering new adapter (Elgato EyeTV DTT) [ 2289.848635][T28286] usb 3-1: media controller created [ 2289.922658][T28286] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 2290.033128][T32094] dib0700: tx buffer length is larger than 4. Not supported. [ 2290.313276][T32108] netlink: 36 bytes leftover after parsing attributes in process `syz.8.7088'. [ 2291.258076][T28286] DVB: Unable to find symbol dib7000p_attach() [ 2291.274706][T28286] dvb-usb: no frontend was attached by 'Elgato EyeTV DTT' [ 2291.495839][T28286] rc_core: IR keymap rc-dib0700-rc5 not found [ 2291.663109][T12187] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 2291.704257][T28286] Registered IR keymap rc-empty [ 2291.716519][T28286] dvb-usb: could not initialize remote control. [ 2291.742190][T28286] dvb-usb: Elgato EyeTV DTT successfully initialized and connected. [ 2291.863044][T12187] usb 2-1: Using ep0 maxpacket: 16 [ 2291.870356][T12187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2291.896653][T12187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2291.922506][T12187] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 2291.950090][T12187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2291.973560][T12187] usb 2-1: config 0 descriptor?? [ 2292.861830][T32115] ------------[ cut here ]------------ [ 2292.867522][T32115] usb 3-1: BOGUS control dir, pipe 80002180 doesn't match bRequestType c0 [ 2292.879371][T28286] usb 3-1: USB disconnect, device number 33 [ 2292.888198][T32115] WARNING: drivers/usb/core/urb.c:414 at usb_submit_urb+0x114d/0x18b0, CPU#0: syz.1.7089/32115 [ 2292.898836][T32115] Modules linked in: [ 2292.903580][T32115] CPU: 0 UID: 0 PID: 32115 Comm: syz.1.7089 Not tainted syzkaller #0 PREEMPT(full) [ 2292.913169][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2292.923631][T32115] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2292.929331][T32115] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 a0 de 54 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 12 4f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2292.949397][T32115] RSP: 0018:ffffc9000413f820 EFLAGS: 00010246 [ 2292.955570][T32115] RAX: c322d72a1c93ac00 RBX: ffff8880606a8b00 RCX: 0000000000080000 [ 2292.964093][T32115] RDX: ffffc9001184e000 RSI: 0000000000003fb3 RDI: 0000000000003fb4 [ 2292.972131][T32115] RBP: 1ffff1100fbfe6fc R08: 0000000000000003 R09: 0000000000000004 [ 2292.981861][T32115] R10: dffffc0000000000 R11: fffffbfff1c3a650 R12: ffff888064c20100 [ 2292.990141][T32115] R13: ffff88807dff37e0 R14: 0000000080002180 R15: ffff888041a62a20 [ 2292.998281][T32115] FS: 00007f57aaef16c0(0000) GS:ffff8881259fc000(0000) knlGS:0000000000000000 [ 2293.007610][T32115] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2293.014256][T32115] CR2: 00007fe361b2d841 CR3: 0000000061852000 CR4: 00000000003526f0 [ 2293.022308][T32115] DR0: fffffffffffffff1 DR1: 0000000000000000 DR2: 0000000000000000 [ 2293.030437][T32115] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2293.038711][T32115] Call Trace: [ 2293.042012][T32115] [ 2293.045015][T32115] usb_start_wait_urb+0x114/0x4c0 [ 2293.050072][T32115] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2293.055839][T32115] usb_control_msg+0x232/0x3e0 [ 2293.060649][T32115] dib0700_i2c_xfer+0xba7/0xf70 [ 2293.065930][T32115] __i2c_transfer+0x874/0x2170 [ 2293.070774][T32115] ? lockdep_hardirqs_on+0x9c/0x150 [ 2293.076184][T32115] ? __pfx___i2c_transfer+0x10/0x10 [ 2293.081427][T32115] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2293.087005][T32115] ? i2c_transfer+0x120/0x3a0 [ 2293.091759][T32115] i2c_transfer+0x25b/0x3a0 [ 2293.096634][T32115] ? __pfx_i2c_transfer+0x10/0x10 [ 2293.101707][T32115] ? _copy_from_user+0x94/0xb0 [ 2293.106571][T32115] i2cdev_ioctl_rdwr+0x460/0x740 [ 2293.111549][T32115] i2cdev_ioctl+0x64b/0x7f0 [ 2293.116237][T32115] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2293.121336][T32115] ? __fget_files+0x3a0/0x420 [ 2293.126381][T32115] ? __fget_files+0x2a/0x420 [ 2293.131015][T32115] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2293.136117][T32115] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2293.141188][T32115] __se_sys_ioctl+0xfc/0x170 [ 2293.146490][T32115] do_syscall_64+0xfa/0xfa0 [ 2293.151131][T32115] ? lockdep_hardirqs_on+0x9c/0x150 [ 2293.156710][T32115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.162860][T32115] ? clear_bhb_loop+0x60/0xb0 [ 2293.167589][T32115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.173569][T32115] RIP: 0033:0x7f57a9f8eec9 [ 2293.178035][T32115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2293.198012][T32115] RSP: 002b:00007f57aaef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.206515][T32115] RAX: ffffffffffffffda RBX: 00007f57aa1e5fa0 RCX: 00007f57a9f8eec9 [ 2293.214643][T32115] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 2293.222745][T32115] RBP: 00007f57aa011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2293.231206][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2293.239288][T32115] R13: 00007f57aa1e6038 R14: 00007f57aa1e5fa0 R15: 00007ffd8733afb8 [ 2293.247410][T32115] [ 2293.250459][T32115] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2293.257745][T32115] CPU: 0 UID: 0 PID: 32115 Comm: syz.1.7089 Not tainted syzkaller #0 PREEMPT(full) [ 2293.267117][T32115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2293.277176][T32115] Call Trace: [ 2293.280557][T32115] [ 2293.283490][T32115] dump_stack_lvl+0x99/0x250 [ 2293.288102][T32115] ? __asan_memcpy+0x40/0x70 [ 2293.292715][T32115] ? __pfx_dump_stack_lvl+0x10/0x10 [ 2293.297921][T32115] ? __pfx__printk+0x10/0x10 [ 2293.302530][T32115] vpanic+0x237/0x6d0 [ 2293.306528][T32115] ? __pfx_vpanic+0x10/0x10 [ 2293.311208][T32115] ? is_bpf_text_address+0x292/0x2b0 [ 2293.316518][T32115] ? is_bpf_text_address+0x26/0x2b0 [ 2293.321863][T32115] panic+0xb9/0xc0 [ 2293.325644][T32115] ? __pfx_panic+0x10/0x10 [ 2293.330094][T32115] __warn+0x334/0x4c0 [ 2293.334190][T32115] ? usb_submit_urb+0x114d/0x18b0 [ 2293.339260][T32115] ? usb_submit_urb+0x114d/0x18b0 [ 2293.344335][T32115] report_bug+0x2be/0x4f0 [ 2293.348783][T32115] ? usb_submit_urb+0x114d/0x18b0 [ 2293.353860][T32115] ? usb_submit_urb+0x114d/0x18b0 [ 2293.359032][T32115] ? usb_submit_urb+0x114f/0x18b0 [ 2293.364191][T32115] handle_bug+0x84/0x160 [ 2293.368496][T32115] exc_invalid_op+0x1a/0x50 [ 2293.373111][T32115] asm_exc_invalid_op+0x1a/0x20 [ 2293.378067][T32115] RIP: 0010:usb_submit_urb+0x114d/0x18b0 [ 2293.383755][T32115] Code: df 0f b6 44 05 00 84 c0 0f 85 2a 06 00 00 45 0f b6 45 00 48 c7 c7 a0 de 54 8c 48 8b 34 24 4c 89 fa 44 89 f1 e8 64 12 4f fa 90 <0f> 0b 90 90 49 bf 00 00 00 00 00 fc ff df e9 95 f2 ff ff 89 e9 80 [ 2293.403468][T32115] RSP: 0018:ffffc9000413f820 EFLAGS: 00010246 [ 2293.409559][T32115] RAX: c322d72a1c93ac00 RBX: ffff8880606a8b00 RCX: 0000000000080000 [ 2293.417543][T32115] RDX: ffffc9001184e000 RSI: 0000000000003fb3 RDI: 0000000000003fb4 [ 2293.425531][T32115] RBP: 1ffff1100fbfe6fc R08: 0000000000000003 R09: 0000000000000004 [ 2293.433598][T32115] R10: dffffc0000000000 R11: fffffbfff1c3a650 R12: ffff888064c20100 [ 2293.441575][T32115] R13: ffff88807dff37e0 R14: 0000000080002180 R15: ffff888041a62a20 [ 2293.449581][T32115] usb_start_wait_urb+0x114/0x4c0 [ 2293.454643][T32115] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 2293.460236][T32115] usb_control_msg+0x232/0x3e0 [ 2293.465032][T32115] dib0700_i2c_xfer+0xba7/0xf70 [ 2293.469942][T32115] __i2c_transfer+0x874/0x2170 [ 2293.474730][T32115] ? lockdep_hardirqs_on+0x9c/0x150 [ 2293.480129][T32115] ? __pfx___i2c_transfer+0x10/0x10 [ 2293.485354][T32115] ? rt_mutex_lock_nested+0x15e/0x1e0 [ 2293.490737][T32115] ? i2c_transfer+0x120/0x3a0 [ 2293.495423][T32115] i2c_transfer+0x25b/0x3a0 [ 2293.499958][T32115] ? __pfx_i2c_transfer+0x10/0x10 [ 2293.505011][T32115] ? _copy_from_user+0x94/0xb0 [ 2293.509792][T32115] i2cdev_ioctl_rdwr+0x460/0x740 [ 2293.514761][T32115] i2cdev_ioctl+0x64b/0x7f0 [ 2293.519281][T32115] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2293.524328][T32115] ? __fget_files+0x3a0/0x420 [ 2293.529017][T32115] ? __fget_files+0x2a/0x420 [ 2293.533673][T32115] ? bpf_lsm_file_ioctl+0x9/0x20 [ 2293.538623][T32115] ? __pfx_i2cdev_ioctl+0x10/0x10 [ 2293.543657][T32115] __se_sys_ioctl+0xfc/0x170 [ 2293.548268][T32115] do_syscall_64+0xfa/0xfa0 [ 2293.552778][T32115] ? lockdep_hardirqs_on+0x9c/0x150 [ 2293.557989][T32115] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.564063][T32115] ? clear_bhb_loop+0x60/0xb0 [ 2293.568750][T32115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2293.574732][T32115] RIP: 0033:0x7f57a9f8eec9 [ 2293.579234][T32115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2293.598846][T32115] RSP: 002b:00007f57aaef1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2293.607265][T32115] RAX: ffffffffffffffda RBX: 00007f57aa1e5fa0 RCX: 00007f57a9f8eec9 [ 2293.615245][T32115] RDX: 00002000000001c0 RSI: 0000000000000707 RDI: 0000000000000004 [ 2293.623217][T32115] RBP: 00007f57aa011f91 R08: 0000000000000000 R09: 0000000000000000 [ 2293.631198][T32115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2293.639176][T32115] R13: 00007f57aa1e6038 R14: 00007f57aa1e5fa0 R15: 00007ffd8733afb8 [ 2293.647257][T32115] [ 2293.650655][T32115] Kernel Offset: disabled [ 2293.654995][T32115] Rebooting in 86400 seconds..