last executing test programs: 29m9.153758559s ago: executing program 3 (id=188): prctl$PR_SVE_GET_VL(0x33, 0x3b2b) pipe2$9p(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c80)={{r3}, &(0x7f0000001c00), &(0x7f0000001c40)=r4}, 0x20) mount$9p_fd(0x0, 0x0, &(0x7f00000001c0), 0x480, &(0x7f00000002c0)) lstat(0x0, 0x0) getgroups(0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) lseek(0xffffffffffffffff, 0x5, 0x1) 29m7.886847871s ago: executing program 3 (id=192): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000005700)={{r3, 0xffffffffffffffff}, &(0x7f0000005680), &(0x7f00000056c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) socket$inet_udplite(0x2, 0x2, 0x88) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x3938700}, {0x0, 0x3938700}}, 0x0) timer_create(0x0, &(0x7f0000000180)={0x0, 0x13}, &(0x7f0000000240)) 29m6.490883665s ago: executing program 3 (id=195): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs(0x0, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000680), 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x18) r6 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r6, &(0x7f0000000640)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sys_enter\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4080000400000006110540000000000a60000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100003020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r7, 0x0, 0x14, 0xe80, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x3f) 29m5.225496372s ago: executing program 3 (id=196): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f00000001c0)={[{@delalloc}, {@nombcache}, {@barrier}, {@dioread_lock}, {@stripe={'stripe', 0x3d, 0x8}}, {@resgid}, {@data_err_ignore}, {@jqfmt_vfsv0}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000001600)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) syz_open_dev$vcsn(&(0x7f00000000c0), 0xeab2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$cgroup(0x0, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000100)) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) setpriority(0x2, 0x0, 0x2) ioctl$FS_IOC_RESVSP(r1, 0x40305839, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3fffffff404}) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) 29m3.334205436s ago: executing program 3 (id=204): mmap(&(0x7f0000b2b000/0x1000)=nil, 0x1000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) read(r1, &(0x7f0000000440)=""/153, 0x99) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, r6) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) 29m1.99492725s ago: executing program 3 (id=209): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x3a) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xb701, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount$pvfs2(0x0, 0x0, 0x0, 0xa02003, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 29m1.349830335s ago: executing program 32 (id=209): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f000000ac40)="$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") ioctl$BTRFS_IOC_QUOTA_CTL(r0, 0xc0109428, 0x0) chdir(&(0x7f0000000040)='./file0\x00') syz_mount_image$hfsplus(&(0x7f0000001140), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x66b, &(0x7f0000001180)="$eJzs3c1vHGcdB/DvbDZ2Ni3BTZM2oEq1GgkQFolf5IK5YBBCPlSoKgfOVuI0VjZpsV3kVog6vF576B9QDr4gTkjcIxUOXODWG/KxEhKXXjCnRTuetdfrl66TxrtpP59o93lmnplnfs/vmZl9saIN8IW1MJH6gxRZmHhlvb28tTnT3NqcudupJxlNspHUk9SSFP9ttVofJvNJsdtN0VMe8P7y3GsffbL18c5SvXqU29eO269Htd1Gz+qNzrrxJGeq8hHs6+/GI/dX7EY+n+RqVcLAnU3S2udnf396t6VL47C9z51KjMDjVey8bh4wlpyvLvT2+4DOK2/tdKPr32if2/W+gwAAAIAnTT+fgb+8ne2sFxdOIRwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4XNjY+/3/onrUOvXxFJ3f/x+p1qWqD5cXT7b5g8cVBwAAAAAAAACcohe3s531XOgst4ryb/4vlQuXyuen8lZWs5SVXMt6FrOWtaxkKslYV0cj64traytTfew5feie058S6GhVNj6bcQMAAAAAAADA58yvsrD3938AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgGRXJmp0hxv2v1WGr1JOeSjLRXbCT/7NSfZA8GHQAAAACcgtFkO+u50FluFbmU5LnyO4BzeSv3spblrKWZpdwsvxfY+dRf29qcaW5tztxtPw72+/3/nCiMssfsfPdw+JGvlFs0civL5ZpruZE30szN1Mo9265U8XR67Ynrfjum4nuVPiO7WZXtkb9XlQe8e6LBHuWEX6aMlRk5u5uRySq2djae6czM4TN0wtnpPdJUarvBXuo50sj+wTxUzs9XZXs8vzsq5wPRm4nprrPvueNznnz9L3/66WRVH54h9edMVbbK58bBTMx0ZeL5fjJxu3nvzu1bqxNPWiYOmCwzcXl3eSE/yk8ykfG8mpUs5+dZzFqWMp4flrXFavKLrkv+iEzN71t69dMiGanO0J3JOllML5X7Xshyfpw3cjNLebn8N52pfDuzmc1c1wxfPn6Gy6u+tu+q35vm1pcODf7qN6pKI8nvq3I4tPP6TFdeu++5Y2Vb95q9LF3sI0snvDfWv1pV2sf4dVUOh95MTHVl4tnjM/GH8ray2rx3Z+X24pv9He7ie1WlfWb9NhkfnhtJ+3y52J6scmn/2dFue/bQtqmy7dJuW+1A2+Xdtp0rdePIK3Wkeg93sKfpsu35Q9tmyrYrXW2Hvd8CYOid/+b5kca/G/9ofND4TeN245VzPxj9zugLIzn717PfrU+e+VrtheLP+SC/3Pv8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPLzVt9+5s9hsLq30VFqt1rtHNPVZqVdHeMjdH6GS8X891T7yIU2dnzM7xXi+8nRyemMf1sr/Wq1WtaY4Yps//m1oEtWqDEXqBlQZ3D0JOB3X1+6+eX317Xe+tXx38fWl15fuzc3Ozk3Ozb48c/3WcnNpcud50FECj8Pei/6gIwEAAAAAAAAAAAD6dRr/nWDQYwQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACebAsTqT9IkanJa5Pt5a3NmWb70anvbVlPUktS/CIpPkzmi6phrKu74qjjvL8899pHn2x9vNdXvbN97bj9+rNRPTKe5MxOef+z6u9GVR6rOG4Ixe4I55NcrUoYuP8HAAD//xokBkA=") write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x3a) r1 = syz_open_procfs$namespace(0x0, 0x0) ioctl$BTRFS_IOC_ADD_DEV(r1, 0xb701, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x0, 0x0) mount$pvfs2(0x0, 0x0, 0x0, 0xa02003, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0x0) ioctl$BTRFS_IOC_DEFRAG_RANGE(r2, 0x40309410, 0x0) 27m9.446923266s ago: executing program 6 (id=522): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x75a5, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup2(r5, r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$inet(r10, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 27m7.147440425s ago: executing program 6 (id=526): syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xb7, &(0x7f0000000440)="$eJzs1y9OA0EUBvDHgoCgMIQEgV7DHTgDJwAEAgxBQZr0Cr1Ir9IjrK+oWNs0fc3sbtI/N2j7+4mZfN9k3Ih5s+X0cVJH5Dgi64efeW79/v1/XUVZ376Dk1TFTbdfR8TTXckRi5f+7CL63LSjj6a9PLya+X6bWR4OAABwFKp43s/rHIrVMAV24T5eP8uPf6cCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOA+bAAAA//8wajXB") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$incfs(0xffffffffffffff9c, &(0x7f0000000640)='.log\x00', 0xa5d, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x275a, 0x0) 27m6.156216332s ago: executing program 6 (id=534): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x94) r1 = dup(r0) bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = dup(r2) bind$unix(r3, &(0x7f0000000100)=@abs={0xa, 0x2}, 0x6e) 27m5.717115666s ago: executing program 6 (id=539): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000001780)=ANY=[@ANYBLOB="0200000004"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r4}, 0x18) r5 = syz_io_uring_setup(0x75a5, 0x0, 0x0, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) r7 = dup2(r5, r6) io_uring_register$IORING_UNREGISTER_FILES(r7, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r8, &(0x7f0000002000)=""/102400, 0x19000) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 27m4.339030943s ago: executing program 6 (id=542): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r1}, 0x10) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xffffd000) write$binfmt_script(r0, &(0x7f0000000100), 0x10) 27m3.109983735s ago: executing program 6 (id=547): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 26m48.041399383s ago: executing program 33 (id=547): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) socket$netlink(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) pipe2$9p(0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$inet(0xffffffffffffffff, 0x0, 0x94) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, 0x0, 0x0) lgetxattr(0x0, 0x0, 0x0, 0x0) 25m33.610058625s ago: executing program 4 (id=1087): r0 = signalfd(0xffffffffffffffff, &(0x7f0000000140)={[0x9]}, 0x8) syz_io_uring_submit(0x0, 0x0, &(0x7f00000001c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x20, 0x3, r0}) io_uring_enter(0xffffffffffffffff, 0x353, 0x0, 0x0, 0x0, 0x3b) signalfd(r0, &(0x7f0000002340), 0x8) 25m33.403871254s ago: executing program 4 (id=1089): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) fcntl$lock(r2, 0x6, &(0x7f0000000040)={0x1, 0x2, 0x9, 0xffffffffffffffff, r0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) r5 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0xfffffffe}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x4}, 0x0, 0x8000}}) 25m31.733317559s ago: executing program 4 (id=1092): unshare(0x26060400) r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x33, 0x0, 0x0) 25m31.446968836s ago: executing program 4 (id=1095): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000100)={[{@errors_remount}, {@namecase}, {@gid={'gid', 0x3d, 0xee00}}, {@errors_remount}, {@iocharset={'iocharset', 0x3d, 'euc-jp'}}, {@errors_continue}, {@gid}, {@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x3ff}}, {@dmask}]}, 0x1, 0x1534, &(0x7f0000000380)="$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") mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0) 25m30.967127083s ago: executing program 4 (id=1100): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="30003300c0000000ffffffffffff080211000000505050505050000000008c10000031d48cd3fb111920f7073ef42f2f080057"], 0x54}}, 0x0) 25m29.002999037s ago: executing program 4 (id=1110): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071129e0000000000bc2010000000800095a95e0000000000"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 25m28.42186913s ago: executing program 34 (id=1110): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000071129e0000000000bc2010000000800095a95e0000000000"], 0x0, 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 7m10.668450826s ago: executing program 7 (id=5016): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7m6.740291501s ago: executing program 7 (id=5022): syz_usb_connect$sierra_net(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x43978451d8f6fedb, 0x2, 0x40, 0x2, 0x1a, 0xfe}, {0x9, 0x5, 0x7, 0x2, 0x40, 0xc, 0x77, 0x2}, {0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0xfd, 0x32}}}}}}]}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000"], 0x70}, 0x1, 0x0, 0x0, 0x4008880}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e1f}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet6(0xa, 0x1, 0x84) bind$inet6(r5, &(0x7f0000ed3fe4)={0xa, 0x4e20, 0x0, @loopback, 0xfffffeff}, 0x1c) shutdown(r5, 0x0) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r5) 7m3.219020285s ago: executing program 7 (id=5032): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) connect$unix(0xffffffffffffffff, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 7m2.640648912s ago: executing program 7 (id=5034): socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, 0x0, &(0x7f0000000180), 0x4080, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}}) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r2, &(0x7f00000005c0)={0x2020}, 0x2020) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002540)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000340)=ANY=[@ANYRESDEC=r3, @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000020000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',grou', @ANYRESOCT=0x0]) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r5 = getpid() fcntl$setstatus(r3, 0x4, 0x40000) syz_pidfd_open(r5, 0x0) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r6, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, 0x0, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x4840) fspick(r2, &(0x7f0000000080)='./file0\x00', 0x1) close_range(r4, 0xffffffffffffffff, 0x0) 7m0.542876294s ago: executing program 7 (id=5038): r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0xfffffef2, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{0x0, 0x2, 0x0, 0xa}, {0x90010022}]}, 0x94) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000008c0)=r2, 0x4) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x5}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000300)="2705020029ff14000600002fb96dbcf706060000170008005f45f491bdd54ec5ff1144ee162fd4b8bf7256da", 0x2c}], 0x1}, 0x20008010) 7m0.3084627s ago: executing program 7 (id=5039): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x5) 6m45.170001167s ago: executing program 35 (id=5039): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x40000000}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = syz_open_procfs(0x0, &(0x7f0000002340)='mountstats\x00') mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) pread64(r3, &(0x7f0000002240)=""/237, 0xed, 0x5) 36.794353888s ago: executing program 0 (id=5973): syz_open_procfs(0x0, &(0x7f00000000c0)='mountinfo\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000040)=0x32) 28.620218814s ago: executing program 0 (id=5992): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r1 = syz_open_dev$MSR(&(0x7f0000000380), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r2, 0xc0105500, &(0x7f0000000040)={0x0, 0x3, 0x1, 0x3, 0x0, 0x7, 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x701203, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x97266888fcd52d3b, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@mcast2, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x9, 0xa00, 0x40800000000000, 0x800000400000002}, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) syz_open_dev$dri(&(0x7f0000000240), 0x0, 0x20001) close(r6) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) 25.642921723s ago: executing program 0 (id=5998): syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) pipe(0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 24.254441643s ago: executing program 0 (id=6002): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000000)=[{&(0x7f0000000180)=""/181, 0xb5}], 0x1, 0x3c, 0x4) 22.784800415s ago: executing program 0 (id=6005): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r4 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x2000000, 0x3a6}, 0x0, &(0x7f0000000200)=0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}, {0x6}}}, 0x24}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_io_uring_submit(0x0, r5, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r3, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001"], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r4, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 19.990353875s ago: executing program 8 (id=6008): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getegid() sendmmsg$unix(r2, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4}}], 0x1, 0x0) 19.353186362s ago: executing program 8 (id=6011): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sigaltstack(&(0x7f0000000480)={&(0x7f0000004000)=""/4126, 0x80000001, 0x101e}, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000000080)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)=0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) timer_settime(r2, 0x1, &(0x7f0000000100)={{}, {0x0, 0x989680}}, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0xa00202, 0x10) ioctl$SOUND_PCM_READ_RATE(0xffffffffffffffff, 0x80045002, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0xa1) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 19.234080859s ago: executing program 2 (id=6012): r0 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0x7fbfbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0xd, 0x0, 0x18) 17.340376692s ago: executing program 2 (id=6017): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 17.274978015s ago: executing program 5 (id=6018): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x268, 0x1, 0x5, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x9c}, 0x0, 0x1, 0x0, 0x8, 0x1, 'syz1\x00', "e9f974125b4c20d52eaf0882aae9e0c3311b93b334410d62c80da3e6cb3668d3", "be775d0ae6d8e55f33a51aa6f4547afbfb441ebac9c9af83bf0ec9e214fbe8d2", [{0x9, 0x2, {0x3, 0x1}}, {0xfff, 0x9, {0x1, 0xffffffff}}, {0x40, 0x6, {0x2, 0x8}}, {0x7, 0xfff8, {0x2, 0x7}}, {0x9, 0x39, {0x1, 0x3}}, {0x2, 0x40, {0x0, 0x5}}, {0x80, 0x10, {0x3, 0x3}}, {0x3, 0xd, {0x1, 0x9}}, {0x8, 0x2, {0x1, 0x6}}, {0x3, 0x7, {0x1, 0x9}}, {0x6, 0x8, {0x3, 0x6}}, {0x6, 0x1, {0x0, 0xa}}, {0x2, 0x8, {0x0, 0xff}}, {0xff, 0x3, {0x1}}, {0x7, 0x5, {0x0, 0x6}}, {0x70, 0x7f, {0x3}}, {0x4, 0x4, {0x2, 0x65}}, {0x7, 0x2, {0x1, 0x6}}, {0x2, 0x8, {0x0, 0x6}}, {0x0, 0x8, {0x2, 0x1eb}}, {0x3, 0xf3, {0x1, 0x40}}, {0x5, 0xf38, {0x0, 0x8}}, {0x7, 0xe, {0x1, 0x8}}, {0x8, 0x401, {0x2, 0x9}}, {0x1, 0x5, {0x0, 0xc}}, {0x0, 0x4, {0x0, 0x4d22}}, {0x10, 0x2, {0x0, 0x620bb539}}, {0x1, 0x7, {0x3, 0x5}}, {0x6, 0x3, {0x0, 0x9}}, {0x8, 0x7dc8, {0x3, 0x6}}, {0x75, 0x4}, {0x9, 0xe, {0x2, 0x4}}, {0x100, 0x6, {0x0, 0x7}}, {0x9, 0x9, {0x1, 0x9}}, {0x1, 0x401, {0x2, 0xb19}}, {0x26d, 0x4, {0x0, 0x2}}, {0x9, 0x81, {0x3, 0x400}}, {0x5, 0x0, {0x3, 0x6}}, {0xa617, 0x7b, {0x0, 0x8}}, {0x3, 0xff, {0x2, 0x7ff}}]}}}]}, 0x268}, 0x1, 0x0, 0x0, 0x40}, 0x4000) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000003c0)={&(0x7f0000000380)=[0x0], 0x1, 0x800}) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71033000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x0, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0xa0044d07, 0x0) 17.051330408s ago: executing program 0 (id=6019): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 15.525609934s ago: executing program 5 (id=6022): r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100007e9eb4104c053800f516010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000000)={0x2c, 0x0, 0x0, &(0x7f00000007c0)={0x0, 0x8, 0x1, 0x42}, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000000740)={0x1c, &(0x7f0000000280)={0x40}, 0x0, 0x0}) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) dup3(r2, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000500)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e21, 0x8, @mcast2, 0x2}}}, 0x30) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r7, 0x0, 0xf3a, 0x0) splice(r4, 0x0, r7, 0x0, 0x80, 0x4) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) 15.448233691s ago: executing program 2 (id=6023): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) setresgid(0xee00, 0xee01, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = getegid() sendmmsg$unix(r2, &(0x7f0000005200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c, 0x1, 0x2, {r0, 0xee01, r3}}}, @cred={{0x1c, 0x1, 0x2, {r1, 0x0, 0xee01}}}, @cred={{0x1c, 0x1, 0x2, {r0}}}], 0x60, 0x4}}], 0x1, 0x0) 15.359710987s ago: executing program 9 (id=6024): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) getrlimit(0x6, 0x0) bind$tipc(0xffffffffffffffff, 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f0000006300)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x34014c40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x80101, 0x101) ioctl$BTRFS_IOC_ADD_DEV(r1, 0x5000940a, 0x0) 15.181682795s ago: executing program 1 (id=6025): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="620af8ffa1dc0021bfa100000000000007010000f8ffffffb702000007000000bd120000000000008500000010000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24561f1b2607995daa56f151905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64b751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07372c29184ff7f4a7c0000070000006056feb4cc664c0af9360a1f7a5e6b607130c89f18c0c1088d8b8588d72ec29c48f0af5f2d9f51c4b45e0000000000000401d01aa27ae8b09e00e79ab20b0b8ed8fb7a68af2ad0810000000000006fa03c6468978089b302d7ff6023cdcedb5e0125ebbcebdde510cb2364149215108337719acd97cfa107d40224edc5465ad32b77a74e802a0dc6bf25cca242bc6099ad2300000480006ef6c1ff0900000000000010c63a949e8b7955394ffaff03000000000000ab87b1bfeda7be586602d985430cea080000000000000026abfb0767042361448279b05d96a703a660581eecdbf5bcd3de227a167ca17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9b081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b6c7632d5933a1c1fa5605bd7603f2ba2a790d62d6faec2fed44da4928b30142ba1fde5c5d50b83bae645ffa4997da9c77af4c0cb97fca585ec6bf58351d578be00d952aab9c71764b0a8a7583c90b3433b809bdb9fbd48fc877505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223d8d9e86c5ea06d108d8f80a0eb4fa39f6b5c02e6d6d90756ff578f57000000009700cf0b4b8bc229413300000000000000000003000000000000000000000000001000000000559711e6e8fcffffffffffffffb2d02edc3e01dd271c896249ed85b980680b09000000000f0000169cdcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffffd897ef3b7cda42f93d53046da21b40216e14ba2d6af8656b01e17addaedab25b30002abbba7fa725f38400be7c1fb8f72cd317902f19e385be9e48dccf1f9f3282830689da6b53b263339863297771d74732d400003341bf4a00fc9fec2271ff01589646efd1cf870cd7bb2366fde4a594290c405ff870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d30a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78249788f11f761038b75d4fe32b561d46ea3abe0fa7956488bef241875f3b4b6ab7929a57affe760e797724f4fce1093b62d7e8c7123d890decacec55bf404e4e1f74b7eed82571be54c72d978cf906df0042e36acd37d7f9e109f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c70600000000000000b7561301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c542c9062ece84c99a061887a20639b41c8c12ee86c50804042b3eac1f870b136345cf67ca3fb5aac518a75f9e7d7101da841735e186c489b3a06fb99e0347f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f91e358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e669261192899d4562db0e22d564ae09bb6d163118e401e024fd452277c3887d6116c6cc9d8046c216c1f895778cb26e22a2a998de44aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f154772f514216bdf57d2a40d40b51ab67903ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99a3594191e104d417e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1594e32409e2a3bce109b6000000000000a1fec9000000d694210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137ab79a404abde7750898b59270bb29b81367ac91bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f00fb8191bbab2dc591dda61f0868afc4294859323e7a45319f18101288a0268893373750d1a8fe64680b0a3fc22dd704e4214d00000000d6c98cd1a9fbe1e7d58c08acaf30065b928a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ce21d69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821a00e8c5c39609ff854356cb490000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466ac96e0d0b3bc19faa5449209b085f3c334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c471c784ae7da7eaa69eb7f7f80572fdd11bb1d070080fbc22bf73468788df51710eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331ff5e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab84875f2c50ba830d3f474b079b407000000deff000040430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71b967ce7daac4be290159f6bcd75f0dda9de5532e66ae9e48b0ed1254a81faae79b6af6fbb869604d51de44c4e0973171ad47d6c00ebc7603093f000000fdec30cd6db49a47613808bad959719c0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f15d6533f78a1f4e2df4ca23d867693fd42de9b49a1b36d48a44ba6a4530e59bec53e876dc660dd63bed8d31c31c37a373d4efd89f0000377b1b1292a893a516dab183ee65744fb8fc4f9ce2242e0f0059161c5e0000000000000000000057d77480e0345effff6413258d1f6eb190aa28cbb4bafe34124172e436b176c7ed4b132fb805d5edd9d188daf28d89c014c3ecca10ae55704544673e1fa03b84f63e022fe755f4007a4a899eaf52c4f491d8e97c862e29e457060000007ac691faee1e0c8fe056a07474e6e5490a7d3c3402000000b60600d837c6befc63ddf2f594ad7cbc56a1e44d218c956a5392a995f1fae8e9f206efbb33854dc70104ebc1581848f9745cb796da2dfb714a0500000000000000faed94fc39acfb3fd25dfa8116a154cd1226e1bb72b59fed817072a0da60160761fd3dffda0f7c592eabd8ab68334d2a1693cb187539049e331272bf5135044df8161400211b8012b6eb1ed5656e83f65509bb4b323c5bd61bff949d3bade2f6ffda1360c2786e16937ab61d6dcafed319c716357d0885f9c6d1f442954c167dd9b4acd9468ce3674c82bbb2e31389179b025dbe063b7f906217b2cf8410c7023aa3e5cc3ba1000000000000000000000000000000006ae6301a2da44394275c582a6516bb92ea1980a0a659f2f1811c8b281c209647c4241f292b20508b215dde27bb2487a6e2b5e4a8ccfab90c23827ef06cbe364073005f8a6d1456aaeb85ffb7858f24eced67a67ab825e863928ed64c83f62ffdaa997657335b63c6b4163aff094059e626766845fd779c9e6cdbbd64c24936615ee68538e8fddd0d90f3a7579579a142c0f7b318264d5c13c31cf475829528267ead38523cab7e1664e8426ca85e82ccf821c8a02a7e7d954d05b68a9c28f79429b09e2bb3681ae2b831e27c735123361c193d66ed4d71f19b199d371ec6bfada7cd370e3fdd3cd980fa1e145fd3f3e96b1feb53c865e1ad6acf5d16ed652ee0c7f45352222692fbd679212c225d097aa90f7e1fb1f983415f43e75a19ecf7fd21bfa150ef563aa72ba1c43c5f3d9be128ec26b691f31f9cab931631606a81622f120675c962be2d3b5e95f74f0b209e42e6bdd76e6e725295b1d78d928f6f63c41cbde2ba66ad81168070c8c6e18a6e452a31bdc4a60d637545ed4c8a1c649c3ce54ad3e16304d06a234f5f9311ef0f78924b68dbb4712efdb6974667bdb54f16fd2061b9ba93638dd177227e94e4ebd0ec1d437db948062bf41742000000000000000000305f70dd02fa0c61d5fe6d8ff35389246037e18d34c1375ae04f44f0c2543c772c5ccb137be7dc1874c5140200000054d77d4ea5ed144a648257f4a0301067bbcd9b91072659d872f26b796e2b81025edb5f45f785e2c2602b248ecdd80f019ca659be7e8ae953325a27564f33c9d458a60be3dab38baab7eb1a66ab1ffd6308f7fd51beb356fe75eb985b7581bb5584c53984ba9c7340f97e8d3825681c53de5f554e595b00000000000000006a8fa9f05d64c4be42f981f00051a3bc38613067dbd1427e01bfec016e51844cefa8a855bf23ac887b4a88eed6d9443857242f28e31a41d20105fbf3394ff910e734b4d9101265ff729c426e01c1ab13dda8c388b9e6626f19eecb87e39175e85e17000000000000000000009431807e43886903526074e6b40244c938a4c68a38c25ddd7c143b3f14eafe4b28ec66815cf8d1f56aa1424bc9b5d58790298e5b310969e50c222563b54e60854e1bfeef448aca8c5ccbf5546ce4c3cd5a733fec25fb94e1e0f966bcbd28a4d8fe4f556eaa1104a793006619700798354c6ae0040965e3083562bfa20968c04007d21dc02c9fd1f75e1ff40f439bdde4e784012e52049b483f02f81b88f5f57816b3fecec79cfca8d37203e769759d6b6a56b7605ced8ee18475a77ff0963a565fb6021d216c01b1098e40550a1cfd80e9180100000000000000654cd76ca61fe5ad8a31ec558fdbfa706d5e738bceae81fe777c307d5bc72183a4c2d35732e74dd690c57bdfdc1f069f9491bca7a8c59363799be70018c25ece5ad7307dc7a95c51bc25a8bbe2cf5ddf6aa161693782b0e7feb8a768f391b49d4c978c96dbb52f21c122eba9f17c8bed10591958cf06321a248b5f76ceedfe0d080d6aeadc11b237b3326dd04b86ac37c0d131544888db9e128d059761ad9a393e96c3b41c13c5a381bff187a75de560ba6eb3faa5ff8d2bb3c88f8de5efc2fb2200cfda6d07ceae22577064334fbf76a23e62e6059211d995b879f6b7d3f7fcf03652b81e6b7cdeff947ad185d3c6269ca247b429c3b872a8f1ef60"], &(0x7f0000000100)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00'}, 0x10) r4 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x80, &(0x7f0000000240)={0x3, 0x0, 0xfffa, 0x4360}, 0x8, 0x6, 0x7d, 0x0, 0x1, 0x101, 0x0}) 15.164990926s ago: executing program 2 (id=6026): creat(&(0x7f00000002c0)='./file0\x00', 0x0) 13.848870342s ago: executing program 8 (id=6027): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, r4, 0x1, 0x0, 0x1000000000000}) 13.56990814s ago: executing program 2 (id=6028): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x612c9000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000240)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89f, 0xc000, 0x7, 0x20002f7}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='8', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 12.827355029s ago: executing program 8 (id=6029): r0 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0x7fbfbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0xd, 0x0, 0x18) 12.744637251s ago: executing program 9 (id=6030): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000480)={0x18, 0x0, &(0x7f0000000000)=[@request_death, @decrefs], 0x0, 0x1000000, 0x0}) r2 = signalfd(r0, &(0x7f0000000040)={[0x4]}, 0x8) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x24008800) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000002700)=""/102392, 0x18ff8) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) io_setup(0x9, &(0x7f0000000340)=0x0) r9 = socket$inet_smc(0x2b, 0x1, 0x0) io_submit(r8, 0x1, &(0x7f0000000280)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x5, 0x0, r9, 0x0, 0x0, 0x0, 0x0, 0x2}]) read$FUSE(0xffffffffffffffff, &(0x7f000003a800)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) fcntl$getownex(r7, 0x10, &(0x7f00000004c0)={0x0, 0x0}) msgctl$IPC_SET(0x0, 0x1, &(0x7f0000000500)={{0x0, 0x0, 0x0, 0x0, 0x0, 0x88, 0x6}, 0x0, 0x0, 0xf, 0x3ff, 0x101, 0x5, 0x9b65, 0x9, 0x8, 0xfff8, r10, r11}) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000100)={0x20004, r7, 0x80000}) r13 = syz_open_dev$dri(&(0x7f0000000040), 0x1ff, 0x80000) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r13, 0xc00c642e, &(0x7f00000000c0)={0x0, 0x0, r12}) write$input_event(r2, &(0x7f0000000140)={{r3, r4/1000+10000}, 0x16, 0x3, 0x80}, 0x18) 6.347077135s ago: executing program 5 (id=6031): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) r1 = socket(0x10, 0x803, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x200880c0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x2, 0x3, 0xff) setsockopt$inet_int(r2, 0x0, 0x6, &(0x7f0000002080)=0x86, 0x4) setsockopt$inet_int(r2, 0x0, 0x3, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(r1, 0x8946, 0x0) r4 = syz_open_dev$vcsn(&(0x7f0000000000), 0x1, 0x1) write$UHID_INPUT(r4, &(0x7f0000000d00)={0x8, {"7894e6e62ce0f10fcdce74f21ad5b47c923d4dec90cefd599912070f341d59a8802e33af9869738f25b2f72093dd0ffa688e8e417c6e0e09b99649818d7caca39e142ef69d9101397854c3f51bde013686a626b2120c03d98c0ad981069188fbbddb88bf41a6b29ed43d1244e6025e1e4a2f40577619ccee39385bfc86461023a7906e5c07d16415140f4ab26db004362c885ef2c9ee82d3dd7e2ac42ca05d81ccea87dc0ec4a8f222013d6d4d0b0c828f3d2e3151dce87bfb335c1ad67bb3323564022ab23a6ba54ca117ca592c8d4227922347ea6f7c9d3dbdbc8d235f2d03e688d5ca7718d60e911534f964bf20359a0057847e7d7fd2cc463784aab2b06ba95512cfc427da44aa73634b0797b9baab391aa176d259c047ee9d346e63903860ab3c571d064509a715c5c4c6edffce9e1701e8291c2d937e3ff18691fe9a665b1a3b717a40205f8efa239b37e6b33f5c8ac28e616f788d0294c8d39ff4a63aaca7d4c578a935dd84850432201081bc1b00c5797847eaff8cecf8af8a60f075b5ff1c3dc9e62f9a3cfc4333a7501dd8badfdc691a9d35d3fc2c0e8f1b21a2c619201004a0d82bace1738ba9ca93e6fbf8ebaa78b5423efb19d3337ad050a7a1a634737a0169921911b277ab235f8b186efd60c3eff58e974a856ba460c5fbd91c1b5c999a7f6b4474560e0c5698085e1ff96381999bf7338dddab4499c6ae315245ecc98d3ca2ebc11214a4115e9205e7d1705591be4029a5e92ae06c02ba39ac70cf1ba082ccee070bf2feafa55ac6e863adb6f89a7475c2dc073058b0f8a52151d8c3ced025463656942bfd257ace6c54bd57985a44cef1c20777db47d12bd34371ef6f537e455b7787e3a853713877fa9465937602ceef8b9439507ab802ea4eaf5ee2ecd710b1840d8b8c995b5904434198abd8f0e830857ed1af53f3bcede9d57afb1cd7ad27bf222a6d1c58286c40d22211a3b2b7b7bbf5923a528fa4d781aaec1f67e013392b17197d2f6ff2d0e68bea94ce57cc516daffdf2348333a8dc596894540aa2a79437d95465fc27627b0e26871d5248c39e1a3badb319d449a7d67145418e1a35cb4bf950a5483d6e80763ea676b89d1f1e2cea20c590c76ae9fb228ffd638ccabdb3830cf944e1cccfb7ba8b1d1f0aabc498155ddda8404ebe2e25cfcfa9058af7d66bef79e592a579d556404ea3f28d6ddb3fdead9123247e23827f729eee41540d0f0e94027d65eee4e7c1c913c634f9abf546388cd2e4b351b16bd97faae3b54f5b2750495619ec36d97a1080564fa30a9f8a2700b77340b5bbd9cc377ee35420b5b762935047af7837e973a9da42ef93c11f145704d041054bcc4680363cbbee16a2bc0eaaa49cfa23330a666dff32daa17a6ea425f1ed2354d0c36893c895a0564e100d3e1385467405ca2706cfb62453faf72b1648727faeffb3c934bc4e48e4ce93af11bff3208cb3843da7ed68451b4af747ef72e2fb78a73990c95097c9504aacddffc5caadeb171e95ad113561144907d361fd28695239f6619360b9d0eead653cc83ab13fc7c0c60237e3363b6f319daa38d792426393e2396404a112ed9e70b378f494d4b540bf9b44d76b347a12c8cdaeed350a85698eb71bd126f75b9aa0ff7435926a4a4ce04e4187eae5a80b1ff56aa7f1b005a9a057b6ace4cf08c404f66c0b31974d151e9a2840ebcbfbfd898e6694b89fe78a68b90551c9d33c14914dceff64a699c1cf1570c2d1f53e905abef9f954fbdd100b1b18f10dbd673bd6c7a9693286cf2dc0ab9919466750aa42ccfa27e9ff4190dd784ec6f2e19270521f98561a959152b16a80f0b1e183375d3886936ae03ff4949777d30481c24bbae918d5fdcc8f46ff05e2370095bc85cde086dc1e32423f21c13c42490fb679462f35dd0c4ef06f8c3f24327af47ea2c73a856f112385094fe138022e308c157adb19b94ed0e8d94b805883318b33b22f371d62f0b764b2a44b65018bef417357aa997ea4ef95a2899963e06a3c553943e14d3364b73919f5e6d8395d56d522f1b19ae37d48f1534d92e4248824adb555281aea2fb317bfb30cdc7d4efada900006f45578a061b19e2eeefffdbf1974a1633182501611724079f926122c1c8fd9b1d8e6302d76ed90616abcfcac478e3b8d3be91eee5f9c653f8fed3afc1eb33d9314aaa021e8b53ab7ba3e59b301a6c757efd95c6661d7d3e8a73cdec7833f4608dc238d8e144a5b0196a9aea6fb30efdfdb05f9529c52af93cd78d857e3cc920bf30b2292380c662890f3679c09aea55c77a75dbb4da338c0fb737a5fc31252d9fa798f9dd70947f6cfa0474a7a835c694dfbb5c678216915d1f04c81d5df8f2efde80fdbce8248525d9b639f394847b9a8c2e7f7288b031df91db059eabb750c1bfe732b78001c2cca0f74cd8873cc2a892d26e1dbd48db297853775c21d68ce1daebee4f4d65bf8e448b1c80da35eaff3295ffe0aef68baff15f7585aba741699c3ed9a62f2c18200e40cbb383b844459ca9636d61645470d4f8b04704b84a7986d816c037d368d807ab936faa842a427cc4987ab506f3f08841195c893f39656547ff62730ec43aa78311d57defe4002301f6b9e1f6573f3a46715e2d1f899480e8bc97f5dfe48ad14df280126998d32dc0a63231584b5ee82d5f90d5ccd3eb3923cee0dfe0eb9b1ac54fd97214ad86c6459cf916ba0bfc9d4210a95346d753f4bc7440d78274c4cd1850907a2bf150a1c1b511bf0438494a6aa1a197f787c96b410d866b4cb284f74122ffbb2f5fa7c2c22f935c7e1542ff83f01e3024ee6e3d7fd0fba2754e635c8116a27f15586300d6522979822c1f97038f33c644ef82e9818f4a09388cb9a69514c929e9bc149fd7a26b458d89abb5e3ae1de29ed1f28d613878a24a9296c967339b9c6749f92c720982cb78a120bcf7593c6fbae36f9a06caa384a7e5d3f05442b0a69f72518a76a916968aae56abda54dac318fd726335e95592f80d030ef51aea41d5e348267fcea65e49d8e36e711fedb3fb9ad37d3fdf2185dcc3ff44736d6a0d4b4bd1810f89ec6e0e6b6f58f74d73ddd2a27fcfaf36d1aec6c3769787a1d3b8514487a399e6497bd0bf4c4242868d599aeb2202cae535e8118d478fc43b4c8bfdcf024f36f5d7c9f75c69bc9d4d5414e8bef740bcaf9027dbdb0f47643b984406c9ce1999d7631243c26d6824ae74ab71f536e40e934a5dfea7f5c5d10713c831df6ba168f4080a4b082e94bc23c0807aab7c0bc29f327d185a2a9302cc255aa54764c4eb8ef5b17d640afa30b36572294914d51ac146f87af6f5abd97823724aba25f589e769aa1047e72365e9ee67e7f90e80542cc842aebabc97679dd893075e8a1bd6934ac9e768e20bcf4c2fa29c5f7a103d3ff689c721e08ef1d0ca61ee3e07a815aa943879dd5c406dcff6a946b0a12980620cfb224912e27accbb63b1e2d571c65918c806060dcd08d5cef341e5c5705021ec19605b809a44d2a8f6f27e18f2b8fd268e23706564df5501096fd8f8261e27d5c8b582673f0c76bf78b27f754cddb5b64a33c87841681d8eef2b5abe8a8deabee587189f75b8b518909cd2a6f89910425e8647f25077829f1b400b3abcaeff6f54ccc00f6fb7abeeefe0226e4e2b55fba0925b49be8310fc5a490384e4a5e7216b0fd0c09c00e3327ada8c59eb37443ac9148a9df92b0d4e6851cd93b784d3e0a236d9fe7c483f03d813fc98e632cf6255dc4a70a0458570776509ebfb545f35956c7e32493f6ad886ec858bfc29bffb7f2ae7eed7d83e3075554dd81e72c93f4c2e4dcdb0832e76861b983b17c2a6f887a988e4fd47459fd45134560b5b1bec10c50914f2d7f327a4e68a0c453f067035f243ca01aa22969481d5fb48d1da82f35222c4e8d249625c454159f7b00a85d43414eb5e7c8044922b323f2473af648d1dba5ffff34bd5e023a2fe4860d7568fa4d35ad20c461eb38bced561edcef853dbcdd7b69bb40e9cda525a71a286c956a1268cacad0bc0c79ed7632aedbb8dc78ba1a2adea2b650314072d1ebc08f9753d6d38e53a758ea4700160588e819239711a506f004ec57037cd6efcbb9cee3bba556eaaa008bf8e8390085b85653c7aa006dd836c7ad025bed9dec77a4a00b309776862fca4dd01dff16aa6bd70a876662093b85ffbb07b2f8b4361f5dc635f940571239a71865e8f1a289f449ae9a74266205c8b1fe8a732db502c9ea5e5c379b704d43ef795b40450aa498535803767d2c2cbd2749474d2997e00f37612fcc0ae7322b8c8e2a90cf66ada69bd05b82d5707562b37e40674f0a3f58d9c776a931b8768d5c23f17c5f9135e7a4ce0c6eb356d9fb4a53d112194c19e6f045d2bd44132a70b9ccd7e65d2787899785f7ee9185589136c847347142440e0a405c18ff3f31acb791a805dd281aaf97aee708dcce2f1aa53161b7716fa0978c0d02871637ad7e1af5a158b727a1dfc2ae1aafbb9c516469ee89fa0f1de23a17115ded5e9c560a468c5192943be74aeaba51083ca0379563f1fa78e29eca1eaf849cd00f419ceb59e640248c332c845e68e9a398281b962ae59aa5b18006b6ea6e0c5f1b30665e1fb975da11ed6a47bd44b4241bbf0443f178e8249805cc3f980a4bb2f46baab0a12e9e9b2aaa7e0ca22b2314a9e5ef6412f4efe31381e3d716244af3112444eabbb0c353acafc0f1179ad4c63b81e5f5bfd771591d24e5254fa72e30aa53717c24b49cee71cdd9368e207af5e992a04f06de912cfcfca38732f5c8393d466d209680ebfa5764897f04531138beff3f65691593e334c2ae2825ffa9353e8aeef37b90691ea5c78d7c86124abf6491a068bf03c3467e5e42ca4b58192d17856722207568777141ccbef3f3891708897af9c196be92056527a8da820d28dccaf4dfed4d38fb8fe826b238d31bad751631a0d8b1eabdfa7bffe65241238ff982d21b2222cdd3a536385d0ab2180ccdf4672d0b21156377fe640ee8c8744b9ba1efce91c295e83a4271a34a1f70adbc2ff0aa6ba9e1965061cadcd3d824636bbc1f977c78dde1859d752c86b099705616edf6e94523f108af79ab5073d26f3788c4d56f1b17b764c1bc387e531dab5dd71198c56b02c68552dc1098beec85dc1bbe2dde316e6093a9a33f578d789da9b2a9209ed6e73a0597bc62467afc42f0348c9b885b92f37569a953f6316d5c8b188539474da3836abeae7ec259cf8fd28f02593597e9206e05e8da4f4346aab36f179deb68a9dab9b550d6fe4f0c88563935328a699b9cbb2015be57c28beaf60be499114f04a96a2f7fb3bf3b5b31e422954c96790aa1e49c5bc1946df0df2b4be63c0aac1ddcf187714f6e67a076a823feaeba5db4a99e5f494ec939d1b0ecd23752c08c3b788704612127e7f080ef581b4990accd6dca7ce52844bc7bbc8c8752497c171d8e628c53609a920fb5a1bc740cb05e2035de72f636ef0498ed2f3cccb64d5740afbc30015442ca0511160787b2c763072c70035f7f3bbbd3966bcc80d021ce1482e27681b963a28189c2ee9d64d0622a94eac689d3fc1a4137c4d62a4c73fab4b0175a8ff8fa256118affd94aaeee33b155043f53d9e3d4eb82173df0938c6c3e51c118c1acf187c84f12090ad1dd663013e433455290f87ca88959f9f481e4dd05e6a483abe00f7c974e5ff602a7a6eaa71f8ac06c50afac0c2858b554f59bf88002766a619ae9b0864926d07b273238e1ebd456543f77ea800231dbf4479f0b90fc607", 0x1000}}, 0x1006) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, 0x0) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 6.224083687s ago: executing program 1 (id=6032): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) unshare(0x22020400) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth0_vlan\x00', 0x8a}) arch_prctl$ARCH_REQ_XCOMP_PERM(0x1023, 0x14) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441920887e87fcb367800000000080100", 0x4, 0x200}) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000240)=0x1) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000280)=0xd9) write(r0, &(0x7f00000002c0)="e66f24bf6dc85b68eb77edfa16594388affd04b1c52c97cee93504dcdc64cc8a617c4e7b6f19f3c837eaddec23c3c1d0d540848212a115bed7ceda8eb87a97dd9459bc6d3e754792d0797f5760c778208194c29bae2ad62a3a706db45e5c3aa0eda766240b12e420345b4009bbdb97c9506864635713ea53402d458a26ff7a92e22de9de94cde8a9bb20370f1a342c24dd20a31615ee16400649bb5ce59008a8371be74d5621a2cacbac54931abf9a189993ab3f23d34f0047ab97886734677f0887f36e000b574d8a25597a4f", 0xcd) fsmount(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x80) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) rmdir(&(0x7f0000000640)='./file0\x00') sendmmsg(0xffffffffffffffff, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}], 0x1, 0x40002) 6.130162437s ago: executing program 9 (id=6033): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) getsockopt$inet_int(r1, 0x0, 0x16, 0x0, &(0x7f0000000400)) socket(0x10, 0x80002, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x220800, 0x0) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xfffffffffffffffe) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet6_tcp(0xa, 0x1, 0x0) openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000001a502cc8000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) r3 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0x3, 0x0, 0xfffffffffffffffe) ioctl$SOUND_MIXER_READ_STEREODEVS(r3, 0x80044dfb, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) fcntl$setstatus(r0, 0x4, 0x2800) 6.11327302s ago: executing program 8 (id=6034): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x8000000) semget$private(0x0, 0x4000, 0x0) 5.515170808s ago: executing program 5 (id=6035): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="1c00000014000100000080000000000007000080080002"], 0x1c}], 0x1}, 0x0) 4.910919274s ago: executing program 1 (id=6036): syz_mount_image$minix(&(0x7f0000000040), &(0x7f0000000100)='./file1\x00', 0x42, &(0x7f0000000540)=ANY=[], 0xd, 0x1a4, &(0x7f0000000640)="$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") ftruncate(0xffffffffffffffff, 0xc17a) unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0) 4.830250627s ago: executing program 5 (id=6037): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x41, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)={0x54, r7, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1d}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x10}, @MPTCP_PM_ADDR_ATTR_FLAGS={0xffffffffffffff3f, 0x6, 0x10}]}]}, 0x54}}, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(serpent)\x00'}, 0x58) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="020d0000100000000000000000000000080012000200020000000000000000001200320002030000000000000000000000000000000000000000000000000000fc020000000000000000000000000000030005000000000002000000ac1414aa00000000fa000000030006000000000002"], 0x80}}, 0x0) r9 = syz_open_procfs(0x0, 0x0) writev(r9, &(0x7f0000000500)=[{&(0x7f0000000780)="0e", 0x1}, {0x0}], 0x2) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4(r5, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r0, 0xc008561c, 0x0) r10 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) read$FUSE(r10, &(0x7f00000000c0)={0x2020}, 0xfffffffffffffe7d) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r11, 0x84, 0x6b, &(0x7f00000003c0)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r11, 0x84, 0x1e, &(0x7f0000000080)=0x3, 0x4) 4.820330577s ago: executing program 9 (id=6038): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000180)={'veth1\x00', &(0x7f0000000240)=@ethtool_gstrings={0x38}}) r4 = socket$phonet(0x23, 0x2, 0x1) getpid() ioctl$SIOCPNDELRESOURCE(r4, 0x89ef, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) sendmsg$kcm(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe800000000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) mmap$dsp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x3, 0x12, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e1c, 0x2, @loopback, 0x1}, 0x1c) 3.726134733s ago: executing program 5 (id=6039): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) inotify_init1(0x0) ioctl$SG_GET_VERSION_NUM(0xffffffffffffffff, 0x2282, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r2 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r2, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a056300000000000001090224000100000000090400000103000000092100"], 0x0) write$sysctl(r2, &(0x7f00000000c0)='2\x00', 0x2) 3.658162747s ago: executing program 9 (id=6040): move_pages(0x0, 0x0, &(0x7f0000000580), &(0x7f00000004c0)=[0xa7], 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket(0xa, 0x3, 0x3a) openat$ppp(0xffffffffffffff9c, 0x0, 0xc8902, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f00000003c0)) bind$packet(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r2, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r2, &(0x7f0000005b80)={0x2020}, 0x2020) 3.590983044s ago: executing program 1 (id=6041): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r3, 0xc01864b0, &(0x7f0000000000)={0x0, r4, 0x1, 0x0, 0x1000000000000}) 2.476890462s ago: executing program 1 (id=6042): socket$packet(0x11, 0xa, 0x300) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x7a, &(0x7f0000000000)={@random="c3a23289e254", @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv6=@gre_packet={0x6, 0x6, "ef63d9", 0x44, 0x2f, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, {[], {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x1, 0x0, 0x1, 0x1}, {}, {0x8, 0x88be, 0x2, {{0x0, 0x1, 0x7, 0x1, 0x0, 0x0, 0x5, 0xf}, 0x1, {0x6}}}, {0x8, 0x22eb, 0x4, {{0x6, 0x2, 0x81, 0x0, 0x1, 0x3, 0x2}, 0x2, {0x6, 0x0, 0x0, 0x9, 0x1, 0x0, 0x2, 0x0, 0x1}}}, {0x8, 0x6558, 0x1}}}}}}}}, 0x0) 2.101836455s ago: executing program 1 (id=6043): mknod(&(0x7f00000048c0)='./file0\x00', 0x0, 0x3) openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000100), 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r1, 0x0, 0x0) sched_setattr(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) inotify_init1(0x0) r2 = memfd_secret(0x0) ioctl$SG_GET_VERSION_NUM(r2, 0x2282, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000007, 0x2172, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xc) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r3, &(0x7f0000000580)='1\x00', 0x2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12011900000000406a056300000000000001090224000100000000090400000103000000092100"], 0x0) write$sysctl(r3, &(0x7f00000000c0)='2\x00', 0x2) r4 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r4, 0x0, 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x106) 1.960140641s ago: executing program 36 (id=6019): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='mm_page_alloc\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x1000000000000, 0x0}}, 0xfdbc) sched_setaffinity(0x0, 0xfffffffffffffdb0, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100013070000000000000000fc020000000000000000000000000000fe8000000000000000000000000000100004000000000000000000202c000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe"], 0xf0}, 0x1, 0xe}, 0x10) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x0, @void}, 0x10) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xffffffff) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74, 0x8080000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0xfffffeac, &(0x7f00000001c0)=""/115}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000000)=0x1) 1.905351762s ago: executing program 2 (id=6045): socket(0x23, 0x3, 0xfffffffe) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mmap(&(0x7f00009bf000/0x3000)=nil, 0x3000, 0xf, 0x200000005c831, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_io_uring_setup(0x237, &(0x7f0000000280)={0x0, 0x275, 0x400, 0x0, 0x2cf}, &(0x7f0000000040)=0x0, &(0x7f0000000600)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$rds(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440), 0x0, 0x0, 0x0, 0x20000800}, 0x4000008) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x12, 0x0, 0x3}, 0x9c) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f00000001c0)=ANY=[@ANYBLOB='3'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x38, 0x0, @fd=r3, 0x100000001, 0x0, 0x0, 0x2, 0x1}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) io_uring_enter(r3, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002180)=ANY=[@ANYBLOB], 0x0) io_uring_enter(r3, 0x7126, 0x2a10, 0x0, 0x0, 0x0) 899.513914ms ago: executing program 8 (id=6046): r0 = syz_io_uring_setup(0x131, &(0x7f0000000340)={0x0, 0x3f3f, 0x2, 0x0, 0x7fbfbffd}, &(0x7f0000000140)=0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7f}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x48) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB], 0xfe33) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4a, &(0x7f0000000000)=0x9, 0x4) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}, {0x77359400}}, 0x0) io_uring_enter(r0, 0x1e76, 0xf728, 0xd, 0x0, 0x18) 0s ago: executing program 9 (id=6047): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x3}, 0x50) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000001c0)={r3, r4, 0x4, 0x0, @void}, 0x10) kernel console output (not intermixed with test programs): ] usb 8-1: new high-speed USB device number 13 using dummy_hcd [ 1465.836295][T21947] nbd: socks must be embedded in a SOCK_ITEM attr [ 1465.843101][T21947] block nbd0: shutting down sockets [ 1465.920712][T18261] usb 8-1: config 0 has no interfaces? [ 1466.119970][T18261] usb 8-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1466.144959][T18261] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.293770][T18261] usb 8-1: Product: syz [ 1466.320200][T18261] usb 8-1: Manufacturer: syz [ 1466.325284][T18261] usb 8-1: SerialNumber: syz [ 1466.337602][T18261] usb 8-1: config 0 descriptor?? [ 1466.531821][ T5910] usb 2-1: USB disconnect, device number 15 [ 1466.560234][T21941] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4967'. [ 1466.572198][ T5910] usb 8-1: USB disconnect, device number 13 [ 1469.064275][T19191] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1469.224465][T19191] usb 6-1: Using ep0 maxpacket: 16 [ 1469.238664][T19191] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1469.259678][T19191] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1469.318259][T19191] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1469.328083][T19191] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1469.346544][T19191] usb 6-1: Product: syz [ 1469.356396][T19191] usb 6-1: Manufacturer: syz [ 1469.368303][T19191] usb 6-1: SerialNumber: syz [ 1469.477131][T19191] usb 6-1: config 0 descriptor?? [ 1469.604343][ T5930] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1469.756662][ T5930] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1469.776134][ T5930] usb 9-1: config 1 has no interface number 0 [ 1469.809701][ T5930] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1469.836416][ T5930] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1469.860032][ T5930] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1469.873736][ T5930] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1469.916923][ T5930] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1469.962632][ T5930] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1470.001688][ T5930] usb 9-1: Product: syz [ 1470.026375][ T5930] usb 9-1: Manufacturer: syz [ 1470.031014][ T5930] usb 9-1: SerialNumber: syz [ 1470.138903][T21975] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1470.165829][T21975] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1472.114525][T21995] netlink: 92 bytes leftover after parsing attributes in process `syz.8.4976'. [ 1472.286599][T21994] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1472.297683][T21994] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1472.534528][ T5930] usb 9-1: Incompatible driver and firmware versions [ 1472.595182][T21997] nbd: socks must be embedded in a SOCK_ITEM attr [ 1472.601848][T21997] block nbd0: shutting down sockets [ 1472.913395][ T5930] IPVS: starting estimator thread 0... [ 1473.075785][T22004] IPVS: using max 33 ests per chain, 79200 per kthread [ 1473.417261][T22007] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1473.431138][T22007] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4984'. [ 1473.664305][T22007] geneve2: entered promiscuous mode [ 1473.669745][T22007] geneve2: entered allmulticast mode [ 1473.857460][ T6031] usb 9-1: USB disconnect, device number 21 [ 1474.488759][ T6031] usb 6-1: USB disconnect, device number 20 [ 1475.474280][T22020] fuse: Bad value for 'rootmode' [ 1476.318392][T22027] loop8: detected capacity change from 0 to 256 [ 1477.015905][T22027] exfat: Deprecated parameter 'utf8' [ 1477.021243][T22027] exfat: Deprecated parameter 'namecase' [ 1477.210294][T22027] exfat: Deprecated parameter 'namecase' [ 1477.244948][T22027] exfat: Deprecated parameter 'utf8' [ 1477.281721][T22027] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1478.844260][ T6031] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1478.893450][T22030] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4992'. [ 1479.016495][ T6031] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1479.038533][ T6031] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1479.052498][ T6031] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1479.088610][ T6031] usb 8-1: config 0 descriptor?? [ 1479.107640][ T6031] pwc: Askey VC010 type 2 USB webcam detected. [ 1479.507820][ T6031] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1479.540432][ T6031] pwc: recv_control_msg error -32 req 02 val 2700 [ 1479.565875][ T6031] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1479.583495][ T6031] pwc: recv_control_msg error -32 req 04 val 1000 [ 1479.593505][ T6031] pwc: recv_control_msg error -32 req 04 val 1300 [ 1479.601913][ T6031] pwc: recv_control_msg error -32 req 04 val 1400 [ 1479.615078][ T6031] pwc: recv_control_msg error -32 req 02 val 2000 [ 1479.625096][ T6031] pwc: recv_control_msg error -32 req 02 val 2100 [ 1479.642426][ T6031] pwc: recv_control_msg error -32 req 04 val 1500 [ 1479.668371][ T6031] pwc: recv_control_msg error -32 req 02 val 2500 [ 1479.685213][ T6031] pwc: recv_control_msg error -32 req 02 val 2400 [ 1479.692502][ T6031] pwc: recv_control_msg error -32 req 02 val 2600 [ 1479.943460][ T6031] pwc: recv_control_msg error -71 req 02 val 2800 [ 1480.315508][ T6031] pwc: recv_control_msg error -71 req 04 val 1100 [ 1480.342507][ T6031] pwc: recv_control_msg error -71 req 04 val 1200 [ 1480.382917][ T6031] pwc: Registered as video103. [ 1480.441604][ T6031] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input16 [ 1480.486090][ T6031] usb 8-1: USB disconnect, device number 14 [ 1480.514528][ T2146] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 1480.664440][ T2146] usb 6-1: device descriptor read/64, error -71 [ 1480.941051][ T2146] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 1481.091449][T22068] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4997'. [ 1481.114564][ T2146] usb 6-1: device descriptor read/64, error -71 [ 1481.304722][ T2146] usb usb6-port1: attempt power cycle [ 1481.434065][T22069] netlink: 16402 bytes leftover after parsing attributes in process `syz.7.5003'. [ 1481.954320][ T2146] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 1482.270132][ T2146] usb 6-1: device descriptor read/8, error -71 [ 1482.524444][ T2146] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 1482.571647][ T2146] usb 6-1: device descriptor read/8, error -71 [ 1482.715810][ T2146] usb usb6-port1: unable to enumerate USB device [ 1484.421380][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.202022][T22089] netlink: 'syz.8.5007': attribute type 5 has an invalid length. [ 1485.232252][T22089] ip6erspan0: entered promiscuous mode [ 1485.636402][T22099] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 1487.205451][T19191] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1487.448489][T19191] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1487.486285][T19191] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1487.524510][T19191] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1487.608839][T19191] usb 8-1: config 0 descriptor?? [ 1487.659744][T19191] pwc: Askey VC010 type 2 USB webcam detected. [ 1488.226136][T19191] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1488.264103][T19191] pwc: recv_control_msg error -32 req 02 val 2700 [ 1488.489737][T19191] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1488.600767][T19191] pwc: recv_control_msg error -32 req 04 val 1000 [ 1488.634637][T19191] pwc: recv_control_msg error -32 req 04 val 1300 [ 1488.677657][T19191] pwc: recv_control_msg error -32 req 04 val 1400 [ 1488.806976][T19191] pwc: recv_control_msg error -32 req 02 val 2000 [ 1488.937975][T19191] pwc: recv_control_msg error -32 req 02 val 2100 [ 1488.958386][T19191] pwc: recv_control_msg error -32 req 04 val 1500 [ 1488.969497][T19191] pwc: recv_control_msg error -32 req 02 val 2500 [ 1489.044654][T19191] pwc: recv_control_msg error -32 req 02 val 2400 [ 1489.275803][T19191] pwc: recv_control_msg error -32 req 02 val 2600 [ 1489.588878][T19191] pwc: recv_control_msg error -71 req 02 val 2800 [ 1489.596792][T19191] pwc: recv_control_msg error -71 req 04 val 1100 [ 1489.749426][T19191] pwc: recv_control_msg error -71 req 04 val 1200 [ 1489.764656][T19191] pwc: Registered as video103. [ 1489.771642][T19191] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input17 [ 1489.788704][T19191] usb 8-1: USB disconnect, device number 15 [ 1490.514540][ T6031] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1490.684525][ T6031] usb 9-1: device descriptor read/64, error -71 [ 1490.974318][ T6031] usb 9-1: new high-speed USB device number 23 using dummy_hcd [ 1491.094690][T18433] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1491.162837][ T6031] usb 9-1: device descriptor read/64, error -71 [ 1491.256425][T18433] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1492.132997][T18433] usb 8-1: config 1 has no interface number 0 [ 1492.185182][ T6031] usb usb9-port1: attempt power cycle [ 1492.663986][T18433] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1492.735488][T18433] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1492.804309][T18433] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1492.888532][T22146] tipc: Enabling of bearer rejected, already enabled [ 1492.900226][T18433] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1492.924946][ T6031] usb 9-1: new high-speed USB device number 24 using dummy_hcd [ 1492.933917][T18433] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1492.994439][T18433] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1493.018572][T18433] usb 8-1: Product: syz [ 1493.022748][T18433] usb 8-1: Manufacturer: syz [ 1493.029191][ T6031] usb 9-1: device descriptor read/8, error -71 [ 1493.032626][T18433] usb 8-1: SerialNumber: syz [ 1493.137669][T22134] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1493.214753][T22134] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1494.184472][T18433] usb 8-1: Error in usbnet_get_endpoints (-71) [ 1494.282296][T18433] usb 8-1: USB disconnect, device number 16 [ 1495.862187][T22155] mac80211_hwsim hwsim51 syzkaller0: entered promiscuous mode [ 1495.870130][T22155] mac80211_hwsim hwsim51 syzkaller0: entered allmulticast mode [ 1496.247450][T22175] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.5035'. [ 1496.262560][T22175] debugfs: 'Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' already exists in 'ieee80211' [ 1496.705019][T22171] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5034'. [ 1497.334538][T19191] usb 9-1: new high-speed USB device number 26 using dummy_hcd [ 1497.347471][T16741] usb 6-1: new full-speed USB device number 25 using dummy_hcd [ 1497.538512][T19191] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1497.806053][T16741] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1497.842578][T19191] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1497.859297][T16741] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1497.946960][T19191] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1497.985112][T16741] usb 6-1: config 0 descriptor?? [ 1498.014623][T19191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1498.042147][T16741] usb 6-1: selecting invalid altsetting 3 [ 1498.063236][T16741] comedi comedi5: could not set alternate setting 3 in high speed [ 1498.100122][T16741] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1498.124710][T19191] usb 9-1: config 0 descriptor?? [ 1498.172730][T16741] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1498.222400][T19191] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1498.338898][T16741] usb 6-1: USB disconnect, device number 25 [ 1500.947755][ T2146] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1501.135729][ T2146] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 1501.158703][T22211] binder: 22210:22211 ioctl c0306201 0 returned -14 [ 1501.184273][ T2146] usb 1-1: config 1 has no interface number 0 [ 1501.204403][ T2146] usb 1-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1501.251034][ T2146] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1501.283195][T18433] usb 9-1: USB disconnect, device number 26 [ 1501.302360][ T2146] usb 1-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1501.342608][ T2146] usb 1-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1501.382981][ T2146] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1501.422116][T22217] fuse: Unknown parameter 'use00000000000000000000' [ 1501.603429][ T2146] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.612090][ T2146] usb 1-1: Product: syz [ 1501.616350][ T2146] usb 1-1: Manufacturer: syz [ 1501.621075][ T2146] usb 1-1: SerialNumber: syz [ 1501.629596][T22203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1501.645766][T22203] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 1504.274460][ T2146] usb 1-1: Error in usbnet_get_endpoints (-71) [ 1504.328208][ T2146] usb 1-1: USB disconnect, device number 9 [ 1504.568947][T22234] netlink: 161716 bytes leftover after parsing attributes in process `syz.8.5054'. [ 1508.740194][T22267] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1509.762862][ T5910] usb 9-1: new high-speed USB device number 27 using dummy_hcd [ 1509.995310][T16741] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1510.259849][T16741] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 1510.274388][ T5910] usb 9-1: Using ep0 maxpacket: 16 [ 1510.291473][ T5910] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1510.312980][T16741] usb 6-1: config 1 has no interface number 0 [ 1510.340730][ T5910] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1510.344378][T16741] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1510.374434][ T5910] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1510.395162][T16741] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1510.413408][T16741] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1510.442616][ T5910] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1510.466783][T16741] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1510.485003][ T5910] usb 9-1: config 0 descriptor?? [ 1510.496699][T16741] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1510.526235][T16741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1510.566222][T16741] usb 6-1: Product: syz [ 1510.571586][T16741] usb 6-1: Manufacturer: syz [ 1510.596627][T16741] usb 6-1: SerialNumber: syz [ 1510.616531][T22278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1510.633170][T22278] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 1513.092318][T16741] usb 6-1: Error in usbnet_get_endpoints (-71) [ 1513.453974][T16741] usb 6-1: USB disconnect, device number 26 [ 1515.559087][T20226] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1515.570472][T20226] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1515.585439][T20226] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1515.597907][T20226] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1515.606638][T20226] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1515.851377][T22319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.5082'. [ 1516.350601][T18433] usb 9-1: USB disconnect, device number 27 [ 1516.623940][T21734] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.231213][T21734] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.695389][ T5846] Bluetooth: hci6: command tx timeout [ 1517.876872][T19495] tipc: Resetting bearer [ 1518.194907][T22338] nbd: socks must be embedded in a SOCK_ITEM attr [ 1518.202905][T22338] block nbd0: shutting down sockets [ 1518.208965][T18433] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 1518.475117][T18433] usb 1-1: device descriptor read/64, error -71 [ 1518.693732][T21734] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1519.087699][T18433] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 1519.345058][T18433] usb 1-1: device descriptor read/64, error -71 [ 1519.814383][ T5846] Bluetooth: hci6: command tx timeout [ 1519.814542][T18433] usb usb1-port1: attempt power cycle [ 1520.029077][T21734] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1520.219970][T22314] chnl_net:caif_netlink_parms(): no params data found [ 1520.344369][T18433] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1520.375571][T18433] usb 1-1: device descriptor read/8, error -71 [ 1520.701528][T18433] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1520.986970][T18433] usb 1-1: device descriptor read/8, error -71 [ 1521.115174][T18433] usb usb1-port1: unable to enumerate USB device [ 1521.417118][T22314] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.432816][T22314] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.451479][T22373] fuse: Unknown parameter 'user_id00000000000000000000' [ 1521.453185][T22314] bridge_slave_0: entered allmulticast mode [ 1521.482068][T22314] bridge_slave_0: entered promiscuous mode [ 1521.539064][T22314] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.565522][T22314] bridge0: port 2(bridge_slave_1) entered disabled state [ 1521.723649][T22314] bridge_slave_1: entered allmulticast mode [ 1521.844501][ T5846] Bluetooth: hci6: command tx timeout [ 1522.068216][T22314] bridge_slave_1: entered promiscuous mode [ 1522.259656][T22314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.315133][T22314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.645590][T19191] usb 9-1: new high-speed USB device number 28 using dummy_hcd [ 1523.086782][T19191] usb 9-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 1523.918191][ T5846] Bluetooth: hci6: command tx timeout [ 1523.950934][T19191] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1523.961414][T19191] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 1523.975166][T19191] usb 9-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00 [ 1523.986281][T19191] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1523.997071][T19191] usb 9-1: config 0 descriptor?? [ 1525.255481][T19191] usbhid 9-1:0.0: can't add hid device: -71 [ 1525.261565][T19191] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1525.273407][T19191] usb 9-1: USB disconnect, device number 28 [ 1527.186848][T21734] bond0 (unregistering): Released all slaves [ 1527.544261][T21734] tipc: Disabling bearer [ 1527.560206][T21734] tipc: Disabling bearer [ 1527.583739][T21734] tipc: Left network mode [ 1527.592350][T22314] team0: Port device team_slave_0 added [ 1528.092264][T22314] team0: Port device team_slave_1 added [ 1528.348919][T22426] fuse: Unknown parameter 'user_id00000000000000000000' [ 1528.448430][T22314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1528.476088][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1528.553576][T22314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1529.052854][T22314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1529.069075][T22314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1529.156905][T22314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1529.254684][T19191] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1529.375682][T22433] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5110'. [ 1529.805750][T21734] hsr_slave_0: left promiscuous mode [ 1529.823376][T19191] usb 1-1: config 0 has no interfaces? [ 1529.836349][T21734] hsr_slave_1: left promiscuous mode [ 1529.838770][T19191] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1529.881302][T19191] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1529.882347][T21734] veth1_macvtap: left promiscuous mode [ 1529.898710][T21734] veth0_macvtap: left promiscuous mode [ 1529.904552][T21734] veth1_vlan: left promiscuous mode [ 1529.912229][T21734] veth0_vlan: left promiscuous mode [ 1529.913294][T19191] usb 1-1: Product: syz [ 1529.922725][T19191] usb 1-1: Manufacturer: syz [ 1529.942447][T19191] usb 1-1: SerialNumber: syz [ 1529.969280][T19191] usb 1-1: config 0 descriptor?? [ 1530.036289][T22441] loop8: detected capacity change from 0 to 256 [ 1530.053402][T22441] exfat: Deprecated parameter 'utf8' [ 1530.058883][T22441] exfat: Deprecated parameter 'namecase' [ 1530.086359][T22441] exfat: Deprecated parameter 'namecase' [ 1530.098759][T22441] exfat: Deprecated parameter 'utf8' [ 1530.122996][T22441] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1530.395403][T19191] usb 1-1: USB disconnect, device number 14 [ 1533.601245][T22463] netlink: 4400 bytes leftover after parsing attributes in process `syz.2.5119'. [ 1538.301631][T22433] vlan2: entered allmulticast mode [ 1538.479158][T22463] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1538.511036][T22463] CPU: 0 UID: 0 PID: 22463 Comm: syz.2.5119 Not tainted syzkaller #0 PREEMPT(full) [ 1538.511063][T22463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1538.511075][T22463] Call Trace: [ 1538.511083][T22463] [ 1538.511092][T22463] dump_stack_lvl+0x189/0x250 [ 1538.511125][T22463] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1538.511153][T22463] ? __pfx__printk+0x10/0x10 [ 1538.511176][T22463] ? kernfs_path_from_node+0x2f/0x290 [ 1538.511196][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511218][T22463] ? kernfs_path_from_node+0x250/0x290 [ 1538.511237][T22463] ? kernfs_path_from_node+0x2f/0x290 [ 1538.511261][T22463] sysfs_warn_dup+0x8e/0xa0 [ 1538.511281][T22463] sysfs_do_create_link_sd+0xc0/0x110 [ 1538.511303][T22463] device_add_class_symlinks+0x1cf/0x240 [ 1538.511332][T22463] device_add+0x475/0xb50 [ 1538.511358][T22463] wiphy_register+0x1ba6/0x28d0 [ 1538.511403][T22463] ? __pfx_wiphy_register+0x10/0x10 [ 1538.511424][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511446][T22463] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1538.511480][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511502][T22463] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1538.511534][T22463] ieee80211_register_hw+0x3484/0x4100 [ 1538.511578][T22463] ? ieee80211_register_hw+0x1481/0x4100 [ 1538.511617][T22463] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1538.511650][T22463] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1538.511674][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511698][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511719][T22463] ? __hrtimer_setup+0x187/0x210 [ 1538.511740][T22463] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1538.511762][T22463] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1538.511819][T22463] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1538.511845][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511866][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511887][T22463] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1538.511912][T22463] ? kstrndup+0xbf/0x160 [ 1538.511931][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511956][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.511990][T22463] hwsim_new_radio_nl+0xea4/0x1b10 [ 1538.512030][T22463] ? __pfx___nla_validate_parse+0x10/0x10 [ 1538.512065][T22463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1538.512100][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512125][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512147][T22463] ? __nla_parse+0x40/0x60 [ 1538.512170][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512190][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512220][T22463] genl_family_rcv_msg_doit+0x215/0x300 [ 1538.512258][T22463] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1538.512299][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512320][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512341][T22463] ? security_capable+0x7e/0x2e0 [ 1538.512374][T22463] genl_rcv_msg+0x60e/0x790 [ 1538.512413][T22463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1538.512441][T22463] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1538.512469][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512490][T22463] ? __asan_memcpy+0x40/0x70 [ 1538.512511][T22463] ? __pfx_ref_tracker_free+0x10/0x10 [ 1538.512548][T22463] netlink_rcv_skb+0x208/0x470 [ 1538.512568][T22463] ? __lock_acquire+0xab9/0xd20 [ 1538.512589][T22463] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1538.512618][T22463] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1538.512659][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512680][T22463] ? down_read+0x1ad/0x2e0 [ 1538.512707][T22463] genl_rcv+0x28/0x40 [ 1538.512734][T22463] netlink_unicast+0x82f/0x9e0 [ 1538.512762][T22463] ? __pfx_netlink_unicast+0x10/0x10 [ 1538.512785][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512806][T22463] ? skb_put+0x11b/0x210 [ 1538.512828][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512854][T22463] netlink_sendmsg+0x805/0xb30 [ 1538.512887][T22463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.512913][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512934][T22463] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1538.512964][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.512985][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513007][T22463] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1538.513031][T22463] __sock_sendmsg+0x21c/0x270 [ 1538.513054][T22463] ____sys_sendmsg+0x505/0x830 [ 1538.513087][T22463] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1538.513122][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513145][T22463] ? import_iovec+0x74/0xa0 [ 1538.513173][T22463] ___sys_sendmsg+0x21f/0x2a0 [ 1538.513202][T22463] ? __pfx____sys_sendmsg+0x10/0x10 [ 1538.513235][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513285][T22463] ? __fget_files+0x2a/0x420 [ 1538.513310][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513330][T22463] ? __fget_files+0x3a0/0x420 [ 1538.513367][T22463] __x64_sys_sendmsg+0x19b/0x260 [ 1538.513403][T22463] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1538.513439][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513460][T22463] ? rcu_is_watching+0x15/0xb0 [ 1538.513489][T22463] ? do_syscall_64+0xbe/0x3b0 [ 1538.513517][T22463] do_syscall_64+0xfa/0x3b0 [ 1538.513538][T22463] ? lockdep_hardirqs_on+0x9c/0x150 [ 1538.513559][T22463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.513577][T22463] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1538.513598][T22463] ? exc_page_fault+0x9f/0xf0 [ 1538.513621][T22463] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1538.513640][T22463] RIP: 0033:0x7fbe87f8eec9 [ 1538.513657][T22463] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1538.513672][T22463] RSP: 002b:00007fbe85db2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1538.513691][T22463] RAX: ffffffffffffffda RBX: 00007fbe881e6270 RCX: 00007fbe87f8eec9 [ 1538.513705][T22463] RDX: 0000000000000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 1538.513718][T22463] RBP: 00007fbe88011f91 R08: 0000000000000000 R09: 0000000000000000 [ 1538.513729][T22463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1538.513740][T22463] R13: 00007fbe881e6308 R14: 00007fbe881e6270 R15: 00007ffd0d2b9d48 [ 1538.513771][T22463] [ 1539.332431][T22314] hsr_slave_0: entered promiscuous mode [ 1539.353526][T22314] hsr_slave_1: entered promiscuous mode [ 1539.374762][T18261] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1539.405770][T22314] debugfs: 'hsr0' already exists in 'hsr' [ 1539.411529][T22314] Cannot create hsr debugfs directory [ 1539.537787][T18261] usb 6-1: Using ep0 maxpacket: 16 [ 1539.555468][T18261] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1539.565879][T18261] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1539.616413][T18261] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1539.625832][T18261] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1539.633856][T18261] usb 6-1: Product: syz [ 1539.638083][T18261] usb 6-1: Manufacturer: syz [ 1539.642684][T18261] usb 6-1: SerialNumber: syz [ 1539.651357][T18261] usb 6-1: config 0 descriptor?? [ 1539.694294][T22501] loop8: detected capacity change from 0 to 256 [ 1539.701462][T22501] exfat: Deprecated parameter 'utf8' [ 1539.707753][T22501] exfat: Deprecated parameter 'namecase' [ 1539.713489][T22501] exfat: Deprecated parameter 'namecase' [ 1539.719325][T22501] exfat: Deprecated parameter 'utf8' [ 1539.777697][T22501] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1539.873817][T19191] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 1539.905066][ T6031] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 1540.409302][T19191] usb 2-1: config 0 has no interfaces? [ 1540.462417][T19191] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1540.526279][ T6031] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 68, setting to 64 [ 1540.538432][T19191] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.549382][ T6031] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1540.562981][T19191] usb 2-1: Product: syz [ 1540.574712][T19191] usb 2-1: Manufacturer: syz [ 1540.579497][ T6031] usb 3-1: New USB device found, idVendor=04b4, idProduct=de64, bcdDevice= 0.00 [ 1540.595123][T19191] usb 2-1: SerialNumber: syz [ 1540.611928][ T6031] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1540.631370][T19191] usb 2-1: config 0 descriptor?? [ 1540.661785][ T6031] usb 3-1: config 0 descriptor?? [ 1540.682725][T22500] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1541.551094][ T6031] cypress 0003:04B4:DE64.0005: item fetching failed at offset 0/3 [ 1541.570106][ T6031] cypress 0003:04B4:DE64.0005: parse failed [ 1541.583858][ T6031] cypress 0003:04B4:DE64.0005: probe with driver cypress failed with error -22 [ 1541.598934][T18433] usb 2-1: USB disconnect, device number 16 [ 1541.781947][T22314] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1541.820256][ T6031] usb 3-1: USB disconnect, device number 16 [ 1541.830170][T22314] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1541.875289][T22314] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1541.921058][T22314] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1541.989382][T22515] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5135'. [ 1542.441824][T22528] loop1: detected capacity change from 0 to 256 [ 1542.479316][T22528] exfat: Deprecated parameter 'utf8' [ 1542.485242][T22528] exfat: Deprecated parameter 'namecase' [ 1542.661042][T22528] exfat: Deprecated parameter 'namecase' [ 1542.770405][T22528] exfat: Deprecated parameter 'utf8' [ 1542.879051][T22528] exFAT-fs (loop1): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1543.191696][T22314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1543.233079][T19191] usb 6-1: USB disconnect, device number 27 [ 1543.291997][T22314] 8021q: adding VLAN 0 to HW filter on device team0 [ 1543.394198][T18162] bridge0: port 1(bridge_slave_0) entered blocking state [ 1543.401362][T18162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1543.482584][T18162] bridge0: port 2(bridge_slave_1) entered blocking state [ 1543.489761][T18162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1544.997515][T22314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1545.285843][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1546.367763][T22560] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1546.376120][T22560] F2FS-fs (loop17): Can't find valid F2FS filesystem in 1th superblock [ 1546.399209][T22560] F2FS-fs (loop17): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1546.515317][T22560] F2FS-fs (loop17): Can't find valid F2FS filesystem in 2th superblock [ 1547.064474][T18261] IPVS: starting estimator thread 0... [ 1547.184532][T22570] IPVS: using max 24 ests per chain, 57600 per kthread [ 1547.293449][T22314] veth0_vlan: entered promiscuous mode [ 1547.294421][T18433] usb 9-1: new high-speed USB device number 29 using dummy_hcd [ 1547.387369][T22314] veth1_vlan: entered promiscuous mode [ 1547.474268][T18433] usb 9-1: Using ep0 maxpacket: 16 [ 1547.530205][T18433] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1547.558073][T18433] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1547.768563][T22578] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5148'. [ 1547.952382][T22314] veth0_macvtap: entered promiscuous mode [ 1547.994050][T22314] veth1_macvtap: entered promiscuous mode [ 1548.041659][T22314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1548.080446][T18433] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1548.109478][T22314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1548.177024][T18433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.201132][T21734] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.276131][T18433] usb 9-1: config 0 descriptor?? [ 1548.315320][T21734] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.374039][T21734] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.405846][T21734] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1548.951024][ T1340] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1548.994785][ T1340] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1549.093289][T19125] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1549.123765][T19125] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.462643][T18433] usbhid 9-1:0.0: can't add hid device: -71 [ 1550.488223][T18433] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1550.635306][T18433] usb 9-1: USB disconnect, device number 29 [ 1550.862911][T22597] fuse: Bad value for 'fd' [ 1550.924454][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1551.094441][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 1551.110241][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1551.143430][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1551.185289][ T9] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1551.197016][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1551.214336][ T9] usb 1-1: Product: syz [ 1551.222021][ T9] usb 1-1: Manufacturer: syz [ 1551.236530][ T9] usb 1-1: SerialNumber: syz [ 1551.290844][ T9] usb 1-1: config 0 descriptor?? [ 1552.018545][T22609] loop5: detected capacity change from 0 to 256 [ 1552.083327][T22609] exfat: Deprecated parameter 'utf8' [ 1552.280461][T22609] exfat: Deprecated parameter 'namecase' [ 1552.375153][T22609] exfat: Deprecated parameter 'namecase' [ 1552.381050][T22609] exfat: Deprecated parameter 'utf8' [ 1553.533073][T22609] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1554.627383][T22585] usb 1-1: USB disconnect, device number 15 [ 1556.325092][T22634] tipc: Enabling of bearer rejected, already enabled [ 1564.674319][T18433] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 1564.854474][T18433] usb 1-1: Using ep0 maxpacket: 32 [ 1564.874635][T18433] usb 1-1: too many configurations: 17, using maximum allowed: 8 [ 1565.949308][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1565.981815][T18433] usb 1-1: config 0 has no interface number 0 [ 1566.031310][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1566.074468][T18433] usb 1-1: config 0 has no interface number 0 [ 1566.287004][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1566.303603][T18433] usb 1-1: config 0 has no interface number 0 [ 1566.314879][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1566.328675][T18433] usb 1-1: config 0 has no interface number 0 [ 1567.089649][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1567.124628][T18433] usb 1-1: config 0 has no interface number 0 [ 1567.141612][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1567.159545][T18433] usb 1-1: config 0 has no interface number 0 [ 1567.187348][T18433] usb 1-1: config 0 has an invalid interface number: 2 but max is 0 [ 1567.392004][T18433] usb 1-1: config 0 has no interface number 0 [ 1568.376955][T18433] usb 1-1: unable to read config index 7 descriptor/start: -71 [ 1568.444478][T18433] usb 1-1: can't read configurations, error -71 [ 1570.084188][T22723] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1570.091911][T22723] IPv6: NLM_F_CREATE should be set when creating new route [ 1570.099258][T22723] IPv6: NLM_F_CREATE should be set when creating new route [ 1570.106537][T22723] IPv6: NLM_F_CREATE should be set when creating new route [ 1571.604838][T22715] Can't find ip_set type hash:ne [ 1573.120408][T22745] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5191'. [ 1573.659784][T16741] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 1573.875746][T16741] usb 10-1: Using ep0 maxpacket: 16 [ 1573.934399][ T6024] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1574.612211][T16741] usb 10-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1574.648037][T16741] usb 10-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1574.699898][T16741] usb 10-1: config 1 interface 0 has no altsetting 0 [ 1574.727673][T16741] usb 10-1: string descriptor 0 read error: -22 [ 1574.754772][T16741] usb 10-1: New USB device found, idVendor=0b05, idProduct=1866, bcdDevice= 0.40 [ 1574.763944][T16741] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1574.801621][ T6024] usb 6-1: config 0 has no interfaces? [ 1574.821795][ T6024] usb 6-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1574.866565][ T6024] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1575.015385][ T6024] usb 6-1: Product: syz [ 1575.226430][ T6024] usb 6-1: Manufacturer: syz [ 1575.409166][ T6024] usb 6-1: SerialNumber: syz [ 1575.956015][ T6024] usb 6-1: config 0 descriptor?? [ 1576.094525][T16741] usbhid 10-1:1.0: can't add hid device: -71 [ 1576.134329][T16741] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 1576.203424][T16741] usb 10-1: USB disconnect, device number 2 [ 1576.246490][ T6024] usb 6-1: USB disconnect, device number 28 [ 1578.020672][ T6024] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1578.234331][ T6024] usb 3-1: Using ep0 maxpacket: 8 [ 1578.370688][ T6024] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 1578.617751][T22787] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5206'. [ 1578.629988][ T6024] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1578.639532][ T6024] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1578.648817][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.868714][T22585] usb 3-1: USB disconnect, device number 17 [ 1581.897038][T22823] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5216'. [ 1581.933546][T22830] fuse: Unknown parameter 'use00000000000000000000' [ 1584.918541][T22846] loop5: detected capacity change from 0 to 256 [ 1584.985174][T22846] exfat: Deprecated parameter 'utf8' [ 1584.990639][T22846] exfat: Deprecated parameter 'namecase' [ 1585.002327][T22846] exfat: Deprecated parameter 'namecase' [ 1585.008358][T22846] exfat: Deprecated parameter 'utf8' [ 1585.090224][T22842] syzkaller0: entered promiscuous mode [ 1585.095839][T22842] syzkaller0: entered allmulticast mode [ 1585.111079][T22846] exFAT-fs (loop5): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1587.405455][T22879] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5231'. [ 1588.344262][T18433] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 1589.176663][T18433] usb 10-1: Using ep0 maxpacket: 32 [ 1589.205722][T18433] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 1589.234759][T18433] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1589.443332][T18433] usb 10-1: config 0 has no interface number 0 [ 1589.460492][T18433] usb 10-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1589.584321][T18433] usb 10-1: config 0 interface 85 has no altsetting 0 [ 1589.612822][T18433] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1589.694290][T18433] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1589.727916][T18433] usb 10-1: Product: syz [ 1589.732207][T18433] usb 10-1: Manufacturer: syz [ 1589.763431][T18433] usb 10-1: SerialNumber: syz [ 1589.789418][T18433] usb 10-1: config 0 descriptor?? [ 1592.324442][T18433] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1592.409623][T18261] usb 10-1: USB disconnect, device number 3 [ 1592.737790][T18433] usb 6-1: Using ep0 maxpacket: 32 [ 1593.416413][T18433] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1593.428126][T18433] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1593.437823][T18433] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1593.550433][T18433] usb 6-1: config 0 descriptor?? [ 1593.607770][T22916] tipc: Enabling of bearer rejected, already enabled [ 1593.773176][T18261] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 1594.354797][T18261] usb 10-1: Using ep0 maxpacket: 8 [ 1594.492105][T18261] usb 10-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1594.504261][T18261] usb 10-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1594.533855][T18261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.716417][T22930] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5246'. [ 1595.530302][T16741] usb 6-1: USB disconnect, device number 29 [ 1597.010703][T18433] usb 10-1: USB disconnect, device number 4 [ 1599.266517][T22968] loop2: detected capacity change from 0 to 2048 [ 1599.438527][T22968] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 129: 0x32 != 0x7d [ 1599.475765][T22968] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1599.694486][T16741] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1599.856217][T16741] usb 6-1: config 160 has an invalid interface number: 200 but max is 0 [ 1599.909961][T16741] usb 6-1: config 160 has no interface number 0 [ 1599.936642][T16741] usb 6-1: config 160 interface 200 has no altsetting 0 [ 1599.973865][T16741] usb 6-1: New USB device found, idVendor=21bb, idProduct=2070, bcdDevice=87.0b [ 1600.002949][T16741] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.050993][T16741] usb 6-1: Product: syz [ 1600.066598][T16741] usb 6-1: Manufacturer: syz [ 1600.104294][T16741] usb 6-1: SerialNumber: syz [ 1600.109146][T22979] veth0_to_bridge: entered promiscuous mode [ 1600.173855][T22978] veth0_to_bridge: left promiscuous mode [ 1600.365248][T16741] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 1600.396662][T16741] usb 6-1: MIDIStreaming interface descriptor not found [ 1600.475317][T16741] usb 6-1: USB disconnect, device number 30 [ 1601.025548][T22982] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5263'. [ 1602.059889][T16741] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 1602.970716][T16741] usb 2-1: Using ep0 maxpacket: 8 [ 1602.983905][T16741] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 1603.330057][T16741] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1603.424248][T16741] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1604.527593][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1604.537350][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1604.544801][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1604.830754][T23007] infiniband syz2: set active [ 1604.836032][T23007] infiniband syz2: added ip6gretap0 [ 1604.851589][T18433] ip6gretap0 speed is unknown, defaulting to 1000 [ 1604.894960][T23007] RDS/IB: syz2: added [ 1604.900048][T23007] smc: adding ib device syz2 with port count 1 [ 1604.906474][T23007] smc: ib device syz2 port 1 has pnetid [ 1604.922125][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1604.934484][ T24] usb 9-1: new high-speed USB device number 30 using dummy_hcd [ 1605.118479][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1605.298584][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1605.480887][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1605.664310][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1605.722350][T18433] ip6gretap0 speed is unknown, defaulting to 1000 [ 1605.908416][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1606.024482][ T24] usb 9-1: Using ep0 maxpacket: 8 [ 1606.069917][ T6024] usb 2-1: USB disconnect, device number 17 [ 1606.259020][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1606.480140][T23007] ip6gretap0 speed is unknown, defaulting to 1000 [ 1606.720165][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1606.772991][T23025] loop2: detected capacity change from 0 to 7 [ 1606.789106][T23025] Dev loop2: unable to read RDB block 7 [ 1606.836948][T23025] loop2: unable to read partition table [ 1606.861824][T23025] loop2: partition table beyond EOD, truncated [ 1606.884480][T23025] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1606.899850][T23030] veth0_vlan: entered allmulticast mode [ 1606.939101][T23030] veth0_vlan: left promiscuous mode [ 1606.951915][T23030] veth0_vlan: entered promiscuous mode [ 1608.054403][ T24] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1608.088657][ T24] usb 9-1: unable to read config index 0 descriptor/start: -71 [ 1608.103328][ T24] usb 9-1: can't read configurations, error -71 [ 1608.232797][T18433] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1608.444464][T18433] usb 6-1: Using ep0 maxpacket: 32 [ 1608.457652][T18433] usb 6-1: config 0 has an invalid interface number: 85 but max is 0 [ 1608.477989][T18433] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1608.529236][T18433] usb 6-1: config 0 has no interface number 0 [ 1608.727952][T18433] usb 6-1: config 0 interface 85 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1608.741763][T18433] usb 6-1: config 0 interface 85 has no altsetting 0 [ 1608.756795][T18433] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1608.789133][T18433] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.476403][T18433] usb 6-1: Product: syz [ 1609.480635][T18433] usb 6-1: Manufacturer: syz [ 1609.509169][T18433] usb 6-1: SerialNumber: syz [ 1609.678743][T18433] usb 6-1: config 0 descriptor?? [ 1610.832645][T23063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5289'. [ 1611.504263][T18433] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 1611.854533][T18433] usb 9-1: Using ep0 maxpacket: 8 [ 1612.041447][T18433] usb 9-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1612.077423][T18433] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1612.108245][T18261] usb 6-1: USB disconnect, device number 31 [ 1612.132113][T18433] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1612.170802][T23077] veth0_vlan: left promiscuous mode [ 1612.176659][T18433] pvrusb2: ********** [ 1612.201415][T18433] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1612.214535][T23077] veth0_vlan: entered promiscuous mode [ 1612.238197][T18433] pvrusb2: Important functionality might not be entirely working. [ 1612.273008][T18433] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1612.297404][T18433] pvrusb2: ********** [ 1612.400550][ T2338] pvrusb2: Invalid write control endpoint [ 1612.527199][T23083] veth0_to_bridge: entered promiscuous mode [ 1612.567650][ T2338] pvrusb2: Invalid write control endpoint [ 1612.593259][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1612.642604][T23081] veth0_to_bridge: left promiscuous mode [ 1612.649039][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1612.668993][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1612.699820][ T2338] pvrusb2: Device being rendered inoperable [ 1612.727152][T23067] pvrusb2: Attempted to execute control transfer when device not ok [ 1612.743502][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1612.759345][T18261] usb 9-1: USB disconnect, device number 32 [ 1612.776079][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 1613.010106][T23088] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5297'. [ 1613.212269][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1613.218332][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1613.228522][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1614.860180][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5302'. [ 1615.939234][T23121] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5307'. [ 1618.317654][T23145] veth0_vlan: left promiscuous mode [ 1618.359293][T23145] veth0_vlan: entered promiscuous mode [ 1618.650207][T23148] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5314'. [ 1621.806861][T23176] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5322'. [ 1624.154344][T23199] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5330'. [ 1624.751525][T23208] veth0_to_bridge: entered promiscuous mode [ 1624.792055][T23212] fuse: Unknown parameter 'grou00000000000000000000' [ 1624.808531][T23202] veth0_to_bridge: left promiscuous mode [ 1626.894531][T16741] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 1627.554610][T16741] usb 1-1: Using ep0 maxpacket: 32 [ 1627.914472][T16741] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1627.949248][T16741] usb 1-1: config 0 has no interface number 0 [ 1627.984194][T16741] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1628.068578][T16741] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1628.139165][T16741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1628.212023][T16741] usb 1-1: Product: syz [ 1628.222514][T16741] usb 1-1: Manufacturer: syz [ 1628.232706][T16741] usb 1-1: SerialNumber: syz [ 1628.271348][T16741] usb 1-1: config 0 descriptor?? [ 1628.783739][T16741] smsc75xx v1.0.0 [ 1628.814259][T16741] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1628.984761][T16741] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1629.105592][T18433] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1629.852301][T23260] fuse: Unknown parameter 'grou00000000000000000000' [ 1629.925758][T18433] usb 3-1: device descriptor read/64, error -71 [ 1629.978190][T23233] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1629.984577][T23233] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1629.996373][T23233] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1630.002292][T23233] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 1630.025016][T23233] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1630.033831][T23233] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 1630.056794][T23233] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1630.074616][T23233] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 1630.209063][T18433] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1630.525962][T23233] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 1630.532095][T23233] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 1630.684240][T18433] usb 3-1: device descriptor read/64, error -71 [ 1630.808379][T18433] usb usb3-port1: attempt power cycle [ 1631.055070][T23274] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1631.062325][T23274] IPv6: NLM_F_CREATE should be set when creating new route [ 1631.069734][T23274] IPv6: NLM_F_CREATE should be set when creating new route [ 1631.077048][T23274] IPv6: NLM_F_CREATE should be set when creating new route [ 1631.165186][T18261] usb 6-1: new full-speed USB device number 32 using dummy_hcd [ 1631.463363][T18433] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1631.481772][T18261] usb 6-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1631.500957][T18261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1631.518403][T18433] usb 3-1: device descriptor read/8, error -71 [ 1631.573530][T18261] usb 6-1: config 0 descriptor?? [ 1631.673915][T18261] usb 6-1: selecting invalid altsetting 3 [ 1631.762148][T18261] comedi comedi5: could not set alternate setting 3 in high speed [ 1631.804272][T18261] usbduxsigma 6-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1631.834508][T18433] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1632.405644][T18261] usbduxsigma 6-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1632.442821][T18261] usb 6-1: USB disconnect, device number 32 [ 1632.464315][T18433] usb 3-1: device descriptor read/8, error -71 [ 1632.601993][T18433] usb usb3-port1: unable to enumerate USB device [ 1633.559692][T23298] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 4, id = 0 [ 1634.490304][ T6024] usb 1-1: USB disconnect, device number 18 [ 1634.688791][T23309] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5367'. [ 1635.253082][T23311] fuse: Unknown parameter 'group_i00000000000000000000' [ 1636.069159][T23323] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1636.076541][T23323] IPv6: NLM_F_CREATE should be set when creating new route [ 1636.083825][T23323] IPv6: NLM_F_CREATE should be set when creating new route [ 1636.091192][T23323] IPv6: NLM_F_CREATE should be set when creating new route [ 1637.064340][ T6024] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1638.097738][ T6024] usb 3-1: Using ep0 maxpacket: 32 [ 1638.133457][ T6024] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1638.172084][ T6024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1638.253606][ T6024] usb 3-1: config 0 descriptor?? [ 1638.290315][ T6024] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1639.852231][ T6024] usb 3-1: USB disconnect, device number 22 [ 1642.316363][T23379] netlink: 'syz.0.5387': attribute type 1 has an invalid length. [ 1642.316390][T23379] netlink: 224 bytes leftover after parsing attributes in process `syz.0.5387'. [ 1642.514247][ T6024] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 1642.856562][ T6024] usb 2-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1642.856598][ T6024] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1642.860148][ T6024] usb 2-1: config 0 descriptor?? [ 1643.226903][ T6024] usb 2-1: selecting invalid altsetting 3 [ 1643.226943][ T6024] comedi comedi5: could not set alternate setting 3 in high speed [ 1643.226964][ T6024] usbduxsigma 2-1:0.0: driver 'usbduxsigma' failed to auto-configure device. [ 1643.260154][ T6024] usbduxsigma 2-1:0.0: probe with driver usbduxsigma failed with error -22 [ 1643.374360][ T6024] usb 2-1: USB disconnect, device number 18 [ 1645.953400][T23401] veth0_vlan: left promiscuous mode [ 1646.043991][T23399] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1646.150735][T23401] veth0_vlan: entered promiscuous mode [ 1646.178876][T21735] Bluetooth: hci0: Frame reassembly failed (-84) [ 1648.129077][ T5846] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1648.276060][T16741] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 1648.655797][T23415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5399'. [ 1648.787399][T16741] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1649.074263][T16741] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1649.083367][T16741] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1649.279886][T16741] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1649.299262][T16741] usb 10-1: config 0 descriptor?? [ 1651.540435][ T6024] usb 10-1: USB disconnect, device number 5 [ 1651.566318][T23422] syzkaller0: entered promiscuous mode [ 1651.571955][T23422] syzkaller0: entered allmulticast mode [ 1653.264248][ T2146] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1653.635044][ T2146] usb 9-1: Using ep0 maxpacket: 32 [ 1653.678351][ T2146] usb 9-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1653.791114][ T2146] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1653.823208][ T2146] usb 9-1: config 0 descriptor?? [ 1653.854835][ T2146] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1654.594033][T23471] veth0_to_bridge: entered promiscuous mode [ 1654.952463][T23472] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5414'. [ 1655.118708][T23470] veth0_to_bridge: left promiscuous mode [ 1655.391700][ T2146] gspca_nw80x: reg_w err -71 [ 1655.397603][ T2146] nw80x 9-1:0.0: probe with driver nw80x failed with error -71 [ 1655.434932][ T2146] usb 9-1: USB disconnect, device number 33 [ 1655.514729][T18433] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 1655.686194][T18433] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1657.010590][T18433] usb 10-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1657.114319][T18433] usb 10-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1657.123502][T18433] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1657.325790][T18433] usb 10-1: config 0 descriptor?? [ 1657.436197][T23487] netlink: 20 bytes leftover after parsing attributes in process `syz.8.5421'. [ 1657.584636][ T6031] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 1659.456710][T23501] autofs: Unknown parameter '00000000000000000000' [ 1659.502861][ T6031] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1659.513190][ T6031] usb 2-1: config 1 has no interface number 0 [ 1659.516739][T18433] usb 10-1: USB disconnect, device number 6 [ 1659.521664][ T6031] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1659.541496][ T6031] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1659.557569][ T6031] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1659.577530][ T6031] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1659.612619][ T6031] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1659.647112][ T6031] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1659.664200][ T6031] usb 2-1: Product: syz [ 1659.692244][ T6031] usb 2-1: Manufacturer: syz [ 1659.713716][ T6031] usb 2-1: SerialNumber: syz [ 1659.753451][T23485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1659.784311][T23485] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1660.383752][T23515] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5420'. [ 1662.165491][ T6031] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1662.235575][ T6031] usb 2-1: USB disconnect, device number 19 [ 1662.308044][T23522] loop2: detected capacity change from 0 to 7 [ 1662.335733][T23522] Dev loop2: unable to read RDB block 7 [ 1662.367066][T23522] loop2: unable to read partition table [ 1662.399463][T23522] loop2: partition table beyond EOD, truncated [ 1662.424449][T23522] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 1664.774405][ T9] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 1664.814257][T18433] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1664.934469][ T9] usb 10-1: Using ep0 maxpacket: 32 [ 1664.954077][ T9] usb 10-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1664.970922][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1665.018038][ T9] usb 10-1: config 0 descriptor?? [ 1665.064370][T18433] usb 2-1: Using ep0 maxpacket: 16 [ 1665.082342][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1665.098657][T18433] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1665.138484][T18433] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1665.198367][T18433] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1665.234349][T18433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1665.263279][T18433] usb 2-1: Product: syz [ 1665.267877][T18433] usb 2-1: Manufacturer: syz [ 1665.272681][T18433] usb 2-1: SerialNumber: syz [ 1666.175708][T18433] usb 2-1: config 0 descriptor?? [ 1666.735045][ T9] gspca_nw80x: reg_w err -71 [ 1666.739930][ T9] nw80x 10-1:0.0: probe with driver nw80x failed with error -71 [ 1667.791186][ T9] usb 10-1: USB disconnect, device number 7 [ 1667.824403][T16741] usb 2-1: USB disconnect, device number 20 [ 1668.164801][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1669.024341][ T2146] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1669.866090][ T2146] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1669.897164][ T2146] usb 9-1: config 1 has no interface number 0 [ 1669.903303][ T2146] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1670.283838][ T2146] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1670.354521][ T2146] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1670.404200][ T2146] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1670.488662][ T2146] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1670.518668][ T2146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.554845][ T2146] usb 9-1: Product: syz [ 1670.571411][ T2146] usb 9-1: Manufacturer: syz [ 1670.580461][ T2146] usb 9-1: SerialNumber: syz [ 1670.617733][T23569] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1670.644441][T23569] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1670.863161][T23589] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5449'. [ 1671.156054][ T6031] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1671.344791][T23594] netlink: 100 bytes leftover after parsing attributes in process `syz.8.5443'. [ 1672.004206][ T6031] usb 6-1: Using ep0 maxpacket: 8 [ 1672.247663][ T6031] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1673.247331][ T6031] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1673.264761][ T6031] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1673.271798][ T6031] pvrusb2: ********** [ 1674.258960][ T2146] usb 9-1: Error in usbnet_get_endpoints (-71) [ 1674.386944][ T6031] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1674.415844][ T6031] pvrusb2: Important functionality might not be entirely working. [ 1674.423779][ T6031] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1674.435868][ T6031] pvrusb2: ********** [ 1674.611496][ T2146] usb 9-1: USB disconnect, device number 34 [ 1674.680171][ T2338] pvrusb2: Invalid write control endpoint [ 1674.714925][ T6031] usb 6-1: USB disconnect, device number 33 [ 1674.918575][ T2338] pvrusb2: Invalid write control endpoint [ 1675.000056][ T2146] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1675.056967][ T2338] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1675.067561][ T2338] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1675.075370][ T2338] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1675.085562][ T2338] pvrusb2: Device being rendered inoperable [ 1675.092791][ T2338] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1675.141932][ T2338] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 1675.167919][ T2338] pvrusb2: Attached sub-driver cx25840 [ 1675.180190][ T2338] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1675.205198][ T2338] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1675.234358][ T2146] usb 9-1: Using ep0 maxpacket: 16 [ 1675.241781][ T2146] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.264047][ T2146] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1675.308586][ T2146] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1675.338975][ T2146] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1675.362624][ T2146] usb 9-1: Product: syz [ 1675.390316][ T2146] usb 9-1: Manufacturer: syz [ 1675.404199][T18261] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1675.417352][ T2146] usb 9-1: SerialNumber: syz [ 1675.924421][T18261] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1675.935020][T18261] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1675.944062][T18261] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1675.965982][ T2146] usb 9-1: config 0 descriptor?? [ 1675.983181][T18261] usb 3-1: config 0 descriptor?? [ 1676.009408][T18261] pwc: Askey VC010 type 2 USB webcam detected. [ 1676.934620][T18261] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1676.967496][T18261] pwc: recv_control_msg error -32 req 02 val 2700 [ 1676.994400][T18261] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1677.010549][T18261] pwc: recv_control_msg error -32 req 04 val 1000 [ 1677.086651][T18261] pwc: recv_control_msg error -32 req 04 val 1300 [ 1677.114992][T18261] pwc: recv_control_msg error -32 req 04 val 1400 [ 1677.159079][T18261] pwc: recv_control_msg error -32 req 02 val 2000 [ 1677.209598][T18261] pwc: recv_control_msg error -32 req 02 val 2100 [ 1677.235244][T18261] pwc: recv_control_msg error -32 req 04 val 1500 [ 1677.282307][T18261] pwc: recv_control_msg error -32 req 02 val 2500 [ 1677.526108][T18261] pwc: recv_control_msg error -32 req 02 val 2400 [ 1677.535411][T18261] pwc: recv_control_msg error -32 req 02 val 2600 [ 1678.388540][T23644] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5464'. [ 1678.452522][T18261] pwc: recv_control_msg error -71 req 02 val 2800 [ 1678.472809][T18261] pwc: recv_control_msg error -71 req 04 val 1100 [ 1678.510168][T18261] pwc: recv_control_msg error -71 req 04 val 1200 [ 1678.564347][T18261] pwc: Registered as video103. [ 1678.591658][T18261] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input18 [ 1678.644071][T18261] usb 3-1: USB disconnect, device number 23 [ 1679.322173][T23652] nbd: socks must be embedded in a SOCK_ITEM attr [ 1679.374040][T23652] block nbd0: shutting down sockets [ 1680.110594][T18433] usb 9-1: USB disconnect, device number 35 [ 1683.446442][T23689] tty tty1: ldisc open failed (-12), clearing slot 0 [ 1686.025239][T23710] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5480'. [ 1686.704368][T18433] usb 3-1: new full-speed USB device number 24 using dummy_hcd [ 1686.875306][T18433] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1686.896915][T18433] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1686.924220][T18433] usb 3-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1686.975029][T18433] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.085155][T18433] usb 3-1: config 0 descriptor?? [ 1687.104191][T18261] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 1687.136820][T23713] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1687.380351][T18261] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1687.425290][T18261] usb 10-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1687.509718][T18261] usb 10-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1687.639414][T18261] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1687.705418][T18261] usb 10-1: config 0 descriptor?? [ 1687.736174][T18261] usbhid 10-1:0.0: couldn't find an input interrupt endpoint [ 1687.773551][T18433] usbhid 3-1:0.0: can't add hid device: -71 [ 1687.782755][T18433] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1687.887804][T18433] usb 3-1: USB disconnect, device number 24 [ 1688.194273][ T2146] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1688.353373][ T2146] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1688.364318][ T2146] usb 2-1: config 1 has no interface number 0 [ 1688.376139][ T2146] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1688.426261][ T2146] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1688.450750][ T2146] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1688.473813][ T2146] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1688.499968][ T2146] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1688.510830][ T2146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1688.533530][ T2146] usb 2-1: Product: syz [ 1688.546707][ T2146] usb 2-1: Manufacturer: syz [ 1688.560484][ T2146] usb 2-1: SerialNumber: syz [ 1688.698798][T23721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1688.706528][T23721] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1689.475688][T23736] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5484'. [ 1691.444554][ T2146] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1691.544322][ T2146] usb 2-1: USB disconnect, device number 21 [ 1692.138641][ T2146] usb 10-1: USB disconnect, device number 8 [ 1692.516515][T23755] netlink: 'syz.9.5492': attribute type 1 has an invalid length. [ 1692.530029][T23755] nbd: error processing sock list [ 1692.848706][ T2146] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 1693.694378][ T2146] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1693.774261][ T2146] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1693.808064][ T2146] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1693.832499][ T2146] usb 1-1: config 0 descriptor?? [ 1693.875903][ T2146] pwc: Askey VC010 type 2 USB webcam detected. [ 1693.940569][T23766] fuse: Bad value for 'fd' [ 1694.267919][ T2146] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1694.302319][ T2146] pwc: recv_control_msg error -32 req 02 val 2700 [ 1694.322403][ T2146] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1694.340413][ T2146] pwc: recv_control_msg error -32 req 04 val 1000 [ 1694.386329][ T2146] pwc: recv_control_msg error -32 req 04 val 1300 [ 1694.418573][ T2146] pwc: recv_control_msg error -32 req 04 val 1400 [ 1694.439049][ T2146] pwc: recv_control_msg error -32 req 02 val 2000 [ 1694.455151][ T2146] pwc: recv_control_msg error -32 req 02 val 2100 [ 1694.464936][ T2146] pwc: recv_control_msg error -32 req 04 val 1500 [ 1694.475273][ T2146] pwc: recv_control_msg error -32 req 02 val 2500 [ 1694.508629][ T2146] pwc: recv_control_msg error -32 req 02 val 2400 [ 1694.534510][ T2146] pwc: recv_control_msg error -71 req 02 val 2600 [ 1694.554644][ T2146] pwc: recv_control_msg error -71 req 02 val 2900 [ 1694.571841][ T2146] pwc: recv_control_msg error -71 req 02 val 2800 [ 1694.783889][ T2146] pwc: recv_control_msg error -71 req 04 val 1100 [ 1694.989504][ T2146] pwc: recv_control_msg error -71 req 04 val 1200 [ 1695.033147][ T2146] pwc: Registered as video103. [ 1695.643273][ T2146] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input19 [ 1695.679259][ T2146] usb 1-1: USB disconnect, device number 19 [ 1696.887531][T23790] netlink: 20 bytes leftover after parsing attributes in process `syz.9.5506'. [ 1697.043098][T23790] workqueue: Failed to create a rescuer kthread for wq "nbd64-recv": -EINTR [ 1697.043297][T23790] block (null): Could not allocate knbd recv work queue. [ 1697.061028][T23790] nbd: failed to add new device [ 1697.414503][T23807] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.5508'. [ 1697.898158][ T6024] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1698.081291][T23812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5512'. [ 1698.246342][ T6024] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1698.337273][ T6024] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1698.443542][ T6024] usb 9-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1698.459386][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1698.547284][ T6024] usb 9-1: config 0 descriptor?? [ 1698.591534][ T6024] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 1700.004271][ T2146] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1700.196543][ T2146] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1700.254287][ T2146] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1700.309841][ T2146] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.436280][ T2146] usb 3-1: config 0 descriptor?? [ 1700.467202][ T2146] pwc: Askey VC010 type 2 USB webcam detected. [ 1700.702410][T18433] usb 9-1: USB disconnect, device number 36 [ 1700.858917][ T2146] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1700.884701][ T2146] pwc: recv_control_msg error -32 req 02 val 2700 [ 1700.923907][ T2146] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1700.953925][ T2146] pwc: recv_control_msg error -32 req 04 val 1000 [ 1700.976953][ T2146] pwc: recv_control_msg error -32 req 04 val 1300 [ 1701.004553][ T2146] pwc: recv_control_msg error -32 req 04 val 1400 [ 1701.033331][ T2146] pwc: recv_control_msg error -32 req 02 val 2000 [ 1701.080893][ T2146] pwc: recv_control_msg error -32 req 02 val 2100 [ 1701.094357][ T2146] pwc: recv_control_msg error -32 req 04 val 1500 [ 1701.103450][ T2146] pwc: recv_control_msg error -32 req 02 val 2500 [ 1701.119687][ T2146] pwc: recv_control_msg error -32 req 02 val 2400 [ 1701.149705][ T2146] pwc: recv_control_msg error -71 req 02 val 2600 [ 1701.212387][ T2146] pwc: recv_control_msg error -71 req 02 val 2900 [ 1701.224211][ T6024] usb 9-1: new full-speed USB device number 37 using dummy_hcd [ 1701.229512][ T2146] pwc: recv_control_msg error -71 req 02 val 2800 [ 1701.343640][ T2146] pwc: recv_control_msg error -71 req 04 val 1100 [ 1701.365688][ T2146] pwc: recv_control_msg error -71 req 04 val 1200 [ 1701.446918][ T6024] usb 9-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1701.483144][ T2146] pwc: Registered as video103. [ 1701.495533][ T6024] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1701.499408][ T2146] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 1701.539130][ T2146] usb 3-1: USB disconnect, device number 25 [ 1701.579965][ T6024] usb 9-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1701.741434][ T6024] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1701.918056][ T6024] usb 9-1: config 0 descriptor?? [ 1701.924019][T23840] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1702.428176][T23848] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1702.527254][ T1150] Bluetooth: hci0: Frame reassembly failed (-84) [ 1703.600127][ T6024] usbhid 9-1:0.0: can't add hid device: -71 [ 1703.631075][ T6024] usbhid 9-1:0.0: probe with driver usbhid failed with error -71 [ 1703.681049][ T6024] usb 9-1: USB disconnect, device number 37 [ 1703.907129][T23856] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5522'. [ 1704.464815][T23867] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5527'. [ 1704.482539][T20226] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1707.364218][ T6024] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1707.528334][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1707.559049][ T6024] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1707.622929][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1707.724716][ T6024] usb 6-1: config 0 descriptor?? [ 1708.153679][ T6024] pwc: Askey VC010 type 2 USB webcam detected. [ 1708.566072][ T6024] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1708.604332][ T6024] pwc: recv_control_msg error -32 req 02 val 2700 [ 1708.643902][ T6024] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1708.690602][ T6024] pwc: recv_control_msg error -32 req 04 val 1000 [ 1708.753300][ T6024] pwc: recv_control_msg error -32 req 04 val 1300 [ 1708.902473][ T6024] pwc: recv_control_msg error -32 req 04 val 1400 [ 1708.949467][ T6024] pwc: recv_control_msg error -32 req 02 val 2000 [ 1709.102916][ T6024] pwc: recv_control_msg error -32 req 02 val 2100 [ 1709.221275][ T6024] pwc: recv_control_msg error -32 req 04 val 1500 [ 1709.272411][ T6024] pwc: recv_control_msg error -32 req 02 val 2500 [ 1709.316500][ T6024] pwc: recv_control_msg error -32 req 02 val 2400 [ 1709.352279][ T6024] pwc: recv_control_msg error -71 req 02 val 2600 [ 1709.503941][ T6024] pwc: recv_control_msg error -71 req 02 val 2900 [ 1709.731692][ T6024] pwc: recv_control_msg error -71 req 02 val 2800 [ 1709.743742][ T6024] pwc: recv_control_msg error -71 req 04 val 1100 [ 1710.095088][ T6024] pwc: recv_control_msg error -71 req 04 val 1200 [ 1710.478891][ T6024] pwc: Registered as video103. [ 1710.487207][ T6024] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input21 [ 1710.980775][ T6024] usb 6-1: USB disconnect, device number 34 [ 1714.754642][T23952] fuse: Unknown parameter 'use00000000000000000000' [ 1717.788001][T23987] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5559'. [ 1717.802958][T23987] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5559'. [ 1717.845099][T23987] geneve3: entered promiscuous mode [ 1717.850616][T23987] geneve3: entered allmulticast mode [ 1720.872636][T24010] netlink: 24 bytes leftover after parsing attributes in process `syz.9.5565'. [ 1720.881947][T24010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5565'. [ 1720.992199][T24010] veth0_vlan: left promiscuous mode [ 1720.999617][T24010] veth0_vlan: entered promiscuous mode [ 1723.334273][ T24] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1723.503804][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1723.584298][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1723.699310][ T24] usb 6-1: New USB device found, idVendor=04d8, idProduct=f372, bcdDevice= 0.00 [ 1723.732410][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1723.883827][ T24] usb 6-1: config 0 descriptor?? [ 1725.204768][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 1725.210832][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1725.285583][ T24] usb 6-1: USB disconnect, device number 35 [ 1729.675306][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1732.584826][T22585] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 1732.654397][T18433] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 1732.744176][T22585] usb 6-1: Using ep0 maxpacket: 32 [ 1732.763193][T22585] usb 6-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1732.967657][T22585] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1732.981191][T18433] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 1733.755628][T18433] usb 2-1: config 1 has no interface number 0 [ 1733.761762][T18433] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1733.773549][T22585] usb 6-1: config 0 descriptor?? [ 1733.809755][T22585] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1733.824340][T18433] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1733.914461][T18433] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64 [ 1733.952243][T18433] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1734.023620][T18433] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1734.064371][T18433] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1734.082796][T18433] usb 2-1: Product: syz [ 1734.093251][T24119] netlink: 4400 bytes leftover after parsing attributes in process `syz.0.5600'. [ 1734.104623][T18433] usb 2-1: Manufacturer: syz [ 1734.121731][T24119] sysfs: cannot create duplicate filename '/class/ieee80211/Ç`]Š •Iöq¯!¾>Ýsó³Îú*Š®!)\Ç+`²iF=' [ 1734.142850][T18433] usb 2-1: SerialNumber: syz [ 1734.150387][T24119] CPU: 0 UID: 0 PID: 24119 Comm: syz.0.5600 Not tainted syzkaller #0 PREEMPT(full) [ 1734.150419][T24119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1734.150439][T24119] Call Trace: [ 1734.150449][T24119] [ 1734.150460][T24119] dump_stack_lvl+0x189/0x250 [ 1734.150503][T24119] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1734.150538][T24119] ? __pfx__printk+0x10/0x10 [ 1734.150571][T24119] ? kernfs_path_from_node+0x2f/0x290 [ 1734.150600][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.150629][T24119] ? kernfs_path_from_node+0x250/0x290 [ 1734.150656][T24119] ? kernfs_path_from_node+0x2f/0x290 [ 1734.150690][T24119] sysfs_warn_dup+0x8e/0xa0 [ 1734.150718][T24119] sysfs_do_create_link_sd+0xc0/0x110 [ 1734.150749][T24119] device_add_class_symlinks+0x1cf/0x240 [ 1734.150787][T24119] device_add+0x475/0xb50 [ 1734.150823][T24119] wiphy_register+0x1ba6/0x28d0 [ 1734.150877][T24119] ? __pfx_wiphy_register+0x10/0x10 [ 1734.150907][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.150936][T24119] ? minstrel_ht_alloc+0x6dd/0x7e0 [ 1734.150984][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151013][T24119] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 1734.151058][T24119] ieee80211_register_hw+0x3484/0x4100 [ 1734.151119][T24119] ? ieee80211_register_hw+0x1481/0x4100 [ 1734.151172][T24119] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1734.151228][T24119] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1734.151262][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151294][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151324][T24119] ? __hrtimer_setup+0x187/0x210 [ 1734.151353][T24119] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 1734.151384][T24119] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 1734.151461][T24119] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1734.151498][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151527][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151556][T24119] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 1734.151592][T24119] ? kstrndup+0xbf/0x160 [ 1734.151618][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151651][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151687][T24119] hwsim_new_radio_nl+0xea4/0x1b10 [ 1734.151730][T24119] ? __pfx___nla_validate_parse+0x10/0x10 [ 1734.151776][T24119] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1734.151824][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151859][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151888][T24119] ? __nla_parse+0x40/0x60 [ 1734.151919][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151947][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.151988][T24119] genl_family_rcv_msg_doit+0x215/0x300 [ 1734.152039][T24119] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1734.152096][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152125][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152154][T24119] ? security_capable+0x7e/0x2e0 [ 1734.152207][T24119] genl_rcv_msg+0x60e/0x790 [ 1734.152255][T24119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1734.152294][T24119] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1734.152334][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152363][T24119] ? __asan_memcpy+0x40/0x70 [ 1734.152391][T24119] ? __pfx_ref_tracker_free+0x10/0x10 [ 1734.152442][T24119] netlink_rcv_skb+0x208/0x470 [ 1734.152471][T24119] ? __lock_acquire+0xab9/0xd20 [ 1734.152500][T24119] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1734.152541][T24119] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1734.152596][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152626][T24119] ? down_read+0x1ad/0x2e0 [ 1734.152664][T24119] genl_rcv+0x28/0x40 [ 1734.152700][T24119] netlink_unicast+0x82f/0x9e0 [ 1734.152740][T24119] ? __pfx_netlink_unicast+0x10/0x10 [ 1734.152770][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152799][T24119] ? skb_put+0x11b/0x210 [ 1734.152831][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152867][T24119] netlink_sendmsg+0x805/0xb30 [ 1734.152913][T24119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1734.152949][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.152978][T24119] ? aa_sock_msg_perm+0xf1/0x1d0 [ 1734.153019][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153048][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153081][T24119] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1734.153136][T24119] __sock_sendmsg+0x21c/0x270 [ 1734.153163][T24119] ____sys_sendmsg+0x505/0x830 [ 1734.153210][T24119] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1734.153251][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153276][T24119] ? import_iovec+0x74/0xa0 [ 1734.153310][T24119] ___sys_sendmsg+0x21f/0x2a0 [ 1734.153346][T24119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1734.153386][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153444][T24119] ? __fget_files+0x2a/0x420 [ 1734.153475][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153500][T24119] ? __fget_files+0x3a0/0x420 [ 1734.153544][T24119] __x64_sys_sendmsg+0x19b/0x260 [ 1734.153579][T24119] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1734.153621][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153646][T24119] ? rcu_is_watching+0x15/0xb0 [ 1734.153681][T24119] ? do_syscall_64+0xbe/0x3b0 [ 1734.153715][T24119] do_syscall_64+0xfa/0x3b0 [ 1734.153741][T24119] ? lockdep_hardirqs_on+0x9c/0x150 [ 1734.153767][T24119] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.153788][T24119] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1734.153813][T24119] ? exc_page_fault+0x9f/0xf0 [ 1734.153840][T24119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1734.153862][T24119] RIP: 0033:0x7f444c58eec9 [ 1734.153881][T24119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1734.153899][T24119] RSP: 002b:00007f444d38e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1734.153922][T24119] RAX: ffffffffffffffda RBX: 00007f444c7e6180 RCX: 00007f444c58eec9 [ 1734.153939][T24119] RDX: 0000000000000084 RSI: 0000200000000240 RDI: 0000000000000003 [ 1734.153954][T24119] RBP: 00007f444c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 1734.153968][T24119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1734.153982][T24119] R13: 00007f444c7e6218 R14: 00007f444c7e6180 R15: 00007ffcfc2e91b8 [ 1734.154018][T24119] [ 1734.844043][T24103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1734.851520][T24103] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 1734.884547][ T6031] usb 10-1: new full-speed USB device number 9 using dummy_hcd [ 1735.700933][T22585] gspca_nw80x: reg_r err -32 [ 1735.706272][T22585] nw80x 6-1:0.0: probe with driver nw80x failed with error -32 [ 1736.590206][T24132] netlink: 100 bytes leftover after parsing attributes in process `syz.1.5596'. [ 1737.242300][ T6031] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1737.428135][ T6031] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1737.435348][ T6031] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1737.444501][ T6031] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1737.456992][ T6031] usb 10-1: config 0 descriptor?? [ 1737.508771][T18433] usb 2-1: Error in usbnet_get_endpoints (-71) [ 1737.534472][T18433] usb 2-1: USB disconnect, device number 22 [ 1737.626527][ T9] usb 6-1: USB disconnect, device number 36 [ 1737.675000][ T6031] usb 10-1: can't set config #0, error -71 [ 1737.710712][ T6031] usb 10-1: USB disconnect, device number 9 [ 1744.309971][T24182] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1745.164614][ T24] usb 10-1: new full-speed USB device number 10 using dummy_hcd [ 1745.264350][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 1745.376012][ T24] usb 10-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1745.594313][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 1745.611144][ T9] usb 1-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 1745.640553][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.666832][ T24] usb 10-1: config 0 interface 0 has no altsetting 0 [ 1745.712111][ T24] usb 10-1: New USB device found, idVendor=172f, idProduct=0500, bcdDevice= 0.00 [ 1745.737833][ T9] usb 1-1: config 0 descriptor?? [ 1745.739097][ T24] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.782585][ T24] usb 10-1: config 0 descriptor?? [ 1745.807974][ T9] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 1745.825926][T24184] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 1746.570213][ T24] usbhid 10-1:0.0: can't add hid device: -71 [ 1746.601223][ T24] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 1746.612014][ T9] gspca_nw80x: reg_r err -32 [ 1746.621291][ T9] nw80x 1-1:0.0: probe with driver nw80x failed with error -32 [ 1746.694841][ T24] usb 10-1: USB disconnect, device number 10 [ 1748.476597][T18433] usb 1-1: USB disconnect, device number 20 [ 1750.974400][T16741] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 1751.154467][T16741] usb 1-1: Using ep0 maxpacket: 32 [ 1751.201648][T16741] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 1751.238789][T16741] usb 1-1: config 0 has no interface number 0 [ 1751.265718][T16741] usb 1-1: config 0 interface 184 has no altsetting 0 [ 1751.293762][T16741] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1751.312127][T16741] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1751.355788][T16741] usb 1-1: Product: syz [ 1751.371166][T16741] usb 1-1: Manufacturer: syz [ 1751.402812][T16741] usb 1-1: SerialNumber: syz [ 1751.443241][T16741] usb 1-1: config 0 descriptor?? [ 1751.504376][T16741] smsc75xx v1.0.0 [ 1751.519907][T16741] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1751.658690][T16741] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -22 [ 1753.456154][T24266] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5648'. [ 1754.326960][T24268] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5649'. [ 1757.442804][T22585] usb 1-1: USB disconnect, device number 21 [ 1758.774458][T24306] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5659'. [ 1762.752778][T24341] Bluetooth: received HCILL_WAKE_UP_IND in state 2 [ 1762.852848][T19125] Bluetooth: hci0: Frame reassembly failed (-84) [ 1764.489051][T22585] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 1764.881373][ T5846] Bluetooth: hci0: command 0x1003 tx timeout [ 1764.888844][T20226] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1764.950736][T22585] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1764.980720][T22585] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1764.992851][T22585] usb 6-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 1765.001671][T22585] usb 6-1: Product: syz [ 1765.006044][T22585] usb 6-1: Manufacturer: syz [ 1765.013279][T22585] usb 6-1: config 0 descriptor?? [ 1765.226206][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1765.233639][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1765.243425][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1765.252458][ C0] raw-gadget.0 gadget.5: ignoring, device is not running [ 1765.289446][ T6024] usb 6-1: USB disconnect, device number 37 [ 1766.345691][T24362] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.5676'. [ 1773.994312][ T6024] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1774.304978][ T6024] usb 6-1: Using ep0 maxpacket: 16 [ 1774.350683][ T6024] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1774.431203][ T6024] usb 6-1: config 0 has no interfaces? [ 1774.541746][T24433] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1774.963178][ T6024] usb 6-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 1775.002404][ T6024] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.031131][ T6024] usb 6-1: config 0 descriptor?? [ 1775.595706][T24440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1775.605011][T24440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1776.077329][T24446] syzkaller0: entered promiscuous mode [ 1776.082915][T24446] syzkaller0: entered allmulticast mode [ 1776.728619][ T6024] usb 6-1: USB disconnect, device number 38 [ 1777.401451][T24456] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5703'. [ 1777.503108][T24456] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5703'. [ 1778.408770][T24456] geneve2: entered promiscuous mode [ 1778.422109][T24456] geneve2: entered allmulticast mode [ 1782.115972][T24492] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1782.123258][T24492] IPv6: NLM_F_CREATE should be set when creating new route [ 1782.130683][T24492] IPv6: NLM_F_CREATE should be set when creating new route [ 1782.138211][T24492] IPv6: NLM_F_CREATE should be set when creating new route [ 1791.038100][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1795.780709][T24605] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5747'. [ 1795.874444][T24605] netlink: 4 bytes leftover after parsing attributes in process `syz.9.5747'. [ 1796.415637][T24605] geneve2: entered promiscuous mode [ 1796.421032][T24605] geneve2: entered allmulticast mode [ 1797.076697][T24621] nbd: socks must be embedded in a SOCK_ITEM attr [ 1797.090243][T24621] block nbd0: shutting down sockets [ 1798.643568][T24629] netdevsim netdevsim5: loading /lib/firmware/. failed with error -22 [ 1798.656347][T24629] netdevsim netdevsim5: Direct firmware load for . failed with error -22 [ 1798.664974][T24629] netdevsim netdevsim5: Falling back to sysfs fallback for: . [ 1799.623142][T24642] loop9: detected capacity change from 0 to 256 [ 1799.725456][T24642] exfat: Deprecated parameter 'utf8' [ 1799.730827][T24642] exfat: Deprecated parameter 'namecase' [ 1799.962709][T24642] exfat: Deprecated parameter 'namecase' [ 1800.162234][T24642] exfat: Deprecated parameter 'utf8' [ 1800.995030][T24642] exFAT-fs (loop9): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1806.694464][T16741] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1806.931555][T16741] usb 9-1: no configurations [ 1807.085662][T16741] usb 9-1: can't read configurations, error -22 [ 1807.314238][T16741] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1807.501802][T16741] usb 9-1: no configurations [ 1807.530970][T16741] usb 9-1: can't read configurations, error -22 [ 1807.584361][T16741] usb usb9-port1: attempt power cycle [ 1808.374195][T16741] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1808.486231][T16741] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1808.575582][T16741] usb 9-1: config 0 has no interface number 0 [ 1808.602176][T16741] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1808.631303][T16741] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1808.683908][T16741] usb 9-1: Product: syz [ 1808.704460][T16741] usb 9-1: Manufacturer: syz [ 1808.721855][T16741] usb 9-1: SerialNumber: syz [ 1808.755691][T16741] usb 9-1: config 0 descriptor?? [ 1809.125216][T16741] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1809.215291][T24719] 9pnet_fd: Insufficient options for proto=fd [ 1809.800089][T24725] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 1809.844396][T24725] netlink: 'syz.1.5782': attribute type 4 has an invalid length. [ 1809.923857][T24728] netlink: 'syz.1.5782': attribute type 1 has an invalid length. [ 1809.969823][T24725] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1809.985947][T24728] netlink: 'syz.1.5782': attribute type 4 has an invalid length. [ 1810.085347][T24728] netlink: 9462 bytes leftover after parsing attributes in process `syz.1.5782'. [ 1811.552102][T24743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1811.559511][T24743] IPv6: NLM_F_CREATE should be set when creating new route [ 1811.566896][T24743] IPv6: NLM_F_CREATE should be set when creating new route [ 1811.574243][T24743] IPv6: NLM_F_CREATE should be set when creating new route [ 1812.060696][ T2146] usb 9-1: USB disconnect, device number 40 [ 1812.241871][T24746] CIFS mount error: No usable UNC path provided in device string! [ 1812.241871][T24746] [ 1812.253271][T24746] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1814.092392][T24763] 9pnet_fd: Insufficient options for proto=fd [ 1815.617084][T24777] nbd: socks must be embedded in a SOCK_ITEM attr [ 1815.627527][T24777] block nbd0: shutting down sockets [ 1815.764017][T24779] netlink: 'syz.5.5799': attribute type 1 has an invalid length. [ 1815.772360][T24779] netlink: 224 bytes leftover after parsing attributes in process `syz.5.5799'. [ 1816.237348][T24784] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5800'. [ 1816.317214][T24784] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5800'. [ 1818.424351][ T9] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1818.614842][ T9] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1818.679524][ T9] usb 9-1: config 0 has no interface number 0 [ 1818.744295][ T9] usb 9-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1818.771267][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1818.887990][ T9] usb 9-1: Product: syz [ 1818.904896][ T9] usb 9-1: Manufacturer: syz [ 1819.022989][T24805] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1819.086570][ T9] usb 9-1: SerialNumber: syz [ 1819.131737][ T9] usb 9-1: config 0 descriptor?? [ 1819.363894][ T9] dvb_usb_ec168 9-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1821.416056][ T9] usb 9-1: USB disconnect, device number 41 [ 1822.300626][T22585] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 1822.576329][T22585] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1822.655863][T22585] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1822.733862][T22585] usb 2-1: New USB device strings: Mfr=180, Product=92, SerialNumber=0 [ 1822.824509][T22585] usb 2-1: Product: syz [ 1822.828713][T22585] usb 2-1: Manufacturer: syz [ 1822.870671][T22585] usb 2-1: config 0 descriptor?? [ 1823.467396][T22585] usb 2-1: USB disconnect, device number 23 [ 1825.484570][T24865] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5825'. [ 1826.815409][ T2146] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1827.018376][ T2146] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1827.047218][ T2146] usb 6-1: config 0 has no interface number 0 [ 1827.063726][ T2146] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1827.174397][ T6024] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 1827.195102][ T2146] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1827.222893][ T2146] usb 6-1: Product: syz [ 1827.292046][ T2146] usb 6-1: Manufacturer: syz [ 1827.315471][ T2146] usb 6-1: SerialNumber: syz [ 1827.334372][ T6024] usb 1-1: Using ep0 maxpacket: 32 [ 1827.353012][ T2146] usb 6-1: config 0 descriptor?? [ 1827.369380][ T6024] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 1827.440578][ T6024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1827.495190][ T6024] usb 1-1: config 0 descriptor?? [ 1827.536548][ T6024] as10x_usb: device has been detected [ 1827.562385][ T6024] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 1827.829533][T24898] loop2: detected capacity change from 0 to 40427 [ 1827.837859][ T2146] dvb_usb_ec168 6-1:0.1: probe with driver dvb_usb_ec168 failed with error -32 [ 1827.896822][T24898] F2FS-fs (loop2): invalid crc value [ 1827.962263][T24898] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1827.974241][T24898] F2FS-fs (loop2): Start checkpoint disabled! [ 1828.027708][T24898] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1828.274343][ T30] audit: type=1800 audit(1759431262.761:96): pid=24898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.5836" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 1828.445524][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.445524][T24903] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 1828.470432][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.470432][T24903] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1828.492401][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.492401][T24903] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1828.511996][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.511996][T24903] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 1828.531485][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.531485][T24903] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 1828.555563][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.555563][T24903] loop2: rw=2049, sector=45136, nr_sectors = 16 limit=40427 [ 1828.573295][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.573295][T24903] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 1828.591158][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.591158][T24903] loop2: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 1828.609242][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.609242][T24903] loop2: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 1828.629886][T24903] syz.2.5836: attempt to access beyond end of device [ 1828.629886][T24903] loop2: rw=2049, sector=45176, nr_sectors = 8 limit=40427 [ 1829.042441][T22396] CPU: 0 UID: 0 PID: 22396 Comm: kworker/u8:18 Not tainted syzkaller #0 PREEMPT(full) [ 1829.042479][T22396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 1829.042496][T22396] Workqueue: writeback wb_workfn (flush-7:2) [ 1829.042531][T22396] Call Trace: [ 1829.042542][T22396] [ 1829.042553][T22396] dump_stack_lvl+0x189/0x250 [ 1829.042593][T22396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1829.042627][T22396] ? __pfx_queue_work_on+0x10/0x10 [ 1829.042655][T22396] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1829.042683][T22396] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1829.042723][T22396] f2fs_handle_critical_error+0x37c/0x540 [ 1829.042771][T22396] f2fs_write_end_io+0x886/0xb60 [ 1829.042821][T22396] __submit_merged_bio+0x27a/0x6a0 [ 1829.042867][T22396] __submit_merged_write_cond+0x255/0x530 [ 1829.042914][T22396] f2fs_write_data_pages+0x261d/0x3000 [ 1829.042988][T22396] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1829.043034][T22396] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1829.043063][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043134][T22396] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1829.043192][T22396] ? trace_f2fs_writepages+0x7f/0x200 [ 1829.043232][T22396] ? f2fs_write_node_pages+0x478/0x6e0 [ 1829.043276][T22396] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1829.043322][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043358][T22396] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1829.043386][T22396] do_writepages+0x32e/0x550 [ 1829.043424][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043451][T22396] ? reacquire_held_locks+0x127/0x1d0 [ 1829.043481][T22396] ? writeback_sb_inodes+0x384/0x1010 [ 1829.043524][T22396] __writeback_single_inode+0x145/0xff0 [ 1829.043555][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043582][T22396] ? do_raw_spin_unlock+0x122/0x240 [ 1829.043623][T22396] writeback_sb_inodes+0x6c7/0x1010 [ 1829.043687][T22396] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1829.043768][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043796][T22396] ? rcu_is_watching+0x15/0xb0 [ 1829.043826][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.043864][T22396] wb_writeback+0x43b/0xaf0 [ 1829.043905][T22396] ? queue_io+0x391/0x590 [ 1829.043939][T22396] ? __pfx_wb_writeback+0x10/0x10 [ 1829.043986][T22396] ? _raw_spin_unlock_irq+0x23/0x50 [ 1829.044018][T22396] wb_workfn+0x409/0xef0 [ 1829.044063][T22396] ? __pfx_wb_workfn+0x10/0x10 [ 1829.044094][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044122][T22396] ? __lock_acquire+0xab9/0xd20 [ 1829.044162][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044194][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044227][T22396] ? _raw_spin_unlock_irq+0x23/0x50 [ 1829.044251][T22396] ? process_scheduled_works+0x9ef/0x17b0 [ 1829.044278][T22396] ? process_scheduled_works+0x9ef/0x17b0 [ 1829.044308][T22396] process_scheduled_works+0xae1/0x17b0 [ 1829.044374][T22396] ? __pfx_process_scheduled_works+0x10/0x10 [ 1829.044413][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044452][T22396] worker_thread+0x8a0/0xda0 [ 1829.044485][T22396] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1829.044522][T22396] ? __kthread_parkme+0x7b/0x200 [ 1829.044566][T22396] kthread+0x711/0x8a0 [ 1829.044605][T22396] ? __pfx_worker_thread+0x10/0x10 [ 1829.044634][T22396] ? __pfx_kthread+0x10/0x10 [ 1829.044665][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044698][T22396] ? _raw_spin_unlock_irq+0x23/0x50 [ 1829.044722][T22396] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1829.044750][T22396] ? lockdep_hardirqs_on+0x9c/0x150 [ 1829.044775][T22396] ? __pfx_kthread+0x10/0x10 [ 1829.044812][T22396] ret_from_fork+0x439/0x7d0 [ 1829.044845][T22396] ? __pfx_ret_from_fork+0x10/0x10 [ 1829.044882][T22396] ? __switch_to_asm+0x39/0x70 [ 1829.044916][T22396] ? __switch_to_asm+0x33/0x70 [ 1829.044951][T22396] ? __pfx_kthread+0x10/0x10 [ 1829.044998][T22396] ret_from_fork_asm+0x1a/0x30 [ 1829.045055][T22396] [ 1829.447428][ T6024] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 1829.599415][T22396] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1829.990567][ T2146] usb 6-1: USB disconnect, device number 39 [ 1830.083449][ T6024] as10x_usb: error during firmware upload part1 [ 1830.322363][ T6024] Registered device nBox DVB-T Dongle [ 1830.432702][T24908] gfs2: not a GFS2 filesystem [ 1831.183273][ T2146] usb 1-1: USB disconnect, device number 22 [ 1831.263486][ T2146] Unregistered device nBox DVB-T Dongle [ 1831.272859][T24911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5840'. [ 1831.276212][ T2146] as10x_usb: device has been disconnected [ 1831.331035][T24911] veth0_vlan: left promiscuous mode [ 1831.337524][T24911] veth0_vlan: entered promiscuous mode [ 1833.254537][T18433] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1833.404444][T18433] usb 9-1: device descriptor read/64, error -71 [ 1833.694323][T18433] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1833.874202][T18433] usb 9-1: device descriptor read/64, error -71 [ 1833.985060][T18433] usb usb9-port1: attempt power cycle [ 1834.582206][T24930] loop9: detected capacity change from 0 to 32768 [ 1834.584360][T18433] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1834.625238][T18433] usb 9-1: device descriptor read/8, error -71 [ 1834.864193][T18433] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1834.927678][T18433] usb 9-1: device descriptor read/8, error -71 [ 1834.961461][T24930] ocfs2: Mounting device (7,9) on (node local, slot 0) with writeback data mode. [ 1835.052889][T18433] usb usb9-port1: unable to enumerate USB device [ 1835.554855][T22314] ocfs2: Unmounting device (7,9) on (node local) [ 1836.449825][T24961] befs: (nullb0): No write support. Marking filesystem read-only [ 1836.463884][T24961] befs: (nullb0): invalid magic header [ 1838.126648][T24976] loop5: detected capacity change from 0 to 8 [ 1838.970208][ T30] audit: type=1800 audit(1759431273.131:97): pid=24979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5861" name="file1" dev="loop5" ino=5 res=0 errno=0 [ 1841.999847][T24999] netlink: 148 bytes leftover after parsing attributes in process `syz.5.5868'. [ 1843.166233][T25007] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.5871'. [ 1844.566314][T25019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5876'. [ 1845.314368][ T30] audit: type=1800 audit(1759431280.001:98): pid=25026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5878" name="SYSV00000000" dev="hugetlbfs" ino=2 res=0 errno=0 [ 1849.254318][T18433] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 1849.374369][ T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 1849.407141][T18433] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1849.471846][T18433] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1849.513826][T18433] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1849.557719][T18433] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1849.582809][T18433] usb 1-1: config 0 descriptor?? [ 1849.594219][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 1849.603308][T18433] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1849.634339][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1849.846681][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1849.869398][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1849.879706][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1849.918863][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1849.963110][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1850.170300][T25067] loop5: detected capacity change from 0 to 16 [ 1850.213435][T25067] MTD: Attempt to mount non-MTD device "/dev/loop5" [ 1850.256888][ T24] usb 2-1: GET_CAPABILITIES returned 0 [ 1850.262585][ T24] usbtmc 2-1:16.0: can't read capabilities [ 1850.409367][T25070] loop8: detected capacity change from 0 to 512 [ 1850.527505][T18433] usb 2-1: USB disconnect, device number 24 [ 1850.699251][T25070] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1850.713460][T25070] ext4 filesystem being mounted at /225/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1850.763036][T25070] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1851.163601][ T30] audit: type=1804 audit(1759431285.711:99): pid=25070 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.8.5894" name="/newroot/225/file1/file1" dev="loop8" ino=15 res=1 errno=0 [ 1851.580041][T25080] syzkaller0: entered promiscuous mode [ 1851.585818][T25080] syzkaller0: entered allmulticast mode [ 1852.565592][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1854.548649][ T6024] usb 1-1: USB disconnect, device number 23 [ 1855.581699][T20720] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1856.127752][T25116] 9pnet_fd: Insufficient options for proto=fd [ 1857.872744][T25126] loop9: detected capacity change from 0 to 128 [ 1857.891938][ T30] audit: type=1800 audit(1759431292.591:100): pid=25126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.5910" name="file1" dev="loop9" ino=1048713 res=0 errno=0 [ 1857.980222][T25120] netlink: 4 bytes leftover after parsing attributes in process `syz.8.5908'. [ 1858.026021][T25126] FAT-fs (loop9): error, corrupted file size (i_pos 548, 512) [ 1858.033819][T25126] FAT-fs (loop9): Filesystem has been set read-only [ 1858.369076][T25131] syzkaller0: entered promiscuous mode [ 1858.375003][T25131] syzkaller0: entered allmulticast mode [ 1860.407594][T25154] loop8: detected capacity change from 0 to 64 [ 1860.418291][T25154] BFS-fs: bfs_fill_super(): loop8 is unclean, continuing [ 1860.474895][T25154] BFS-fs: bfs_fill_super(): Impossible last inode number 1835512 > 513 on loop8 [ 1860.559948][T25157] 9pnet_fd: Insufficient options for proto=fd [ 1860.896589][T25164] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5923'. [ 1861.124255][ T2146] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 1861.680566][ T2146] usb 2-1: Using ep0 maxpacket: 32 [ 1861.814109][ T2146] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 1861.822231][ T2146] usb 2-1: config 0 has no interface number 0 [ 1861.857546][ T2146] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1862.149392][ T2146] usb 2-1: config 0 interface 85 has no altsetting 0 [ 1862.202073][ T2146] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1862.222055][ T2146] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1862.261126][ T2146] usb 2-1: Product: syz [ 1862.287087][ T2146] usb 2-1: Manufacturer: syz [ 1862.310927][ T2146] usb 2-1: SerialNumber: syz [ 1862.358713][ T2146] usb 2-1: config 0 descriptor?? [ 1863.061314][T25186] autofs: Unknown parameter './file0' [ 1863.654289][ T2146] appletouch 2-1:0.85: Geyser mode initialized. [ 1863.662669][ T2146] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input22 [ 1863.727126][ C0] appletouch 2-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64 [ 1863.892288][T25196] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5932'. [ 1863.951866][T25194] ip6gretap0 speed is unknown, defaulting to 1000 [ 1864.057985][T18433] usb 2-1: USB disconnect, device number 25 [ 1864.105719][ T9] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 1864.191477][T18433] appletouch 2-1:0.85: input: appletouch disconnected [ 1864.316463][ T9] usb 6-1: config 0 has no interfaces? [ 1864.383953][ T9] usb 6-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 1864.419183][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.454216][ T9] usb 6-1: Product: syz [ 1864.461767][ T9] usb 6-1: Manufacturer: syz [ 1864.496921][ T9] usb 6-1: SerialNumber: syz [ 1864.530003][ T9] usb 6-1: config 0 descriptor?? [ 1867.278846][T25220] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5942'. [ 1867.740568][T25231] autofs: Unknown parameter './file0' [ 1867.754710][ T24] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 1868.179726][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1868.194625][T25225] netlink: 8 bytes leftover after parsing attributes in process `syz.9.5941'. [ 1868.219108][ T24] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1868.221695][ T9] usb 6-1: USB disconnect, device number 40 [ 1868.235564][T25225] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1868.294696][ T24] usb 1-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1868.584452][T25236] loop8: detected capacity change from 0 to 256 [ 1868.622255][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1868.756721][T25236] exfat: Deprecated parameter 'utf8' [ 1868.866308][ T24] usb 1-1: config 0 descriptor?? [ 1868.875627][T25241] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 1868.882924][T25236] exfat: Deprecated parameter 'namecase' [ 1869.295690][T25236] exfat: Deprecated parameter 'namecase' [ 1869.305840][ T24] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1869.316258][T25236] exfat: Deprecated parameter 'utf8' [ 1869.413217][T25236] exFAT-fs (loop8): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d) [ 1873.615814][T22585] usb 1-1: USB disconnect, device number 24 [ 1874.423598][T25282] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5957'. [ 1876.468455][T25303] fuse: Bad value for 'fd' [ 1881.674652][ T9] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1882.284872][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1882.503818][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1882.578384][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1882.724287][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1882.766408][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.788919][ T9] usb 9-1: Product: syz [ 1882.793231][ T9] usb 9-1: Manufacturer: syz [ 1882.805566][ T9] usb 9-1: SerialNumber: syz [ 1882.817350][ T9] usb 9-1: config 0 descriptor?? [ 1886.330051][T22585] usb 9-1: USB disconnect, device number 46 [ 1887.744171][ T9] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 1888.477990][T25385] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5987'. [ 1888.505534][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1888.552904][ T9] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1888.562597][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1888.571736][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1888.604675][ T9] usb 3-1: config 0 descriptor?? [ 1888.621588][T25391] loop5: detected capacity change from 0 to 47 [ 1888.949941][T25394] netlink: 16402 bytes leftover after parsing attributes in process `syz.9.5990'. [ 1889.857388][T25406] syzkaller0: entered promiscuous mode [ 1889.866910][T25406] syzkaller0: entered allmulticast mode [ 1890.333399][ T6031] usb 3-1: USB disconnect, device number 26 [ 1895.763951][ T1150] Bluetooth: Error in BCSP hdr checksum [ 1895.782824][ T1150] Bluetooth: Error in BCSP hdr checksum [ 1896.165390][T18164] Bluetooth: Error in BCSP hdr checksum [ 1896.356582][T18164] Bluetooth: Error in BCSP hdr checksum [ 1896.614458][T18164] Bluetooth: Error in BCSP hdr checksum [ 1896.888982][T25460] netlink: 16402 bytes leftover after parsing attributes in process `syz.8.6007'. [ 1897.155201][ T6506] Bluetooth: Error in BCSP hdr checksum [ 1897.274295][T20226] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 1897.417804][T16063] Bluetooth: Error in BCSP hdr checksum [ 1897.674587][ T6512] Bluetooth: Error in BCSP hdr checksum [ 1902.194774][T25506] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1902.253733][ T6031] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 1902.464549][ T6031] usb 6-1: Using ep0 maxpacket: 16 [ 1903.634219][ T6031] usb 6-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 1903.850187][ T6031] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1903.865739][ T6031] usb 6-1: Product: syz [ 1904.652579][ T6031] usb 6-1: Manufacturer: syz [ 1904.690967][ T6031] usb 6-1: SerialNumber: syz [ 1904.905484][ T6031] usb 6-1: config 0 descriptor?? [ 1904.938477][ T6031] visor 6-1:0.0: Sony Clie 3.5 converter detected [ 1911.029451][ T6031] usb 6-1: clie_3_5_startup: get config number failed: -71 [ 1911.114456][ T6031] visor 6-1:0.0: probe with driver visor failed with error -71 [ 1911.267424][ T6031] usb 6-1: USB disconnect, device number 41 [ 1912.756216][T25553] loop1: detected capacity change from 0 to 47 [ 1912.904377][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1912.913887][T25559] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6037'. [ 1913.557341][T25557] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1913.920574][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.017179][ T6024] usb 10-1: new high-speed USB device number 11 using dummy_hcd [ 1915.284318][ T6024] usb 10-1: Using ep0 maxpacket: 32 [ 1915.333418][T25245] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 1915.437589][ T6024] usb 10-1: config 0 has an invalid interface number: 184 but max is 0 [ 1915.464119][ T6024] usb 10-1: config 0 has no interface number 0 [ 1915.474854][ T6024] usb 10-1: config 0 interface 184 has no altsetting 0 [ 1915.488970][ T6024] usb 10-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1915.530318][ T6024] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1915.563540][ T6024] usb 10-1: Product: syz [ 1915.584253][ T6024] usb 10-1: Manufacturer: syz [ 1915.591090][ T6024] usb 10-1: SerialNumber: syz [ 1915.608129][T25245] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1915.639791][ T6024] usb 10-1: config 0 descriptor?? [ 1915.651856][T25245] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1915.676299][ T6024] smsc75xx v1.0.0 [ 1915.679955][ T6024] smsc75xx 10-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1915.733089][T25245] usb 6-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 1915.753203][ T6024] smsc75xx 10-1:0.184: probe with driver smsc75xx failed with error -22 [ 1915.782531][T25245] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1915.811399][T25245] usb 6-1: config 0 descriptor?? [ 1915.825796][T25245] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1915.889760][ T6024] usb 10-1: USB disconnect, device number 11 [ 1916.194548][T25245] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 1916.357035][T25245] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1917.291665][T25245] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1975.359472][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2022.443979][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 2022.450977][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P22273/1:b..l [ 2022.460068][ C0] rcu: (detected by 0, t=10502 jiffies, g=128989, q=261 ncpus=2) [ 2022.467879][ C0] task:syz.0.5065 state:R running task stack:26632 pid:22273 tgid:22273 ppid:18135 task_flags:0x40044c flags:0x00080003 [ 2022.483181][ C0] Call Trace: [ 2022.486458][ C0] [ 2022.489385][ C0] __schedule+0x1798/0x4cc0 [ 2022.493934][ C0] ? __pfx___schedule+0x10/0x10 [ 2022.498797][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.504435][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 2022.509712][ C0] preempt_schedule_irq+0xb5/0x150 [ 2022.514826][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 2022.520564][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.526272][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 2022.532074][ C0] irqentry_exit+0x6f/0x90 [ 2022.536486][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2022.542454][ C0] RIP: 0010:unwind_next_frame+0x138/0x2390 [ 2022.548271][ C0] Code: 48 89 5c 24 68 4d 8d 6e 50 4c 89 e8 48 c1 e8 03 48 89 44 24 38 80 3c 28 00 74 08 4c 89 ef e8 0f c3 b0 00 49 8b 5d 00 48 85 db <74> 23 48 81 c3 88 00 00 00 48 89 d8 48 c1 e8 03 0f b6 04 28 84 c0 [ 2022.567866][ C0] RSP: 0018:ffffc90004d67538 EFLAGS: 00000246 [ 2022.573957][ C0] RAX: 1ffff920009acecb RBX: 0000000000000000 RCX: cc73df829984f500 [ 2022.581936][ C0] RDX: 0000000000000001 RSI: ffffffff8b9ec340 RDI: ffffffff8b9ec300 [ 2022.589890][ C0] RBP: dffffc0000000000 R08: 0000000000000000 R09: ffffffff81725d05 [ 2022.597845][ C0] R10: dffffc0000000000 R11: ffffffff81aaf070 R12: 1ffff920009acec1 [ 2022.605893][ C0] R13: ffffc90004d67658 R14: ffffc90004d67608 R15: ffffffff81725d05 [ 2022.613894][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2022.619009][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2022.625161][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2022.630368][ C0] ? unwind_next_frame+0xd4/0x2390 [ 2022.635482][ C0] ? unwind_next_frame+0xa5/0x2390 [ 2022.640589][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 2022.646388][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 2022.652537][ C0] arch_stack_walk+0x11c/0x150 [ 2022.657300][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 2022.663033][ C0] stack_trace_save+0x9c/0xe0 [ 2022.667767][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 2022.673156][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.678784][ C0] save_stack+0xf5/0x1f0 [ 2022.683022][ C0] ? __pfx_save_stack+0x10/0x10 [ 2022.687983][ C0] ? __free_frozen_pages+0xbc4/0xd30 [ 2022.693262][ C0] ? vfree+0x25a/0x400 [ 2022.697321][ C0] ? kcov_close+0x28/0x50 [ 2022.701636][ C0] ? __fput+0x44c/0xa70 [ 2022.705775][ C0] ? task_work_run+0x1d4/0x260 [ 2022.710535][ C0] ? do_exit+0x6b5/0x2300 [ 2022.714861][ C0] ? do_group_exit+0x21c/0x2d0 [ 2022.719613][ C0] ? get_signal+0x1285/0x1340 [ 2022.724272][ C0] ? arch_do_signal_or_restart+0xa0/0x790 [ 2022.729990][ C0] __reset_page_owner+0x71/0x1f0 [ 2022.734954][ C0] __free_frozen_pages+0xbc4/0xd30 [ 2022.740070][ C0] vfree+0x25a/0x400 [ 2022.743963][ C0] ? __pfx_kcov_close+0x10/0x10 [ 2022.748811][ C0] kcov_close+0x28/0x50 [ 2022.752962][ C0] __fput+0x44c/0xa70 [ 2022.756951][ C0] task_work_run+0x1d4/0x260 [ 2022.761537][ C0] ? __pfx_task_work_run+0x10/0x10 [ 2022.766642][ C0] ? kmem_cache_free+0x18f/0x400 [ 2022.771577][ C0] do_exit+0x6b5/0x2300 [ 2022.775729][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.781356][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2022.786737][ C0] ? do_raw_spin_lock+0x121/0x290 [ 2022.791764][ C0] ? __pfx_do_exit+0x10/0x10 [ 2022.796349][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.801988][ C0] do_group_exit+0x21c/0x2d0 [ 2022.806578][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.812202][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.817568][ C0] get_signal+0x1285/0x1340 [ 2022.822085][ C0] arch_do_signal_or_restart+0xa0/0x790 [ 2022.827748][ C0] ? __pfx___schedule+0x10/0x10 [ 2022.832586][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 2022.838741][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.844361][ C0] ? schedule+0x16f/0x360 [ 2022.848686][ C0] exit_to_user_mode_loop+0x72/0x110 [ 2022.854057][ C0] do_syscall_64+0x2bd/0x3b0 [ 2022.858709][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2022.863911][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.869970][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2022.875597][ C0] ? exc_page_fault+0x9f/0xf0 [ 2022.880272][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2022.886154][ C0] RIP: 0033:0x7f444c5c1785 [ 2022.890555][ C0] RSP: 002b:00007f444d3aff80 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 2022.898954][ C0] RAX: fffffffffffffdfc RBX: 00007f444c7e6090 RCX: 00007f444c5c1785 [ 2022.906961][ C0] RDX: 00007f444d3affc0 RSI: 0000000000000000 RDI: 0000000000000000 [ 2022.914949][ C0] RBP: 00007f444c611f91 R08: 0000000000000000 R09: 0000000000000000 [ 2022.922914][ C0] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 2022.930870][ C0] R13: 00007f444c7e6128 R14: 00007f444c7e6090 R15: 00007ffcfc2e91b8 [ 2022.938847][ C0] [ 2022.941856][ C0] rcu: rcu_preempt kthread starved for 8221 jiffies! g128989 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 2022.953044][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 2022.962999][ C0] rcu: RCU grace-period kthread stack dump: [ 2022.968955][ C0] task:rcu_preempt state:R running task stack:27152 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 2022.982445][ C0] Call Trace: [ 2022.985712][ C0] [ 2022.988632][ C0] __schedule+0x1798/0x4cc0 [ 2022.993149][ C0] ? __lock_acquire+0xab9/0xd20 [ 2022.998023][ C0] ? __pfx___schedule+0x10/0x10 [ 2023.002881][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2023.008508][ C0] ? schedule+0x91/0x360 [ 2023.012752][ C0] schedule+0x165/0x360 [ 2023.016900][ C0] schedule_timeout+0x12b/0x270 [ 2023.021846][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 2023.027217][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 2023.033101][ C0] ? __pfx_process_timeout+0x10/0x10 [ 2023.038387][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2023.044015][ C0] ? prepare_to_swait_event+0x341/0x380 [ 2023.049676][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 2023.054529][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2023.059889][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 2023.066036][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 2023.071321][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 2023.076623][ C0] ? finish_swait+0xcd/0x1f0 [ 2023.081218][ C0] rcu_gp_kthread+0x99/0x390 [ 2023.085806][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2023.091000][ C0] ? __kthread_parkme+0x7b/0x200 [ 2023.095936][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2023.101625][ C0] ? __kthread_parkme+0x1a1/0x200 [ 2023.106651][ C0] kthread+0x711/0x8a0 [ 2023.110717][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 2023.115904][ C0] ? __pfx_kthread+0x10/0x10 [ 2023.120484][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2023.126108][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 2023.131291][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 2023.136907][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 2023.142175][ C0] ? __pfx_kthread+0x10/0x10 [ 2023.146763][ C0] ret_from_fork+0x439/0x7d0 [ 2023.151351][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 2023.156453][ C0] ? __switch_to_asm+0x39/0x70 [ 2023.161208][ C0] ? __switch_to_asm+0x33/0x70 [ 2023.165962][ C0] ? __pfx_kthread+0x10/0x10 [ 2023.170543][ C0] ret_from_fork_asm+0x1a/0x30 [ 2023.175313][ C0] [ 2023.178325][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 2023.184629][ C0] Sending NMI from CPU 0 to CPUs 1: [ 2023.189926][ C1] NMI backtrace for cpu 1 [ 2023.189942][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 PREEMPT(full) [ 2023.189966][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 2023.189980][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 2023.190008][ C1] Code: de 9a d8 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d b3 7d 10 00 f3 0f 1e fa fb f4 b3 9a d8 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 2023.190027][ C1] RSP: 0018:ffffc90000197de0 EFLAGS: 000002c2 [ 2023.190055][ C1] RAX: dcaecfafaf97af00 RBX: ffffffff81953917 RCX: dcaecfafaf97af00 [ 2023.190073][ C1] RDX: 0000000000000001 RSI: ffffffff8d51801b RDI: ffffffff8b9ec360 [ 2023.190089][ C1] RBP: ffffc90000197f20 R08: ffff8880b8932fdb R09: 1ffff110171265fb [ 2023.190106][ C1] R10: dffffc0000000000 R11: ffffed10171265fc R12: ffffffff8f5bfe30 [ 2023.190122][ C1] R13: 0000000000000001 R14: 0000000000000001 R15: 1ffff110038dbb58 [ 2023.190139][ C1] FS: 0000000000000000(0000) GS:ffff888126480000(0000) knlGS:0000000000000000 [ 2023.190157][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2023.190173][ C1] CR2: 00007f93a2b7cab3 CR3: 000000000db36000 CR4: 0000000000350ef0 [ 2023.190191][ C1] Call Trace: [ 2023.190199][ C1] [ 2023.190207][ C1] default_idle+0x13/0x20 [ 2023.190235][ C1] default_idle_call+0x73/0xb0 [ 2023.190265][ C1] do_idle+0x1e7/0x510 [ 2023.190295][ C1] ? __pfx_do_idle+0x10/0x10 [ 2023.190334][ C1] cpu_startup_entry+0x44/0x60 [ 2023.190359][ C1] start_secondary+0x101/0x110 [ 2023.190381][ C1] common_startup_64+0x13e/0x147 [ 2023.190426][ C1] [ 2024.394098][T25245] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 2024.446856][T25245] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2024.578625][T20226] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2024.594516][T20226] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2024.622900][T20226] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2024.638741][T25245] usb 2-1: config 0 descriptor?? [ 2024.646571][T20226] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2024.684380][T20226] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2024.732377][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2025.168779][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2025.599688][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2025.614635][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2025.734413][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 SYZFAIL: failed to send rpc fd=3 want=5744 sent=0 n=-1 (errno 32: Broken pipe) [ 2027.855341][T20226] Bluetooth: hci0: command tx timeout [ 2028.160881][T18164] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.339204][T21735] tipc: Resetting bearer [ 2029.567719][T18164] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.674550][T25245] usb 2-1: can't set config #0, error -110 [ 2029.777883][T18164] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2029.800943][ T9] usb 6-1: USB disconnect, device number 42 [ 2029.854769][ T2146] usb 2-1: USB disconnect, device number 26 [ 2030.017670][T18164] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2030.329952][T18164] team0: left allmulticast mode [ 2030.335505][T18164] team_slave_0: left allmulticast mode [ 2030.341005][T18164] team_slave_1: left allmulticast mode [ 2030.346878][T18164] team0: left promiscuous mode [ 2030.351672][T18164] team_slave_0: left promiscuous mode [ 2030.361698][T18164] team_slave_1: left promiscuous mode [ 2030.367586][T18164] bridge0: port 3(team0) entered disabled state [ 2030.377025][T18164] bridge_slave_1: left allmulticast mode [ 2030.382672][T18164] bridge_slave_1: left promiscuous mode [ 2030.390441][T18164] bridge0: port 2(bridge_slave_1) entered disabled state [ 2030.400411][T18164] bridge_slave_0: left promiscuous mode [ 2030.406190][T18164] bridge0: port 1(bridge_slave_0) entered disabled state [ 2030.856852][T18164] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 2030.871308][T18164] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2030.882927][T18164] bond0 (unregistering): Released all slaves [ 2031.022409][T18164] bond1 (unregistering): Released all slaves [ 2031.120088][T18164] tipc: Disabling bearer [ 2031.128579][T18164] tipc: Disabling bearer [ 2031.139636][T18164] tipc: Left network mode [ 2031.154605][T18164] IPVS: stopping backup sync thread 20207 ... [ 2031.641811][T18164] hsr_slave_0: left promiscuous mode [ 2031.652024][T18164] hsr_slave_1: left promiscuous mode [ 2031.658409][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2031.665976][T18164] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2031.673946][T18164] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2031.681582][T18164] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2031.707966][T18164] veth1_macvtap: left promiscuous mode [ 2031.713536][T18164] veth0_macvtap: left promiscuous mode [ 2031.719504][T18164] veth1_vlan: left promiscuous mode [ 2031.724874][T18164] veth0_vlan: left promiscuous mode [ 2032.377953][T18164] team0 (unregistering): Port device team_slave_1 removed