last executing test programs: 12m19.749428948s ago: executing program 3 (id=9): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x2) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) 12m18.437280332s ago: executing program 3 (id=10): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f0000000340)={[{@nolazytime}, {@lazytime}, {@sysvgroups}, {@norecovery}, {@usrjquota}, {@orlov}, {@nogrpid}, {@noauto_da_alloc}, {@norecovery}]}, 0x3, 0x566, &(0x7f0000001b40)="$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") r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448cb, 0x0) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0402030c"], 0x7) 12m17.259069433s ago: executing program 3 (id=15): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r1, 0x3000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x44000820) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r3) sendmsg$NLBL_MGMT_C_ADD(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x14, r4, 0xe701ac47a3d23ecd}, 0x14}}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000006c0)={0x100, 0x0, 0xe701ac47a3d23ecd, 0x0, 0x2, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93UK\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~=\xe5\xdc\x90\a\xe7M\x9c<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}]}, 0x100}}, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17) 12m14.889218445s ago: executing program 3 (id=21): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x442a, &(0x7f0000004480)="$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") symlink(&(0x7f0000000040)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0/file0\x00', &(0x7f0000000280)='./file0\x00') mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) 12m12.455093129s ago: executing program 3 (id=26): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) syz_clone(0x80842111, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000051c0), &(0x7f0000005200)='./file0\x00', 0x1204408, &(0x7f0000000000)={[{@compress_force}, {@clear_cache}, {@nobarrier}, {@nossd}, {}, {@space_cache_v1}]}, 0x0, 0x51ab, &(0x7f000000a440)="$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") r0 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000001700)=""/4095, 0x440000}], 0x100000000000011a) 12m7.944977716s ago: executing program 3 (id=39): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) 11m51.560569193s ago: executing program 32 (id=39): bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) move_pages(0x0, 0x20000000000000fe, &(0x7f0000000080)=[&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil], 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000240)={&(0x7f0000008000/0xa000)=nil, &(0x7f0000019000/0x1000)=nil, &(0x7f000000b000/0x2000)=nil, &(0x7f000000f000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000008000/0x4000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f000000c000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000009000/0x1000)=nil, 0x0}, 0x68) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100)={[], 0x11}, 0x0, 0x0) 11m43.532391703s ago: executing program 0 (id=84): timer_create(0x0, &(0x7f0000000140)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000100)) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, r0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdir(0x0, 0x0) openat$rtc(0xffffff9c, &(0x7f0000000080), 0xa200, 0x0) syz_io_uring_setup(0x3af6, &(0x7f0000001400)={0x0, 0xd9b2, 0x1000, 0x0, 0x23b}, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000000)) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netlink\x00') read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) ioctl$TCSBRKP(r4, 0x5425, 0x4) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) userfaultfd(0x80001) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'ip6tnl0\x00', &(0x7f0000000240)={'ip6_vti0\x00', 0x0, 0x29, 0x7, 0x7, 0x3, 0x12, @empty, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8000, 0x10, 0x9, 0x4}}) socket$nl_route(0x10, 0x3, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000080)='net/nf_conntrack\x00') read$FUSE(r5, &(0x7f0000004a80)={0x2020}, 0x2020) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000480)={@cgroup, 0x11, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0}, 0x40) 11m41.965877333s ago: executing program 0 (id=86): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/timer_list\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/tcp_sack\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f00000000c0)=0x8b, 0x100000500) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e21, @local}, 0x10) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) 11m41.613279282s ago: executing program 0 (id=88): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000880)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x50, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_DESC={0xc, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x3c}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x40, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "edff"}]}]}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 11m41.350870169s ago: executing program 0 (id=90): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000002c0)='./bus\x00', 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB="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", @ANYRES8, @ANYBLOB="2c6d65b47d7189617375"], 0x1, 0x61e2, &(0x7f000000d7c0)="$eJzs3c1vHGcdB/DfvvqltLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz4A3rgyo0TJyLZSKCeGDT288Szk92uU8c7a8/nIzkzv3lmvc/4u7MvmZl9AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACI73/vB2udiLj287RgJeIz0YvoRiyV9WpELK2u5PX7EfFc7DXHsxExWIgob7/3z9MRr0bER09F7OxurpeLLx6yH9/9499/98Mn3vrbHwbn//unO73XJq139+6v/vPne0fbZgAAAGiboiiKTvqYfyZ9vu823SkAYCby63+R5OWnvv71P9/6yzz1R61Wq9XqGdRVxXj3qkVEbFVvU75ncDgeAE6Yrfi46S7QIPm3Wj8inmi6E8Bc6zTdAY7Fzu7meifl26m+Hqzut+dzQUby3+o8uL5j0nSa+jkms3p8bUcvnpnQn6UZ9WGe5Py79fyv7bcP03rHnf+sTMp/uH/pU+vk/Hv1/GtOT/7dsfm3Vc6//0j59+QPAAAAAABzLP///0rDx38Xjr4ph/JJx39XZ9QHAAAAAAAAAHjcjjr+3wPG/wMAAIC5VX5WL/3mqYNlk76LrVx+tRPxZG19oGXSxTLLTfcDAAAAAAAAAAAAANqkv38O79VOxCAinlxeLoqi/Kmq14/qqLc/6dq+/dBmTT/JAwDAvo+eql3L34lYjIir6bv+BsvLy0WxuLRcLBdLC/n97HBhsViqfK7N03LZwvAQb4j7w6L8ZYuV21VN+7w8rb3++8r7Gha9Q3TsMRmkv+aE5obCBoBk/9VoxyvSKVMUT0968wEj7P+n0EqsNP24Yv41/TAFAAAAjl9RFEUnfZ33mXTMv9t0pwCAmciv//XjAkequxPaIx7P71er1Wq1Wv2p6qpivHvVIiK2qrcp3zMYjh8ATpit+LjpLtAg+bdaPyKea7oTwFzrNN0BjsXO7uZ6J+Xbqb4epPHd87kgI/lvdfZul28/bjpN/RyTWT2+tqMXz0zoz7Mz6sM8yfl36/lf228fpvWOO/9ZmZT/cO+SufbJ+ffq+decnvy7Y/Nvq5x//5Hy78kfAAAAAADmWP7//xXHf/MmAwAAAAAAAMCJs7O7uZ6ve83H/z83Zj3Xf55OOf/Oo+a/lOblf6Ll/Lu1/L9cW69Xmb//5sH+/+/dzfXf3/nXZ/P0sPkv5JlOemR10iOik+6p00/To2zdw7YHvWF5T4NOt9dP5/wUg3fiRtyMjbgwsm43/T0O2tdG2sueDkbaL4609x9qvzTSPkjfO1As5fZzsR4/iZvx9l572bYwZfsXp7QXU9pz/j3P/62U8+9Xfsr8l1N7pzYt3f+w+9B+X52Ou583bnz+lxeOf3Om2o7eg22rKrfvbAP92fubPDGMn93euHXu7vU7d26tRZqMLL0YafKY5fwHez8LB8//L+y35+f96v56/8PhI+c/L7ajPzH/Fyrz5fa+NOO+NSHnP0w/Of+3U/v4/f8k5z95/3+5gf4AAAAAAAAAAAAAAADAJymKYu8S0Tci4nK6/qepazMBgNnKr/9Fkper1Wq1Wq0+fXVVMd7r1SIi/lq9Tfme4RfjfhkAMM/+FxH/aLoTNEb+LZa/76+cvth0Z4CZuv3+Bz+6fvPmxq3bTfcEAAAAAAAAAPi08vifq5Xxn1+MiJXaeiPjv74Zq0cd/7OfZx4MMPqYB/qeYLs77HUrw40/H3vjc5+bNP732Xh4/O88Jm6vuh0TDKa0D6e0L0xpXxy79CCtsRd6VOT8n6+Md17mf6Y2/Hobxn+tj3nfBjn/s5XHc5n/l2rrVfMvfjt3+W8ddsXt6I7kf/7Oez89f/v9D1658d71dzfe3fjxpbW1C5cuX75y5cr5d27c3Liw/+/x9HoO5Pzz2NfOA22XnH/OXP7tkvP/Qqrl3y45/y+mWv7tkvPP7/fk3y45//zZR/7tkvN/KdXyb5ec/1dSLf922dndXCjzfznV8m+XvP9/NdXyb5ec/yupln+75PzPpVr+7ZLzP5/qQ+Tv6+FPkZx/PsJl/2+XnP9aquXfLjn/i6mWf7vk/C+lWv7tkvN/NdXyb5ec/9dSLf92yflfTrX82yXn//VUHzL/aac9c0Lk/K+k2v7fLjn/b6Ra/u2S8/9mquXfLjn/11It/3bJ+X8r1fJvl5z/t1Mt/3bJ+X8n1fJvl5z/66mWf7scfP+/GTNmzOSZpp+ZAAAAAAAAAAAAAIC6WZxO3PQ2AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/ZwcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2LvXGLnO8g7gZ/bmtUOIgRCc1JC1Y4xxluz6El9oXUwIlwYoBZIAvWC73rVZ8A2vXQJFsmmgRMKoqKIi/dAWUNRGqiqsig+0Smk+VL18atoP9EtFVQmpUWWigIrUVjRbzZz3fXdmdnZm1ztenz3n95OSZ3fmnDnvnHnP2Xl2/Z8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQLMtb5v+Yi3Lsvp/jf9tzLKX1b9eP7axcdubb/YIAQAAgJX6v8b/X7wt3XB4CSs1LfN3r/vHb8/Nzc1lHx78veGvzs2lO8aybHhdljXui67++0dqzcsEj2ejtYGm7wd6bH6wx/1DPe4f7nH/SI/71/W4f7TH/Qt2wALr89/HNB5sW+PLjfkuzW7Phhv3beuw1uO1dQMD8Xc5DbXGOnPDJ7KZ7FQ2nU22LJ8vW2ss/8yW+rbelcVtDTRta3N9hvzos8fjGGphH29r2db8Y0Y/fGs29uMfffb4H1+4dmen2nM3tDxePs4dW+vj/Hy4JR9rLVuX9kkc50DTODd3eE0GW8ZZa6xX/7p9nC8ucZyD88NcVe2v+Wg20Pj6ucZ+Gmr+tV7aT5vDbf99T5Zll+eH3b7Mgm1lA9mGllsG5l+f0XxG1h+jPpVemQ0ta55uWcI8rdepba3ztP2YiK//lrDe0CJjaH6Zfvi5kQWv+3LnaVR/1osdK+1zsN/HSlHmYJwXzzWe9BMd5+C28Pw/u33xOdhx7nSYg+l5N83Brb3m4MDIYGPM6UWoNdaZn4O7WpYfbGyp1qjPb+8+BycunD43Mfvpz7xp5vSxk9Mnp8/s2bVrcs++fQcOHJg4MXNqejL//3Xu7eLbkA2kY2Br2HfxGHhD27LNU3XuG/07Dke7HIcb25bt93E41P7kaqtzQC6c0/mx8XB9p49eGcgWOcYar8/OlR+H6Xk3HYdDTcdhx58pHY7DoSUch/Vlzu1c2nuWoab/Oo3hRv0s2Ng0B9vfj7TPwX6/HynKHBwN8+Jfdy7+s2BzGO8T48t9PzK4YA6mpxvOPfVb0vv90QON0mle3lW/45aR7OLs9Pn7Hjt24cL5XVkoq+JVTXOlfb5uaHpO2YL5OrDs+Xp45nVP3NXh9o1hX42+qf6/0UVfq/oye+/r/lo1frp13p8tt+7OQumz1d6fnX6a1/dn6iW77M/6Mp+fWPl78dSXNp1/hxc5/8a+/6V8e+mhHh8cHsqP38G0d4ZbzsetL9VQ49xVa2z7xYmlnY+Hw3+rfT6+vcv5eFPbsv0+Hw+3P7l4Pq71+m3HyrS/nqNhnpya7H4+ri+zafdy5+RQ1/PxPaHWwv5/Y+gUUl/UNHcWm7dpW0NDw+F5DcUttM7TPS3LD4ferL6tp3df3zzdcU/+WIPp2c1brXk61rZsv+dpOl8tNk9rvX77dn3aX8/RMC9u39N9ntaXeXbvys+d6+OXTefOkV5zcHhwpD7m4TQJ8/P93Po4B+/Ljmdns1PZVOPekcZ8qjW2NX7/0ubgSPhvtc+Vm7rMwR1ty/Z7DqafY4vNvdrQwiffB+2v52iYF0/e330O1pd5cH9/37vuCLekZZreu7b/fm2x33nd1babbuTvvOrj/Jv93X83W1/m1IHl9pnd99O94ZZbOuyn9uN3sWNqKlud/bQpjPPagcX3U3089WW+enCJ8+lwlmWXPvlA4/e94e8rf37xe99u+btLp7/pXPrkAy/ceuJvlzN+ANa+l/KyIf9Z1/SXqaX8/R8AAABYE2LfPxBqov8HAACA0oh9f/xX4Yn+HwAAAEoj9v1DoSYV6f83PXht5qVLWUrmzwXx/rQbHsqXixnXyfD92Ny8+u0PPDX9k7+8tLRtD2RZ9tOHfrPj8pseiuPKjYVxXn176+0LV7y0pO0ffWR+ueb8+tfD48fns9Rp0CmCO5ll2TO3fbmxnbGPXGnUZx862qgfuPzE4/VlXjyYfx/Xf/5V+fJ/EMK/h08ca1n/+bAffhDq5Ls774+43reuvHHz/kfntxfXq219eeNpP/nR/HHj5+R85fF8+bifFxv/X33p6W/Vl3/s9Z3Hf2mg8/ifDo/7VKj/89p8+ebXoP59XO8LYfxxe3G9+7753Y7jv/rFfPlz78iXOxpq3P6O8P22d1ybad5fj9WOtTyv7J35cnH7k9/7ncb98fHi47ePf/TIlZb90T4/nv3n/HEm2paPt8ftRH/Rtv364zTPz7j9p3/7aMt+7rX9qx94/rX1x23f/r1tyw22rd/+iU1/+IUvd9xeHM/hPzvX8nwOvz8cx2H7T340zMdw//9e/XLLdqOj7289/8Tlv77xUsvzid7143z7V99yslH/Y+wnv3/Ly259+eW76/suy577YP54vbZ/8o/Otoz/G3fsbLwe8f6Y0W/f/mLi9s9/avzM2dmLM1NNe7Xx2TnvycezbnT9hvp4bwvn1vbvj5y98LHp82OTY5NZNlbej9C7bt8M9YW8XF7u+jsfCa/nXV97ZsP2f/pSvP1fHs5vv/Lu/OfWG8JyXwm3b8xfv7naCrf/5JY7Gsd37dn8+5Ycex9s3vafB5a0YHj+7e8L4nw/9+qPNfZD/b7Gz414XK9w/N+fyh/nO2G/zoVPZt56x/z2mpePn41w5YP58b7i/RdOc/F1/ZPwer/3B/njx3HF5/v98D7mu5taz3dxfnzn0kD74zc+xeNyOJ9kl/P741Jxf1958Y6Ow4ufQ5JdvrPx/e+mx7lzWU9zMbOfnp04NXPm4mMTF6ZnL0zMfvozR06fvXjmwpHGZ3ke+Xiv9efPTxsa56ep6X17s8n1WZadzSZX4YR1Y8Zf/2pp4z/3yPGp/ZPbp6ZPHLt44sIj56bPnzw+O3t8emp2+7ETJ6Y/1Wv9malDu3Yf3LN/9/jJmalDBw4e3HNwfObM2fow8kH1sG/yE+Nnzh9prDJ7aO/BXfffv3dy/PTZqelD+ycnxy/2Wr/xs2m8vvZvjJ+fPnXswszp6fHZmc9MH9p1cN++3T0/DfD0uROzYxPnL56ZuDg7fX4ify5jFxo313/29Vqfcpr9t/z9bLta/kF82fvu3Zc+n7Xuqc8t+lD5Im0fIHotfBbNP7zi3IGlfB/7/uFQk4r0/wAAAFAFse8fCTXR/wMAAEBpxL5/XaiJ/h8AAABKI/b9o6EmFen/5f/l/5eW/8/vl/+vVv7/3CfzXOlaz//H/Lz8fzXc5Pz/irffh/z/3d3ulP/vQf7/pubnV2Tg5o9f/l/+n4WKlv+Pff/6LKtk/w8AAABVEPv+DaEm+n8AAAAojdj33xJqov8HAACA0oh9/8tCTSrS/8v/Lyn/v7tX4Kr8+X/X/1+9/P/8eUj+P7ei/H98ceT/K2PZ+ftHH275tgT5/67k/3uQ/1+7+f8CjF/+X/6fdsOL3nOz8v+x77811KQi/T8AAABUQez7Xx5qov8HAACA0oh9/22hJvp/AAAAKI3Y928MNalI/y//f93X/x9t/kb+v3X88v+tXP8/zIe1eP3/psHI/68Nrv/fnfx/D9ed/x+V/1+L+f/h/o6/2Pn/nsOX/+eGKNr1/2Pf/4pQk4r0/wAAAFAFse9/ZaiJ/h8AAABKI/b9rwo10f8DAABAacS+//ZQk4r0//L/153/byH/3zp++f/O80P+fw3m/7te/z//Sv6/WOT/u5P/78H1/6uV/+/z+Iud/+/39f+H396+vvw/nRQt/x/7/leHmlSk/wcAAIAqiH3/HaEm+n8AAAAojdj3vybURP8PAAAApRH7/k2hJhXp/+X/5f/l/+X/5f87b793/j8n/18s8v/dyf/3IP8v/y//v7T8f4c3v/L/dFK0/H/s++8MNalI/w8AAABVEPv+u0JN9P8AAABQGrHv/5lQE/0/AAAAlEbs+zeHmlSk/9/04LVHv9b4Sv4/k/+X/69A/v/eEfl/+f9yk//vTv6/B/l/+X/5/yVe/3+h5eT/1/V6MEqjaPn/2Pe/NtRkQePX/o4UAAAAWCti3/+6UJOK/P0fAAAAqiD2/XeHmuj/AQAAoDRi3z8WarL2+v8PDVzHSq7/X678/5/+9ZN3Z/L/8v89tl/S/H+cBvL/FSf/3538fw/y//L/8v+rkv+nOoqW/499/5ZQk7XX/wMAAACLiH3/1lAT/T8AAACURuz77wk10f8DAABAacS+f1uoSUX6f/n/cuX/I/l/+f9u2y9p/j+R/682+f8Omg7SNZL/H5P/l/9fi+MvR/4/vvuV/6c/ipb/j33/60NNKtL/AwAAQBXEvn97qIn+HwAAAEoj9v1vCDXR/wMAAEBpxL5/R6hJRfp/+X/5f/l/+X/5/87bl/9fm+T/u1tu/n/E9f/l/+X/K5b/d/1/+qto+f/Y978x1KQi/T8AAABUQez7d4aa6P8BAACgNOK/38z/3av+HwAAAMoo9v3joSYV6f9XkP+fG5T/T+T/W8df1Px/Tf5f/l/+v/Tk/7tbI9f/l/8vUP6/frv8v/y//D/Xq2j5/9j3vynUpCL9PwAAAFRB7PvvCzXR/wMAAEBpxL5/ItRE/w8AAAClEfv+yVCTivT/rv9fufz/uirn/13/X/5f/r/85P+7k//vQf7f9f/Llv/PMvl/bqqi5f9j378r1KQi/T8AAABUQez7d4ea6P8BAACgNGLfvyfURP8PAAAApRH7/r2hJhXp/+X/K5f/r/T1/+X/5f/l/8tP/r87+f8e5P/l/8uW/3f9f26youX/Y99/f6hJRfp/AAAAqILY9+8LNdH/AwAAQGnEvn9/qEno/zv9u24AAABgbYl9/4FQk4r8/V/+vyT5/9/6+5Zty//L/3fbfn/y/+vl/0OV/y+Wkub/2w+L6yb/34P8v/y//L/8P31VtPx/7PsPhppUpP8HAACAKoh9/5tDTfT/AAAAUBqx7//ZUBP9PwAAAJRG7Pt/LtSkIv2//H9J8v9t5P/l/7tt3/X/5f/LrKT5/74pVf5/QP5f/r9Y45f/l/9noRuf/49fLS3/H/v+Q6EmFen/AQAAoApi3//zoSb6fwAAACiN2Pe/JdRE/w8AAAClEfv+w6EmFen/5f/l/+X/5f9vTP7/LVm7Iub/65NH/r9c5P+7K1X+3/X/5f8LNn75f/l/Fira9f9j3//WUJOK9P8AAABQBbHvfyDURP8PAAAApRH7/reFmuj/AQAAoDRi3/9gqElF+n/5f/l/+X/5f9f/77x9+f+1Sf6/O/n/HuT/5f/l/+X/6aui5f9j3//2UJOK9P8AAABQBbHvf0eoif4fAAAASiP2/e8MNdH/AwAAQGnEvv9doSYV6f/l/+X/i5T/H2kbv/y//H8m/y//v0zy/93J//cg/y//L/8v/09fFS3/H/v+Xwg1qUj/DwAAAFUQ+/6HQk30/wAAAFAase9/d6iJ/h8AAABKI/b97wk1qUj/L/8v/1+k/H/m+v/y/5XJ/2cte1X+v3/k/7uT/+9B/l/+X/5f/p++Klr+P/b97w01qUj/DwAAAFUQ+/5fDDXR/wMAAEBpxL7/faEm+n8AAAAojdj3/1KoSUX6f/l/+f9i5f/nLmWu/5/I/+f6kv+vr1So/L/r/98o8v/dyf/30CH/v07+X/5f/l/+n+tWtPx/7PvfH2pSkf4fAAAAqiD2/R8INdH/AwAAQGnEvv+DoSb6fwAAACiN2Pc/HGpSkf5f/r+S+f/0lIuX/3f9f/n/qlz/X/7/RpH/707+vwfX/5f/l/+X/6evipb/j33/I6EmFen/AQAAoApi3/9oqIn+HwAAAEoj9v0fCjXR/wMAAEBpxL7/w6EmFen/5f8rmf8v8PX/y5b/H2qZHzcm/7+ukPn/0abXM81L+X/5/1Ug/9+d/H8P8v8hP58NyP8XMP8fZvP6RdaX/6eIipb/j33/R0JNKtL/AwAAQBXEvv+XQ030/wAAAFAase//lVAT/T8AAACURuz7fzXUpCL9v/y//L/8v+v/u/5/5+3L/69N8v/dyf/3IP/v+v9Fzv/3IP9PERUt/x/7/l8LNVm08Xvhv5bwNAEAAIACiX3/R0NNKvL3fwAAAKiC2PcfCTXR/wMAAEBpxL7/aKhJRfp/+f/2/H+8oqr8v/z/msv/D8n/5+T/q61/+f/X3Jpl8v/y//L/8v/y//L/rETR8v+x7z8WalKR/h8AAACqIPb9vx5qov8HAACA0oh9//FQE/0/AAAAlEbs+6dCTSrS/8v/u/5/v/L/P5X/v9n5f9f/D+T/q831/7uT/+9B/l/+X/5f/p++Klr+P/b906EmFen/AQAAoMTSr4Nj338i1ET/DwAAAKUR+/6ToSb6fwAAACiN2Pd/LNSkIv2//L/8v+v/34z8/1DL8vL/Ofl/+f9+kP/vTv6/B/l/+X/5f/l/+qpo+f/Y98+EmlSk/wcAAIAqiH3/x0NN9P8AAABQGrHv/0Soif4fAAAASiP2/adCTSrS/8v/y/9XPf9fy7LLrv8v/99p+/L/a5P8f3fy/z3I/8v/y//L/9NXRcv//z979/Fk11nmcfyOx5bUs/H8CbOZDSuWsDIb9mzZUcXaRJODbXIGkzFgwOScczI554wJJudooqFKlFvP86hb9/Y5kvp033Pe9/PZPCMNct+2BdQP1bfe3P1Xxi2d7H8AAADoQe7+e8Ut9j8AAAA0I3f/veMW+x8AAACakbv/PnFLJ/tf/6//773/X23l/f/9/3r9/xn6f/3/FNb6+0sv7Ncf2P/f8U5X3UP/r//X/w/S/+v/9f+ca279f+7++8Ytnex/AAAA6EHu/vvFLfY/AAAANCN3//3jFvsfAAAAmpG7/6q4pZP9r//X/+v/9f/7+v+b9P/6/2Xz/v8w/f8I/b/+X/+v/2dSc+v/c/c/IG7pZP8DAABAD3L3PzBusf8BAACgGbn7HxS32P8AAADQjNz9D45bOtn/+n/9v/5/Kf3/Ce//n/P96P/1/5vo/4fp/0fo//X/+n/9P5OaW/+fu/8hcUsn+x8AAAB6kLv/oXGL/Q8AAADNyN3/sLjF/gcAAIBm5O5/eNzSyf7X/+v/9f9L6f+P6f1//b/+f+FuXJ39zwT9/zr9/4iR/n+10v8POe9+fvO3t5zPfwD9v/6fdXPr/3P3PyJuuctqdeJiv0kAAABgVnL3PzJu6eTP/wEAAKAHufuvjlvsfwAAAGhG7v5r4pZO9r/+X/+v/9f/6/83f339/zKdX39/8sBfr/8PB/b/d/jfK+/Zb//v/f9h3v/X/+v/Odfc+v/c/dfGLZ3sfwAAAOhB7v5HxS32PwAAADQjd/+j4xb7HwAAAJqRu/8xcUsn+1//31r//9/7ft2e/n+3dtH/6//1//r/1h22v9f/h67f/9+pH+r/9f/6f/0/hzO3/j93/2Pjlk72PwAAAPQgd//j4hb7HwAAAJqRu//xcYv9DwAAAM3I3f+EuKWT/a//b63/3//rvP+v/9/09fX/+v+W6f+H6f9HtPL+/0X+rtl2P39Y2/78+n/9P+vm1v/n7n9i3NLJ/gcAAIAe5O5/Utxi/wMAAEAzcvc/OW6x/wEAAKAZufufErd0sv/1//r/ZfT/+RX0//r/o+//k/5/mfT/w/T/I1rp/y/Stvv5pX9+/b/+n3Vz6/9z9z81bulk/wMAAEAPcvc/LW6x/wEAAKAZufufHrfY/wAAANCM3P3PiFs62f/6f/3/Mvp/7//r/73/r/8/P/r/Yfr/Efp//b/+X//PpObW/+fuvy5u6WT/AwAAQA9y9z8zbrH/AQAAoBm5+58Vt9j/AAAA0Izc/c+OWzrZ//p//b/+X/+v/9/89fX/y6T/H6b/H6H/1//r//X/TGpG/f+eX3Vq9Zy4pZP9DwAAAD3I3f/cuMX+BwAAgGbk7n9e3GL/AwAAQDNy9z8/bulk/+v/Z9P/7+Z8bfX/O6vV6qL7/7vq/5fd/+/s+edZvy/1//r/Y6D/H6b/H6H/1//r//X/TGpG/f/uj3P3vyBu6WT/AwAAQA9y918ft9j/AAAA0Izc/S+MW+x/AAAAaEbu/hfFLZ3sf/3/bPr/XW31/97/P/f3R0/9v/f/1+n/j4f+f5j+f4T+X/+v/9f/M6m59f+5+18cN5247KK/RQAAAGBmcvffELd08uf/AAAA0IPc/S+JW+x/AAAAWKjr1n4md/9L45ZO9r/+f9r+/8Sen9P/6//P/f2h/9f/6/+Pnv5/mP5/hP5f/6//1/8zqbn1/7n7Xxa3dLL/AQAAoAe5+2+MW+x/AAAAaEbu/pfHLfY/AAAANCN3/yvilk72v/7f+//6f/2//n/z19f/L5P+f5j+f4T+X/+/3f7/5Nn/U/9PGy6g/z99+vTVR97/5+5/ZdzSyf4HAACAHuTuf1XcYv8DAABAM3L3vzpusf8BAACgGbn7XxO3dLL/9f9H0f+fqRVn3f/nb/Vl9f/XrFb6f/2//l//P0z/P0z/P0L/r//3/r/+n0nN7f3/3P2vjVs62f8AAADQg9z9r4tb7H8AAABoRu7+18ct9j8AAAA0I3f/G+KWTva//t/7/wvq/73/r//f9/0srP+/baX/PxaL6P93Dv76c+//r9X/6/8HdNf/3+3O+36o/9f/s25u/X/u/jfGLZ3sfwAAAOhB7v43xS32PwAAADQjd/+b4xb7HwAAAJqRu/8tcdOlnex//b/+X/+v/9f/b/76x/z+/4nVaqX/n8Ai+v8Bc+//vf+v/x/SXf9/Dv2//p91c+v/c/e/NW7pZP8DAABAD3L3vy1usf8BAACgGbn73x632P8AAADQjNz974hbOtn/+n/9v/5f/998/3/tIvp/7/9PRP8/TP8/Qv+v/9f/6/85Ftvq/3P3vzNu6WT/AwAAQA9y978rbrH/AQAAoBm5+98dt9j/AAAA0Izc/e+JWzrZ//p//f+F9P/5OfX/bfX/J2fX/5/a99fr5P1//f9E9P/D9P8j9P/6f/3/dfp/pjS39/9z9783bulk/wMAAEAPcve/L279T7f2PwAAADQjd//74xb7HwAAAJqRu/8DcUsn+1//r//3/r/+v/n3//X/XdH/D9P/j9D/6//1/97/Z1Jz6/9z938wbulk/wMAAEAPcvd/KG6x/wEAAKAZufs/HLfY/wAAANCM3P03xS2d7H/9v/5f/6//1/+f+Weo/2+D/n/Y8fT/O/p//X/18/8V/y7Q/+v/x349bZpb/5+7/yNxSyf7HwAAAHqQu/+jcYv9DwAAAM3I3f+xuMX+BwAAgEW6dMPP5e7/eNzSyf7X/+v/9f/6f/3/5q+v/18m/f8w7/8f5H+u3/sj/f/59vP/t+9HS3v//9z//tL/6/+Z3tz6/9z9n4hbOtn/AAAA0IPc/Z+MW+x/AAAAaEbu/k/FLfY/AAAANCN3/6fjlk72v/5f/99M/3/7h9D/6//1/93T/w/T/4/w/v9W389f+ufX/+v/WTe3/j93/2filk72PwAAAPQgd/9n4xb7HwAAAJqRu/9zcYv9DwAAAM3Y3f0Zl3W4//X/W+v/d//6+n/v/+v/9f/6/2np/4fp/0fo//X/+n/9P5OaW///+d1fdWr1hbilk/0PAAAAPcjd/8W4xf4HAACAZuTu/1LcYv8DAABAM3L3fzlu6WT/6/+9/7+M/v/06dNX6//1//u/n7P9/y36f4r+f5j+f4T+X/+v/9f/M6m59f+5+78St3Sy/wEAAKAHufu/GrfY/wAAANCM3P1fi1vsfwAAAGhG7v6vxy2d7H/9/+2f4/L6+aPt/2/4/439/yn9v/f/9f8r7//r/yei/99sJ67+f0SL/f+p8//2t93PH9a2P7/+X//Purn1/7n7vxG3dLL/AQAAoAe5+78Zt6zt/5uP8VMBAAAAU8rd/624xZ//AwAAQDNy9387bulk/+v/j+/9/9v/3vXy/v/OavPn1//r//X/+v+jpv8fpv8f0WL/fwG23c8v/fPr//X/rJtb/5+7/ztxy/7hd9mFfZcAAADAnOTu/27c0smf/wMAAEAPcvffHLfY/wAAANCM3P3fi1s62f/6/+Pr//f28633/8fz/v8p/b/+f8r+/xL9fxv0/8P0/yOOrP8/kX99/f8R2vbn1//v7f/zd7P+v3dz6/9z938/bulk/wMAAEAPcvf/IG6x/wEAAKAZuft/GLfY/wAAANCM3P23xC179v+mtrsV+n/9/3L7f+//6/+9/6//X6f/3xn8/55v/39ydbj+P+n/vf+v/++1//f+P2fMrf/P3f+juMWf/wMAAMDiXHbAz+fu/3HcYv8DAABAM3L3/yRusf8BAACgGbn7fxq33HrJtj7SsdL/6//1//p//f/mr6//Xyb9/zDv/4/Q/0/Rz1+h/2+j/1+t9P8c3tz6/9z9P4tb/Pk/AAAANCN3/8/jFvsfAAAAmpG7/xdxi/0PAAAAzcjd/8u4pZP9r//X/x+y/99NM/X/Z+j/z9D/b6b/Px76/2H6/xH6f+//6/+9/8+k5tb/5+7/VdzSyf4HAACAHuTu/3XcYv8DAABAM3L3/yZusf8BAACgGbn7fxu3dLL/t9b/x99q/f92+/9LvP+/S/+v/9/09fX/y6T/H6b/H6H/1//r//X/TGpu/X/u/t/FLZ3sfwAAAOhB7v7fxy32PwAAADQjd/8f4hb7HwAAAJqRu/+PcUsn+9/7/333/xO8/6//H+7/T+79Ovp//b/+/+jp/4fp/zerf1D6f/2//l//z6Tm1v/n7v9T3NLJ/gcAAIAe5O7/c9xi/wMAAEAzcvffGrfY/wAAANCM3P1/iVs62f/6f/2//t/7//r/zV9f/79M+v9h2+z/7375+Jf1/v/W+//8CPp//b/+n0nMrf/P3f/XuKWT/Q8AAAA9yN3/t7jF/gcAAIBm5O7/e9xi/wMAAEAzcvf/I27pZP+P9P9n3y7X/w/S/+///Pr/zb8/9P/6f/3/0dP/D/P+/wj9v/f/9f/6fyY1t/4/d/8/45ZO9j8AAAD0IHf/bXGL/Q8AAADNyN3/r7jF/gcAAIBm5O7/d9zSyf73/v+S+v8r9P/6f/2//l//P0L/P0z/P0L/r//X/+v/mdTc+v/c/f8JAAD///dEVNI=") rename(&(0x7f0000000000)='./file2\x00', &(0x7f00000005c0)='./file0/file0\x00') syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f0000002000)=ANY=[@ANYBLOB="11010000733336088dee1adb2361000000010902"], 0x0) mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000001c0)='./file0\x00', 0x40000, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x20863, 0x0) 11m37.581323768s ago: executing program 0 (id=94): r0 = socket(0x10, 0x3, 0x0) r1 = fsopen(&(0x7f0000000040)='bdev\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x5, &(0x7f0000000080)='nomand\x00', 0x0, 0x0) rename(0x0, &(0x7f0000000540)='./cgroup.cpu/cpuset.cpus\x00') r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x37, &(0x7f0000000380)=""/74, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @dev, 0x5}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000001440)=ANY=[@ANYBLOB="0017"], 0xc0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000140)={{r6, 0xffffffffffffffff}, &(0x7f00000001c0), 0x0}, 0x20) r8 = socket(0x10, 0x3, 0x9) sendmmsg$unix(r8, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)='|', 0x1}], 0x1, 0x0, 0x0, 0x4044804}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000002c40)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}], 0x20, 0x8000}}], 0x2, 0x24004800) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1f, 0xf, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000140000a8b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r9}, 0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@deltaction={0x14, 0x31, 0x10, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 11m33.077419745s ago: executing program 0 (id=105): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8002, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) 11m32.335750804s ago: executing program 33 (id=105): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x101a40, 0x0) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000280)={0x18, 0x0, {0x3, @local, 'geneve0\x00'}}, 0x1e) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xa8002, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x2) 10m4.961297172s ago: executing program 1 (id=317): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) ioctl$VHOST_SET_VRING_KICK(r1, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f00000002c0)={0x1, r2}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000340)=0x1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) 10m4.226989741s ago: executing program 1 (id=322): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x10040) syz_emit_ethernet(0x3a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0xc2, 0x5, 0x0, 0x6, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x20044000) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x96, 0x0, 0x3}, 0x28) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x13c, 0x19, 0x1, 0x0, 0x10, {{@in=@loopback, @in=@remote, 0x4e22, 0xb, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x7fffffffffffffff}, {0x1, 0x9, 0x80}, 0x4, 0x0, 0x0, 0x0, 0x0, 0x3}, [@tmpl={0x84, 0x5, [{{@in6=@private0, 0x0, 0x3c}, 0x0, @in=@remote, 0x34ff, 0x0, 0x2}, {{@in6=@loopback, 0x0, 0x32}, 0x0, @in6=@empty, 0x3503, 0x1, 0x0, 0x0, 0x8}]}]}, 0x13c}, 0x1, 0x0, 0x0, 0x20004850}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000400)='./file0\x00', 0x402, &(0x7f0000001a40)=ANY=[@ANYBLOB='iocharset=macinuit,umask=00000000000000000000354,errors=continue,gid=', @ANYRESHEX=r5, @ANYBLOB=',iocharset=koi8-r,discard,allow_utime=00000000000000000000010,discard,allow_utime=00000000000000000000004,uid=', @ANYRESHEX=0x0, @ANYBLOB=',gid=', @ANYRESHEX=0x0, @ANYBLOB="3cfaf0c8b6eca02453decf4c663cdf6c8aca7084d9b4386866a21bb3ec26b6d50ae4ad3f87d725d8725712b8489024deafd6509f6c3c6fdc"], 0x1, 0x151f, &(0x7f0000000500)="$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") unshare(0x400) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x3, 0xffffffff}}, 0x10) getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 10m0.969990746s ago: executing program 1 (id=325): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz82pAjEUBeDzMrPIAxH7sQW3s7IZ67EX67AKiSQjAxYgInzf4v6EQ+CGr/pLUv63tSR1DFMv9T2736aaXEYicy+30cp4OD568pCc+3ZqrdX1s5f7svZdpjnL9VN3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAveQYAAP//xSsI5Q==") mount(&(0x7f0000001100)=@filename='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001080)='ext4\x00', 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0xc404) fsopen(&(0x7f0000000380)='minix\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe79, 0x21, 0x2}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m48.029907463s ago: executing program 1 (id=362): r0 = fanotify_init(0x0, 0x0) r1 = socket(0x1d, 0x2, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000000)={0x1d, r3, 0x3, {0x0, 0x1}}, 0x18) sendmmsg$inet(r1, &(0x7f0000002e00)=[{{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000080)="d171e4c4c55f7973", 0x8}], 0x1}}], 0x1, 0x0) syz_usb_connect(0x4, 0x0, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 9m44.470232176s ago: executing program 1 (id=365): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x119}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278cab057f89b7464048cf573", 0xb5}], 0x2, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 9m44.091305946s ago: executing program 1 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz82pAjEUBeDzMrPIAxH7sQW3s7IZ67EX67AKiSQjAxYgInzf4v6EQ+CGr/pLUv63tSR1DFMv9T2736aaXEYicy+30cp4OD568pCc+3ZqrdX1s5f7svZdpjnL9VN3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAveQYAAP//xSsI5Q==") mount(&(0x7f0000001100)=@filename='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001080)='ext4\x00', 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0xc404) fsopen(&(0x7f0000000380)='minix\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe79, 0x21, 0x2}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 9m28.708567967s ago: executing program 34 (id=369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='status\x00') prctl$PR_SET_NAME(0xf, &(0x7f0000000240)='}]\\:\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x100) unlinkat(0xffffffffffffff9c, 0x0, 0x200) syz_read_part_table(0x104b, &(0x7f0000000000)="$eJzsz82pAjEUBeDzMrPIAxH7sQW3s7IZ67EX67AKiSQjAxYgInzf4v6EQ+CGr/pLUv63tSR1DFMv9T2736aaXEYicy+30cp4OD568pCc+3ZqrdX1s5f7svZdpjnL9VN3AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMAveQYAAP//xSsI5Q==") mount(&(0x7f0000001100)=@filename='./file0\x00', &(0x7f0000001140)='./file0\x00', &(0x7f0000001080)='ext4\x00', 0x0, 0x0) sendmmsg$unix(r1, 0x0, 0x0, 0xc404) fsopen(&(0x7f0000000380)='minix\x00', 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') preadv(r3, &(0x7f0000000140)=[{&(0x7f0000000200)=""/138, 0x8a}], 0x1, 0xbc, 0xfffffffb) inotify_rm_watch(0xffffffffffffffff, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0xfffffffffffffe79, 0x21, 0x2}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.550834825s ago: executing program 6 (id=3251): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="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", 0x119}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b11834eb07eeb4278", 0xaa}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}, {&(0x7f0000000280)=""/76, 0x4c}, {&(0x7f0000000fc0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/92, 0x5c}, {&(0x7f0000000980)=""/73, 0x49}, {0x0}, {&(0x7f00000007c0)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) 5.454942227s ago: executing program 5 (id=3253): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, 0x0, 0x0) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) 5.36645756s ago: executing program 6 (id=3254): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 5.289564812s ago: executing program 5 (id=3256): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r4, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4004000) 5.013665149s ago: executing program 5 (id=3260): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0x70bd27, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x10000, 0x0, 0x0, 0x1000000, 0x0, {0x0, 0x2, 0x0, 0x0, 0xfffe}, {0x0, 0x0, 0x0, 0x0, 0xfffd}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0x1}}]}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 4.847173683s ago: executing program 5 (id=3261): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) 2.67380692s ago: executing program 5 (id=3274): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) io_setup(0x3ff, &(0x7f00000000c0)=0x0) r1 = syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0) r2 = syz_pidfd_open(r1, 0x0) waitid$P_PIDFD(0x3, r2, 0x0, 0xa000000c, 0x0) io_submit(r0, 0x1, &(0x7f0000000300)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x3fd, r2, 0x0}]) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000100)={"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"}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000080), 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, 0x0}, 0xffffffff}, {{&(0x7f00000028c0)=@l2={0x1f, 0x0, @none}, 0x80, 0x0, 0x0, &(0x7f0000003980)=""/50, 0x32}, 0x2}], 0x2, 0x2, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0x1000006, @loopback, 0x8007}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002200), 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) socketpair$unix(0x1, 0x2, 0x0, 0x0) getgroups(0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000680)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r5, 0x0, 0x30048005) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[], 0x34}, 0x1, 0x0, 0x0, 0x200080d0}, 0x14) socket$inet(0x2, 0x4000000000000001, 0x0) r6 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x121040, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r6, 0x80044dfb, &(0x7f0000000000)) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$SNDRV_TIMER_IOCTL_PARAMS(0xffffffffffffffff, 0x40505412, &(0x7f00000006c0)={0xd0b70a201c2dc55e, 0x2, 0xc80f, 0x0, 0x12}) bind$rds(r7, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) 2.65346241s ago: executing program 6 (id=3275): syz_emit_vhci(&(0x7f0000000940)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_CLASS_OF_DEV={{0x8c}, 0xf5}}}, 0x7) syz_ublk_setup_io_uring(0x64c1, 0x0, &(0x7f0000000440), &(0x7f0000000480), 0x0) io_uring_setup(0xacd, 0x0) openat$kvm(0x0, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r0, 0x4048aecb, 0x0) 2.565910183s ago: executing program 4 (id=3276): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x274, 0x10, 0x2, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@sec_ctx={0x179, 0x8, {0x175, 0x8, 0x1, 0x8, 0x16d, "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"}}, @tfcpad={0x8}]}, 0x274}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a", 0xe}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 2.464185625s ago: executing program 6 (id=3277): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) close(r1) 2.164249623s ago: executing program 6 (id=3280): sendmsg$NL80211_CMD_JOIN_IBSS(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x248}, 0x1, 0x0, 0x0, 0x4010}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000440)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071", 0xd3}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d8590070", 0x22}, {&(0x7f0000000140)="f610e61ac81cc3edc86f0500194d27a5a443f10dfd1ecda0fd0ed9a444b7fb76afe3a0002f0a5eafcd3555a6cad574af080de74a37f54ee5f10fe3f42b445293ca980200000000000000ecfd6cc1b3a9a9263506e88c5557069d0ca055991454ec1307b7411892a1beaef9ae54833107eb88b0411b1bc0ba9bc28d0eb6a73ad76be9facd1d9d82b6a3cc2040e84b398d279e50535b6557df8a633cfc7615fca9879b", 0xa2}], 0x3, 0x0, 0x0, 0x900}}], 0x1, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x365}, {&(0x7f0000000280)=""/76, 0x14c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/92, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x188}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 2.098991605s ago: executing program 2 (id=3281): openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ff8000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, './bus\x00'}, 0x6e) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x100, 0x399}) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e21, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xa}, 0x1c) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) 2.071288356s ago: executing program 4 (id=3282): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 2.070277326s ago: executing program 6 (id=3283): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000400)={0x40, 0x17, 0x1, "1f"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000bc0)={0x44, &(0x7f0000000900)=ANY=[@ANYBLOB="e01506"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000240)={0x40, 0x5, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0}) 1.926020799s ago: executing program 4 (id=3284): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000800)={'bridge0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_WASH={0x8}]}}]}, 0x3c}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000080), 0x0) bind$bt_hci(r3, &(0x7f00000001c0)={0x1f, 0xffff, 0x3}, 0x6) write(r3, &(0x7f0000000340)="07000000010000", 0x7) 1.858480801s ago: executing program 2 (id=3285): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, r1, 0x7, 0x0, 0xffffff7f, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}}, 0x0) 1.745322644s ago: executing program 2 (id=3286): r0 = socket$kcm(0x11, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdc01, {0x0, 0x0, 0x0, r5, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r6, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214000600002fb96d", 0xe}], 0x1}, 0x4004000) 1.730895184s ago: executing program 4 (id=3287): socket(0x22, 0x4, 0x2) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000000)=0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x20000000, '\x00', 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="380000005400e50100000000fdffffff07000000", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="010101007f"], 0x38}, 0x1, 0x0, 0x0, 0x841}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x1, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005200000bf0900000000000055090100000000009500000000000000b7020000000000007baaf8ff00000000b5090800000000007baaf0ff00000000bf870000000000000707001ef8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004600000076000000bf98000000000000b5080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0}, 0x94) openat$dma_heap(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c081, 0x0) r8 = socket$kcm(0xa, 0x1, 0x106) setsockopt$sock_attach_bpf(r8, 0x29, 0x4e, 0x0, 0x4) close(0xffffffffffffffff) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r9 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r10, 0x29, 0x10, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet6_int(r10, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r10, 0x0, 0x0, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) 1.630162467s ago: executing program 5 (id=3288): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000040)={0x20, 0xf, 0x4, "a0e778e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000640)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000000)=ANY=[@ANYBLOB="601004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000c40)={0x44, &(0x7f00000009c0)={0x40, 0xf, 0x4, "fe9aba74"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.315078195s ago: executing program 2 (id=3289): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000034709d405f0530c6acb60102030109021200fd000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000380)={0x2c, &(0x7f0000000400)={0x20, 0x1, 0x1, "af"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000200)={0x40, 0x18}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)={0x40, 0x21, 0x1}}) 757.68334ms ago: executing program 2 (id=3290): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=@newsa={0x274, 0x10, 0x2, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@sec_ctx={0x179, 0x8, {0x175, 0x8, 0x1, 0x8, 0x16d, "9d093e60a8140e242c526669ca01a08e907b54be59467f2b40b43f175684fac9a44fbfaeb2969f19e482d8b58014ddae8ab29ad0586a7eb28a6f2623f5bb58f24d215b030c1ea6cf2a8b7593032b2009440f994a0159e3228b2a3dab0be61f9debd7ade1ddfdb395627bad6187f3e53a8795a9ff1655333ae4b1da2950eae8c3a9b8403cef7f1938c2472cd12bdda1948e9d17e9b61766c2eb5a53c8f46cbd376f450420464d753bedd87a9660bff97ae3da118352accd75758601d172b16350b05e87678eac5b6cc1edfb2ed9853e39213eb149ab0b87a2a34d716e63f8cf0e00221bef42229a9fd696e8bb5d5d661059480f753c1056a09a19562e18f49de29ed11e222a63f36a87e50190bb5733f16d453067f50c504272e81a368fe7fe7de35febeb36e5d8f845ac5f9123b2f130a28d56be27921792d542db997d0ff70800f93f0d3026eaa6fc962267706881f629b4bf8dbc06954196c7e33e5e67edc0a1d95425383f270ab43396866c"}}, @tfcpad={0x8}]}, 0x274}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000240)="45e04400f2b383517a08c397dd0a", 0xe}], 0x1}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 389.767589ms ago: executing program 2 (id=3291): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9848519def38491bbc4173c3c6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e0000ea4feb931647fc5393de25000000000000000000", 0x41}, {&(0x7f0000000e80)="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", 0x122}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df098c113e179a0", 0x2e}, {&(0x7f0000000540)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b588880", 0x8d}], 0x4}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000fc0)="31fdffffffffffffff74098b2e5e55a1828636f60fc0cfdac56c75f1687f0c56287423f5eed69f117e766bdbad0c2171ad6227e1173ab6efa2fcb1c420a51a0917861009000000f049c606ccab7cda1f0e3490fbe385ea382294882839a22674037b8910bd8a1420e33eb1be6d10cfb24eb7cccdf1528ef33b34ab07cdb0909a9ba999d89d0c5d7c9c8c569334e9547e1e343b451d9025c4e153612d4674b9411fb4de29559900bcb388d291aa839ab0954e6a8dfc19c3c1533a11d81e03a487b0d736f1ca", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000940)="42e013913edbeb683c44e18a52b5a2462064ddd92caaba941de80d06047dedb7eeeff3a27eacf4c416b6979d7e918608807c44d01535dbaab3b390086e4fd43c6b5931187023646d6beac2340fdc7a0d81214ac708818f64d287", 0x5a}], 0x1}}, {{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)="e6bac1668e5b309efda177b827c14e1e59e57a59774d9a207d394f8b262cb974444d941c9401556676af700fd38224908adba4b8aee34bca25112816982b78c0be11782e21f26b871d9870f08d7834856d8a5dc7b179", 0x56}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f00000001c0)="d59f41c0418ebad512facf22d697f3c97fa25becae148b518203467ee73c881817657efe92a415cd70d9ae44e7de8d81f558e67adb0be705fcdae72a6125b0a47c9267278147923ab3f54170671e09", 0x4f}, {&(0x7f0000000700)="73347c742785f90aa563b4c01785f8371c6c153843eb25bce2d86628414138f6d3eb90c44817fbcc958e331db94a8d1119eefe09b541e73e4789594b627b7ba94f6c14265df07fabab61972e1be26c0cb37d32c3a771e304e6f8cc49bdbdb05c7569b6300fef45f8992df412b3f5905c23ae4503aa74d9fca922433294", 0x7d}], 0x2}}], 0x5, 0x2090) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000000c0)="f43945ca864918caf5375823337eb7c72fc5b6b5161a2c0ca175ff29e6e88a7cc3f70000000000", 0xffffffffffffff73, 0x340080d1, 0x0, 0x0) 23.160649ms ago: executing program 4 (id=3292): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_freezer_state(r0, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r1, &(0x7f0000000080)='THAWED\x00', 0x7) 0s ago: executing program 4 (id=3293): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, 0x0) r3 = syz_io_uring_setup(0x53f2, &(0x7f0000000180)={0x0, 0x15b9, 0x20000, 0x3, 0x1fd}, &(0x7f0000000200), 0x0, &(0x7f00000002c0)) io_uring_register$IORING_REGISTER_CLOCK(r3, 0x1d, 0x0, 0x0) syz_emit_ethernet(0x87, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) add_key$user(&(0x7f00000003c0), 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) rmdir(0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004045}, 0xc0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r5 = add_key$user(&(0x7f00000001c0), &(0x7f0000000280)={'syz', 0x2}, &(0x7f0000000480)="2f77abd63ebfe7dbf2f6bfd198b30957f888d4114bbe8a57a5fdc09f903c1d7b5fa8f24db0fdafe48b0405a97cdb0826dc0000000000a1cc5ec9c66a9914a800bdaf69416b535f3c35d8950367b47dec292546c56079060001ee9c74cdc83c4ce9b1e4ef329334b3efedd1e50100000041173086073cae790d486b0881febbce71d1a2331f3a6bf67b9317", 0x8b, 0xffffffffffffffff) r6 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r5, r6, r5}, &(0x7f00000000c0)=""/83, 0xfffffffffffffe4f, 0x0) kernel console output (not intermixed with test programs): 3] Bluetooth: hci0: command tx timeout [ 678.658463][T13593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 678.893487][ T6643] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 678.977427][T13757] syzkaller0: entered promiscuous mode [ 678.986524][T13757] syzkaller0: entered allmulticast mode [ 679.096041][ T6643] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 679.133655][ T5154] usb 5-1: USB disconnect, device number 112 [ 679.136384][ T6643] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 679.162664][ T6643] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 679.207626][ T6643] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 679.221951][ T6643] usb 3-1: SerialNumber: syz [ 679.302143][T13593] veth0_vlan: entered promiscuous mode [ 679.311630][T13763] loop4: detected capacity change from 0 to 512 [ 679.370236][T13593] veth1_vlan: entered promiscuous mode [ 679.410712][T13763] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 679.467137][ T6643] usb 3-1: 0:2 : does not exist [ 679.500597][ T6643] usb 3-1: USB disconnect, device number 87 [ 679.512404][T13763] ext4 filesystem being mounted at /476/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 679.581394][T13593] veth0_macvtap: entered promiscuous mode [ 679.620402][T13593] veth1_macvtap: entered promiscuous mode [ 679.706190][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.745764][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.745790][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.745807][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.745823][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.745836][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.749961][T13593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 679.773004][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.774708][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.774726][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.774742][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.774755][T13593] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 679.774769][T13593] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 679.777066][T13593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 679.790800][T13593] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.790840][T13593] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.790870][T13593] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 679.791041][T13593] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 680.032027][ T4846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.032051][ T4846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.123996][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 680.124021][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 680.641723][ T6192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 681.441159][T13828] loop4: detected capacity change from 0 to 512 [ 681.489588][T13830] Cannot find add_set index 4 as target [ 681.586269][T13828] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 681.660247][T13828] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 682.210687][ T6192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 682.670772][T13865] netlink: 'syz.4.2281': attribute type 3 has an invalid length. [ 682.706570][T13865] netlink: 'syz.4.2281': attribute type 3 has an invalid length. [ 683.399933][T13885] loop4: detected capacity change from 0 to 512 [ 683.461278][T13885] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 683.520226][T13885] ext4 filesystem being mounted at /486/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 683.564803][T13890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2286'. [ 683.861094][ T5773] block nbd0: Receive control failed (result -1) [ 683.913292][ T8] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 683.979177][ T6192] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 684.113935][ T8] usb 7-1: Using ep0 maxpacket: 32 [ 684.147290][ T8] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 684.172951][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 684.195650][ T8] usb 7-1: config 0 has no interface number 0 [ 684.201958][ T8] usb 7-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 684.230859][ T8] usb 7-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 684.273140][ T8] usb 7-1: config 0 interface 184 has no altsetting 0 [ 684.296499][ T8] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 684.322867][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.334675][ T8] usb 7-1: Product: syz [ 684.339237][ T8] usb 7-1: Manufacturer: syz [ 684.364754][ T8] usb 7-1: SerialNumber: syz [ 684.379828][T13910] netlink: 'syz.5.2292': attribute type 3 has an invalid length. [ 684.384089][ T8] usb 7-1: config 0 descriptor?? [ 684.402876][T13910] netlink: 'syz.5.2292': attribute type 3 has an invalid length. [ 684.406709][ T8] smsc75xx v1.0.0 [ 684.428500][ T8] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 684.454840][ T8] smsc75xx: probe of 7-1:0.184 failed with error -22 [ 684.574558][T13915] siw: device registration error -23 [ 685.113156][ T8] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 685.306306][ T8] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 685.317775][ T8] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 685.328521][ T8] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 685.338611][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 685.346954][ T8] usb 3-1: SerialNumber: syz [ 685.565519][ T8] usb 3-1: 0:2 : does not exist [ 685.573301][ T6643] usb 5-1: new high-speed USB device number 113 using dummy_hcd [ 685.602494][ T8] usb 3-1: USB disconnect, device number 88 [ 685.769377][T13942] loop5: detected capacity change from 0 to 512 [ 685.796422][ T6643] usb 5-1: Using ep0 maxpacket: 16 [ 685.809759][T13942] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 685.826825][ T6643] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 685.841067][T13942] ext4 filesystem being mounted at /516/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 685.851809][ T6643] usb 5-1: config 0 has no interface number 0 [ 685.867625][ T6643] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 685.892083][ T6643] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 685.905507][ T6643] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 685.919483][ T6643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 685.927698][ T6643] usb 5-1: Product: syz [ 685.934965][ T6643] usb 5-1: Manufacturer: syz [ 685.939632][ T6643] usb 5-1: SerialNumber: syz [ 685.963415][ T6643] usb 5-1: config 0 descriptor?? [ 685.973229][T13936] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 685.973408][T13936] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 686.071875][ T6415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 686.188393][T13936] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 686.221716][T13936] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 686.299444][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.309649][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.322885][T13952] netlink: 'syz.2.2302': attribute type 3 has an invalid length. [ 686.331883][T13952] netlink: 'syz.2.2302': attribute type 3 has an invalid length. [ 686.651775][ T6643] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 686.664873][ T6643] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 686.675996][ T5805] usb 7-1: USB disconnect, device number 78 [ 686.679617][ T6643] asix: probe of 5-1:0.34 failed with error -61 [ 686.920703][T13968] loop5: detected capacity change from 0 to 512 [ 686.982346][T13968] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 687.006832][T13968] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.186794][ T6415] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 687.807689][T13991] loop6: detected capacity change from 0 to 512 [ 687.831246][T13993] ip6erspan0: entered allmulticast mode [ 687.849936][T13991] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 687.862992][T13991] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 687.884744][ T5825] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 688.118861][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 688.129731][T13593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 688.148494][ T5825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 688.173357][ T5825] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 688.198767][ T5825] usb 6-1: config 0 has no interface number 0 [ 688.223201][ T5825] usb 6-1: config 0 interface 184 altsetting 7 endpoint 0x6 has invalid wMaxPacketSize 0 [ 688.254308][ T5825] usb 6-1: config 0 interface 184 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 688.281933][ T5825] usb 6-1: config 0 interface 184 has no altsetting 0 [ 688.296240][ T5825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 688.339501][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 688.342620][T14004] xt_hashlimit: size too large, truncated to 1048576 [ 688.362697][ T5825] usb 6-1: Product: syz [ 688.373191][ T5825] usb 6-1: Manufacturer: syz [ 688.378509][ T5825] usb 6-1: SerialNumber: syz [ 688.390239][T10724] usb 5-1: USB disconnect, device number 113 [ 688.411905][ T5825] usb 6-1: config 0 descriptor?? [ 688.438051][ T5825] smsc75xx v1.0.0 [ 688.441767][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 688.473246][ T5825] smsc75xx: probe of 6-1:0.184 failed with error -22 [ 689.871057][T14031] loop2: detected capacity change from 0 to 512 [ 689.972281][T14031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 690.005796][T14031] ext4 filesystem being mounted at /568/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 690.261410][ T5770] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 690.652506][ T5805] usb 6-1: USB disconnect, device number 98 [ 690.800667][T14046] batman_adv: batadv0: Adding interface: dummy0 [ 690.813246][ T8] usb 5-1: new high-speed USB device number 114 using dummy_hcd [ 690.821349][T14046] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 690.873010][T14046] batman_adv: batadv0: Interface activated: dummy0 [ 690.902498][T14047] batadv0: mtu less than device minimum [ 690.938344][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 690.951673][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 690.964434][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 690.977412][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 690.990322][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 691.003330][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 691.016139][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 691.028917][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 691.041845][T14047] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 691.113137][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 691.120087][ T8] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 691.128716][ T8] usb 5-1: config 0 has no interface number 0 [ 691.137136][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 691.147318][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 691.162536][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 691.203147][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 691.211230][ T8] usb 5-1: Product: syz [ 691.230334][ T8] usb 5-1: Manufacturer: syz [ 691.235647][ T8] usb 5-1: SerialNumber: syz [ 691.251418][ T8] usb 5-1: config 0 descriptor?? [ 691.265949][T14042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 691.283614][T14042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 691.471233][T14056] loop6: detected capacity change from 0 to 512 [ 691.496093][T14058] syz_tun: entered allmulticast mode [ 691.530299][T14042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 691.552617][T14042] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 691.560883][T14057] syz_tun: left allmulticast mode [ 691.569297][T14056] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 691.582224][T14056] ext4 filesystem being mounted at /10/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 691.840780][T14064] syzkaller0: entered promiscuous mode [ 691.840807][T14064] syzkaller0: entered allmulticast mode [ 691.962134][T13593] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 692.033817][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 692.052863][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 692.078727][ T8] asix: probe of 5-1:0.34 failed with error -61 [ 692.201183][T14075] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2343'. [ 693.504758][ T5805] IPVS: starting estimator thread 0... [ 693.591107][ T5825] usb 5-1: USB disconnect, device number 114 [ 693.593226][T14102] IPVS: using max 18 ests per chain, 43200 per kthread [ 693.770552][T14107] syzkaller0: entered promiscuous mode [ 693.793300][T14107] syzkaller0: entered allmulticast mode [ 694.034114][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2362'. [ 694.493251][T10724] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 694.684752][T10724] usb 5-1: Using ep0 maxpacket: 32 [ 694.687546][T10724] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 694.687585][T10724] usb 5-1: config 0 has no interface number 0 [ 694.690341][T10724] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 694.690372][T10724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 694.690396][T10724] usb 5-1: Product: syz [ 694.690413][T10724] usb 5-1: Manufacturer: syz [ 694.690429][T10724] usb 5-1: SerialNumber: syz [ 694.693188][T10724] usb 5-1: config 0 descriptor?? [ 694.720238][T10724] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 694.920612][T14136] syzkaller0: entered promiscuous mode [ 694.932127][T10724] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 694.936507][T10724] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 694.941678][T14136] syzkaller0: entered allmulticast mode [ 695.199312][T14140] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2374'. [ 695.348002][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 695.357143][T10724] usb 5-1: USB disconnect, device number 115 [ 695.371432][T10724] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 695.414742][T10724] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 695.453295][T14149] netlink: 'syz.5.2377': attribute type 3 has an invalid length. [ 695.461689][T14149] netlink: 'syz.5.2377': attribute type 3 has an invalid length. [ 695.478990][T10724] quatech2 5-1:0.51: device disconnected [ 696.003333][ T5805] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 696.196050][ T5805] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 696.196103][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.196131][ T5805] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.196169][ T5805] usb 6-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 696.196193][ T5805] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.198800][ T5805] usb 6-1: config 0 descriptor?? [ 696.317594][T14163] syzkaller0: entered promiscuous mode [ 696.351420][T14163] syzkaller0: entered allmulticast mode [ 696.420947][T14165] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2385'. [ 696.822925][ T5805] usbhid 6-1:0.0: can't add hid device: -71 [ 696.823106][ T5805] usbhid: probe of 6-1:0.0 failed with error -71 [ 696.825628][ T5805] usb 6-1: USB disconnect, device number 99 [ 696.871357][T14171] netlink: 'syz.6.2388': attribute type 3 has an invalid length. [ 696.871621][T14171] netlink: 'syz.6.2388': attribute type 3 has an invalid length. [ 697.312123][T14182] Bluetooth: MGMT ver 1.22 [ 697.434373][T10724] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 697.471919][T14187] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2394'. [ 697.593699][T14191] syzkaller0: entered promiscuous mode [ 697.603754][T14191] syzkaller0: entered allmulticast mode [ 697.643392][T10724] usb 5-1: Using ep0 maxpacket: 32 [ 697.651441][T10724] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 697.670148][T10724] usb 5-1: config 0 has no interface number 0 [ 697.693267][T10724] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 697.713183][T10724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.721247][T10724] usb 5-1: Product: syz [ 697.743383][T10724] usb 5-1: Manufacturer: syz [ 697.773520][T10724] usb 5-1: SerialNumber: syz [ 697.800645][T10724] usb 5-1: config 0 descriptor?? [ 697.816338][T10724] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 697.868295][T14195] netlink: 'syz.2.2398': attribute type 3 has an invalid length. [ 697.868484][T14195] netlink: 'syz.2.2398': attribute type 3 has an invalid length. [ 698.052021][T10724] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 698.061371][T10724] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 698.465305][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 698.466680][ T5805] usb 5-1: USB disconnect, device number 116 [ 698.471625][ T5805] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 698.482431][ T5805] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 698.483298][ T5805] quatech2 5-1:0.51: device disconnected [ 698.543023][T14208] loop6: detected capacity change from 0 to 736 [ 698.741964][T14208] rock: directory entry would overflow storage [ 698.759796][T14208] rock: sig=0x3b10, size=4, remaining=3 [ 699.091286][T14220] netlink: 'syz.5.2408': attribute type 3 has an invalid length. [ 699.129619][T14220] netlink: 'syz.5.2408': attribute type 3 has an invalid length. [ 699.150082][T14223] syzkaller0: entered promiscuous mode [ 699.166161][T14223] syzkaller0: entered allmulticast mode [ 699.353465][T14231] syzkaller0: entered promiscuous mode [ 699.359024][T14231] syzkaller0: entered allmulticast mode [ 699.403955][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 699.418686][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 699.984105][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 699.984140][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2416'. [ 700.010861][T14239] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.011072][T14239] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.011106][T14239] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.011146][T14239] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 700.032226][T14239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2416'. [ 700.086460][T14239] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2416'. [ 700.869420][T14260] syzkaller0: entered promiscuous mode [ 700.887443][T14260] syzkaller0: entered allmulticast mode [ 702.404741][T14285] syzkaller0: entered promiscuous mode [ 702.410294][T14285] syzkaller0: entered allmulticast mode [ 702.603215][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 702.606226][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 702.636987][ T5770] infiniband syz1: set down [ 702.672208][ T5772] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 702.681214][ T5772] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 702.719052][T10724] syz1: rxe_query_port: returned err = -19 [ 702.726521][ T5772] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 702.735548][ T787] syz1: rxe_query_port: returned err = -19 [ 702.744104][T10724] infiniband syz1: ib_query_port failed (-19) [ 702.748656][ T5824] syz1: rxe_query_port: returned err = -19 [ 702.759624][ T5772] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 702.774669][ T5772] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 702.776478][ T5770] syz_tun (unregistering): left promiscuous mode [ 702.793342][ T5772] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 702.959532][ T8] syz1: rxe_query_port: returned err = -19 [ 702.992459][ T12] smc: removing ib device syz1 [ 703.599637][T14309] program syz.4.2442 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 704.845747][ T5772] Bluetooth: hci1: command tx timeout [ 705.004905][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 705.012977][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 705.287674][T14340] netlink: 'syz.6.2452': attribute type 13 has an invalid length. [ 705.287703][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2452'. [ 705.387035][T14340] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.387112][T14340] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.387146][T14340] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.387178][T14340] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 705.389182][T14333] syzkaller0: entered promiscuous mode [ 705.389205][T14333] syzkaller0: entered allmulticast mode [ 705.392969][T14340] netlink: 'syz.6.2452': attribute type 13 has an invalid length. [ 705.392992][T14340] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2452'. [ 705.447942][T14296] chnl_net:caif_netlink_parms(): no params data found [ 706.328219][T14296] bridge0: port 1(bridge_slave_0) entered blocking state [ 706.335664][T14296] bridge0: port 1(bridge_slave_0) entered disabled state [ 706.342930][T14296] bridge_slave_0: entered allmulticast mode [ 706.352265][T14296] bridge_slave_0: entered promiscuous mode [ 706.364687][T14296] bridge0: port 2(bridge_slave_1) entered blocking state [ 706.372474][T14296] bridge0: port 2(bridge_slave_1) entered disabled state [ 706.379888][T14296] bridge_slave_1: entered allmulticast mode [ 706.408298][T14296] bridge_slave_1: entered promiscuous mode [ 706.511657][T14366] netlink: 'syz.4.2461': attribute type 13 has an invalid length. [ 706.548684][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 706.604048][T14296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 706.629822][T14366] netlink: 'syz.4.2461': attribute type 13 has an invalid length. [ 706.640286][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2461'. [ 706.671547][T14296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 706.790667][T14296] team0: Port device team_slave_0 added [ 706.842423][T14296] team0: Port device team_slave_1 added [ 706.923285][ T5773] Bluetooth: hci1: command tx timeout [ 706.950723][T14296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 706.950743][T14296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.950771][T14296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 706.972891][T14296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 706.972912][T14296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 706.972939][T14296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 707.088648][T14296] hsr_slave_0: entered promiscuous mode [ 707.090892][T14296] hsr_slave_1: entered promiscuous mode [ 707.091800][T14296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 707.121806][T14296] Cannot create hsr debugfs directory [ 707.158173][T14378] syzkaller0: entered promiscuous mode [ 707.158196][T14378] syzkaller0: entered allmulticast mode [ 707.637947][T14296] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.773468][T14296] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.784768][ T5805] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 707.903692][T14296] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 707.922871][T14393] netlink: 'syz.6.2473': attribute type 13 has an invalid length. [ 707.933347][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2473'. [ 707.944362][T14393] netlink: 'syz.6.2473': attribute type 13 has an invalid length. [ 707.952575][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2473'. [ 707.961778][ T5805] usb 5-1: device descriptor read/64, error -71 [ 708.029067][T14296] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 708.243228][ T5805] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 708.297582][T14296] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 708.317725][T14296] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 708.336241][T14296] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 708.355318][T14296] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 708.373420][ T8] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 708.424186][ T5805] usb 5-1: device descriptor read/64, error -71 [ 708.516865][T14296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 708.545270][ T5805] usb usb5-port1: attempt power cycle [ 708.571792][T14296] 8021q: adding VLAN 0 to HW filter on device team0 [ 708.580899][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.604521][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 708.611011][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.622782][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 708.628804][ T8] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 708.657501][ T8] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 708.668970][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.676173][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 708.714240][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 708.751558][ T8] usb 7-1: config 0 descriptor?? [ 708.993484][ T5805] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 709.003327][ T5773] Bluetooth: hci1: command tx timeout [ 709.026686][ T5805] usb 5-1: device descriptor read/8, error -71 [ 709.161511][T14296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 709.240762][T14296] veth0_vlan: entered promiscuous mode [ 709.260404][T14296] veth1_vlan: entered promiscuous mode [ 709.321084][ T5805] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 709.336053][T14296] veth0_macvtap: entered promiscuous mode [ 709.359107][T14296] veth1_macvtap: entered promiscuous mode [ 709.379827][ T8] usbhid 7-1:0.0: can't add hid device: -71 [ 709.387431][ T5805] usb 5-1: device descriptor read/8, error -71 [ 709.405457][ T8] usbhid: probe of 7-1:0.0 failed with error -71 [ 709.417224][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.417871][ T8] usb 7-1: USB disconnect, device number 79 [ 709.450564][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.466762][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.484193][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.503316][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.514409][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.526255][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 709.537082][ T5805] usb usb5-port1: unable to enumerate USB device [ 709.547634][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.561007][T14296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 709.582474][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.600745][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.613191][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.626716][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.637502][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.650422][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.660586][T14296] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 709.671498][T14296] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 709.685061][T14296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 709.698458][T14296] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.708055][T14296] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.722833][T14296] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.734636][T14296] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 709.862935][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.871470][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 709.937085][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 709.946110][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 710.333939][T14407] syzkaller0: entered promiscuous mode [ 710.339468][T14407] syzkaller0: entered allmulticast mode [ 710.967282][T14415] netlink: 'syz.6.2481': attribute type 13 has an invalid length. [ 710.967308][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2481'. [ 710.967587][T14415] netlink: 'syz.6.2481': attribute type 13 has an invalid length. [ 710.967604][T14415] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2481'. [ 711.084060][ T5773] Bluetooth: hci1: command tx timeout [ 711.384225][ T5154] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 711.586509][ T5154] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 711.598469][ T5154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 711.610976][ T5154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 711.623694][ T5154] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 711.632796][ T5154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 711.646808][ T5154] usb 7-1: config 0 descriptor?? [ 712.260822][T14442] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 712.269330][T14442] netlink: 'syz.5.2494': attribute type 3 has an invalid length. [ 712.315931][ T5154] usbhid 7-1:0.0: can't add hid device: -71 [ 712.316042][ T5154] usbhid: probe of 7-1:0.0 failed with error -71 [ 712.328165][ T5154] usb 7-1: USB disconnect, device number 80 [ 713.085435][T14454] kvm: emulating exchange as write [ 713.663450][ T787] usb 6-1: new full-speed USB device number 100 using dummy_hcd [ 713.823182][ T787] usb 6-1: device descriptor read/64, error -71 [ 713.964533][T10724] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 714.106804][T14478] syzkaller0: entered promiscuous mode [ 714.112464][T14478] syzkaller0: entered allmulticast mode [ 714.113181][ T787] usb 6-1: new full-speed USB device number 101 using dummy_hcd [ 714.163421][T10724] usb 3-1: Using ep0 maxpacket: 32 [ 714.179462][T10724] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 714.188119][T10724] usb 3-1: config 0 has no interface number 0 [ 714.195270][T10724] usb 3-1: config 0 interface 184 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0 [ 714.206805][T10724] usb 3-1: config 0 interface 184 has no altsetting 0 [ 714.229055][T10724] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 714.239493][T10724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.261631][T10724] usb 3-1: Product: syz [ 714.267896][T10724] usb 3-1: Manufacturer: syz [ 714.272540][T10724] usb 3-1: SerialNumber: syz [ 714.280188][T10724] usb 3-1: config 0 descriptor?? [ 714.286219][ T787] usb 6-1: device descriptor read/64, error -71 [ 714.303838][T10724] smsc75xx v1.0.0 [ 714.307541][T10724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 714.323282][T10724] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 714.414007][ T787] usb usb6-port1: attempt power cycle [ 714.465244][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 714.465276][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 714.465811][T14484] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2513'. [ 714.465832][T14484] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 714.837957][ T787] usb 6-1: new full-speed USB device number 102 using dummy_hcd [ 714.863911][ T787] usb 6-1: device descriptor read/8, error -71 [ 715.133187][ T787] usb 6-1: new full-speed USB device number 103 using dummy_hcd [ 715.164260][ T787] usb 6-1: device descriptor read/8, error -71 [ 715.232116][T14497] syzkaller0: entered promiscuous mode [ 715.232141][T14497] syzkaller0: entered allmulticast mode [ 715.283350][ T787] usb usb6-port1: unable to enumerate USB device [ 716.021096][T14523] syzkaller0: entered promiscuous mode [ 716.021121][T14523] syzkaller0: entered allmulticast mode [ 716.528035][T14533] loop5: detected capacity change from 0 to 16 [ 716.602409][T14533] erofs: (device loop5): mounted with root inode @ nid 36. [ 716.625742][T14533] syz.5.2533: attempt to access beyond end of device [ 716.625742][T14533] loop5: rw=0, sector=36, nr_sectors = 1 limit=16 [ 716.721293][ T35] usb 3-1: USB disconnect, device number 89 [ 717.126950][T14548] syzkaller0: entered promiscuous mode [ 717.137401][T14548] syzkaller0: entered allmulticast mode [ 718.224286][T14586] syzkaller0: entered promiscuous mode [ 718.243442][T14586] syzkaller0: entered allmulticast mode [ 718.721484][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 718.731189][T14603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2559'. [ 718.733312][T10724] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 718.765928][T14603] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.775360][T14603] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.784142][T14603] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.792897][T14603] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 718.841622][T14603] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2559'. [ 718.851539][T14603] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2559'. [ 718.943340][T10724] usb 7-1: Using ep0 maxpacket: 32 [ 718.961118][T10724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 718.985766][T10724] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.017238][T10724] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 719.044324][T10724] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.069369][T10724] usb 7-1: config 0 descriptor?? [ 719.307664][ T35] usb 6-1: new high-speed USB device number 104 using dummy_hcd [ 719.523620][ T35] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 719.533412][T10724] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 719.540537][T10724] ft260 0003:0403:6030.0013: unknown main item tag 0x0 [ 719.547603][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.557494][ T35] usb 6-1: Product: syz [ 719.561724][ T35] usb 6-1: Manufacturer: syz [ 719.567107][ T35] usb 6-1: SerialNumber: syz [ 719.703196][ T6643] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 719.712074][T10724] ft260 0003:0403:6030.0013: chip code: 0000 0000 [ 719.780369][ T35] net_ratelimit: 11 callbacks suppressed [ 719.780387][ T35] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 719.799569][ T35] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 719.803165][ T5824] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 719.893228][ T6643] usb 3-1: Using ep0 maxpacket: 32 [ 719.900593][ T6643] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 719.908861][ T6643] usb 3-1: config 0 has no interface number 0 [ 719.915358][T10724] ft260 0003:0403:6030.0013: failed to retrieve system status [ 719.923594][T10724] ft260: probe of 0003:0403:6030.0013 failed with error -32 [ 719.936653][ T6643] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 719.946319][ T6643] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.954525][ T6643] usb 3-1: Product: syz [ 719.958761][ T6643] usb 3-1: Manufacturer: syz [ 719.965458][ T6643] usb 3-1: SerialNumber: syz [ 719.973298][ T6643] usb 3-1: config 0 descriptor?? [ 719.982364][ T6643] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 720.005753][ T5824] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 720.021441][ T5824] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 720.032148][ T5824] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 720.041692][ T5824] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 720.050281][ T5824] usb 5-1: SerialNumber: syz [ 720.197370][ T6643] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 720.214800][ T35] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 720.227133][ T35] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 720.237199][ T6643] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 720.252922][ T35] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 720.272304][ T5824] usb 5-1: 0:2 : does not exist [ 720.277189][ T35] lan78xx: probe of 6-1:1.0 failed with error -32 [ 720.352003][ T5824] usb 5-1: USB disconnect, device number 121 [ 720.415943][T11318] udevd[11318]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 720.601267][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 720.601590][ T5824] usb 3-1: USB disconnect, device number 90 [ 720.634413][ T5824] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 720.657757][ T5824] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 720.670432][ T5824] quatech2 3-1:0.51: device disconnected [ 721.067451][T14636] netlink: 'syz.4.2569': attribute type 3 has an invalid length. [ 721.076821][T14636] netlink: 'syz.4.2569': attribute type 3 has an invalid length. [ 721.715652][ T5824] usb 7-1: USB disconnect, device number 81 [ 722.112070][ T6643] usb 6-1: USB disconnect, device number 104 [ 722.350043][T14665] netlink: 'syz.6.2578': attribute type 3 has an invalid length. [ 722.363335][T14665] netlink: 'syz.6.2578': attribute type 3 has an invalid length. [ 723.023646][ T5154] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 723.033824][T14689] netlink: 'syz.2.2588': attribute type 3 has an invalid length. [ 723.052152][T14689] netlink: 'syz.2.2588': attribute type 3 has an invalid length. [ 723.133618][T10724] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 723.223277][ T5154] usb 7-1: Using ep0 maxpacket: 32 [ 723.230552][ T5154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 723.263361][ T5154] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 723.284632][ T5154] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 723.309091][ T5154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.338894][ T5154] usb 7-1: config 0 descriptor?? [ 723.341450][T10724] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 723.382857][T10724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 723.410851][T10724] usb 5-1: Product: syz [ 723.425746][T10724] usb 5-1: Manufacturer: syz [ 723.430416][T10724] usb 5-1: SerialNumber: syz [ 723.680804][T10724] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 723.701919][T10724] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 723.789121][ T5154] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 723.805644][ T5824] IPVS: starting estimator thread 0... [ 723.815884][T14694] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 723.825027][ T5154] ft260 0003:0403:6030.0014: unknown main item tag 0x0 [ 723.933240][T14703] IPVS: using max 16 ests per chain, 38400 per kthread [ 723.984380][ T5154] ft260 0003:0403:6030.0014: chip code: 0000 0000 [ 724.163246][T10724] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 724.187943][ T5154] ft260 0003:0403:6030.0014: failed to retrieve system status [ 724.200297][T10724] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 724.201524][ T5154] ft260: probe of 0003:0403:6030.0014 failed with error -32 [ 724.228040][T10724] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 724.450975][T10724] lan78xx: probe of 5-1:1.0 failed with error -32 [ 724.595426][T14711] syzkaller0: entered promiscuous mode [ 724.604928][T14711] syzkaller0: entered allmulticast mode [ 724.791905][T14717] netlink: 'syz.5.2597': attribute type 3 has an invalid length. [ 724.817138][T14717] netlink: 'syz.5.2597': attribute type 3 has an invalid length. [ 724.922320][T14719] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 725.363171][T10724] usb 3-1: new full-speed USB device number 91 using dummy_hcd [ 725.553856][T10724] usb 3-1: no configurations [ 725.563396][T10724] usb 3-1: can't read configurations, error -22 [ 725.733144][T10724] usb 3-1: new full-speed USB device number 92 using dummy_hcd [ 725.895270][ T6643] usb 5-1: USB disconnect, device number 122 [ 725.933237][T10724] usb 3-1: no configurations [ 725.938049][T10724] usb 3-1: can't read configurations, error -22 [ 725.968916][T10724] usb usb3-port1: attempt power cycle [ 726.009856][ T5805] usb 7-1: USB disconnect, device number 82 [ 726.363316][ T6643] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 726.383193][T10724] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 726.444244][T10724] usb 3-1: no configurations [ 726.448928][T10724] usb 3-1: can't read configurations, error -22 [ 726.553697][ T6643] usb 5-1: Using ep0 maxpacket: 32 [ 726.571303][ T6643] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 726.583414][ T6643] usb 5-1: config 0 has no interface number 0 [ 726.596736][ T6643] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 726.623387][T10724] usb 3-1: new full-speed USB device number 94 using dummy_hcd [ 726.650475][ T6643] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.671959][ T6643] usb 5-1: Product: syz [ 726.676919][ T6643] usb 5-1: Manufacturer: syz [ 726.682673][ T6643] usb 5-1: SerialNumber: syz [ 726.699435][ T6643] usb 5-1: config 0 descriptor?? [ 726.710450][T10724] usb 3-1: no configurations [ 726.715503][T10724] usb 3-1: can't read configurations, error -22 [ 726.730114][T10724] usb usb3-port1: unable to enumerate USB device [ 726.735568][T14743] netlink: 'syz.5.2607': attribute type 3 has an invalid length. [ 726.738905][ T6643] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 726.772803][T14743] netlink: 'syz.5.2607': attribute type 3 has an invalid length. [ 726.953625][ T6643] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 726.997498][ T6643] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 727.373754][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 727.391555][T10724] usb 5-1: USB disconnect, device number 123 [ 727.403248][ T5825] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 727.422076][T10724] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 727.457143][T10724] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 727.494145][T10724] quatech2 5-1:0.51: device disconnected [ 727.583442][ T5825] usb 7-1: device descriptor read/64, error -71 [ 727.597809][ T5772] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 727.612782][ T5772] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 727.621563][ T5772] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 727.631780][ T5772] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 727.640079][ T5772] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 727.648570][ T5772] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 727.755405][ T49] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.849538][ T49] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.863925][ T5825] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 727.957605][ T49] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 727.997678][T14750] chnl_net:caif_netlink_parms(): no params data found [ 728.033412][ T5825] usb 7-1: device descriptor read/64, error -71 [ 728.077339][ T49] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 728.154703][ T5825] usb usb7-port1: attempt power cycle [ 728.200271][T14750] bridge0: port 1(bridge_slave_0) entered blocking state [ 728.217783][T14750] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.236661][T14750] bridge_slave_0: entered allmulticast mode [ 728.245037][T14750] bridge_slave_0: entered promiscuous mode [ 728.269882][T14750] bridge0: port 2(bridge_slave_1) entered blocking state [ 728.277575][T14750] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.288133][T14750] bridge_slave_1: entered allmulticast mode [ 728.296611][ T5805] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 728.299476][T14750] bridge_slave_1: entered promiscuous mode [ 728.354249][T14750] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 728.375847][T14750] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 728.481604][T14750] team0: Port device team_slave_0 added [ 728.513402][ T5805] usb 5-1: Using ep0 maxpacket: 32 [ 728.538729][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 728.552837][T14750] team0: Port device team_slave_1 added [ 728.560612][ T5805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 728.583119][ T5805] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 728.586011][ T5825] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 728.598598][ T5805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 728.658808][ T5805] usb 5-1: config 0 descriptor?? [ 728.664347][ T5825] usb 7-1: device descriptor read/8, error -71 [ 728.797182][T14750] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 728.817996][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.859418][T14750] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 728.932351][T14750] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 728.933358][ T5825] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 728.962832][T14750] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 728.973872][ T5825] usb 7-1: device descriptor read/8, error -71 [ 729.041435][T14750] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 729.108874][ T5805] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 729.133124][ T5805] ft260 0003:0403:6030.0015: unknown main item tag 0x0 [ 729.133543][ T5825] usb usb7-port1: unable to enumerate USB device [ 729.271928][T14750] hsr_slave_0: entered promiscuous mode [ 729.285571][T14750] hsr_slave_1: entered promiscuous mode [ 729.291997][T14750] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 729.309416][ T5805] ft260 0003:0403:6030.0015: chip code: 0000 0000 [ 729.324906][T14750] Cannot create hsr debugfs directory [ 729.519231][ T5805] ft260 0003:0403:6030.0015: failed to retrieve system status [ 729.535104][ T5805] ft260: probe of 0003:0403:6030.0015 failed with error -32 [ 729.550570][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 729.570442][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2613'. [ 729.599842][T14777] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2613'. [ 729.609865][T14777] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2613'. [ 729.724126][ T5773] Bluetooth: hci2: command tx timeout [ 730.809724][ T49] hsr_slave_0: left promiscuous mode [ 730.824227][ T49] hsr_slave_1: left promiscuous mode [ 730.838195][ T49] batman_adv: batadv0: Interface deactivated: dummy0 [ 730.855810][ T49] batman_adv: batadv0: Removing interface: dummy0 [ 730.876910][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 730.899168][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 730.916919][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 730.933914][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 730.954028][ T49] bridge_slave_1: left allmulticast mode [ 730.970248][ T49] bridge_slave_1: left promiscuous mode [ 730.983763][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 730.998433][ T49] bridge_slave_0: left allmulticast mode [ 731.049157][ T49] bridge_slave_0: left promiscuous mode [ 731.070595][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 731.195225][ T49] veth1_macvtap: left promiscuous mode [ 731.200936][ T49] veth0_macvtap: left promiscuous mode [ 731.231183][ T49] veth1_vlan: left promiscuous mode [ 731.250560][ T49] veth0_vlan: left promiscuous mode [ 731.292143][ T5825] usb 5-1: USB disconnect, device number 124 [ 731.811828][ T5773] Bluetooth: hci2: command tx timeout [ 732.482510][ T787] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 732.617258][ T49] team0 (unregistering): Port device team_slave_1 removed [ 732.633302][ T787] usb 7-1: device descriptor read/64, error -71 [ 732.687765][ T49] team0 (unregistering): Port device team_slave_0 removed [ 732.750647][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 732.820303][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 732.920019][ T787] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 733.073303][ T787] usb 7-1: device descriptor read/64, error -71 [ 733.199501][ T787] usb usb7-port1: attempt power cycle [ 733.342254][ T49] bond0 (unregistering): Released all slaves [ 733.506735][T14750] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 733.552188][T14750] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 733.619850][T14750] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 733.633241][ T787] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 733.659758][T14750] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 733.710331][ T787] usb 7-1: device descriptor read/8, error -71 [ 733.892850][ T5773] Bluetooth: hci2: command tx timeout [ 733.998497][ T787] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 734.019793][T14750] 8021q: adding VLAN 0 to HW filter on device bond0 [ 734.032975][T14834] kvm: vcpu 0: requested 2176 ns lapic timer period limited to 200000 ns [ 734.071977][ T787] usb 7-1: device descriptor read/8, error -71 [ 734.078264][T14834] kvm: pic: non byte write [ 734.127975][T14750] 8021q: adding VLAN 0 to HW filter on device team0 [ 734.199028][ T4846] bridge0: port 1(bridge_slave_0) entered blocking state [ 734.205711][ T787] usb usb7-port1: unable to enumerate USB device [ 734.206257][ T4846] bridge0: port 1(bridge_slave_0) entered forwarding state [ 734.277612][ T49] IPVS: stop unused estimator thread 0... [ 734.297586][ T4846] bridge0: port 2(bridge_slave_1) entered blocking state [ 734.304819][ T4846] bridge0: port 2(bridge_slave_1) entered forwarding state [ 734.447560][T14750] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 734.994105][T14750] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 735.577928][T14750] veth0_vlan: entered promiscuous mode [ 735.631801][T14750] veth1_vlan: entered promiscuous mode [ 735.716534][T14750] veth0_macvtap: entered promiscuous mode [ 735.730374][T14750] veth1_macvtap: entered promiscuous mode [ 735.822081][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.858960][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.886264][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.897769][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.908229][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.919047][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.930333][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 735.941443][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 735.963380][ T5773] Bluetooth: hci2: command tx timeout [ 735.965505][T14750] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.990461][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.029883][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.077611][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.113183][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.141575][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.156028][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.169579][T14750] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 736.180768][T14750] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 736.192702][T14750] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 736.239176][T14881] syzkaller0: entered promiscuous mode [ 736.255535][T14881] syzkaller0: entered allmulticast mode [ 736.290435][T14750] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.326614][T14750] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.336663][T14750] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.346230][T14750] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 736.623842][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.649146][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.737225][ T7593] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 736.759080][ T7593] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 736.845256][T10724] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 737.043264][T10724] usb 3-1: device descriptor read/64, error -71 [ 737.313629][T10724] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 737.489521][T10724] usb 3-1: device descriptor read/64, error -71 [ 737.613443][T10724] usb usb3-port1: attempt power cycle [ 737.693327][ T5825] usb 6-1: new high-speed USB device number 105 using dummy_hcd [ 737.714813][T14914] syzkaller0: entered promiscuous mode [ 737.720344][T14914] syzkaller0: entered allmulticast mode [ 737.893298][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 737.930403][ T5825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 737.939210][ T5825] usb 6-1: config 0 has no interface number 0 [ 737.953602][ T5825] usb 6-1: config 0 interface 184 has no altsetting 0 [ 737.963769][ T5825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 737.973627][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.981672][ T5825] usb 6-1: Product: syz [ 738.003132][ T5825] usb 6-1: Manufacturer: syz [ 738.008147][ T5825] usb 6-1: SerialNumber: syz [ 738.023615][T10724] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 738.035596][ T5825] usb 6-1: config 0 descriptor?? [ 738.045224][ T5825] smsc75xx v1.0.0 [ 738.074414][T10724] usb 3-1: device descriptor read/8, error -71 [ 738.343283][T10724] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 738.384452][T10724] usb 3-1: device descriptor read/8, error -71 [ 738.450307][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 738.475760][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 738.488259][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 738.501987][ T5825] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 738.524908][T10724] usb usb3-port1: unable to enumerate USB device [ 738.851465][T14930] fuse: Unknown parameter 'user_i00000000000000000000' [ 739.333169][T10724] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 739.534580][T10724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 739.545341][T10724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 739.574625][T10724] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 739.597600][T10724] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 739.622209][T10724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 739.650697][T10724] usb 5-1: config 0 descriptor?? [ 739.924227][T14957] fuse: Unknown parameter 'user_i00000000000000000000' [ 740.276329][T10724] usbhid 5-1:0.0: can't add hid device: -71 [ 740.302140][T10724] usbhid: probe of 5-1:0.0 failed with error -71 [ 740.344097][T10724] usb 5-1: USB disconnect, device number 125 [ 740.495126][ T5825] usb 6-1: USB disconnect, device number 105 [ 740.960310][T14983] fuse: Unknown parameter 'user_i00000000000000000000' [ 741.388081][T14978] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 741.414063][ T5805] IPVS: starting estimator thread 0... [ 741.503268][T14995] IPVS: using max 17 ests per chain, 40800 per kthread [ 741.783265][T10724] usb 3-1: new high-speed USB device number 99 using dummy_hcd [ 741.983130][T10724] usb 3-1: Using ep0 maxpacket: 32 [ 741.994297][T10724] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 742.010534][T10724] usb 3-1: config 0 has no interface number 0 [ 742.027163][T10724] usb 3-1: config 0 interface 184 has no altsetting 0 [ 742.058621][T10724] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 742.075751][T10724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.086343][T10724] usb 3-1: Product: syz [ 742.093451][ T5824] usb 7-1: new high-speed USB device number 91 using dummy_hcd [ 742.103221][T10724] usb 3-1: Manufacturer: syz [ 742.112387][T10724] usb 3-1: SerialNumber: syz [ 742.134300][T10724] usb 3-1: config 0 descriptor?? [ 742.146607][T10724] smsc75xx v1.0.0 [ 742.302166][ T5824] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 742.323416][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 742.363687][ T5824] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 742.385411][ T5824] usb 7-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 742.403816][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 742.438054][ T5824] usb 7-1: config 0 descriptor?? [ 742.564449][T10724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 742.588141][T10724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 742.602648][T10724] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 742.640515][T10724] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 743.078618][ T5824] usbhid 7-1:0.0: can't add hid device: -71 [ 743.093158][ T5824] usbhid: probe of 7-1:0.0 failed with error -71 [ 743.123700][ T5824] usb 7-1: USB disconnect, device number 91 [ 743.762114][T15042] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2692'. [ 744.047136][T15049] fuse: Unknown parameter 'user_id00000000000000000000' [ 744.586438][ T5805] usb 3-1: USB disconnect, device number 99 [ 744.695406][T15051] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 745.113152][ T5805] usb 3-1: new high-speed USB device number 100 using dummy_hcd [ 745.315491][ T5805] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 745.335588][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 745.371340][ T5805] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 745.409758][ T5805] usb 3-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 745.439283][ T5805] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.464532][ T5805] usb 3-1: config 0 descriptor?? [ 745.990554][T15080] fuse: Bad value for 'fd' [ 746.092989][ T5805] usbhid 3-1:0.0: can't add hid device: -71 [ 746.099214][ T5805] usbhid: probe of 3-1:0.0 failed with error -71 [ 746.157136][ T5805] usb 3-1: USB disconnect, device number 100 [ 746.633423][ T787] usb 6-1: new high-speed USB device number 106 using dummy_hcd [ 746.742023][T15099] fuse: Bad value for 'fd' [ 746.841851][ T787] usb 6-1: Using ep0 maxpacket: 32 [ 746.855198][ T787] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 746.877166][ T787] usb 6-1: config 0 has no interface number 0 [ 746.893295][ T787] usb 6-1: config 0 interface 184 has no altsetting 0 [ 746.906523][ T787] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 746.923828][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.931891][ T787] usb 6-1: Product: syz [ 746.943618][ T787] usb 6-1: Manufacturer: syz [ 746.948286][ T787] usb 6-1: SerialNumber: syz [ 746.974052][ T787] usb 6-1: config 0 descriptor?? [ 746.982920][ T787] smsc75xx v1.0.0 [ 747.285643][ T5825] usb 7-1: new full-speed USB device number 92 using dummy_hcd [ 747.395588][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 747.433461][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 747.463419][ T787] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 747.493377][ T787] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 747.519087][ T5825] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 747.533240][ T5825] usb 7-1: config 0 has no interfaces? [ 747.549260][ T5825] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 747.558847][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.579128][ T5825] usb 7-1: Product: syz [ 747.587250][T15121] fuse: Bad value for 'fd' [ 747.592008][ T5825] usb 7-1: Manufacturer: syz [ 747.598143][ T5825] usb 7-1: SerialNumber: syz [ 747.615970][ T5825] usb 7-1: config 0 descriptor?? [ 747.734633][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.741296][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.957861][ T5772] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 747.987890][ T5772] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 747.997773][ T5772] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 748.019404][ T5772] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 748.030888][ T9794] syz_tun (unregistering): left promiscuous mode [ 748.045357][ T5772] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 748.054420][ T5772] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 748.517396][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.533087][ T145] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.668371][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.679413][ T145] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.709076][T15127] chnl_net:caif_netlink_parms(): no params data found [ 748.786371][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.797323][ T145] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.938985][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 748.956884][ T145] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 748.981943][T15127] bridge0: port 1(bridge_slave_0) entered blocking state [ 748.999763][T15127] bridge0: port 1(bridge_slave_0) entered disabled state [ 749.019254][T15127] bridge_slave_0: entered allmulticast mode [ 749.036283][T15127] bridge_slave_0: entered promiscuous mode [ 749.052286][T15127] bridge0: port 2(bridge_slave_1) entered blocking state [ 749.059771][T15127] bridge0: port 2(bridge_slave_1) entered disabled state [ 749.073241][T15127] bridge_slave_1: entered allmulticast mode [ 749.080748][T15127] bridge_slave_1: entered promiscuous mode [ 749.152474][T15127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 749.227892][T15127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 749.254454][T15154] fuse: Unknown parameter '0x0000000000000003' [ 749.352626][T15127] team0: Port device team_slave_0 added [ 749.365584][T15127] team0: Port device team_slave_1 added [ 749.399471][ T5825] usb 6-1: USB disconnect, device number 106 [ 749.645917][T15127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 749.655379][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.705514][T15127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 749.793809][T15127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 749.811467][T15127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 749.843945][T15127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 750.091850][ T27] audit: type=1326 audit(1777442175.355:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.126482][ T5773] Bluetooth: hci3: command tx timeout [ 750.148025][ T5825] usb 7-1: USB disconnect, device number 92 [ 750.153256][ T27] audit: type=1326 audit(1777442175.355:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.251143][T15127] hsr_slave_0: entered promiscuous mode [ 750.280395][ T27] audit: type=1326 audit(1777442175.395:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.298029][T15179] fuse: Unknown parameter '0x0000000000000003' [ 750.342119][T15127] hsr_slave_1: entered promiscuous mode [ 750.370706][ T27] audit: type=1326 audit(1777442175.395:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.413194][T15127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 750.420847][T15127] Cannot create hsr debugfs directory [ 750.443205][ T27] audit: type=1326 audit(1777442175.395:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.493188][ T27] audit: type=1326 audit(1777442175.395:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.553236][ T27] audit: type=1326 audit(1777442175.395:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15173 comm="syz.2.2739" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f359d99cdd9 code=0x7ffc0000 [ 750.694279][ T5825] usb 6-1: new high-speed USB device number 107 using dummy_hcd [ 750.883360][ T5825] usb 6-1: Using ep0 maxpacket: 32 [ 750.891155][ T5825] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 750.899875][ T5825] usb 6-1: config 0 has no interface number 0 [ 750.920656][ T5825] usb 6-1: config 0 interface 184 has no altsetting 0 [ 750.933791][ T27] audit: type=1326 audit(1777442176.195:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15192 comm="syz.2.2744" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f359d99cdd9 code=0x0 [ 750.935805][ T5825] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 750.974762][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.991225][ T5825] usb 6-1: Product: syz [ 750.997017][ T5825] usb 6-1: Manufacturer: syz [ 751.001819][ T5825] usb 6-1: SerialNumber: syz [ 751.065632][ T5825] usb 6-1: config 0 descriptor?? [ 751.070395][T15180] IPVS: wlc: FWM 3 0x00000003 - no destination available [ 751.085710][ T5825] smsc75xx v1.0.0 [ 751.343410][ T145] IPVS: stopping backup sync thread 9974 ... [ 751.492142][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 751.515325][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 751.526159][ T5825] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 751.540281][ T5825] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 751.761376][ T145] hsr_slave_0: left promiscuous mode [ 751.778414][ T145] hsr_slave_1: left promiscuous mode [ 751.818756][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 751.838389][ T145] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 751.871110][ T145] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 751.889017][ T145] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 751.910132][ T145] bridge_slave_1: left allmulticast mode [ 751.923138][ T145] bridge_slave_1: left promiscuous mode [ 751.928965][ T145] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.971919][ T145] bridge_slave_0: left allmulticast mode [ 751.978089][ T145] bridge_slave_0: left promiscuous mode [ 751.993444][ T145] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.001866][T15217] fuse: Unknown parameter '0x0000000000000003' [ 752.068837][ T145] veth1_macvtap: left promiscuous mode [ 752.076228][ T145] veth0_macvtap: left promiscuous mode [ 752.088503][ T145] veth1_vlan: left promiscuous mode [ 752.094619][ T145] veth0_vlan: left promiscuous mode [ 752.204331][ T5773] Bluetooth: hci3: command tx timeout [ 753.183180][ T145] team0 (unregistering): Port device team_slave_1 removed [ 753.257555][ T145] team0 (unregistering): Port device team_slave_0 removed [ 753.319844][ T145] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 753.387016][ T145] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 753.459076][ T5825] usb 6-1: USB disconnect, device number 107 [ 753.552915][T15235] loop5: detected capacity change from 0 to 256 [ 753.665875][ T27] audit: type=1800 audit(1777442178.945:64): pid=15235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2752" name="file2" dev="loop5" ino=1048610 res=0 errno=0 [ 754.283455][ T5773] Bluetooth: hci3: command tx timeout [ 754.308288][ T145] bond0 (unregistering): Released all slaves [ 754.547072][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2749'. [ 754.574577][T15218] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2749'. [ 754.936186][T15252] fuse: Unknown parameter '0x0000000000000003' [ 755.066754][T15127] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 755.121677][T15127] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 755.171766][T15127] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 755.221387][T15127] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 755.334125][ T8] usb 6-1: new high-speed USB device number 108 using dummy_hcd [ 755.451332][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 755.472734][T15127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 755.487663][T15269] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2764'. [ 755.533817][ T8] usb 6-1: Using ep0 maxpacket: 32 [ 755.546648][ T8] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 755.567520][T15127] 8021q: adding VLAN 0 to HW filter on device team0 [ 755.583142][ T8] usb 6-1: config 0 has no interface number 0 [ 755.589326][ T8] usb 6-1: config 0 interface 184 has no altsetting 0 [ 755.619636][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 755.626892][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 755.628490][ T8] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 755.670793][ T8] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 755.685010][ T145] bridge0: port 2(bridge_slave_1) entered blocking state [ 755.692205][ T145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 755.724260][ T8] usb 6-1: Product: syz [ 755.729875][ T8] usb 6-1: Manufacturer: syz [ 755.748327][ T8] usb 6-1: SerialNumber: syz [ 755.768176][ T8] usb 6-1: config 0 descriptor?? [ 755.795438][ T8] smsc75xx v1.0.0 [ 756.174559][T15288] fuse: Unknown parameter '0x0000000000000003' [ 756.217806][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 756.258558][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 756.285662][ T8] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 756.314275][ T8] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 756.365256][ T5773] Bluetooth: hci3: command tx timeout [ 756.508318][T15127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 756.988807][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'. [ 757.028288][T15314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2773'. [ 757.237024][ T27] audit: type=1326 audit(1777442182.515:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15321 comm="syz.6.2774" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f00e339cdd9 code=0x0 [ 757.377140][T15127] veth0_vlan: entered promiscuous mode [ 757.417291][T15127] veth1_vlan: entered promiscuous mode [ 757.507699][T15127] veth0_macvtap: entered promiscuous mode [ 757.534814][T15127] veth1_macvtap: entered promiscuous mode [ 757.567968][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.587153][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.600420][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.620957][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.631368][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.661669][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.692393][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 757.714637][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.734953][T15127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 757.777283][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.809189][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.840938][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.867844][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.898537][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.927526][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 757.946834][T15127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 757.983214][T15127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 758.014884][T15127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 758.106469][T15127] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.143358][T15127] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.163196][T15127] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.192937][T15127] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 758.194458][ T5154] usb 6-1: USB disconnect, device number 108 [ 758.666620][ T7361] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.713252][ T7361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.857610][ T7361] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.898787][ T7361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 759.543372][ T1189] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 759.543588][T10724] usb 7-1: new high-speed USB device number 93 using dummy_hcd [ 759.743154][T10724] usb 7-1: Using ep0 maxpacket: 32 [ 759.750816][T10724] usb 7-1: config 0 has an invalid interface number: 184 but max is 0 [ 759.760987][T10724] usb 7-1: config 0 has no interface number 0 [ 759.766062][ T1189] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 759.769522][T10724] usb 7-1: config 0 interface 184 has no altsetting 0 [ 759.783144][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.792433][T10724] usb 7-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 759.800123][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.805626][T10724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 759.824251][T10724] usb 7-1: Product: syz [ 759.828467][T10724] usb 7-1: Manufacturer: syz [ 759.831568][ T1189] usb 5-1: New USB device found, idVendor=056a, idProduct=0010, bcdDevice= 0.00 [ 759.834389][T10724] usb 7-1: SerialNumber: syz [ 759.842288][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 759.867759][T10724] usb 7-1: config 0 descriptor?? [ 759.868974][ T1189] usb 5-1: config 0 descriptor?? [ 759.875546][T10724] smsc75xx v1.0.0 [ 760.023363][ T5154] usb 6-1: new full-speed USB device number 109 using dummy_hcd [ 760.225766][ T5154] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 760.242722][ T5154] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 760.255356][ T5154] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 760.273184][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 760.281256][ T5154] usb 6-1: Product: syz [ 760.293106][ T5154] usb 6-1: Manufacturer: syz [ 760.298049][ T5154] usb 6-1: SerialNumber: syz [ 760.308440][ T5154] usb 6-1: config 0 descriptor?? [ 760.309221][T10724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 760.358990][T10724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 760.370180][T10724] smsc75xx 7-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 760.389295][T10724] smsc75xx: probe of 7-1:0.184 failed with error -32 [ 760.508495][ T1189] usbhid 5-1:0.0: can't add hid device: -71 [ 760.524284][ T1189] usbhid: probe of 5-1:0.0 failed with error -71 [ 760.562550][ T1189] usb 5-1: USB disconnect, device number 126 [ 761.819727][T15438] loop4: detected capacity change from 0 to 128 [ 762.327574][T10724] usb 7-1: USB disconnect, device number 93 [ 762.427928][T15452] syzkaller0: entered promiscuous mode [ 762.435026][T15452] syzkaller0: entered allmulticast mode [ 762.828870][ T5805] usb 6-1: USB disconnect, device number 109 [ 763.658626][ T5805] usb 6-1: new high-speed USB device number 110 using dummy_hcd [ 763.885743][ T5805] usb 6-1: Using ep0 maxpacket: 32 [ 763.915210][ T5805] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 763.925238][ T5805] usb 6-1: config 0 has no interface number 0 [ 763.931885][ T5805] usb 6-1: config 0 interface 184 has no altsetting 0 [ 763.977001][ T5805] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 763.986571][ T5805] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 764.007372][ T5805] usb 6-1: Product: syz [ 764.011614][ T5805] usb 6-1: Manufacturer: syz [ 764.016631][ T5805] usb 6-1: SerialNumber: syz [ 764.049968][ T5805] usb 6-1: config 0 descriptor?? [ 764.059215][ T5805] smsc75xx v1.0.0 [ 764.488108][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 764.513079][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 764.531286][ T5805] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 764.549027][ T5805] smsc75xx: probe of 6-1:0.184 failed with error -61 [ 766.455458][T10724] usb 6-1: USB disconnect, device number 110 [ 767.318814][T15544] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 767.414697][T15542] syzkaller0: entered promiscuous mode [ 767.441680][T15542] syzkaller0: entered allmulticast mode [ 767.888129][T15562] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2860'. [ 770.176134][ T27] audit: type=1326 audit(1777442195.455:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15570 comm="syz.5.2862" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0d5a39cdd9 code=0x0 [ 771.762927][T15589] loop4: detected capacity change from 0 to 16 [ 771.784926][T15589] erofs: (device loop4): mounted with root inode @ nid 36. [ 773.129257][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2887'. [ 773.149452][T15631] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2887'. [ 775.403122][ T5825] usb 6-1: new high-speed USB device number 111 using dummy_hcd [ 775.874780][ T5825] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 775.875357][ T5825] usb 6-1: New USB device found, idVendor=056a, idProduct=4001, bcdDevice= 0.00 [ 775.876261][ T5825] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.944792][ T5825] usb 6-1: config 0 descriptor?? [ 776.144134][ T5825] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 776.402962][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.411283][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.423163][T15679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 776.423562][T15679] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 776.482021][ T5825] usb 6-1: USB disconnect, device number 111 [ 777.188133][ T1189] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 777.306336][T15722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2925'. [ 777.315600][T15722] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2925'. [ 777.373416][ T5154] usb 6-1: new high-speed USB device number 112 using dummy_hcd [ 777.395858][ T1189] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 777.410299][ T1189] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 777.435878][ T1189] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 777.445688][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 777.461395][ T1189] usb 5-1: SerialNumber: syz [ 777.568264][ T5154] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 777.583056][ T5154] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.591201][ T5154] usb 6-1: Product: syz [ 777.598115][ T5154] usb 6-1: Manufacturer: syz [ 777.602781][ T5154] usb 6-1: SerialNumber: syz [ 777.700338][ T1189] usb 5-1: 0:2 : does not exist [ 777.775819][ T1189] usb 5-1: USB disconnect, device number 127 [ 777.803827][T10724] usb 7-1: new high-speed USB device number 94 using dummy_hcd [ 777.836297][ T5154] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 777.852690][ T5154] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 777.993122][T10724] usb 7-1: Using ep0 maxpacket: 32 [ 778.000108][T10724] usb 7-1: config 0 has an invalid interface number: 147 but max is 0 [ 778.009021][T10724] usb 7-1: config 0 has no interface number 0 [ 778.020860][T10724] usb 7-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 778.031504][T10724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.042966][T10724] usb 7-1: Product: syz [ 778.047576][T10724] usb 7-1: Manufacturer: syz [ 778.052978][T10724] usb 7-1: SerialNumber: syz [ 778.061195][T10724] usb 7-1: config 0 descriptor?? [ 778.070184][T10724] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 778.078578][T10724] dvb-usb: bulk message failed: -22 (2/0) [ 778.095116][T10724] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 778.105939][T10724] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 778.114595][T10724] usb 7-1: media controller created [ 778.141718][T10724] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 778.174468][T10724] cxusb: set interface failed [ 778.179226][T10724] dvb-usb: bulk message failed: -22 (1/0) [ 778.222289][T10724] DVB: Unable to find symbol lgdt330x_attach() [ 778.228696][T10724] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 778.343415][T10724] rc_core: IR keymap rc-dvico-portable not found [ 778.349938][T10724] Registered IR keymap rc-empty [ 778.380232][T10724] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 778.387011][T15735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2930'. [ 778.405812][T10724] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input7 [ 778.406716][T15735] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2930'. [ 778.432022][T10724] dvb-usb: schedule remote query interval to 100 msecs. [ 778.453290][T10724] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 778.475761][T10724] usb 7-1: USB disconnect, device number 94 [ 778.628745][T10724] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 778.697761][ T5154] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 778.732352][ T5154] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 778.764198][ T5154] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 778.798316][ T5154] lan78xx: probe of 6-1:1.0 failed with error -32 [ 778.818301][ T5154] usb 6-1: USB disconnect, device number 112 [ 779.086271][T15753] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2939'. [ 779.153974][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.256991][T15753] bridge_slave_1 (unregistering): left allmulticast mode [ 779.286315][T15753] bridge_slave_1 (unregistering): left promiscuous mode [ 779.293679][T15753] bridge0: port 2(bridge_slave_1) entered disabled state [ 779.342419][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2943'. [ 779.363806][T15763] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2943'. [ 779.922816][T15784] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2948'. [ 780.084616][ T5154] usb 7-1: new high-speed USB device number 95 using dummy_hcd [ 780.308729][ T5154] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 780.323586][ T5154] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 780.336855][ T5154] usb 7-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 780.349956][ T5154] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.368440][ T5154] usb 7-1: config 0 descriptor?? [ 780.543050][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 780.858389][ T5805] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 780.923544][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 780.933176][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 781.054757][ T5805] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 781.105090][ T5805] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40 [ 781.157424][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 781.171850][ T5805] usb 5-1: Product: syz [ 781.176640][ T5805] usb 5-1: Manufacturer: syz [ 781.184816][ T5805] usb 5-1: SerialNumber: syz [ 781.404151][ T5154] ath6kl: Failed to submit usb control message: -110 [ 781.422130][ T5154] ath6kl: unable to send the bmi data to the device: -110 [ 781.437829][ T5805] usb 5-1: USB disconnect, device number 2 [ 781.446561][ T5154] ath6kl: Unable to send get target info: -110 [ 781.473306][ T5154] ath6kl: Failed to init ath6kl core: -110 [ 781.480744][ T5154] ath6kl_usb: probe of 7-1:0.0 failed with error -110 [ 782.514161][ T5825] usb 6-1: new high-speed USB device number 113 using dummy_hcd [ 782.709221][ T5825] usb 6-1: unable to get BOS descriptor or descriptor too short [ 782.725588][ T5825] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 782.735082][ T5825] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 782.756854][ T5825] usb 6-1: config 1 interface 0 has no altsetting 1 [ 782.779291][ T5825] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75 [ 782.797125][ T5805] usb 7-1: USB disconnect, device number 95 [ 782.798724][ T5825] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 782.831777][ T5825] usb 6-1: Product: syz [ 782.841170][ T5825] usb 6-1: Manufacturer: syz [ 782.853255][ T5825] usb 6-1: SerialNumber: syz [ 782.874592][ T5825] smsusb:smsusb_probe: board id=8, interface number 0 [ 783.085105][T15827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 783.124362][T15827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 783.201024][ T5825] smsusb:smsusb_probe: Device initialized with return code -19 [ 783.421708][ T5825] usb 6-1: USB disconnect, device number 113 [ 783.493189][T10724] usb 7-1: new full-speed USB device number 96 using dummy_hcd [ 783.601071][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'. [ 783.613878][ T787] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 783.623586][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2983'. [ 783.687586][T10724] usb 7-1: config 0 has no interfaces? [ 783.780939][T10724] usb 7-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 783.790944][T10724] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.805588][T10724] usb 7-1: Product: syz [ 783.810140][T10724] usb 7-1: Manufacturer: syz [ 783.815404][T10724] usb 7-1: SerialNumber: syz [ 783.822677][T10724] usb 7-1: config 0 descriptor?? [ 783.843193][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 783.857944][ T787] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 783.872003][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 783.887946][ T787] usb 5-1: Product: syz [ 783.891944][T15865] xt_connbytes: Forcing CT accounting to be enabled [ 783.912527][ T787] usb 5-1: Manufacturer: syz [ 783.920088][ T787] usb 5-1: SerialNumber: syz [ 783.932970][ T787] usb 5-1: config 0 descriptor?? [ 783.951967][ T787] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 784.283110][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 784.286366][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 784.986072][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2992'. [ 785.004510][T15892] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2992'. [ 785.033603][ T5805] usb 5-1: USB disconnect, device number 3 [ 785.107244][T15894] syzkaller0: entered promiscuous mode [ 785.112949][T15894] syzkaller0: entered allmulticast mode [ 785.697011][T15904] syzkaller0: entered promiscuous mode [ 785.724461][T15904] syzkaller0: entered allmulticast mode [ 786.062130][ T5805] usb 7-1: USB disconnect, device number 96 [ 786.159079][ T5154] IPVS: starting estimator thread 0... [ 786.321148][T15911] IPVS: using max 32 ests per chain, 76800 per kthread [ 786.414059][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3002'. [ 786.454418][T15917] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3002'. [ 786.690038][T15927] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3006'. [ 786.860590][T15931] syzkaller0: entered promiscuous mode [ 786.869598][T15931] syzkaller0: entered allmulticast mode [ 787.318095][T15944] syzkaller0: entered promiscuous mode [ 787.325473][T15944] syzkaller0: entered allmulticast mode [ 787.504173][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 787.514199][T15948] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3014'. [ 787.758508][T15955] syzkaller0: entered promiscuous mode [ 787.786168][T15955] syzkaller0: entered allmulticast mode [ 788.148911][T15962] syzkaller0: entered promiscuous mode [ 788.161849][T15962] syzkaller0: entered allmulticast mode [ 788.696048][T15978] syzkaller0: entered promiscuous mode [ 788.723350][T15978] syzkaller0: entered allmulticast mode [ 789.163154][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 789.163251][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 789.476367][T15992] program syz.5.3034 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 790.085502][ T5805] usb 7-1: new high-speed USB device number 97 using dummy_hcd [ 790.206004][ T35] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 790.293272][ T5805] usb 7-1: Using ep0 maxpacket: 32 [ 790.300364][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 790.311569][ T5805] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 790.321408][ T5805] usb 7-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 790.330657][ T5805] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.342914][ T5805] usb 7-1: config 0 descriptor?? [ 790.415369][ T35] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 790.430484][ T35] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 790.445083][ T35] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 790.455738][ T35] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 790.468288][ T35] usb 5-1: config 0 descriptor?? [ 790.702944][T16008] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 790.779720][ T5805] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 790.823125][ T5805] ft260 0003:0403:6030.0016: unknown main item tag 0x0 [ 790.973220][ T5805] ft260 0003:0403:6030.0016: chip code: 0000 0000 [ 791.175947][ T5805] ft260 0003:0403:6030.0016: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.6-1/input0 [ 791.371549][ T5805] ft260 0003:0403:6030.0016: failed to retrieve status: -32, no wakeup [ 791.381302][ T5805] ft260 0003:0403:6030.0016: failed to retrieve status: -5 [ 791.573351][ T5154] usb 6-1: new high-speed USB device number 114 using dummy_hcd [ 791.728170][ T35] ath6kl: Failed to read usb control message: -71 [ 791.736126][ T35] ath6kl: Unable to read the bmi data from the device: -71 [ 791.743628][ T35] ath6kl: Unable to recv target info: -71 [ 791.762665][ T35] ath6kl: Failed to init ath6kl core: -71 [ 791.768850][ T35] ath6kl_usb: probe of 5-1:0.0 failed with error -71 [ 791.791826][ T5154] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 791.793425][ T35] usb 5-1: USB disconnect, device number 4 [ 791.809265][ T5154] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 791.813494][ T5825] usb 7-1: USB disconnect, device number 97 [ 791.819972][ T5154] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 791.856109][ T5154] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.871430][T16025] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 791.891787][ T5154] usb 6-1: Quirk or no altest; falling back to MIDI 1.0 [ 792.245492][ T5154] usb 6-1: USB disconnect, device number 114 [ 792.852371][T16053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3057'. [ 792.861989][T16053] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3057'. [ 793.273529][ T1189] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 793.300421][T16062] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3060'. [ 793.473125][ T1189] usb 5-1: Using ep0 maxpacket: 32 [ 793.503813][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.566245][ T1189] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.599077][ T1189] usb 5-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 793.620766][ T1189] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.647005][ T1189] usb 5-1: config 0 descriptor?? [ 793.833219][ T787] usb 7-1: new high-speed USB device number 98 using dummy_hcd [ 794.023718][ T787] usb 7-1: Using ep0 maxpacket: 32 [ 794.043556][ T787] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 794.061183][ T787] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 794.067455][ T1189] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 794.076847][ T787] usb 7-1: New USB device found, idVendor=5443, idProduct=ffff, bcdDevice= 0.00 [ 794.102559][ T1189] ft260 0003:0403:6030.0017: unknown main item tag 0x0 [ 794.109833][ T787] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 794.127297][ T787] usb 7-1: config 0 descriptor?? [ 794.171107][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3066'. [ 794.194645][T16074] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3066'. [ 794.281554][ T1189] ft260 0003:0403:6030.0017: chip code: 0000 0000 [ 794.489602][ T1189] ft260 0003:0403:6030.0017: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.4-1/input0 [ 794.548931][ T5154] usb 7-1: USB disconnect, device number 98 [ 794.701158][ T1189] ft260 0003:0403:6030.0017: failed to retrieve status: -32, no wakeup [ 794.710439][ T1189] ft260 0003:0403:6030.0017: failed to retrieve status: -5 [ 795.000023][T16089] netlink: 'syz.2.3071': attribute type 12 has an invalid length. [ 795.305433][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'. [ 795.318048][T16098] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3076'. [ 795.883604][ T5772] Bluetooth: hci0: command 0x0c1a tx timeout [ 795.965995][ T5154] usb 5-1: USB disconnect, device number 5 [ 796.541958][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 796.579008][T16128] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3088'. [ 796.781105][T16133] raw_sendmsg: syz.2.3090 forgot to set AF_INET. Fix it! [ 797.004667][ T35] usb 6-1: new high-speed USB device number 115 using dummy_hcd [ 797.138500][T16137] netlink: 14 bytes leftover after parsing attributes in process `syz.6.3092'. [ 797.216207][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 797.226914][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 797.278851][ T35] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 797.304389][ T35] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 797.321350][ T35] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 797.363910][ T35] usb 6-1: config 0 descriptor?? [ 797.820914][ T35] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 797.843715][ T35] ft260 0003:0403:6030.0018: unknown main item tag 0x0 [ 798.006583][ T35] ft260 0003:0403:6030.0018: chip code: 0000 0000 [ 798.214633][ T35] ft260 0003:0403:6030.0018: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 798.428299][ T35] ft260 0003:0403:6030.0018: failed to retrieve status: -32, no wakeup [ 798.441810][ T35] ft260 0003:0403:6030.0018: failed to retrieve status: -5 [ 798.869790][ T35] usb 6-1: USB disconnect, device number 115 [ 799.283418][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3099'. [ 799.292673][T16155] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3099'. [ 799.848844][T16170] syzkaller0: entered promiscuous mode [ 799.866489][T16170] syzkaller0: entered allmulticast mode [ 800.125581][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3108'. [ 800.153837][T16177] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3108'. [ 800.673172][ T35] usb 6-1: new high-speed USB device number 116 using dummy_hcd [ 800.765661][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 800.777797][T16200] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3118'. [ 800.895034][ T35] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7 [ 800.937723][ T35] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 250, changing to 7 [ 800.975220][ T35] usb 6-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice= 0.40 [ 800.990363][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.017732][ T35] usb 6-1: Product: syz [ 801.022064][ T35] usb 6-1: Manufacturer: syz [ 801.048384][ T35] usb 6-1: SerialNumber: syz [ 801.080950][T16210] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3123'. [ 801.298137][ T35] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 801.342627][ T35] usb 6-1: invalid MIDI EP [ 801.356052][ T35] usb 6-1: snd-bcd2000: error during probing [ 801.369492][ T35] snd-bcd2000: probe of 6-1:1.2 failed with error -22 [ 801.410998][ T35] usb 6-1: USB disconnect, device number 116 [ 801.450346][T11318] udevd[11318]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 801.518435][T16225] syzkaller0: entered promiscuous mode [ 801.542046][T16225] syzkaller0: entered allmulticast mode [ 801.623438][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3131'. [ 801.637599][T16229] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3131'. [ 801.986492][T16243] netlink: 'syz.4.3136': attribute type 12 has an invalid length. [ 802.400883][T16260] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 802.440681][T16262] syzkaller0: entered promiscuous mode [ 802.446814][T16262] syzkaller0: entered allmulticast mode [ 802.843967][ T6643] usb 6-1: new high-speed USB device number 117 using dummy_hcd [ 802.910378][T16272] netlink: 'syz.2.3147': attribute type 12 has an invalid length. [ 803.030779][ T6643] usb 6-1: Using ep0 maxpacket: 32 [ 803.067837][ T6643] usb 6-1: config 0 has no interfaces? [ 803.085663][ T6643] usb 6-1: New USB device found, idVendor=5443, idProduct=ffff, bcdDevice= 0.00 [ 803.148922][ T6643] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.212772][ T6643] usb 6-1: config 0 descriptor?? [ 804.078894][T16293] syzkaller0: entered promiscuous mode [ 804.093857][T16293] syzkaller0: entered allmulticast mode [ 805.326009][ T5825] usb 7-1: new high-speed USB device number 99 using dummy_hcd [ 805.404684][ T6643] usb 6-1: USB disconnect, device number 117 [ 805.545384][ T5825] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 805.584334][ T5825] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 805.630038][ T5825] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 805.660885][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 805.673296][ T5825] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 805.687313][ T5825] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 805.715290][ T5825] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 805.729509][ T5825] usb 7-1: Product: syz [ 805.737572][ T5825] usb 7-1: Manufacturer: syz [ 805.755120][ T5825] cdc_wdm 7-1:1.0: skipping garbage [ 805.760522][ T5825] cdc_wdm 7-1:1.0: skipping garbage [ 805.772212][ T5825] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 805.777511][T16319] syzkaller0: entered promiscuous mode [ 805.784067][ T5825] cdc_wdm 7-1:1.0: Unknown control protocol [ 805.790192][T16319] syzkaller0: entered allmulticast mode [ 806.563226][T16341] netlink: 'syz.5.3167': attribute type 3 has an invalid length. [ 806.670454][T16343] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 806.710865][T16343] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 806.766625][T16343] tipc: Enabling of bearer rejected, failed to enable media [ 806.875983][ T5154] usb 7-1: USB disconnect, device number 99 [ 806.986451][T16353] syzkaller0: entered promiscuous mode [ 807.001092][T16353] syzkaller0: entered allmulticast mode [ 807.828144][T16370] netlink: 'syz.6.3178': attribute type 3 has an invalid length. [ 808.025789][ T6643] usb 6-1: new high-speed USB device number 118 using dummy_hcd [ 808.046079][T16374] syzkaller0: entered promiscuous mode [ 808.051730][T16374] syzkaller0: entered allmulticast mode [ 808.225525][ T6643] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 808.236422][ T6643] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 808.261378][ T6643] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 808.280303][ T6643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.303183][ T6643] usb 6-1: Product: syz [ 808.307426][ T6643] usb 6-1: Manufacturer: syz [ 808.312062][ T6643] usb 6-1: SerialNumber: syz [ 808.329117][ T6643] usb 6-1: config 0 descriptor?? [ 808.338869][ T6643] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 808.492753][T16386] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3183'. [ 809.173417][ T1291] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.180386][ T1291] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.191680][ T5825] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 809.396188][ T5825] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 809.414594][ T5825] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.426319][ T5825] usb 5-1: Product: syz [ 809.430719][ T5825] usb 5-1: Manufacturer: syz [ 809.436275][ T5825] usb 5-1: SerialNumber: syz [ 809.443938][ T5825] usb 5-1: config 0 descriptor?? [ 809.553162][ T6643] usb 6-1: USB disconnect, device number 118 [ 810.169511][T16403] netlink: 'syz.2.3188': attribute type 3 has an invalid length. [ 810.478585][ T5825] usb 5-1: ATUSB: AT86RF231 version 17 [ 810.677939][ T5825] usb 5-1: Firmware version (0.0) predates our first public release. [ 810.703943][ T5825] usb 5-1: Please update to version 0.2 or newer [ 810.805417][ T5825] usb 5-1: USB disconnect, device number 6 [ 811.171424][T16437] syzkaller0: entered promiscuous mode [ 811.181686][T16437] syzkaller0: entered allmulticast mode [ 811.204652][ T5805] usb 7-1: new high-speed USB device number 100 using dummy_hcd [ 811.414230][ T5805] usb 7-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 811.443125][ T5805] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 811.477421][ T5805] usb 7-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 811.507401][ T5805] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 811.523053][ T5805] usb 7-1: Product: syz [ 811.527304][ T5805] usb 7-1: Manufacturer: syz [ 811.531931][ T5805] usb 7-1: SerialNumber: syz [ 811.563424][ T5805] usb 7-1: config 0 descriptor?? [ 811.578557][ T5805] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 811.743473][ T787] usb 5-1: new full-speed USB device number 7 using dummy_hcd [ 811.978755][ T787] usb 5-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 812.011816][ T787] usb 5-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 812.043217][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.059833][ T787] usb 5-1: Product: syz [ 812.064379][ T787] usb 5-1: Manufacturer: syz [ 812.069956][ T787] usb 5-1: SerialNumber: syz [ 812.094870][ T787] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 812.110628][ T6643] usb 6-1: new high-speed USB device number 119 using dummy_hcd [ 812.141093][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 812.187228][ T787] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 812.210440][ T787] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 812.230039][ T787] dvb_usb_umt_010: probe of 5-1:54.0 failed with error -22 [ 812.289213][ T787] usb 5-1: USB disconnect, device number 7 [ 812.309161][ T6643] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 812.329960][ T6643] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.340043][ T6643] usb 6-1: Product: syz [ 812.344577][ T6643] usb 6-1: Manufacturer: syz [ 812.349221][ T6643] usb 6-1: SerialNumber: syz [ 812.789995][ T6643] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 812.825290][ T5805] usb 7-1: USB disconnect, device number 100 [ 813.089203][T16459] syzkaller0: entered promiscuous mode [ 813.099374][T16459] syzkaller0: entered allmulticast mode [ 813.236078][ T6643] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 813.261208][ T6643] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 813.272623][ T6643] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 813.286211][ T6643] lan78xx: probe of 6-1:1.0 failed with error -71 [ 813.299398][ T6643] usb 6-1: USB disconnect, device number 119 [ 813.492636][T16467] syzkaller0: entered promiscuous mode [ 813.504893][T16467] syzkaller0: entered allmulticast mode [ 813.950724][T16483] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 813.959380][T16482] syzkaller0: entered promiscuous mode [ 813.966578][T16482] syzkaller0: entered allmulticast mode [ 814.209044][T16486] syzkaller0: entered promiscuous mode [ 814.217978][T16486] syzkaller0: entered allmulticast mode [ 814.598706][T16471] ALSA: mixer_oss: invalid OSS volume '`ÛÉŽš (' [ 814.843130][ T787] usb 6-1: new high-speed USB device number 120 using dummy_hcd [ 815.053488][ T787] usb 6-1: config 0 has too many interfaces: 253, using maximum allowed: 32 [ 815.103145][ T787] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 253 [ 815.147939][ T787] usb 6-1: New USB device found, idVendor=055f, idProduct=c630, bcdDevice=b6.ac [ 815.165533][ T787] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.187706][ T787] usb 6-1: Product: syz [ 815.191965][ T787] usb 6-1: Manufacturer: syz [ 815.204329][ T787] usb 6-1: SerialNumber: syz [ 815.230034][ T787] usb 6-1: config 0 descriptor?? [ 815.257991][ T787] gspca_main: sunplus-2.14.0 probing 055f:c630 [ 815.431039][T16510] syzkaller0: entered promiscuous mode [ 815.443359][T16510] syzkaller0: entered allmulticast mode [ 815.806738][T16520] syzkaller0: entered promiscuous mode [ 815.832604][T16520] syzkaller0: entered allmulticast mode [ 815.945224][T16525] netlink: 'syz.2.3237': attribute type 3 has an invalid length. [ 815.953717][T16525] netlink: 'syz.2.3237': attribute type 3 has an invalid length. [ 816.474566][ T5805] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 816.478174][ T6643] usb 6-1: USB disconnect, device number 120 [ 816.676116][ T5805] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 816.693263][ T5805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.707224][ T5805] usb 5-1: Product: syz [ 816.711534][ T5805] usb 5-1: Manufacturer: syz [ 816.716874][ T5805] usb 5-1: SerialNumber: syz [ 816.876718][T16550] syzkaller0: entered promiscuous mode [ 816.882371][T16550] syzkaller0: entered allmulticast mode [ 817.070925][T16552] netlink: 'syz.6.3248': attribute type 3 has an invalid length. [ 817.088088][T16552] netlink: 'syz.6.3248': attribute type 3 has an invalid length. [ 817.149327][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 817.518047][T16568] syzkaller0: entered promiscuous mode [ 817.524292][T16568] syzkaller0: entered allmulticast mode [ 817.600086][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -71 [ 817.617239][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 817.636402][ T5805] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 817.686494][ T5805] lan78xx: probe of 5-1:1.0 failed with error -71 [ 817.709360][ T5805] usb 5-1: USB disconnect, device number 8 [ 817.723553][ T787] usb 7-1: new full-speed USB device number 101 using dummy_hcd [ 817.793071][T16576] netlink: 'syz.5.3260': attribute type 3 has an invalid length. [ 817.801123][T16576] netlink: 'syz.5.3260': attribute type 3 has an invalid length. [ 817.928393][ T787] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 817.938384][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.947575][ T787] usb 7-1: Product: syz [ 817.952016][ T787] usb 7-1: Manufacturer: syz [ 817.957318][ T787] usb 7-1: SerialNumber: syz [ 817.965399][ T787] usb 7-1: config 0 descriptor?? [ 818.163879][ T35] usb 6-1: new high-speed USB device number 121 using dummy_hcd [ 818.192036][ T787] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 818.382816][ T35] usb 6-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 818.397558][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.408461][ T35] usb 6-1: Product: syz [ 818.412890][ T35] usb 6-1: Manufacturer: syz [ 818.418714][ T35] usb 6-1: SerialNumber: syz [ 818.429198][ T35] usb 6-1: config 0 descriptor?? [ 819.405027][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 819.414174][ T5773] Bluetooth: hci0: command 0x0c1a tx timeout [ 819.464202][ T35] usb 6-1: Firmware version (0.0) predates our first public release. [ 819.472630][ T787] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -32 [ 819.493385][ T35] usb 6-1: Please update to version 0.2 or newer [ 819.500095][ T787] usb 7-1: USB disconnect, device number 101 [ 819.555754][T16604] netlink: 'syz.4.3269': attribute type 3 has an invalid length. [ 819.574327][T16604] netlink: 'syz.4.3269': attribute type 3 has an invalid length. [ 819.590407][ T35] usb 6-1: USB disconnect, device number 121 [ 820.206997][ T5772] Bluetooth: hci0: unexpected event for opcode 0x0c24 [ 820.314737][T16619] syzkaller0: entered promiscuous mode [ 820.320369][T16619] syzkaller0: entered allmulticast mode [ 820.532523][T16627] netlink: 'syz.2.3279': attribute type 3 has an invalid length. [ 820.540842][T16627] netlink: 'syz.2.3279': attribute type 3 has an invalid length. [ 820.973176][ T6643] usb 7-1: new high-speed USB device number 102 using dummy_hcd [ 821.180551][ T6643] usb 7-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 821.203110][ T6643] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.221083][ T6643] usb 7-1: Product: syz [ 821.230295][ T6643] usb 7-1: Manufacturer: syz [ 821.237197][ T6643] usb 7-1: SerialNumber: syz [ 821.256292][ T6643] usb 7-1: config 0 descriptor?? [ 821.493154][ T35] usb 6-1: new high-speed USB device number 122 using dummy_hcd [ 821.685380][ T35] usb 6-1: Using ep0 maxpacket: 32 [ 821.698558][ T35] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 821.708893][ T35] usb 6-1: config 0 has no interface number 0 [ 821.716059][ T35] usb 6-1: config 0 interface 184 has no altsetting 0 [ 821.727193][ T35] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 821.742003][ T35] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 821.761499][ T35] usb 6-1: Product: syz [ 821.768790][ T35] usb 6-1: Manufacturer: syz [ 821.781379][ T35] usb 6-1: SerialNumber: syz [ 821.791950][ T35] usb 6-1: config 0 descriptor?? [ 821.806288][ T35] smsc75xx v1.0.0 [ 822.123158][ T5773] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 822.297247][ T6643] usb 7-1: Firmware version (0.0) predates our first public release. [ 822.321917][ T6643] usb 7-1: Please update to version 0.2 or newer [ 822.420774][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 822.442702][ T6643] usb 7-1: USB disconnect, device number 102 [ 822.449144][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 822.468748][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 822.481626][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 822.493314][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 822.513962][ T35] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -32 [ 822.533694][ T35] smsc75xx: probe of 6-1:0.184 failed with error -32 [ 822.800053][ T5071] ------------[ cut here ]------------ [ 822.800081][ T1102] ------------[ cut here ]------------ [ 822.806116][ T5071] WARNING: CPU: 1 PID: 5071 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 822.811885][ T1102] WARNING: CPU: 0 PID: 1102 at net/mac80211/chan.c:92 ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 822.822913][ T5071] Modules linked in: [ 822.834350][ T1102] Modules linked in: [ 822.837935][ T5071] CPU: 1 PID: 5071 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 822.841836][ T1102] [ 822.841846][ T1102] CPU: 0 PID: 1102 Comm: kworker/u4:7 Not tainted syzkaller #0 [ 822.849531][ T5071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.849548][ T5071] Workqueue: phy23 ieee80211_csa_finalize_work [ 822.849582][ T5071] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 822.849610][ T5071] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 822.849629][ T5071] RSP: 0018:ffffc9000fd579c0 EFLAGS: 00010293 [ 822.849654][ T5071] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff8880318b3c00 [ 822.849671][ T5071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 822.849687][ T5071] RBP: dffffc0000000000 R08: ffff888066ddd5af R09: 1ffff1100cdbbab5 [ 822.849705][ T5071] R10: dffffc0000000000 R11: ffffed100cdbbab6 R12: 0000000000000001 [ 822.849721][ T5071] R13: ffff888066dde5d9 R14: ffff88806871ac70 R15: ffff88806871ace8 [ 822.849739][ T5071] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 822.849760][ T5071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.849777][ T5071] CR2: 000020000057eff8 CR3: 000000005660c000 CR4: 00000000003526e0 [ 822.849799][ T5071] Call Trace: [ 822.849810][ T5071] [ 822.849838][ T5071] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 822.852180][ T1102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.859962][ T5071] ieee80211_csa_finalize+0x5a6/0xf20 [ 822.859995][ T5071] ? mutex_lock_nested+0x20/0x20 [ 822.870630][ T1102] Workqueue: phy24 ieee80211_csa_finalize_work [ 822.870663][ T1102] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 822.870691][ T1102] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 822.870710][ T1102] RSP: 0018:ffffc9000483f9c0 EFLAGS: 00010293 [ 822.870733][ T1102] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff888023f53c00 [ 822.870751][ T1102] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 822.870765][ T1102] RBP: dffffc0000000000 R08: ffff88807c9495af R09: 1ffff1100f9292b5 [ 822.877015][ T5071] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 822.884395][ T1102] R10: dffffc0000000000 R11: ffffed100f9292b6 R12: 0000000000000001 [ 822.904775][ C1] ------------[ cut here ]------------ [ 822.904826][ C1] WARNING: CPU: 1 PID: 5071 at net/mac80211/tx.c:5033 __ieee80211_beacon_get+0x1233/0x1600 [ 822.904866][ C1] Modules linked in: [ 822.904883][ C1] CPU: 1 PID: 5071 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 822.904904][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 822.904918][ C1] Workqueue: phy23 ieee80211_csa_finalize_work [ 822.904948][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 822.904974][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 822.904993][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 822.905014][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff8880318b3c00 [ 822.905032][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 822.905047][ C1] RBP: 0000000000000000 R08: ffff8880318b3c00 R09: 0000000000000003 [ 822.905062][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807c94a3c0 [ 822.905078][ C1] R13: dffffc0000000000 R14: ffff88807c94a8b0 R15: ffff888021368824 [ 822.905095][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 822.905114][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.905131][ C1] CR2: 000020000057eff8 CR3: 000000005660c000 CR4: 00000000003526e0 [ 822.905153][ C1] Call Trace: [ 822.905163][ C1] [ 822.905177][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 822.905225][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 822.905256][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 822.911323][ T1102] R13: ffff88807c94a5d9 R14: ffff88805e4a2c70 R15: ffff88805e4a2ce8 [ 822.911345][ T1102] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 822.911363][ T1102] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 822.919736][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 822.919772][ C1] __iterate_interfaces+0x243/0x500 [ 822.919802][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 822.919827][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 822.919859][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 822.919883][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 822.919918][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 822.928076][ T1102] CR2: 00002000000bd038 CR3: 0000000027590000 CR4: 00000000003526f0 [ 822.936045][ C1] __hrtimer_run_queues+0x520/0xc40 [ 822.944198][ T1102] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000002 [ 822.952184][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 822.961277][ T1102] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 822.967860][ C1] ? hw_scan_work+0xf60/0xf60 [ 822.967892][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 822.967913][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 822.967944][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 822.967969][ C1] handle_softirqs+0x280/0x820 [ 822.967994][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 822.968020][ C1] ? do_softirq+0x1a0/0x1a0 [ 822.968048][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 822.968075][ C1] __irq_exit_rcu+0xd3/0x190 [ 822.968096][ C1] ? irq_exit_rcu+0x20/0x20 [ 822.968128][ C1] irq_exit_rcu+0x9/0x20 [ 822.968145][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 822.968172][ C1] [ 822.968182][ C1] [ 822.976294][ T1102] Call Trace: [ 822.979558][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 822.982497][ T1102] [ 822.989107][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 822.989136][ C1] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 822.989155][ C1] RSP: 0018:ffffc9000fd572e0 EFLAGS: 00000293 [ 822.999261][ T1102] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 823.004737][ C1] RAX: ffffffff816b9b86 RBX: ffffc9000fd5747f RCX: ffff8880318b3c00 [ 823.004755][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.004769][ C1] RBP: ffffc9000fd57450 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 823.004785][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: ffffffff8d8b9540 [ 823.004799][ C1] R13: 1ffffffff19f970c R14: ffffffff8d8b9598 R15: dffffc0000000000 [ 823.004826][ C1] ? console_flush_all+0x8a6/0xd20 [ 823.004861][ C1] ? __rwlock_init+0x150/0x150 [ 823.004889][ C1] ? console_flush_all+0x10a/0xd20 [ 823.004929][ C1] ? is_console_locked+0x20/0x20 [ 823.004952][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.004990][ C1] console_unlock+0xad/0x350 [ 823.005019][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 823.005052][ C1] ? vprintk_emit+0x467/0x610 [ 823.005076][ C1] ? vprintk_emit+0x30b/0x610 [ 823.005099][ C1] ? vprintk_emit+0x30b/0x610 [ 823.005140][ C1] vprintk_emit+0x497/0x610 [ 823.005163][ C1] ? vprintk_emit+0x30b/0x610 [ 823.005191][ C1] ? printk_sprint+0x460/0x460 [ 823.005243][ C1] _printk+0xde/0x130 [ 823.005274][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.005301][ C1] ? load_image+0x420/0x420 [ 823.005330][ C1] ? is_bpf_text_address+0x28f/0x2a0 [ 823.005355][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 823.005382][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.005407][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.005432][ C1] __show_trace_log_lvl+0x485/0x6c0 [ 823.005475][ C1] ? ieee80211_csa_finalize_work+0xf6/0x140 [ 823.005508][ C1] __warn+0x160/0x470 [ 823.005532][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.005561][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.005587][ C1] report_bug+0x2be/0x4f0 [ 823.005608][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.005635][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.005661][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 823.005686][ C1] handle_bug+0xcf/0x120 [ 823.005709][ C1] exc_invalid_op+0x1a/0x50 [ 823.005731][ C1] asm_exc_invalid_op+0x1a/0x20 [ 823.005756][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.005782][ C1] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 823.005802][ C1] RSP: 0018:ffffc9000fd579c0 EFLAGS: 00010293 [ 823.005824][ C1] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff8880318b3c00 [ 823.005840][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 823.005854][ C1] RBP: dffffc0000000000 R08: ffff888066ddd5af R09: 1ffff1100cdbbab5 [ 823.005871][ C1] R10: dffffc0000000000 R11: ffffed100cdbbab6 R12: 0000000000000001 [ 823.005887][ C1] R13: ffff888066dde5d9 R14: ffff88806871ac70 R15: ffff88806871ace8 [ 823.005930][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 823.006009][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 823.010935][ T1102] ieee80211_csa_finalize+0x5a6/0xf20 [ 823.017142][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 823.017169][ C1] ? mutex_lock_nested+0x20/0x20 [ 823.017191][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.017223][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 823.017251][ C1] ? read_lock_is_recursive+0x20/0x20 [ 823.017284][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 823.017312][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 823.017338][ C1] process_scheduled_works+0xa5d/0x15d0 [ 823.024751][ T1102] ? mutex_lock_nested+0x20/0x20 [ 823.044406][ C1] ? worker_attach_to_pool+0x380/0x380 [ 823.050546][ T1102] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.058556][ C1] ? assign_work+0x3d2/0x5d0 [ 823.066650][ T1102] ? ieee80211_csa_finalize_work+0x140/0x140 [ 823.074673][ C1] worker_thread+0xa55/0xfc0 [ 823.074705][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 823.074731][ C1] ? _raw_spin_unlock+0x40/0x40 [ 823.080787][ T1102] ? read_lock_is_recursive+0x20/0x20 [ 823.088785][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 823.094362][ T1102] ieee80211_csa_finalize_work+0xf6/0x140 [ 823.104376][ C1] kthread+0x2fa/0x390 [ 823.109359][ T1102] ? process_scheduled_works+0x96f/0x15d0 [ 823.116017][ C1] ? pr_cont_work+0x560/0x560 [ 823.116044][ C1] ? kthread_blkcg+0xd0/0xd0 [ 823.116066][ C1] ret_from_fork+0x48/0x80 [ 823.116091][ C1] ? kthread_blkcg+0xd0/0xd0 [ 823.116113][ C1] ret_from_fork_asm+0x11/0x20 [ 823.116157][ C1] [ 823.116169][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 823.116180][ C1] CPU: 1 PID: 5071 Comm: kworker/u4:10 Not tainted syzkaller #0 [ 823.116199][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 823.116217][ C1] Workqueue: phy23 ieee80211_csa_finalize_work [ 823.116240][ C1] Call Trace: [ 823.116248][ C1] [ 823.116255][ C1] dump_stack_lvl+0x18c/0x250 [ 823.116284][ C1] ? show_regs_print_info+0x20/0x20 [ 823.116308][ C1] ? load_image+0x420/0x420 [ 823.116342][ C1] panic+0x2dc/0x730 [ 823.116368][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 823.116396][ C1] ? ret_from_fork_asm+0x11/0x20 [ 823.116422][ C1] __warn+0x2e0/0x470 [ 823.116440][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116463][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116483][ C1] report_bug+0x2be/0x4f0 [ 823.116500][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116522][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116542][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 823.116562][ C1] handle_bug+0xcf/0x120 [ 823.116580][ C1] exc_invalid_op+0x1a/0x50 [ 823.116597][ C1] asm_exc_invalid_op+0x1a/0x20 [ 823.116617][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 823.116639][ C1] Code: 24 4c 89 e7 e8 fe 69 c0 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 f9 a7 82 f7 0f 0b e9 f6 f7 ff ff e8 ed a7 82 f7 <0f> 0b e9 48 fb ff ff e8 e1 a7 82 f7 48 c7 c7 60 89 64 8e 4c 89 e6 [ 823.116653][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 823.116668][ C1] RAX: ffffffff8a047a13 RBX: ffffffff8a046816 RCX: ffff8880318b3c00 [ 823.116680][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.116692][ C1] RBP: 0000000000000000 R08: ffff8880318b3c00 R09: 0000000000000003 [ 823.116703][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff88807c94a3c0 [ 823.116714][ C1] R13: dffffc0000000000 R14: ffff88807c94a8b0 R15: ffff888021368824 [ 823.116731][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 823.116753][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116779][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 823.116801][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 823.116830][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 823.116868][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 823.116901][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 823.116928][ C1] __iterate_interfaces+0x243/0x500 [ 823.116952][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 823.116971][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 823.116997][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 823.117016][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 823.117044][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 823.117065][ C1] __hrtimer_run_queues+0x520/0xc40 [ 823.117083][ C1] ? ktime_get_update_offsets_now+0x99/0x3f0 [ 823.117110][ C1] ? hw_scan_work+0xf60/0xf60 [ 823.117136][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 823.117154][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 823.117183][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 823.117213][ C1] handle_softirqs+0x280/0x820 [ 823.117236][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 823.117258][ C1] ? do_softirq+0x1a0/0x1a0 [ 823.117280][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 823.117304][ C1] __irq_exit_rcu+0xd3/0x190 [ 823.117321][ C1] ? irq_exit_rcu+0x20/0x20 [ 823.117347][ C1] irq_exit_rcu+0x9/0x20 [ 823.117362][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 823.117395][ C1] [ 823.117401][ C1] [ 823.117409][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 823.117429][ C1] RIP: 0010:console_flush_all+0x8b1/0xd20 [ 823.117449][ C1] Code: ed 01 00 00 e8 90 86 1b 00 4d 85 ff 48 8b 5c 24 38 75 07 e8 81 86 1b 00 eb 06 e8 7a 86 1b 00 fb 49 bf 00 00 00 00 00 fc ff df <48> 8b 44 24 58 42 0f b6 04 38 84 c0 0f 85 2f 02 00 00 80 3b 01 0f [ 823.117463][ C1] RSP: 0018:ffffc9000fd572e0 EFLAGS: 00000293 [ 823.117477][ C1] RAX: ffffffff816b9b86 RBX: ffffc9000fd5747f RCX: ffff8880318b3c00 [ 823.117490][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 823.117500][ C1] RBP: ffffc9000fd57450 R08: ffffffff911c65c7 R09: 1ffffffff2238cb8 [ 823.117512][ C1] R10: dffffc0000000000 R11: fffffbfff2238cb9 R12: ffffffff8d8b9540 [ 823.117524][ C1] R13: 1ffffffff19f970c R14: ffffffff8d8b9598 R15: dffffc0000000000 [ 823.117545][ C1] ? console_flush_all+0x8a6/0xd20 [ 823.117571][ C1] ? __rwlock_init+0x150/0x150 [ 823.117593][ C1] ? console_flush_all+0x10a/0xd20 [ 823.117625][ C1] ? is_console_locked+0x20/0x20 [ 823.117643][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.117675][ C1] console_unlock+0xad/0x350 [ 823.117698][ C1] ? other_cpu_in_panic+0xf0/0xf0 [ 823.117723][ C1] ? vprintk_emit+0x467/0x610 [ 823.117742][ C1] ? vprintk_emit+0x30b/0x610 [ 823.117759][ C1] ? vprintk_emit+0x30b/0x610 [ 823.117780][ C1] vprintk_emit+0x497/0x610 [ 823.117797][ C1] ? vprintk_emit+0x30b/0x610 [ 823.117818][ C1] ? printk_sprint+0x460/0x460 [ 823.117854][ C1] _printk+0xde/0x130 [ 823.117877][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.117898][ C1] ? load_image+0x420/0x420 [ 823.117919][ C1] ? is_bpf_text_address+0x28f/0x2a0 [ 823.117939][ C1] ? is_bpf_text_address+0x26/0x2a0 [ 823.117960][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.117980][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.117998][ C1] __show_trace_log_lvl+0x485/0x6c0 [ 823.118031][ C1] ? ieee80211_csa_finalize_work+0xf6/0x140 [ 823.118057][ C1] __warn+0x160/0x470 [ 823.118075][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.118098][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.118118][ C1] report_bug+0x2be/0x4f0 [ 823.118135][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.118155][ C1] ? ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.118175][ C1] ? ieee80211_vif_use_reserved_switch+0x10ea/0x28f0 [ 823.118195][ C1] handle_bug+0xcf/0x120 [ 823.118219][ C1] exc_invalid_op+0x1a/0x50 [ 823.118236][ C1] asm_exc_invalid_op+0x1a/0x20 [ 823.118254][ C1] RIP: 0010:ieee80211_vif_use_reserved_switch+0x10e8/0x28f0 [ 823.118273][ C1] Code: 48 89 df e8 2a 33 d6 f7 e9 dc fc ff ff e8 10 fc 7d f7 eb 24 e8 09 fc 7d f7 c7 04 24 f4 ff ff ff e9 e4 f5 ff ff e8 f8 fb 7d f7 <0f> 0b 0f 0b e9 cf f5 ff ff e8 ea fb 7d f7 48 8b 7c 24 08 4c 8b 7c [ 823.118286][ C1] RSP: 0018:ffffc9000fd579c0 EFLAGS: 00010293 [ 823.118301][ C1] RAX: ffffffff8a09220e RBX: 0000000000000001 RCX: ffff8880318b3c00 [ 823.118312][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 823.118322][ C1] RBP: dffffc0000000000 R08: ffff888066ddd5af R09: 1ffff1100cdbbab5 [ 823.118334][ C1] R10: dffffc0000000000 R11: ffffed100cdbbab6 R12: 0000000000000001 [ 823.118346][ C1] R13: ffff888066dde5d9 R14: ffff88806871ac70 R15: ffff88806871ace8 [ 823.118367][ C1] ? ieee80211_vif_use_reserved_switch+0xcee/0x28f0 [ 823.118406][ C1] ieee80211_link_use_reserved_context+0x383/0x5c0 [ 823.118431][ C1] ieee80211_csa_finalize+0x5a6/0xf20 [ 823.118452][ C1] ? mutex_lock_nested+0x20/0x20 [ 823.118471][ C1] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 823.118490][ C1] ? ieee80211_csa_finalize_work+0x140/0x140 [ 823.118512][ C1] ? read_lock_is_recursive+0x20/0x20 [ 823.118539][ C1] ieee80211_csa_finalize_work+0xf6/0x140 [ 823.118561][ C1] ? process_scheduled_works+0x96f/0x15d0 [ 823.118582][ C1] process_scheduled_works+0xa5d/0x15d0 [ 823.118630][ C1] ? worker_attach_to_pool+0x380/0x380 [ 823.118656][ C1] ? assign_work+0x3d2/0x5d0 [ 823.118683][ C1] worker_thread+0xa55/0xfc0 [ 823.118704][ C1] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 823.118724][ C1] ? _raw_spin_unlock+0x40/0x40 [ 823.118742][ C1] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 823.118781][ C1] kthread+0x2fa/0x390 [ 823.118797][ C1] ? pr_cont_work+0x560/0x560 [ 823.118818][ C1] ? kthread_blkcg+0xd0/0xd0 [ 823.118835][ C1] ret_from_fork+0x48/0x80 [ 823.118853][ C1] ? kthread_blkcg+0xd0/0xd0 [ 823.118870][ C1] ret_from_fork_asm+0x11/0x20 [ 823.118905][ C1] [ 823.126637][ C1] Kernel Offset: disabled