last executing test programs: 37.381719947s ago: executing program 0 (id=801): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x972, &(0x7f0000006680)) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e21, 0x5, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}, 0x1c) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f00000001c0)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_usb_connect_ath9k(0x3, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000000000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000000c0), &(0x7f0000000080)=r1}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getrlimit(0x7, &(0x7f0000019300)) renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x3) read$msr(0xffffffffffffffff, &(0x7f00000193c0)=""/102392, 0x18ff8) ioctl$KVM_CAP_HALT_POLL(0xffffffffffffffff, 0x4068aea3, 0x0) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1, 0x0, 0x0, 0x6000}, 0x20) 35.285982209s ago: executing program 0 (id=804): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FIOCLEX(r0, 0x5451) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) 34.0841335s ago: executing program 0 (id=809): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffff}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 28.171779235s ago: executing program 0 (id=819): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x50}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FIOCLEX(r0, 0x5451) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) 26.737748758s ago: executing program 0 (id=822): socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x3, 0xff) prlimit64(0x0, 0xe, &(0x7f0000000b40)={0xa, 0x8b}, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0xa2c65) ioctl$SNDCTL_DSP_SETTRIGGER(r5, 0x40045010, &(0x7f0000000000)) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x30, 0x0, 0x207, 0x70bd26, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x30}}, 0x8090) 23.316058678s ago: executing program 0 (id=830): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 10.392319433s ago: executing program 1 (id=856): mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000500)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000100)={0x9, 0x6, 0x2, 0x4, 0x4, 0x2}) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$RTC_PIE_ON(r0, 0x7005) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r1, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) 9.601006509s ago: executing program 4 (id=858): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FIOCLEX(r0, 0x5451) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) 9.538439973s ago: executing program 2 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7001008000003400000008007300000000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 9.463372807s ago: executing program 3 (id=860): syz_open_dev$cec(&(0x7f0000000240), 0x0, 0x2182) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000400), 0x0, 0x80802) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) ioctl$CEC_DQEVENT(r1, 0xc0506107, 0x0) 8.662601414s ago: executing program 3 (id=861): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r4, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100108047e08fb09beeb8dd40102030109021b00010700f0090904"], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 8.383138671s ago: executing program 4 (id=862): sendmsg$can_raw(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@canfd={{}, 0xee, 0x0, 0x0, 0x0, "bc27adc50d03fb36a26d1d33610708eb844846979c3e552e4f42636ec483561f986e3e2a5455252a03b32ffd44fd8a40b0353a4025411e0620ec9757810556d2"}, 0x48}, 0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x180) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0xffffffffffffffff, {0xffffffffffffffff, 0x2, 0x101, 0x0, 0x0, 0x10000000, {0x40, 0xd08, 0x0, 0x100, 0x0, 0x0, 0x7, 0x0, 0x122, 0x6000, 0x10000, 0x0, 0x0, 0x902}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x3) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0, 0x100}], 0x1, 0x0, 0x0, 0x1}, 0x0) ioctl$TIOCGPTPEER(r1, 0x40140921, 0x200000000005) 8.372600221s ago: executing program 2 (id=863): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x20802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0xa, 0x88441) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x81, 0x5, 0x9, 0x0, {0x9, 0x4, 0x101c, 0x10, 0x4, 0x401, 0x23ca, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) clock_adjtime(0x3, &(0x7f0000000140)={0x7, 0x4, 0x7f, 0x56db, 0xf, 0x8001, 0x1, 0x3, 0x3, 0xffffffff, 0xe8, 0x101, 0x7ff, 0x2, 0x3, 0x8001, 0x8, 0xa, 0x1, 0x3ff, 0x1, 0x7fffffff, 0x5, 0x9, 0x7, 0xff}) r4 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mkdirat(r5, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7fff}]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 7.53853533s ago: executing program 32 (id=830): mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff0}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x2}, @TCA_FQ_LOW_RATE_THRESHOLD={0x8, 0xb, 0x3}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48040}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x24000010) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) 7.429388916s ago: executing program 1 (id=865): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x4000000) pipe2$watch_queue(0x0, 0x80) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000240), &(0x7f0000000300)=0x8) accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x6b4, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x15, 0x4, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0x1e}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x6}, 0x94) write$P9_RSTATu(r2, &(0x7f00000004c0)={0x224, 0x7d, 0x0, {{0x500, 0xe3, 0x0, 0x4, {0x0, 0x40000, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0, 0x1f, ' nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05\xf7\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x47, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\a\x00\x00\x00\x00\x00\x00\x00\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300}}, 0x224) 7.371588359s ago: executing program 2 (id=866): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) syz_mount_image$fuse(0x0, &(0x7f0000000ac0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x860080, 0x0, 0x1, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) 7.254025666s ago: executing program 4 (id=867): bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000040)={[{@data_err_abort}, {@noblock_validity}, {@nodiscard}]}, 0x0, 0x501, &(0x7f0000000140)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000bc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x380, 0x0, 0x4c, 0x1a, 0x160, 0x73, 0x2b0, 0x258, 0x258, 0x2b0, 0x258, 0x3, 0x0, {[{{@ipv6={@private0, @local, [], [], 'dvmrp1\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x118, 0x160, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x7}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@uncond, 0x0, 0x120, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@multiport={{0x50}, {0x1, 0x4, [0x4e22, 0x4e20, 0x4e24, 0x8, 0x4e21, 0x4e22, 0x4e23, 0x4e21, 0x4e21, 0x4e23, 0x4e22, 0x4e20, 0x4e23, 0x4e21, 0x4e24], [0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1], 0x1}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x5400}}, {0x28}}}}, 0x3e0) 4.490915907s ago: executing program 4 (id=868): socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000004c0)={0x7, 0x800000000000008a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x6) r2 = syz_open_dev$evdev(&(0x7f0000000040), 0x2, 0x0) setreuid(0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000200)={0x0, 0x1, 0x0, 0x0, "4620f63a4e6b5c9b4410b99e0e549fcfdeb92566761ad1c34ca4a1abe476fa96"}) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="20000000010301"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000180)={0x84, @dev={0xac, 0x14, 0x14, 0xa}, 0x15, 0x3, 'sed\x00', 0x1, 0x0, 0x4}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 4.413700453s ago: executing program 3 (id=869): getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000200)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x4c, 0x2, 0x6, 0x801, 0xe4340000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x4c}}, 0x2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, 0x0, 0x4090) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000007d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x18) r6 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r6, 0xc1105518, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, [0x7, 0xfffffffffffffffc, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x4, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200000000, 0x1, 0x0, 0xfffffffffffffffe, 0x0, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xed9b, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x4, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) 4.043120194s ago: executing program 1 (id=870): creat(&(0x7f0000000140)='./file0\x00', 0x116) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffe6e, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0840d07, &(0x7f0000000040)=0x1d) 3.239234181s ago: executing program 1 (id=871): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, 0x0, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000001600), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001640)={0x1c, r2, 0x1}, 0x1c}}, 0x0) time(0xffffffffffffffff) time(&(0x7f0000000000)) 3.08828639s ago: executing program 4 (id=872): r0 = socket$nl_rdma(0x10, 0x3, 0x14) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="22000000040000001000000012"], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x27, 0x6, 0x80000000) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x0, 0xc0, [0x0, 0x200000000180, 0x2000000001b0, 0x2000000001e0], 0x0, 0x0, &(0x7f0000000180)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x138) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r5, 0xc008561c, &(0x7f0000000040)={0xf0f024}) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x7}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) ioctl$FIOCLEX(r0, 0x5451) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x38, 0x1410, 0x8b7fbbc5948fecd9, 0x70bd29, 0x25dfd9fc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x20004085}, 0x4004080) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x8) 2.937393028s ago: executing program 3 (id=873): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYRES16=r1, @ANYBLOB="01002cbd7001008000003400000008007300000000000e0001006e657464657673696d0000000f0002"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80) 2.897231291s ago: executing program 2 (id=874): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000001440), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf2502000000080001", @ANYRES32=r3], 0x1c}}, 0x4008054) read$nci(r0, 0x0, 0x0) 2.896378811s ago: executing program 1 (id=875): r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x88002, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000000300), 0x20802, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000680)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x10}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "d103"}]}]}]}]}, @NFT_MSG_DELSETELEM={0x2c, 0xe, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xd8}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r3 = syz_open_dev$dri(&(0x7f00000000c0), 0xa, 0x88441) ioctl$DRM_IOCTL_MODE_SETCRTC(r3, 0xc06864a2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x81, 0x5, 0x9, 0x0, {0x9, 0x4, 0x101c, 0x10, 0x4, 0x401, 0x23ca, 0xa, 0x0, 0x52, 0x43, 0x7e9, 0x401, 0x9aa5, "cb630dab3a0338057401a192419598961f50dc45c87d55a52a28b8f01c0e0e7a"}}) clock_adjtime(0x0, &(0x7f0000000900)={0x6, 0x20000000e, 0xf, 0x0, 0xf, 0x8000000000000000, 0xa, 0x2, 0x9, 0x4, 0x5, 0x9, 0xc, 0x9, 0x7, 0x9, 0x8, 0x3, 0xb, 0xfffffffffffffffc, 0x2, 0x5, 0x7, 0x7, 0x3, 0x6}) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000100)=0x15) clock_adjtime(0x3, &(0x7f0000000140)={0x7, 0x4, 0x7f, 0x56db, 0xf, 0x8001, 0x1, 0x3, 0x3, 0xffffffff, 0xe8, 0x101, 0x7ff, 0x2, 0x3, 0x8001, 0x8, 0xa, 0x1, 0x3ff, 0x1, 0x7fffffff, 0x5, 0x9, 0x7, 0xff}) r4 = fsopen(&(0x7f0000000000)='ocfs2_dlmfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) mkdirat(r5, &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7fff}]}) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) 2.773380888s ago: executing program 3 (id=876): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4004001) openat$audio1(0xffffffffffffff9c, 0x0, 0x88002, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, 0x0, 0x0, 0x48000, &(0x7f000005ffe4)={0xa, 0x4e22, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x200000) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r4 = accept4(r3, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000300)="ad56b6c5820fae9d6dcd3292ea54c7be", 0x10) sendto$inet6(r4, &(0x7f0000000080)='%[', 0x2, 0x800, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000140)={'veth0_to_team\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x4, 0x30, 0x5, 0x2, 0x1, @dev={0xfe, 0x80, '\x00', 0x1e}, @empty, 0x8000, 0x781e, 0x1000, 0x5}}) lstat(&(0x7f0000000300)='./file0\x00', &(0x7f00000003c0)) 1.401089228s ago: executing program 4 (id=877): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x0, 0x0, &(0x7f00000000c0)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3fffffff}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200000) 707.523838ms ago: executing program 3 (id=878): bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x10, 0x0, 0x1, 0xb, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1f}}, 0x14) syz_usb_connect(0x0, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="120101024cf1c50863070210845f0102030109023f0001000000000904000005ff87e7000905880f020000000009050300000000000009050cfeffff01060209050f0000000000000905"], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x14, 0x35, 0x301, 0x70bd26, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x1882}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x38, 0x40, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x15, 0x0, 0x0, @uid}, @typed={0x8, 0xa, 0x0, 0x0, @fd}]}, @nested={0x4, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0xc000) futex(&(0x7f0000000000)=0x1, 0x8, 0x82, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0xcc182, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f00000000c0)={r4, 0x1}) ioprio_set$uid(0x3, 0x0, 0x0) gettid() syz_usb_connect(0x0, 0x2d, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e7cc6120c4108a818f7d0102030109021b00010000c005090423000103"], 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000300)=ANY=[@ANYBLOB="1201100108047e08fb09beeb8dd40102030109021b00010700f0090904"], 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 508.74963ms ago: executing program 1 (id=879): syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000080)='./file0\x00', 0x2000002, &(0x7f0000000000)=ANY=[], 0x11, 0x5fdf, &(0x7f0000000b00)="$eJzs3cuOHFcZB/CvL9NzCXGsCEXGYuE4EBJCfLch3OKwYAELkJDX2JpMIoMDyDaIRBaeyAvEBngE2GTDIi+SZ0A8AJZsVlkQCtXMOeOamp7pcezp6p7z+0ntqq9OV/cp/6emuqer+gQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAED/64c/O9iLi6u/SgqMRX4hBRD9iua5PRD1zOd9/GBHHYqM5XoiIwWJEvf7GP89FXIiIT45EPHh4Z7VefG6f/bh45vbNz378g3/+8S/3jv3i7Z9/1G7/6RfPf/ynuxFHf/LGx5/dfTrbDgAAAKWoqqrqpbf5x9P7+37XnQIApiIf/6skL1er1Wr1U63/3J+t/qgLrZuq8e42i4hYb65Tv2bwcTwAzJn1+LTrLtAh+RdtGBHPdN0JYKb1uu4AB+LBwzurvZRvr3k8OLHZnv9OuS3/9d7W9R27TSdpn2MyrZ+vezGI53fpz/KU+jBLcv79dv5XN9tH6X4Hnf+07Jb/aPPSp+Lk/Aft/Fu25f/XiJjb/Ptj8y9Vzn/4OPmvD+Z4/5c/AAAAAACHX/77/9GOP/9dfPJN2Ze9Pv89MaU+AAAAAAAAAMDT9qTj/20x/h8AAADMrPq9eu1vRx4t2+272OrlV3oRz7buDxQmXSyz0nU/AAAAAAAAAAAAAKAkw81zeK/0IhYi4tmVlaqq6ltTu35cT7r+vCt9+6FkXf+SBwCATZ8caV3L34tYiogrqVxYWVmpqqXllWqlWl7Mr2dHi0vVcuN9bZ7WyxZH+3hBPBxV9YMtNdZrmvR+eVJ7+/Hq5xpVg310bDo6ChsAks2j0QNHpEOmqp6Lrl/lMB/s/4eP/Z/96PrnFAAAADh4VVVVvfR13sfT+H79rjsFAEzDUj7+tz8XUKvVarVaffjqpmq8u80iItab69SvGQzHDwBzZj0+7boLdEj+RRtGxLGuOwHMtF7XHeBAPHh4Z7WX8u01jwdpfPd8Lsi2/Nd7G+vl9cdNJ2mfYzKtn697MYjnd+nPC1PqwyzJ+ffb+V/dbB+l+x10/tOyW/71dh7toD9dy/kP2vm3HJ78+2PzL1XOf/hY+Q/kDwAAAAAAMyz//f+oz3/zJgMAAAAAAADA3Hnw8M5qvu41f/7/5TH36zXnXP95aOT8e/vO3/W/h0nOv9/Ov3VCzqAxf/+tR/n/5+Gd1Y9u//tLeTrz+S8MRvVzL/T6g2E656daeCeux41YizM77j/c1n52R/vCtvZzE9rP72gf1e3Luf1UrMav40a8vdW+OOHEqKUJ7dWE9pz/wP5fpJz/sHGr819J7b3WtHb/w/6O/b45Hfc8l//x35d37l3Tdy8GW9vWVG/fyQ76s/F/8swofntr7eap31+7ffvm2UiTbUvPRZo8ZTn/hXTL+b/y0mZ7/r3f3F/vfzh67Pxnxb0Y7pr/S435entfnXLfupDzH6Vbzj8fgcbv//Oc/+77/2sd9AcAAAAAAAAAAAAAAAD2UlXVxiWilyPiUrr+p6trMwGA6crH/yrJy9VqtVqtVh++uqka781mEUvb16lfM/xh3IMBALPsfxHxr647QWfkX7D8fX/19CtddwaYqlvvf/DLazdurN281XVPAAAAAAAAAIDPK4//eaIx/vPGeUCtcaO3jf/6VpyY2/E/+6PBxljnaYNejL3H/z4Ze4//PZzwfAt7NY4m93dxQvvShPaxF3o05PxfTBnn/I+nDStp/NdXOuhP13L+J9NYzzn/r7Xu18y/+vs859/flv/p2+/95vSt9z94/fp7195de3ftV2fPXLpw/uKF8xcvnn7n+o21M5v/jn+wPXfu+ZDzz2NfOw+0LDn/nLn8y5Lz/2qq5V+WnP/LqZZ/WXL++fWe/MuS88/vfeRflpz/q6mWf1ly/l9PtfzLkvN/LdXyL0vO/xupln9Zcv6vp1r+Zcn5n0q1/MuS8z+davmXJeefP+GSf1ly/vnMBvmXJed/LtXyL0vO/3yq5V+WnP+FVMu/LDn/i6mWf1ly/pdSLf+y5Py/mWr5lyXn/61Uy78sOf83Ui3/suT8v51q+Zcl5/+dVMu/LDn/76Za/mXJ+X8v1Vv5D7rtF9OR8/9+qu3/Zcn5v5lq+Zfl0ff/mzFjxkye6fo3EwAAAAAAAAAAAADQNo3TibveRgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhBw4EAAAAAID8XxuhqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqCnv3FiNneZ8B/N2TvTYnN5yJA7YxYGBhd30ChxhMElJK2pSSkDYtqXHstXHiU73rBBAqS6EtUZCK1F7Qi6ZJlEaR2goURWoq0Qipkdq7cpWUm6iVuLBUqByUVEoFbDQz7/vuzOzszK696535vt8P4b935puZd775ZnaftZ4ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOpt/NjEn/eFECr/V/9YF8KFlb+vCXsqX07vXOkVAgAAAOfqveqf/3BJPmHPAi5Ut82/Xfsf35+ZmZkJX3jn9Pt/OTOTz9gQwsDqEKrnJf/+y1/M1G8TPRuG+/rrvu7vcPMDHc4f7HD+UIfzV3U4f3WH84c7nD9nB8yxpvb7mOqVba7+dV1tl4bLwlD1vM0tLvVs3+r+/vS7nKq+6mVmhg6Gw+FImAhjcy7TV/0vhFc3Vm7r/pBuq7/uttaHEM787Kn9aQ19cR9vDg03VlX/2L19b9jwzs+e2v+dqbeubjU77oY5Kw1hy6bKOp8LYfbXVaEvrM77JK2zv26d61usc6BhnX3Vy1X+3rzOMwtcZ7rfw3Gdr7dZ5/p42uPXhxCmw7zbNHs29Ie1Tbea9/dw7YioXEflofxAGFzUcbJxAcdJ5TJvXt94nDQfk2n/b4z7ZHCeNdQ/HG8/s2rOfj+r42RN7Zq74VitXPeDlRsdHq7/1WrDsVrZ5qkb5j8GWj52LY6BfCzXHQObOh0D/asGqsdA/+yaNzUcA+NzLtMf+qq3dfqG9sfA6NTRE6OTTzx52+Gj+w5NHJo4Nj62c/u2Hdu37dgxevDwkYmx2p+L26U9ZG3oz8fgpvhak47Bm5q2rT8kZ765RM+D+DrUDc+Dyn3/zI2VBV3YH+Y5xivbPLfl3J8H+ft+3fNgsO550PI1tcXzYHABz4PKNme2LOx75mDd/63WsCyvhdU19XXF98PKbT5y8/yvhevjup6/ZbHfDwfmHAPpbvXF517llPzz3vCdcb/MPS6uqZxxwapwanLi5O2P75uaOjke4jgvLq17rJqPl7V19ynMOV76F3287Pn7d2+8psXp6+K+Gr61/WNV2Wb7SPvHqvrq3rg/V4Xa/mw4dWuIY4md7/3Z6rtZZX/mLNFmf1a2ee62c/9ZMOeSute/oU6vfwNDg7XXv4G8N4YaXv/mPjQD1ZWFcOa2hb3+DcX/z/fr32Vd8vpX2VeP3N7+GKhs8/zoYo+Bwbavf9fH2RfXc3NMDMN1uf/96vnTtcO07rHseNwMDg7F42Yw3WLjcbNtzmUq11a57S1jZ3fcbLm+8bFq+LmlgMdNZV/91Vj746ayzWvj5/7asSb9te61Y1WnY2BoYFVlvUP5IKi93s2sScfA7WF/OB6OhAP5MpVHuXJbI1sXdgysiv+f79eOq7rkGKjsq5e2tj8GKtv8aNvS/uy0JZ6St6n72an59wvzZf5rBmevr3m3LeVjNRjX+fEffyqf1ipDVLZ5a/tic0b7/XRrPOWCFvup+fkz3zF9IJyf/XRVXOeRHe1/N1XZ5rKdCzye9oQQ3hh/o/r7rvj73e+d+vH3G37v2+p3ym+Mv/HA6EM/Wcz6AQA4e+9X/5xeVftZs+5frBfy7/8AAABAT0i5vz/OTP4HAACAwki5fyDOTP4HAACAwki5fzDOrCT5/7E7d7383tMhvxvgTJTOT7vhwbtr26WO93T8esPMrMrpH/320MtffXpht90fQnj3gQ+23P6xu9O6ak6kdX648fQ5rrpuQbf/6MOz29W/f8KZXbXrT/dnoYdB6iq/Orq1er0bnhivztceCNX50PTzz9auv/Z12v70ttr2fxPftGTPwb6Gy2+J69kc54b4njIP7pndD5WZLvfy+mv/9dLPzt5eulzfpourd/OlP65db3qPqBcvrW2f7vd86/+Xr3335cr2j9/Qev1P97de/+l4vW/G+cvdte3r9/lX69b/p3H96fbS5W7/1g9brv+VK2vbvxKPi2/E2bz+e//iQ++1erzS7ey5q3a5dPtj/7e9erl0fen6m9c//PR4w/5ovv7X3qldz+4v/3ygfvt0erqd5NG7Go/vvvj4NvTIQwjf/bPQsJ/DR2qX++em9afrO3FX6/Xf2rTOE33XVS8/e3/WNdyvr//d1pb3N61nzz+ua7g/L94X9987oz+qXO/ph+LxGM///9dr19f8Xqav3Nf4epO2/8a62vM2Xd9o0/pfbFr/9HWVfdd5/fe/U1v/K/esblj/nk/E4+n+2uy0/kN/e0nD5b/5ndrjcfIrI8eOT546fKBur9Y/j1cPr1l7wYUXXXxJfC1t/nrv8anHJk5uGNswFsKGHnzLwOVe/7fi/N/amF76W6j5yc9rx90Ln6x937rpF7WvX4ynPxofz/T98et/PdRwvDY/7tP31Oa5rv+WuI6FuvJr/33dgjY8/flXT/3Tn7zV/HNBuj8nLh+u3r+XNl5RPa/vtdr5za9XnfzX5Y3P658OjlXnD+J+nYnvzLzpitrtNV9/em+SFz5de/6mn+TS5UPT+4msG2i8H+e6/p/Gn2N+eFXj6186Pn7wdNO7Oa8LfZUlTMfXhzBdOz9tlfb3C2euaHl76X14wvTVi1nmvCafmBw9cvjYqcdHpyYmp0Ynn3hy79Hjp45N7a2+d+neL3a6/Ozze231+X1gYuf2UH22H6+NZVZd/0Urt/4TD+8/cMfYjQcmDu47dXDq4RMTJw/tn5zcP3Fg8sZ9Bw9OfKXT5Q8f2D2+dde2O7aOHDp8YPedu3Zt2zVy+NjxyjJqi+pg59iXRo6d3Fu9yOTu7bvGd+zYPjZy9PiBid13jI2NnOp0+er3ppHKpb88cnLiyL6pw0cnRiYPPzmxe3zXzp1bO77749ETByc3jJ48dWz01OTEydHafdkwVT258r2v0+Uph8nj8fWuSV/86fxzt+7M749b8e1n5r2q2iaNP56Gt+N7QaXvb52+Trl/KM6sJPkfAAAAyiDl/vjG/7NnyP8AAABQGCn3r44zk/8BAACgMFLuryX/4fzx72XJ/0vV/39G/79K/1//P+j/Z/r/+v9B/1//vwP9f/3/Xl6//r/+P511W/8/5v6wJgT//g8AAAAFlXL/2jgz+R8AAAAKI+X+C+LM5H8AAAAojJT7L4wzK0n+9/n/+v/6/+36/2lb/f+g/98N/f/N/6P/P4f+v/5/0P8/ayvdn+/19Xdh/3+N/j/dptv6/yn3XxRnVpL8DwAAAGWQcv/FcWbyPwAAABRGyv2XxJnJ/wAAAFAYKfevizMrSf7X/9f/79T/f3dmZqa8/X+f/19P/3/F+/8+/78F/X/9/6D/f9ZWuj/f6+vvwv6/z/+n63Rb/z/l/l+LMytJ/gcAAIAySLn/A3Fm8j8AAAAURsr9l8aZyf8AAABQGCn3XxZnVpL8X87+/5shBP3/4PP/9f+b1qn/v+L9/4Gg/79o+v/6/0H//6ytdH++19ev/6//T2fd1v9Puf/yOLOS5H8AAAAog5T7r4gzk/8BAACgMFLuvzLOTP4HAACAwki5/6o4s5Lk/3L2/33+v/5/jf5/4zr1/1e8/1+cz/9fM/tX/X/9/3b0//X/e3n9Bej/9+n/s9y6rf+fcv/VcWYlyf8AAABQBin3XxNnJv8DAABAYaTc/8E4M/kfAAAACiPl/vVxZj2f//sXtJX+v/6//r/+v/6//v9y6q3+//zfO/X/a/T/Gy1d/396dgH6/z2z/gL0/33+P8uu2/r/Kfd/KM6s5/M/AAAAkKTcf22cmfwPAAAAhZFy/3VxZvI/AAAAFEbK/RvizEqS//X/9f/1//X/9f/1/5dTb/X/56f/X6P/38jn/+v/6//r/9Net/X/U+7fGGdWkvwPAAAAZZBy/6Y4M/kfAAAACiPl/uvjzOR/AAAAKIyU+zfHmZUk/+v/6//r/+v/N/T/r62/Jf1//f9zp/+v/9+O/r/+fy+vX/9f/5/Ouq3/n3L/DXFmJcn/AAAAUAYp998YZyb/AwAAQGGk3H9TnJn8DwAAAIWRcv+WOLOS5P8F9//7Qgj6//PS/2+9fv3/Ze7/D/j8/6D/3/X0//X/29H/1//v5fXr/+v/01m39f9T7r85zqwk+R8AAADKIOX+W+LM5H8AAAAojJT7b40zk/8BAACgMFLuH4kzK0n+9/n/+v/6/z3c/1+Oz//X/8/0/5eG/r/+fzv6//r/vbz+0vX/VzV+qf/PQnRb/z/l/tvizEqS/wEAAKAMUu6/Pc5M/gcAAIDCSLl/NM5M/gcAAICeNNjitJT7x+LMSpL/z2v/v+kB0P/X/w/6//r/+v/6/+dI/1//P/Rq/39A/7/X11+6/n8T/X8Wotv6/yn3j8eZlST/AwAAQBmk3L81zkz+BwAAgMJIuX9bnJn8DwAAAIWRcv/2OLOS5H+f/6//r/+v/6//r/+/nPT/9f/bKXX/3+f/9/z69f/1/2nU3+K0buv/p9y/I86sJPkfAAAAyiDl/p1xZvI/AAAAFEbK/XfEmcn/AAAAUBgp998ZZ1aS/K//r/+v/6//r/+v/7+c9P/L1/9v1f+cj/6//n8vr1//X/+fzrqt/59y/644s5LkfwAAACiDlPs/HGcm/wMAAEBhpNx/V5yZ/A8AAAA9pV0PLeX+j8SZlST/6/8Xvf8/s1r/X/9f/7/9+vX/l9LcF2D9//L1/xezfv1//f9eXr/+v/4/nXVb/z/l/t1xZiXJ/wAAAFAGKfffHWcm/wMAAEBhpNx/T5yZ/A8AAACFkXL/njizkuR//f+i9/99/r/+v/5/p/Xr/y8v/X/9/3b0/3uz/x9/bNH/76L+f+UY0v+nG3Vb/z/l/nvjzEqS/wEAAKAMUu7/aJyZ/A8AAACFkXL/x+LM5H8AAAAojJT7Px5nVpL8r/+v/6//r/+v/6//v5z0/5et/199KdT/r9H/Pzsr3Z/v9fV3U//f5//Trbqt/59y/31xZiXJ/wAAAFAGKfd/Is5M/gcAAIDCSLn/1+PM5H8AAAAojJT7748zK0n+1//X/y9C//8Z/X/9f/3/rqX/7/P/29H/1//v5fXr/+v/01m39f9T7v+NOLOS5H8AAAAog5T7H4gzk/8BAACgMFLu/2ScmfwPAAAAPWbVvOek3P+bcWYlyf/6/+en/9+fr1//3+f/6//r/+v/LyX9f/3/oP9/1la6P9/r69f/1/+ns27r/6fc/1txZiXJ/wAAAFAGKfd/Ks5M/gcAAIDCSLn/t+PM5H8AAAAojJT7H4wzK2D+b1UqXOr+f/Pl2ylT/9/n/+v/B/1//f+6var/v3T0//X/g/7/WVvp/nyvr1//X/+fzrqt/59y/+/EmRUw/wMAAEBZpdz/UJyZ/A8AAACFkXL/p+PM5H8AAAAojJT7PxNnVpL87/P/9f/1//X/9f/1/5eT/r/+fzv6//r/vbx+/X/9fzrrtv5/yv0Px5mVJP8DAABAGaTc/9k4M/kfAAAACiPl/t+NM5P/AQAAoDBS7v+9OLOS5H/9f/1//X/9f/1//f/lpP8/t/9feQ1byv7/fz638O31/xvvh/6//r/+v/4/y6vb+v8p938uzqwk+R8AAADKIOX+348zk/8BAACgMFLu/4M4M/kfAAAACiPl/kfizEqS//X/9f/1//X/9f/1/5eT/r/P/2/nbPr/q+sur/9/bla6P9/r69f/1/+ns27r/6fc//k4s5LkfwAAACiDlPv/MM5sMfl/cKlXBQAAACyllPv3xpn5938AAAAojJT7H40zK0n+X4L+f3/Q/9f/1/9veTzo/+v/6//r/+v/t+fz//X/e3n9+v/6/3TWbf3/lPv3xZntabwZAAAAoHel3P+FOLOS/Ps/AAAAlEHK/fvjzOR/AAAAKIyU+w/EmZUk//v8f/1//X/9f/1//f/lpP+v/9+O/r/+fy+vX/9f/5/Ouq3/n3L/RJxZSfI/AAAAlEHK/QfjzOR/AAAAKIyU+w/Fmcn/AAAAUBgp9z8WZ1aS/K//r/+v/1/a/v/r32tap/6//v9y0P/X/29H/1//v5fXr/+v/09n3db/T7n/cJxZSfI/AAAAlEHK/V+MM5P/AQAAoDBS7v9SnJn8DwAAAIWRcv+ROLOS5H/9f/1//f/S9v99/n+k/7+89P/1/9vR/9f/7+X16//r/9NZt/X/U+4/GmdWkvwPAAAAZZBy/7E4M/kfAAAACiPl/uNxZvI/AAAAFEbK/SfizEqS//X/F9f/75unG3h2/f/V+v/6//r/+v/6/+dI//889f/jsa3/30j/X/9f/1//n/a6rf+fcv8fxZmVJP8DAABAGaTcfzLOTP4HAACAwki5fzLOTP4HAACAwki5f+pX7N3njl5n1cfhJ8WvE73iHDgFvvCVQ+AYkDgFekvooQZC7y30FjqEEnrvvfdOIPQqBSVeaxk7473Hk3k8977XdX1giQmC7dhC+iv66Y5bmuz/S9f/X3mXn2yx/78Q7/8f/P36f/2//l//r/+fpP8P+v9z6f/1/5P0/6d3+n/2ZLT+P3f/A+KWJvsfAAAAOsjd/8C4xf4HAACAaeTuf1DcYv8DAADANHL3PzhuabL/B3v/v2oO/b/+f6f/1/+f9/dT/6//P4j+X/+/0/8f2Un381v//on6f+//szej9f+5+x8StzTZ/wAAANBB7v6Hxi32PwAAAEwjd//D4hb7HwAAAKaRu//hcUuT/T9Y/3/2u/T/+n/9v/7/vL+f+n/9/0H0//r/nf7/yE66n9/69+v/9f+sG63/z93/iLilyf4HAACADnL3PzJusf8BAABgGrn7HxW32P8AAAAwjdz918QtB+3/05fqqy4d/b/+X/+v/9f/6//3Sf+v/1+i/9f/b/n79f/6f9aN1v/n7r82bvHP/wEAAGAaufsfHbfY/wAAADCN3P2PiVvsfwAAAJhG7v7Hxi1N9r/+X/+v/9f/X7r+/7T+X/9/7PT/+v+d/v/ITrqf3/r36//1/6wbrf/P3f+4uKXJ/gcAAIAOcvc/Pm6x/wEAAGAaufufELfY/wAAADCN3P1PjFua7H/9v/5f/6//9/6//n+f9P/6/yX6f/3/lr9f/6//Z93e+//7XnfnPWz/n7v/urilyf4HAACADnL3Pylusf8BAABgGrn7nxy32P8AAAAwjdz9T4lbmux//b/+/2z/f/tl+n/9v/7/7M/1/8dD/6//X6L/1/9v+fv1//p/1u29/1/p/c//97n7nxq3NNn/AAAA0EHu/qfFLfY/AAAATCN3/9PjFvsfAAAAppG7//q4pcn+1//r/73/r//X/+v/90n/r/9fov/X/2/5+5f6//sc4vv1/3QwWv+fu/8ZcUuT/Q8AAAAd5O5/Ztxi/wMAAMA0cvffELfY/wAAADCN3P3Pilua7H/9v/5f/6//P7f/v7xl/3/Hz/T/+6H/1/8v0f/r/7f8/d7/1/+zbrT+P3f/s+OWJvsfAAAAOsjd/5y4xf4HAACAaeTuf27cYv8DAADANHL3Py9uabL/9f/6f/2//v9uvf9/xRz9v/f/90f/r/9fov/X/2/5+/fW/19/7zv+D1P/zxRG6/9z9z8/bmmy/wEAAKCD3P0viFvsfwAAAJhG7v4Xxi32PwAAAGzZOSFW7v4XxS1N9v9d+/9zS1z9/+FM2v/fftlO/6//P2vm9//1//uj/9f/Lzls/7/T/9evRf8/zvd7/1//z7rR+v/c/S+OW5rsfwAAAOggd/9L4hb7HwAAAKaRu/+lcYv9DwAAANPI3f+yuKXJ/vf+/xD9f1Usg/X/3v/X/5/z69L/6/+PQv+v/1/i/X/9/5a/X/+v/2fdaP1/7v6Xxy1N9j8AAAB0kLv/FXGL/Q8AAADTyN3/yrjF/gcAAIBp5O5/VdzSZP8fQ/9/pf5/2vf/9f/6/3N+Xfp//f9R6P/1/0v0/wf3/1dd4H9P/z/W9+v/9f+sG63/z91/Y9zSZP8DAABAB7n7Xx232P8AAAAwjdz9r4lb7H8AAACYRu7+18YtTfb/hfr/2/7/zF/3/v/h6P8P/n79v/5f/6//1//r/5fo/73/v+Xv1//r/1k3Wv+fu/91cUuT/Q8AAAAd5O5/fdxi/wMAAMA0cve/IW6x/wEAAGAaufvfGLc02f/H8P7/ef3/PfX/+n/9f9xB+///y/8e/f8Z+v/90v/r/5fo//X/m/v+y87+idL/6/9ZN1r/n7v/TXFLk/0PAAAAHeTuf3PcYv8DAADANHL3vyVusf8BAABgGrn73xq3NNn/x9//e/9f/3+R/f/l+v/k/f/4fdX/6/8vgv5f/7/T/x+Z/t/7//p/9m20/j93/01xS5P9DwAAAB3k7n9b3GL/AwAAwDRy9789brH/AQAAYBq5+98RtzTZ//p//f+J9//e/y/6//h91f/r/y+C/l//v9P/H9le+vmr9f/6f/0/Z43W/+fuf2fc0mT/AwAAQAe5+98Vt9j/AAAAMI3c/e+OW+x/AAAAmEbu/vfELU32v/5f/6//H77/v+n8P2/6f/3/luj/9f9L9P8X3//f6eT7/5vit8b7/0P0//GDa/T/jGe0/j93/3vjlib7HwAAADrI3f++uMX+BwAAgGnk7r85brH/AQAAYBq5+98ftzTZ//r/rff/97s1vkD/P2//7/3/uPp//f9B9P/6/12z/n/49//1/97/1//zP0br/3P3fyBuabL/AQAAoIPc/R+MW+x/AAAAmEbu/g/FLfY/AAAATCN3/y1xS5P9r//fev/v/X/9v/5f/z82/b/+f4n+X/+/5e/X/+v/WTda/5+7/8NxS5P9DwAAAB3k7v9I3GL/AwAAwDRy9380brH/AQAAYBq5+z8WtzTZ//p//b/+X/9/t/v/a/X/O/3/Ben/9f9L9P/6/y1/v/5f/8+60fr/3P0fj1ua7H8AAADoIHf/J+IW+x8AAACmkbv/k3GL/Q8AAADTyN3/qbjhXvc4uU86Xqcu8PPozfX/+n/9v/7f+//6/33S/+v/l+j/9f9b/n79v/6fdaP1/7n7Px23+Of/AAAAMI3c/Z+JW+x/AAAAmEbu/lviFvsfAAAApvHZO//1qt3n4pYm+1//r//X/+v/9f/6/33S/+v/l+j/9f9b/n79v/6fdaP1/7n7Px+3NNn/AAAA0EHu/i/ELfY/AAAATCN3/xfjFvsfAAAAppG7/0txS5P9r//X/+v/9f/6f/3/Pun/9f9L9P/6/y1/v/5f/8+60fr/3P1fjlua7H8AAADoIHf/V+IW+x8AAACmkbv/q3GL/Q8AAADTyN3/tbilyf7X/+v/9f/6f/2//n+f9P/6/yX6f/3/lr9f/6//Z91o/X/u/q/HLU32PwAAAHSQu/8bcYv9DwAAANPI3f/NuMX+BwAAgGnk7v9W3NJk/8/c/y/9x/T/Z+j/9f87/b/+f8/0//r/Jfp//f+Wv1//r/9n3Wj9f+7+b8ctTfY/AAAAdJC7/ztxi/0PAAAA08jd/924xf4HAACAaeTu/17c0mT/z9z/Lznu/v9UXP2//n+n/y/6f/3/Tv+v/1+h/9f/b/n79f/6f9adUP9/aneB/j93//fjlib7HwAAADrI3f+DuMX+BwAAgGnk7v9h3GL/AwAAwDRy9/8obpln/9//5oW/qP/3/r/+X/+v/9f/75P+X/+/RP+v/9/y9+v/9f+sG+39/9z9P45b5tn/AAAA0F7u/p/ELfY/AAAATCN3/0/jFvsfAAAAppG7/2dxS5P9r//X/+v/W/X/V+z0//r/S0z/r/9fov/X/2/5+/X/+n/Wjdb/5+7/edzSZP8DAABAB7n7fxG32P8AAAAwjdz9v4xb7H8AAACYRu7+X8UtTfa//l//r/9v1f97/1//f8np//X/S/T/+v8tf7/+X//PutH6/9z9v45bmux/AAAA6CB3/2/iFvsfAAAAppG7/7dxi/0PAAAA08jd/7u4pcn+1//r//X/o/b/Z/4M6v/1//r/Zfp//f9O/39kJ93Pb/379f/6f9aN1v/n7r81bmmy/wEAAKCD3P2/j1vsfwAAAJhG7v4/xC32PwAAAEwjd/9tcUuT/a//1/9P2f+fnqH/9/6//l//fxj6f/3/Tv9/ZCfdz2/9++fu/69e/fXr/zmM0fr/3P1/jFua7H8AAADoIHf/n+IW+x8AAACmkbv/z3GL/Q8AAADTyN3/l7ilyf7X/+v/L77/P1W/7mH7/yne/9f/6//1/4eh/9f/7zbc/99w45kf6/+3+f1z9//e/+d4jNb/5+7/a9zSZP8DAABAB7n7/xa32P8AAAAwjdz9f49b7H8AAACYRu7+f8QtTfa//l//P+X7//p//b/+fxgt+//8c6f/X9W9//f+/7a/f+7+/wr9P8ditP4/d/8/45Ym+x8AAAA6yN3/r7jF/gcAAIBp5O7/d9xi/wMAAMA0cvf/J25psv/1//p//b/+X/+v/9+nlv2/9/8PTf+v/9/y98/d/3v/n+MxWv+fu/+/AQAA//9zlTC7") syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x399446c, 0x0, 0x1, 0x0, &(0x7f0000000080)) syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000100)=ANY=[@ANYRES64=0x0, @ANYRES16, @ANYRES8=0x0, @ANYRES64], 0xb, 0x0, &(0x7f0000000000)) 319.376382ms ago: executing program 2 (id=880): creat(&(0x7f0000000140)='./file0\x00', 0x116) llistxattr(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x101180, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e78, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{}, 0x80}}]}, {0x2}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000280)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0xfffffffffffffe6e, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000380)=r5, 0x4) ioctl$SOUND_MIXER_WRITE_VOLUME(r0, 0xc0840d07, &(0x7f0000000040)=0x1d) 0s ago: executing program 2 (id=881): syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000780)={'wpan0\x00'}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x4000, 0x6, 0x1, 0x2, 0xff}) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000140)=@abs={0x0, 0x0, 0x4e20}, 0x6e) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="44000000000803000000000000000000000020000900010073797a30000000000600024088a800000500030001000000140004800800014000000200080009400000000c"], 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000000208010000000000000000000a0000070940010073797aff000000009f55"], 0x20}, 0x1, 0x0, 0x0, 0x4080}, 0x0) kernel console output (not intermixed with test programs): 984][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.662311][ T4267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.679054][ T4276] device veth0_macvtap entered promiscuous mode [ 72.724817][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 72.741346][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 72.750859][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 72.761523][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 72.778349][ T4267] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.793907][ T4267] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.803155][ T4267] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.819037][ T4267] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.838987][ T4276] device veth1_macvtap entered promiscuous mode [ 72.859308][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 72.868134][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.877503][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.886219][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 72.894982][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 72.933668][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 72.945270][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 72.954758][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 72.965154][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 72.975826][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 72.983293][ T4281] Bluetooth: hci3: command 0x040f tx timeout [ 72.983330][ T4281] Bluetooth: hci1: command 0x040f tx timeout [ 72.983358][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 72.987130][ T4281] Bluetooth: hci2: command 0x040f tx timeout [ 72.990352][ T4269] Bluetooth: hci4: command 0x040f tx timeout [ 73.015372][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.031021][ T4274] device veth0_macvtap entered promiscuous mode [ 73.042246][ T4268] device veth0_vlan entered promiscuous mode [ 73.085142][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.095172][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 73.104228][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.113050][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.124259][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.136387][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.147251][ T4274] device veth1_macvtap entered promiscuous mode [ 73.163851][ T4268] device veth1_vlan entered promiscuous mode [ 73.179998][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.189121][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.197733][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.206328][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.214436][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.224136][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.254882][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.280859][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.291125][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.302448][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.319413][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.327375][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.338205][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.349352][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.365161][ T4278] device veth0_vlan entered promiscuous mode [ 73.386611][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.400751][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.410610][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.420090][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.432414][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.443445][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.453552][ T4274] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.468200][ T4274] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.479675][ T4274] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.493025][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.502134][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.511830][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.522175][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.548442][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.557431][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.569113][ T4274] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.578949][ T4274] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.591351][ T4274] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.600167][ T4274] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.615251][ T4278] device veth1_vlan entered promiscuous mode [ 73.668366][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 73.686377][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.700426][ T4268] device veth0_macvtap entered promiscuous mode [ 73.718175][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.723383][ T4268] device veth1_macvtap entered promiscuous mode [ 73.732866][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.769418][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.782130][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 73.791498][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.855163][ T4351] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.858903][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.870224][ T4351] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.872677][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.893441][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.893644][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.911341][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.922284][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.932779][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.944612][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.958526][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.966260][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 73.985895][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 73.997021][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.005785][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.033344][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.049261][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.059389][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.070086][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.080159][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.090735][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.103481][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.114491][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 74.125677][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 74.141043][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.151949][ T4360] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.165520][ T4278] device veth0_macvtap entered promiscuous mode [ 74.185442][ T4268] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.199629][ T4268] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.211770][ T4268] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.225269][ T4268] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.261990][ T4278] device veth1_macvtap entered promiscuous mode [ 74.282660][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 74.298732][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 74.344531][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.363484][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.379553][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.405262][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.416054][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.428590][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.441483][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.453093][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.463664][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 74.474486][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.487729][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.506996][ T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.512199][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 74.523646][ T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.524148][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 74.565831][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 74.583481][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 74.611061][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.638913][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.652941][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.672478][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.686560][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.701777][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.721954][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 74.742994][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.758240][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.798728][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 74.821725][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 74.843132][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.862644][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.878139][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.926596][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.011389][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.025734][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.056602][ T4269] Bluetooth: hci4: command 0x0419 tx timeout [ 75.065205][ T57] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.067373][ T4281] Bluetooth: hci2: command 0x0419 tx timeout [ 75.072928][ T4269] Bluetooth: hci0: command 0x0419 tx timeout [ 75.079078][ T4283] Bluetooth: hci1: command 0x0419 tx timeout [ 75.084998][ T4280] Bluetooth: hci3: command 0x0419 tx timeout [ 75.145611][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.225972][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.226028][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.264849][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.307973][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.354110][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.362083][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.403738][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.407162][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.445439][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.481977][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 75.502234][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.777048][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.785706][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.794622][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 75.803006][ T0] NOHZ tick-stop error: local softirq work is pending, handler #0a!!! [ 75.828150][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.857218][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 75.930581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 76.016916][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.097226][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 76.178981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 77.073850][ T4408] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 77.851650][ T4426] fuse: Bad value for 'fd' [ 78.006622][ T4429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 78.102377][ T4429] IPVS: sed: FWM 3 0x00000003 - no destination available [ 78.177190][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 81.491088][ T4472] fuse: Invalid rootmode [ 81.698918][ T126] cfg80211: failed to load regulatory.db [ 81.980905][ T4476] input: syz1 as /devices/virtual/input/input5 [ 82.864666][ T4484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.386233][ T4494] input: syz1 as /devices/virtual/input/input6 [ 84.725688][ T4503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.981186][ T4510] fuse: Invalid rootmode [ 88.183278][ T4520] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.191935][ T4520] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.447371][ T4523] device bridge_slave_1 left promiscuous mode [ 88.508386][ T4523] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.566706][ T4530] input: syz1 as /devices/virtual/input/input7 [ 88.575198][ T4523] device bridge_slave_0 left promiscuous mode [ 88.597608][ T4523] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.905902][ T4537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.773650][ T4573] binder: 4566:4573 unknown command 0 [ 94.779333][ T4573] binder: 4566:4573 ioctl c0306201 200000000080 returned -22 [ 94.837636][ T4572] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 95.499902][ T4571] binder: BINDER_SET_CONTEXT_MGR already set [ 95.508912][ T4571] binder: 4566:4571 ioctl 4018620d 200000000040 returned -16 [ 95.575674][ T4571] netlink: 44 bytes leftover after parsing attributes in process `syz.2.60'. [ 96.194181][ T4581] hfsplus: unable to find HFS+ superblock [ 96.927278][ T4586] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.934773][ T4586] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.027569][ T4587] device bridge_slave_1 left promiscuous mode [ 97.118198][ T4587] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.611303][ T4587] device bridge_slave_0 left promiscuous mode [ 97.637246][ T4587] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.025423][ T4594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.45'. [ 99.035450][ T4594] netlink: 'syz.4.45': attribute type 7 has an invalid length. [ 99.044046][ T4594] netlink: 4 bytes leftover after parsing attributes in process `syz.4.45'. [ 99.107697][ T4603] netlink: 20 bytes leftover after parsing attributes in process `syz.3.67'. [ 99.620022][ T4614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.71'. [ 99.706108][ T4614] IPVS: sed: FWM 3 0x00000003 - no destination available [ 99.717501][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 101.176162][ T4630] input: syz1 as /devices/virtual/input/input8 [ 101.571852][ T4639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.496425][ C1] sched: RT throttling activated [ 105.114125][ T4642] binder: 4641:4642 unknown command 0 [ 105.120011][ T4642] binder: 4641:4642 ioctl c0306201 200000000080 returned -22 [ 105.135748][ T4654] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 105.176211][ T4642] binder: BINDER_SET_CONTEXT_MGR already set [ 105.182292][ T4642] binder: 4641:4642 ioctl 4018620d 200000000040 returned -16 [ 105.196886][ T4642] netlink: 44 bytes leftover after parsing attributes in process `syz.4.77'. [ 105.250340][ T4658] Cannot find add_set index 0 as target [ 106.640316][ T4686] netlink: 12 bytes leftover after parsing attributes in process `syz.3.88'. [ 106.669991][ T4686] IPVS: sed: FWM 3 0x00000003 - no destination available [ 106.752759][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 107.380501][ T4694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.89'. [ 108.716814][ T4693] input: syz1 as /devices/virtual/input/input9 [ 109.093125][ T4707] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 110.154147][ T4709] input: syz1 as /devices/virtual/input/input10 [ 110.398520][ T4712] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 113.040648][ T4719] input: syz1 as /devices/virtual/input/input11 [ 113.341438][ T4721] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.836005][ T4732] Zero length message leads to an empty skb [ 116.521338][ T4746] trusted_key: encrypted_key: insufficient parameters specified [ 117.669998][ T4762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.108'. [ 117.750837][ T4762] IPVS: sed: FWM 3 0x00000003 - no destination available [ 117.760297][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 118.899094][ T4772] (syz.4.112,4772,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 120.519966][ T4779] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 120.528459][ T4779] overlayfs: overlapping lowerdir path [ 122.174571][ T4280] Bluetooth: hci4: link tx timeout [ 122.180391][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.189011][ T4280] Bluetooth: hci4: link tx timeout [ 122.195150][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 122.210545][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 122.491869][ T4800] trusted_key: encrypted_key: insufficient parameters specified [ 122.493457][ T27] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 122.562600][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.571111][ T4317] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 122.583084][ T27] usb 3-1: Product: syz [ 122.593540][ T4801] netlink: 12 bytes leftover after parsing attributes in process `syz.3.120'. [ 122.599888][ T27] usb 3-1: Manufacturer: syz [ 122.613072][ T27] usb 3-1: SerialNumber: syz [ 122.756591][ T4317] usb 1-1: Using ep0 maxpacket: 8 [ 123.040218][ T4317] usb 1-1: unable to get BOS descriptor or descriptor too short [ 123.062276][ T27] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 123.072715][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 123.142006][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 123.166212][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 123.180672][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 123.191183][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 123.201329][ T4317] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 123.229574][ T4317] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 123.291763][ T4317] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 123.308642][ T4331] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 123.365282][ T4317] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.390785][ T4317] usb 1-1: Product: syz [ 123.397968][ T4317] usb 1-1: Manufacturer: syz [ 123.415141][ T4317] usb 1-1: SerialNumber: syz [ 123.449135][ T4317] usb 1-1: config 0 descriptor?? [ 123.488933][ T4795] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 123.507614][ T4795] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 124.070803][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.081657][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.098740][ T4812] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 124.108969][ T4812] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 124.258057][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 124.708649][ T4331] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 124.731424][ T4331] ath9k_htc: Failed to initialize the device [ 124.879823][ T4317] usb 3-1: USB disconnect, device number 2 [ 124.939455][ T4317] usb 3-1: ath9k_htc: USB layer deinitialized [ 125.923279][ T4344] usb 1-1: USB disconnect, device number 2 [ 125.965390][ T4827] (syz.4.128,4827,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 126.544431][ T4280] Bluetooth: hci4: link tx timeout [ 126.550295][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.561738][ T4280] Bluetooth: hci4: link tx timeout [ 126.568782][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 126.577118][ T4280] Bluetooth: hci4: link tx timeout [ 126.582359][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 130.966467][ T4317] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 131.123575][ T4872] (syz.1.142,4872,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 131.256416][ T4317] usb 4-1: Using ep0 maxpacket: 8 [ 131.273821][ T4317] usb 4-1: unable to get BOS descriptor or descriptor too short [ 131.284584][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 131.296152][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 131.432362][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 131.443657][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 131.453872][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 131.463926][ T4317] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 131.509284][ T4317] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 131.575967][ T4317] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 131.593417][ T4317] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.604179][ T4317] usb 4-1: Product: syz [ 131.609565][ T4317] usb 4-1: Manufacturer: syz [ 131.614365][ T4317] usb 4-1: SerialNumber: syz [ 131.623592][ T4317] usb 4-1: config 0 descriptor?? [ 131.635993][ T4867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 131.653099][ T4867] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 132.133874][ T4280] Bluetooth: hci4: link tx timeout [ 132.140008][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.196205][ T4280] Bluetooth: hci4: link tx timeout [ 132.201494][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 132.292267][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.302540][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 132.315075][ T4886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 132.325071][ T4886] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 133.086319][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.092738][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.207304][ T4887] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 133.216130][ T4887] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 133.539746][ T4889] netlink: 12 bytes leftover after parsing attributes in process `syz.2.146'. [ 134.153547][ T4318] usb 4-1: USB disconnect, device number 2 [ 135.515633][ T4904] binder: 4898:4904 unknown command 0 [ 135.521273][ T4904] binder: 4898:4904 ioctl c0306201 200000000080 returned -22 [ 135.558924][ T4904] binder: BINDER_SET_CONTEXT_MGR already set [ 135.565165][ T4904] binder: 4898:4904 ioctl 4018620d 200000000040 returned -16 [ 135.585562][ T4904] netlink: 44 bytes leftover after parsing attributes in process `syz.0.148'. [ 135.870872][ T4905] IPVS: sync thread started: state = MASTER, mcast_ifn = vcan0, syncid = 0, id = 0 [ 136.262949][ T26] audit: type=1326 audit(2000000005.210:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 136.338241][ T26] audit: type=1326 audit(2000000005.240:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 136.362795][ T26] audit: type=1326 audit(2000000005.270:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 136.386033][ T26] audit: type=1326 audit(2000000005.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 136.523215][ T26] audit: type=1326 audit(2000000005.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 136.577967][ T26] audit: type=1326 audit(2000000005.280:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 138.056663][ T26] audit: type=1326 audit(2000000005.280:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 138.194048][ T26] audit: type=1326 audit(2000000005.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 138.244423][ T26] audit: type=1326 audit(2000000005.290:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 138.272943][ T26] audit: type=1326 audit(2000000005.290:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4914 comm="syz.4.154" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 139.146648][ T4280] Bluetooth: hci4: link tx timeout [ 139.151895][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.164885][ T4280] Bluetooth: hci4: link tx timeout [ 139.170939][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.179701][ T4280] Bluetooth: hci4: link tx timeout [ 139.184880][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.289755][ T4280] Bluetooth: hci4: link tx timeout [ 139.301628][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.311336][ T4280] Bluetooth: hci4: link tx timeout [ 139.317620][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.330952][ T4280] Bluetooth: hci4: link tx timeout [ 139.336635][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.346912][ T4280] Bluetooth: hci4: link tx timeout [ 139.352188][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 139.360960][ T4280] Bluetooth: hci4: link tx timeout [ 139.367123][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 143.337356][ T4948] binder: 4946:4948 unknown command 0 [ 143.342850][ T4948] binder: 4946:4948 ioctl c0306201 200000000080 returned -22 [ 143.451714][ T26] kauditd_printk_skb: 25 callbacks suppressed [ 143.451732][ T26] audit: type=1326 audit(2000000012.400:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 143.515192][ T4948] binder: BINDER_SET_CONTEXT_MGR already set [ 143.521829][ T4948] binder: 4946:4948 ioctl 4018620d 200000000040 returned -16 [ 143.574496][ T4948] netlink: 44 bytes leftover after parsing attributes in process `syz.0.163'. [ 145.671738][ T4956] netlink: 12 bytes leftover after parsing attributes in process `syz.1.167'. [ 145.696901][ T26] audit: type=1326 audit(2000000012.400:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 146.823819][ T26] audit: type=1326 audit(2000000012.830:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 147.855966][ T26] audit: type=1326 audit(2000000012.830:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.061249][ T26] audit: type=1326 audit(2000000012.830:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.155913][ T26] audit: type=1326 audit(2000000012.850:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.375417][ T26] audit: type=1326 audit(2000000012.850:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.451610][ T26] audit: type=1326 audit(2000000012.850:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.776297][ T26] audit: type=1326 audit(2000000012.850:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 148.816320][ T26] audit: type=1326 audit(2000000012.850:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 150.374809][ T26] audit: type=1326 audit(2000000012.850:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 150.579041][ T26] audit: type=1326 audit(2000000012.850:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 150.742226][ T26] audit: type=1326 audit(2000000012.850:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 150.867668][ T26] audit: type=1326 audit(2000000012.850:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 151.472307][ T26] audit: type=1326 audit(2000000012.850:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 151.622520][ T26] audit: type=1326 audit(2000000012.850:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 151.721082][ T26] audit: type=1326 audit(2000000012.850:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 151.844483][ T26] audit: type=1326 audit(2000000012.850:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4949 comm="syz.4.165" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 151.950187][ T4280] Bluetooth: hci4: link tx timeout [ 151.956647][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.966285][ T4280] Bluetooth: hci4: link tx timeout [ 151.971596][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.980668][ T4280] Bluetooth: hci4: link tx timeout [ 151.986742][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.995793][ T4280] Bluetooth: hci4: link tx timeout [ 152.000986][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.076466][ T4280] Bluetooth: hci4: link tx timeout [ 152.081771][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.091944][ T4280] Bluetooth: hci4: link tx timeout [ 152.098176][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.107514][ T4280] Bluetooth: hci4: link tx timeout [ 152.112831][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 152.281027][ T5000] binder: 4991:5000 unknown command 0 [ 152.289170][ T5000] binder: 4991:5000 ioctl c0306201 200000000080 returned -22 [ 152.361819][ T5000] binder: BINDER_SET_CONTEXT_MGR already set [ 152.371282][ T5000] binder: 4991:5000 ioctl 4018620d 200000000040 returned -16 [ 152.421874][ T5000] netlink: 44 bytes leftover after parsing attributes in process `syz.0.179'. [ 155.991486][ T5024] input: syz1 as /devices/virtual/input/input12 [ 156.553666][ T5036] netlink: 12 bytes leftover after parsing attributes in process `syz.1.190'. [ 156.638129][ T5037] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.522468][ T4280] Bluetooth: hci4: link tx timeout [ 157.528848][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 157.537401][ T4280] Bluetooth: hci4: link tx timeout [ 157.542834][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 161.110620][ T26] kauditd_printk_skb: 51 callbacks suppressed [ 161.110636][ T26] audit: type=1326 audit(2000000030.061:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 161.382598][ T5076] netlink: 'syz.4.203': attribute type 13 has an invalid length. [ 161.392888][ T5076] netlink: 'syz.4.203': attribute type 17 has an invalid length. [ 161.429969][ T26] audit: type=1326 audit(2000000030.101:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 162.526147][ T26] audit: type=1326 audit(2000000030.101:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 162.772413][ T26] audit: type=1326 audit(2000000030.101:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 162.795019][ T26] audit: type=1326 audit(2000000030.101:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 162.818040][ T26] audit: type=1326 audit(2000000030.101:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 163.011942][ T26] audit: type=1326 audit(2000000030.101:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 163.354006][ T26] audit: type=1326 audit(2000000030.181:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 163.397095][ T26] audit: type=1326 audit(2000000030.181:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 163.890899][ T26] audit: type=1326 audit(2000000030.181:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5070 comm="syz.0.202" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 165.941857][ T4280] Bluetooth: hci4: link tx timeout [ 165.948812][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.965056][ T4280] Bluetooth: hci4: link tx timeout [ 165.970268][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.979404][ T4280] Bluetooth: hci4: link tx timeout [ 165.986739][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 165.998929][ T4280] Bluetooth: hci4: link tx timeout [ 166.005921][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.015866][ T4280] Bluetooth: hci4: link tx timeout [ 166.021056][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.030598][ T4280] Bluetooth: hci4: link tx timeout [ 166.037289][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.046039][ T4280] Bluetooth: hci4: link tx timeout [ 166.051288][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 166.062996][ T5076] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 166.652838][ T5076] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 168.119961][ T5110] netlink: 12 bytes leftover after parsing attributes in process `syz.4.212'. [ 168.155745][ T26] kauditd_printk_skb: 23 callbacks suppressed [ 168.155761][ T26] audit: type=1326 audit(2000000037.112:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 168.365021][ T26] audit: type=1326 audit(2000000037.112:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 169.884918][ T26] audit: type=1326 audit(2000000037.152:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.004898][ T26] audit: type=1326 audit(2000000037.152:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.076978][ T26] audit: type=1326 audit(2000000037.152:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.108012][ T26] audit: type=1326 audit(2000000037.172:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.250963][ T26] audit: type=1326 audit(2000000037.172:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.278261][ T26] audit: type=1326 audit(2000000037.172:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.302098][ T26] audit: type=1326 audit(2000000037.172:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 170.336792][ T26] audit: type=1326 audit(2000000037.172:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5112 comm="syz.1.215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 172.852472][ T4280] Bluetooth: hci4: link tx timeout [ 172.857736][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 172.865728][ T4280] Bluetooth: hci4: link tx timeout [ 172.870882][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 172.878611][ T4280] Bluetooth: hci4: link tx timeout [ 172.884765][ T4280] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 172.892394][ T4280] Bluetooth: hci4: link tx timeout [ 172.898216][ T4280] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 173.220552][ T5141] trusted_key: encrypted_key: insufficient parameters specified [ 174.388493][ T5150] input: syz1 as /devices/virtual/input/input13 [ 174.519204][ T5150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.651112][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 174.651129][ T26] audit: type=1326 audit(2000000043.602:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 174.829552][ T26] audit: type=1326 audit(2000000043.642:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 174.911299][ T26] audit: type=1326 audit(2000000043.642:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 174.975903][ T4280] Bluetooth: hci4: command 0x0406 tx timeout [ 175.602479][ T26] audit: type=1326 audit(2000000043.642:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 175.654180][ T26] audit: type=1326 audit(2000000043.642:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 175.790412][ T26] audit: type=1326 audit(2000000043.652:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 175.887885][ T26] audit: type=1326 audit(2000000043.652:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 176.864388][ T26] audit: type=1326 audit(2000000043.652:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 176.887650][ T26] audit: type=1326 audit(2000000043.652:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 176.912317][ T26] audit: type=1326 audit(2000000043.652:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5156 comm="syz.1.227" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 177.274986][ T5188] netlink: 12 bytes leftover after parsing attributes in process `syz.4.235'. [ 177.428163][ T5190] input: syz1 as /devices/virtual/input/input14 [ 177.742129][ T5193] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.121739][ T26] kauditd_printk_skb: 20 callbacks suppressed [ 180.121751][ T26] audit: type=1326 audit(2000000049.072:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 180.400451][ T26] audit: type=1326 audit(2000000049.112:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 180.592650][ T26] audit: type=1326 audit(2000000049.122:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 180.756700][ T5206] input: syz1 as /devices/virtual/input/input15 [ 180.871582][ T26] audit: type=1326 audit(2000000049.122:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 181.058730][ T5206] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 181.106173][ T26] audit: type=1326 audit(2000000049.122:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 181.178334][ T26] audit: type=1326 audit(2000000049.132:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 181.327187][ T5217] netlink: 12 bytes leftover after parsing attributes in process `syz.4.245'. [ 181.349872][ T5217] IPVS: sed: FWM 3 0x00000003 - no destination available [ 181.730312][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 181.819467][ T26] audit: type=1326 audit(2000000049.132:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 182.295158][ T26] audit: type=1326 audit(2000000049.132:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 182.295200][ T26] audit: type=1326 audit(2000000049.132:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 182.295233][ T26] audit: type=1326 audit(2000000049.132:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5200 comm="syz.3.239" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 182.556179][ T5227] input: syz1 as /devices/virtual/input/input16 [ 182.635277][ T5219] tty tty27: ldisc open failed (-12), clearing slot 26 [ 182.830065][ T5231] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.162878][ T26] kauditd_printk_skb: 55 callbacks suppressed [ 185.162896][ T26] audit: type=1326 audit(2000000054.113:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.224072][ T26] audit: type=1326 audit(2000000054.113:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.260750][ T5250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.255'. [ 185.273488][ T26] audit: type=1326 audit(2000000054.153:273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.309124][ T26] audit: type=1326 audit(2000000054.153:274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.335930][ T26] audit: type=1326 audit(2000000054.153:275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.359460][ T26] audit: type=1326 audit(2000000054.153:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.847217][ T26] audit: type=1326 audit(2000000054.743:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 185.872607][ T26] audit: type=1326 audit(2000000054.753:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5243 comm="syz.2.254" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 187.852134][ T5277] input: syz1 as /devices/virtual/input/input17 [ 188.937065][ T5277] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.905124][ T5315] input: syz1 as /devices/virtual/input/input18 [ 191.014571][ T5318] netlink: 12 bytes leftover after parsing attributes in process `syz.3.278'. [ 191.315581][ T4280] Bluetooth: hci3: command 0x0406 tx timeout [ 191.315658][ T4283] Bluetooth: hci1: command 0x0406 tx timeout [ 191.321827][ T4269] Bluetooth: hci2: command 0x0406 tx timeout [ 191.926215][ T5322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.340262][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.347858][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.567010][ T5356] 9pnet_virtio: no channels available for device syz [ 198.236337][ T5375] netlink: 'syz.1.295': attribute type 1 has an invalid length. [ 199.092353][ T126] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 200.372378][ T126] usb 1-1: Using ep0 maxpacket: 32 [ 200.513548][ T126] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 200.521695][ T126] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.642507][ T126] usb 1-1: config 0 has no interface number 0 [ 200.675844][ T126] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 200.735268][ T126] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 200.783289][ T126] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 200.791590][ T126] usb 1-1: Product: syz [ 200.815089][ T126] usb 1-1: Manufacturer: syz [ 200.843741][ T126] usb 1-1: SerialNumber: syz [ 200.880072][ T126] usb 1-1: config 0 descriptor?? [ 200.917957][ T126] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 200.934023][ T126] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 201.151560][ T5378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 201.161725][ T5378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 201.612010][ T126] radio-raremono 1-1:0.35: this is not Thanko's Raremono. [ 202.720313][ T126] usbhid 1-1:0.35: couldn't find an input interrupt endpoint [ 202.763276][ T126] usb 1-1: USB disconnect, device number 3 [ 207.658919][ T5422] netlink: 12 bytes leftover after parsing attributes in process `syz.2.310'. [ 209.012466][ T5432] input: syz1 as /devices/virtual/input/input19 [ 209.306160][ T5439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.703669][ T5461] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 211.714032][ T5461] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 212.987064][ T5470] IPVS: sed: FWM 3 0x00000003 - no destination available [ 212.997970][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 215.348611][ T5490] netlink: 'syz.2.330': attribute type 1 has an invalid length. [ 216.677922][ T5501] netlink: 12 bytes leftover after parsing attributes in process `syz.2.331'. [ 227.501990][ T5589] syz.0.358 (5589) used greatest stack depth: 18096 bytes left [ 235.720664][ T5660] trusted_key: encrypted_key: insufficient parameters specified [ 242.048664][ T5704] trusted_key: encrypted_key: insufficient parameters specified [ 249.379406][ T5750] trusted_key: encrypted_key: insufficient parameters specified [ 255.772045][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.778607][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.075445][ T5828] netlink: 'syz.3.429': attribute type 7 has an invalid length. [ 257.083881][ T5828] netlink: 'syz.3.429': attribute type 8 has an invalid length. [ 257.134502][ T5828] device veth0_to_team entered promiscuous mode [ 259.108204][ T5833] netdevsim netdevsim1: Direct firmware load for . failed with error -2 [ 259.117689][ T5833] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 260.143998][ T5838] netlink: 12 bytes leftover after parsing attributes in process `syz.2.431'. [ 260.166727][ T5838] IPVS: sed: FWM 3 0x00000003 - no destination available [ 260.245168][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 261.095161][ T26] audit: type=1326 audit(2000000130.047:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 261.167720][ T26] audit: type=1326 audit(2000000130.047:280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 261.911760][ T26] audit: type=1326 audit(2000000130.047:281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 261.935580][ T26] audit: type=1326 audit(2000000130.047:282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.096196][ T26] audit: type=1326 audit(2000000130.047:283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.127212][ T26] audit: type=1326 audit(2000000130.067:284): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.166992][ T26] audit: type=1326 audit(2000000130.067:285): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.197357][ T26] audit: type=1326 audit(2000000130.067:286): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.220785][ T4345] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 262.242163][ T26] audit: type=1326 audit(2000000130.067:287): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.273554][ T26] audit: type=1326 audit(2000000130.067:288): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5843 comm="syz.4.435" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 262.419314][ T4345] usb 5-1: Using ep0 maxpacket: 16 [ 262.433238][ T4345] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 262.496418][ T4345] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 263.200745][ T4345] usb 5-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 263.237561][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.278003][ T4345] usb 5-1: Product: syz [ 263.445554][ T4345] usb 5-1: Manufacturer: syz [ 263.884416][ T4345] usb 5-1: SerialNumber: syz [ 263.910194][ T4345] usb 5-1: config 0 descriptor?? [ 264.177617][ T951] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 265.109842][ T5873] device batadv_slave_1 entered promiscuous mode [ 266.149420][ T951] usb 3-1: Using ep0 maxpacket: 8 [ 266.160754][ T951] usb 3-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 266.179975][ T951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.219712][ T951] usb 3-1: Product: syz [ 266.224057][ T951] usb 3-1: Manufacturer: syz [ 266.254668][ T951] usb 3-1: SerialNumber: syz [ 266.280803][ T951] usb 3-1: config 0 descriptor?? [ 266.385152][ T951] usb 3-1: can't set config #0, error -71 [ 266.434557][ T951] usb 3-1: USB disconnect, device number 3 [ 266.697951][ T5884] (syz.2.445,5884,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 267.215675][ T5874] device batadv_slave_1 left promiscuous mode [ 267.278301][ T7] usb 5-1: USB disconnect, device number 2 [ 267.406771][ T5881] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 267.452029][ T5881] team0: Port device batadv1 added [ 269.434459][ T5881] hub 9-0:1.0: USB hub found [ 269.465612][ T5881] hub 9-0:1.0: 1 port detected [ 271.602073][ T5917] loop1: detected capacity change from 0 to 4096 [ 272.420608][ T4274] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 272.427205][ T4274] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 274.642277][ T5945] block device autoloading is deprecated and will be removed. [ 275.564647][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.465'. [ 275.696752][ T5954] netlink: 32 bytes leftover after parsing attributes in process `syz.4.465'. [ 275.883601][ T5961] (syz.0.467,5961,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 280.092012][ T5996] loop4: detected capacity change from 0 to 32768 [ 280.100150][ T5996] ======================================================= [ 280.100150][ T5996] WARNING: The mand mount option has been deprecated and [ 280.100150][ T5996] and is ignored by this kernel. Remove the mand [ 280.100150][ T5996] option from the mount to silence this warning. [ 280.100150][ T5996] ======================================================= [ 280.222189][ T5996] ocfs2: Slot 0 on device (7,4) was already allocated to this node! [ 280.267650][ T5996] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 281.611373][ T4278] ocfs2: Unmounting device (7,4) on (node local) [ 282.232051][ T6026] (syz.4.483,6026,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 284.269215][ T6035] netlink: 20 bytes leftover after parsing attributes in process `syz.4.486'. [ 287.554585][ T6058] loop3: detected capacity change from 0 to 512 [ 287.860745][ T6058] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.867365][ T6058] EXT4-fs: inline encryption not supported [ 287.875064][ T6058] EXT4-fs: Ignoring removed mblk_io_submit option [ 288.119941][ T6058] EXT4-fs (loop3): Test dummy encryption mode enabled [ 288.161929][ T6058] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 288.192736][ T6070] (syz.1.495,6070,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 288.223800][ T6058] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 288.383614][ T6058] EXT4-fs (loop3): 1 truncate cleaned up [ 288.471510][ T6058] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 290.168259][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 292.739885][ T6110] (syz.4.506,6110,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 294.998726][ T6148] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 295.007253][ T6148] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 296.852876][ T6164] (syz.3.520,6164,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 302.452669][ T6223] loop1: detected capacity change from 0 to 128 [ 304.718910][ T6223] loop1: detected capacity change from 0 to 256 [ 304.824072][ T6223] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d) [ 304.898370][ T6239] netlink: 'syz.2.543': attribute type 13 has an invalid length. [ 307.143785][ T6239] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.151358][ T6239] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.555963][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.664927][ T6239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.794686][ T6239] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.819453][ T6239] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.835666][ T6239] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.891199][ T6239] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.176838][ T6012] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 317.218031][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.230581][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.988572][ T6012] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 318.015827][ T6012] usb 1-1: config 0 has no interface number 0 [ 318.080402][ T6012] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 319.069606][ T6012] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 319.090708][ T6012] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 319.773824][ T6012] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 320.806363][ T6012] usb 1-1: config 0 descriptor?? [ 321.335339][ T6012] usb 1-1: can't set config #0, error -71 [ 321.370527][ T6012] usb 1-1: USB disconnect, device number 4 [ 322.678684][ T6348] netlink: 12 bytes leftover after parsing attributes in process `syz.4.576'. [ 323.021088][ T6351] loop3: detected capacity change from 0 to 4096 [ 323.119460][ T6353] netlink: 12 bytes leftover after parsing attributes in process `syz.0.579'. [ 323.290213][ T6353] IPVS: sed: FWM 3 0x00000003 - no destination available [ 323.297633][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 323.335253][ T6356] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 323.577582][ T6359] (syz.1.581,6359,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 324.924767][ T6370] netdevsim netdevsim0: Direct firmware load for . failed with error -2 [ 324.934403][ T6370] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 327.142835][ T6380] ALSA: mixer_oss: invalid OSS volume '' [ 328.673137][ T6387] md: invalid raid superblock magic on ram0 [ 328.719451][ T6387] md: ram0 does not have a valid v0.0 superblock, not importing! [ 328.743079][ T6387] md: md_import_device returned -22 [ 329.385304][ T6395] trusted_key: encrypted_key: insufficient parameters specified [ 329.736682][ T6398] netlink: 12 bytes leftover after parsing attributes in process `syz.0.592'. [ 329.747638][ T6398] IPVS: sed: FWM 3 0x00000003 - no destination available [ 329.755374][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 332.172284][ T6402] (syz.0.593,6402,1):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 332.558102][ T6410] netlink: 'syz.0.596': attribute type 1 has an invalid length. [ 332.860844][ T6412] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 332.952867][ T6410] device veth3 entered promiscuous mode [ 333.001282][ T6410] bond1: (slave veth3): Enslaving as a backup interface with a down link [ 333.261743][ T6417] netlink: 8 bytes leftover after parsing attributes in process `syz.1.597'. [ 333.292837][ T6417] device gtp0 entered promiscuous mode [ 333.612135][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.0.599'. [ 333.781708][ T6429] ALSA: mixer_oss: invalid OSS volume '' [ 336.243988][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz.3.603'. [ 336.256722][ T6444] IPVS: sed: FWM 3 0x00000003 - no destination available [ 336.264531][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 336.482331][ T6447] syz.4.606 uses obsolete (PF_INET,SOCK_PACKET) [ 338.531519][ T6462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.610'. [ 338.575082][ T6462] device gtp0 entered promiscuous mode [ 340.735614][ T6477] netlink: 12 bytes leftover after parsing attributes in process `syz.0.614'. [ 340.986167][ T6483] netlink: 36 bytes leftover after parsing attributes in process `syz.3.615'. [ 341.348159][ T6485] netlink: 8 bytes leftover after parsing attributes in process `syz.4.617'. [ 343.908351][ T6493] loop1: detected capacity change from 0 to 16 [ 343.939723][ T6493] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 344.585169][ T6498] netlink: 12 bytes leftover after parsing attributes in process `syz.2.621'. [ 344.634436][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 344.688210][ T6501] device gtp1 entered promiscuous mode [ 347.129850][ T4345] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 347.319869][ T4345] usb 5-1: Using ep0 maxpacket: 8 [ 347.337616][ T4345] usb 5-1: unable to get BOS descriptor or descriptor too short [ 347.362251][ T4345] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 347.377285][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 347.396850][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 347.413712][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 347.426816][ T4345] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 347.444846][ T4345] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 347.469790][ T4345] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 347.537544][ T4345] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 347.575390][ T4345] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.585866][ T4345] usb 5-1: Product: syz [ 347.595746][ T4345] usb 5-1: Manufacturer: syz [ 347.604135][ T4345] usb 5-1: SerialNumber: syz [ 347.626876][ T4345] usb 5-1: config 0 descriptor?? [ 347.638021][ T6525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 347.813051][ T4345] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 347.873556][ T4814] udevd[4814]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 348.139491][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.148248][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 348.158170][ T6531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 348.167704][ T6531] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 349.587581][ T6536] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 349.987281][ T4345] usb 5-1: USB disconnect, device number 3 [ 350.086686][ T6539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 350.123555][ T6540] loop0: detected capacity change from 0 to 128 [ 350.152205][ T6539] device gtp0 entered promiscuous mode [ 350.235352][ T6540] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 350.256326][ T6540] ext4 filesystem being mounted at /119/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 351.273028][ T4267] EXT4-fs (loop0): unmounting filesystem. [ 353.635040][ T26] kauditd_printk_skb: 37 callbacks suppressed [ 353.635056][ T26] audit: type=1326 audit(2000000021.450:326): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 353.746895][ T5829] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 354.460604][ T6591] netlink: 12 bytes leftover after parsing attributes in process `syz.4.650'. [ 354.485564][ T26] audit: type=1326 audit(2000000021.450:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 354.619358][ T5829] usb 3-1: Using ep0 maxpacket: 16 [ 355.404796][ T6597] netdevsim netdevsim3: Direct firmware load for . failed with error -2 [ 355.414442][ T6597] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 355.619826][ T5829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 355.642324][ T5829] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 355.649561][ T26] audit: type=1326 audit(2000000021.490:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 355.675049][ T5829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.685076][ T5829] usb 3-1: Product: syz [ 355.689998][ T5829] usb 3-1: Manufacturer: syz [ 355.694623][ T5829] usb 3-1: SerialNumber: syz [ 355.707187][ T5829] usb 3-1: config 0 descriptor?? [ 355.729291][ T5829] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 355.740202][ T5829] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 356.379990][ T26] audit: type=1326 audit(2000000021.490:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.402302][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.561061][ T26] audit: type=1326 audit(2000000021.490:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.583471][ C1] vkms_vblank_simulate: vblank timer overrun [ 356.622857][ T26] audit: type=1326 audit(2000000021.490:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.725215][ T26] audit: type=1326 audit(2000000021.490:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.783927][ T5829] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 356.786290][ T26] audit: type=1326 audit(2000000021.490:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.817392][ T26] audit: type=1326 audit(2000000021.490:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.845456][ T26] audit: type=1326 audit(2000000021.490:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6589 comm="syz.1.649" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 356.867810][ C1] vkms_vblank_simulate: vblank timer overrun [ 357.589956][ T5829] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 357.600198][ T5829] em28xx 3-1:0.0: board has no eeprom [ 358.074558][ T5829] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 358.104829][ T5829] em28xx 3-1:0.0: dvb set to bulk mode. [ 359.006326][ T5829] em28xx 3-1:0.0: Binding DVB extension [ 359.154840][ T6584] em28xx 3-1:0.0: reading from i2c device at 0xfe00 failed (error=-5) [ 359.296751][ T6012] usb 3-1: USB disconnect, device number 4 [ 359.337291][ T6012] em28xx 3-1:0.0: Disconnecting em28xx [ 359.660252][ T5829] em28xx 3-1:0.0: Registering input extension [ 359.790001][ T6012] em28xx 3-1:0.0: Closing input extension [ 360.674435][ T6012] em28xx 3-1:0.0: Freeing device [ 362.729310][ T6012] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 362.980473][ T6012] usb 1-1: Using ep0 maxpacket: 8 [ 363.356558][ T6012] usb 1-1: unable to get BOS descriptor or descriptor too short [ 363.417074][ T6012] usb 1-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 363.483681][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 363.536423][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 363.578013][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 363.605285][ T6012] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 363.626792][ T6012] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 364.225337][ T6012] usb 1-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 364.296980][ T6012] usb 1-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 364.367945][ T6012] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.395441][ T6012] usb 1-1: Product: syz [ 364.402349][ T6012] usb 1-1: Manufacturer: syz [ 364.407202][ T6012] usb 1-1: SerialNumber: syz [ 364.428070][ T6012] usb 1-1: config 0 descriptor?? [ 364.436447][ T6653] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 365.522563][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.531423][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.540496][ T6680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.549116][ T6680] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 366.322709][ T6012] snd-usb-audio: probe of 1-1:0.0 failed with error -2 [ 366.986106][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 367.402071][ T4318] usb 1-1: USB disconnect, device number 5 [ 370.093749][ T6720] netlink: 12 bytes leftover after parsing attributes in process `syz.1.683'. [ 370.648250][ T6717] IPVS: sed: FWM 3 0x00000003 - no destination available [ 370.657461][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 374.499758][ T6012] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 374.689918][ T6012] usb 3-1: Using ep0 maxpacket: 8 [ 374.703794][ T6012] usb 3-1: unable to get BOS descriptor or descriptor too short [ 375.425567][ T6012] usb 3-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 375.519240][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 375.622946][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 375.689779][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 375.740267][ T6012] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 375.786169][ T6012] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 375.822179][ T6012] usb 3-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 375.878248][ T6012] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 375.911871][ T6012] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.959786][ T6012] usb 3-1: Product: syz [ 375.964197][ T6012] usb 3-1: Manufacturer: syz [ 376.264533][ T6012] usb 3-1: SerialNumber: syz [ 376.332586][ T6012] usb 3-1: config 0 descriptor?? [ 376.614433][ T6012] usb 3-1: can't set config #0, error -71 [ 376.672682][ T6012] usb 3-1: USB disconnect, device number 5 [ 376.755280][ T6770] netlink: 12 bytes leftover after parsing attributes in process `syz.3.696'. [ 376.789110][ T6770] IPVS: sed: FWM 3 0x00000003 - no destination available [ 377.210743][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 377.252213][ T6775] netlink: 16 bytes leftover after parsing attributes in process `syz.2.698'. [ 378.658019][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.665313][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.976267][ T6826] netlink: 16 bytes leftover after parsing attributes in process `syz.0.712'. [ 384.038815][ T6828] netlink: 12 bytes leftover after parsing attributes in process `syz.4.711'. [ 384.107267][ T6828] IPVS: sed: FWM 3 0x00000003 - no destination available [ 384.161922][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 384.720441][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 384.720457][ T26] audit: type=1326 audit(2000000052.540:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 384.889149][ T26] audit: type=1326 audit(2000000052.580:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 385.451770][ T26] audit: type=1326 audit(2000000052.580:362): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 385.479835][ T26] audit: type=1326 audit(2000000052.580:363): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 385.531710][ T26] audit: type=1326 audit(2000000052.580:364): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 385.619443][ T4316] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 386.039219][ T4316] usb 4-1: Using ep0 maxpacket: 8 [ 386.046243][ T4316] usb 4-1: unable to get BOS descriptor or descriptor too short [ 386.175370][ T26] audit: type=1326 audit(2000000052.590:365): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 386.233741][ T4316] usb 4-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config [ 386.245378][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 386.259983][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 386.273868][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 386.288500][ T4316] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 386.300490][ T4316] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 386.311765][ T4316] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 386.434227][ T26] audit: type=1326 audit(2000000052.590:366): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 386.465693][ T4316] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 386.584123][ T26] audit: type=1326 audit(2000000052.590:367): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 386.663027][ T4316] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 387.226151][ T4316] usb 4-1: Product: syz [ 387.232948][ T4316] usb 4-1: Manufacturer: syz [ 387.237711][ T4316] usb 4-1: SerialNumber: syz [ 387.249513][ T4316] usb 4-1: config 0 descriptor?? [ 387.255528][ T6842] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 387.305897][ T6857] netlink: 12 bytes leftover after parsing attributes in process `syz.1.720'. [ 387.362428][ T26] audit: type=1326 audit(2000000052.590:368): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 387.398823][ T4316] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 387.621944][ T26] audit: type=1326 audit(2000000052.590:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6834 comm="syz.4.716" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 387.766599][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.777874][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 387.790505][ T6864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 387.800923][ T6864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.150742][ T4316] usb 4-1: USB disconnect, device number 3 [ 390.448292][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 390.640303][ T6871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.725'. [ 391.646672][ T6885] netlink: 12 bytes leftover after parsing attributes in process `syz.4.726'. [ 391.736554][ T6885] IPVS: sed: FWM 3 0x00000003 - no destination available [ 391.803102][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 393.106838][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 393.106855][ T26] audit: type=1326 audit(2000000060.880:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 393.387281][ T26] audit: type=1326 audit(2000000060.990:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 393.778059][ T26] audit: type=1326 audit(2000000060.990:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 393.848023][ T26] audit: type=1326 audit(2000000060.990:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 394.840377][ T26] audit: type=1326 audit(2000000061.030:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 394.885269][ T26] audit: type=1326 audit(2000000061.030:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 395.013476][ T26] audit: type=1326 audit(2000000061.030:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 395.044815][ T26] audit: type=1326 audit(2000000061.030:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 395.076405][ T26] audit: type=1326 audit(2000000061.030:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 395.116349][ T26] audit: type=1326 audit(2000000061.030:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6894 comm="syz.0.729" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 395.292314][ T6012] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 396.449826][ T6012] usb 1-1: Using ep0 maxpacket: 8 [ 396.492782][ T6012] usb 1-1: unable to get BOS descriptor or descriptor too short [ 398.689747][ T6926] trusted_key: encrypted_key: insufficient parameters specified [ 399.216404][ T6012] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 399.262964][ T6012] usb 1-1: can't read configurations, error -71 [ 399.285764][ T6929] netlink: 16 bytes leftover after parsing attributes in process `syz.4.737'. [ 400.044222][ T6936] netlink: 12 bytes leftover after parsing attributes in process `syz.2.742'. [ 400.264375][ T26] kauditd_printk_skb: 28 callbacks suppressed [ 400.264386][ T26] audit: type=1326 audit(2000000068.080:437): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.501523][ T26] audit: type=1326 audit(2000000068.110:438): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.588520][ T26] audit: type=1326 audit(2000000068.110:439): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.694148][ T26] audit: type=1326 audit(2000000068.110:440): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.798255][ T26] audit: type=1326 audit(2000000068.110:441): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.903605][ T26] audit: type=1326 audit(2000000068.120:442): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 400.940936][ T6949] (syz.1.745,6949,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 401.058045][ T26] audit: type=1326 audit(2000000068.120:443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 401.120196][ T26] audit: type=1326 audit(2000000068.120:444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 401.192716][ T26] audit: type=1326 audit(2000000068.120:445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 401.908280][ T26] audit: type=1326 audit(2000000068.120:446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6942 comm="syz.1.744" exe="/root/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7fab7679aeb9 code=0x7ffc0000 [ 403.145749][ T6958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.748'. [ 403.797974][ T6958] IPVS: sed: FWM 3 0x00000003 - no destination available [ 403.876442][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 404.879599][ T14] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 405.099098][ T14] usb 4-1: Using ep0 maxpacket: 8 [ 405.104668][ T6970] trusted_key: encrypted_key: insufficient parameters specified [ 405.111646][ T14] usb 4-1: unable to get BOS descriptor or descriptor too short [ 405.214486][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 405.287159][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 405.329715][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 405.350864][ T6983] netlink: 16 bytes leftover after parsing attributes in process `syz.0.753'. [ 405.364422][ T14] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 405.406547][ T14] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 405.477895][ T14] usb 4-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 405.546742][ T14] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 405.602775][ T14] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.642760][ T14] usb 4-1: Product: syz [ 405.647097][ T14] usb 4-1: Manufacturer: syz [ 406.159674][ T14] usb 4-1: SerialNumber: syz [ 406.214658][ T14] usb 4-1: config 0 descriptor?? [ 406.247888][ T6972] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 406.390167][ T14] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 406.400343][ T26] kauditd_printk_skb: 38 callbacks suppressed [ 406.400359][ T26] audit: type=1326 audit(2000000005.750:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 406.473182][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 406.739523][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.748235][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 406.757353][ T7000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 406.765991][ T7000] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 408.379654][ T26] audit: type=1326 audit(2000000005.750:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.463337][ T26] audit: type=1326 audit(2000000006.020:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.488327][ T26] audit: type=1326 audit(2000000006.020:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.514491][ T26] audit: type=1326 audit(2000000006.020:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.550641][ T26] audit: type=1326 audit(2000000006.150:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.670265][ T26] audit: type=1326 audit(2000000006.150:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.707932][ T26] audit: type=1326 audit(2000000006.160:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.818019][ T6012] usb 4-1: USB disconnect, device number 4 [ 408.868164][ T26] audit: type=1326 audit(2000000006.160:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 408.907688][ T26] audit: type=1326 audit(2000000006.160:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6992 comm="syz.0.755" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb319aeb9 code=0x7ffc0000 [ 409.084775][ T7016] netlink: 12 bytes leftover after parsing attributes in process `syz.3.762'. [ 409.498112][ T7020] netlink: 12 bytes leftover after parsing attributes in process `syz.1.763'. [ 409.545657][ T7020] IPVS: sed: FWM 3 0x00000003 - no destination available [ 409.556320][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 410.902092][ T7029] netlink: 16 bytes leftover after parsing attributes in process `syz.3.766'. [ 411.892787][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 411.892804][ T26] audit: type=1326 audit(2000000011.240:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 412.717066][ T26] audit: type=1326 audit(2000000011.240:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 412.880318][ T26] audit: type=1326 audit(2000000011.280:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.041823][ T26] audit: type=1326 audit(2000000011.280:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.155404][ T26] audit: type=1326 audit(2000000011.290:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.256306][ T26] audit: type=1326 audit(2000000011.300:543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.326476][ T26] audit: type=1326 audit(2000000011.300:544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.360472][ T26] audit: type=1326 audit(2000000011.300:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.389462][ T6933] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 413.403117][ T26] audit: type=1326 audit(2000000011.310:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.444681][ T7050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.774'. [ 413.489761][ T26] audit: type=1326 audit(2000000011.310:547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7038 comm="syz.4.770" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 413.629456][ T6933] usb 5-1: Using ep0 maxpacket: 8 [ 413.637050][ T6933] usb 5-1: unable to get BOS descriptor or descriptor too short [ 413.696544][ T6933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 413.793697][ T6933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 413.872196][ T6933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 413.928143][ T6933] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 415.284208][ T6933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 415.353360][ T6933] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 415.474738][ T6933] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 415.586726][ T6933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 415.596136][ T6933] usb 5-1: Product: syz [ 415.619731][ T6933] usb 5-1: Manufacturer: syz [ 415.624777][ T6933] usb 5-1: SerialNumber: syz [ 415.648004][ T6933] usb 5-1: config 0 descriptor?? [ 415.677404][ T7046] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 415.806152][ T6933] snd-usb-audio: probe of 5-1:0.0 failed with error -2 [ 415.876249][ T4375] udevd[4375]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 416.199844][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.209421][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 416.219511][ T7044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 416.228189][ T7044] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.079208][ T952] usb 5-1: USB disconnect, device number 4 [ 419.253571][ T7084] loop2: detected capacity change from 0 to 128 [ 419.390313][ T7084] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 419.443333][ T7084] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 419.708121][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 420.648185][ T26] kauditd_printk_skb: 95 callbacks suppressed [ 420.648201][ T26] audit: type=1326 audit(2000000019.990:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 420.989642][ T26] audit: type=1326 audit(2000000020.010:644): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 421.147423][ T26] audit: type=1326 audit(2000000020.010:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 421.148054][ T7111] netlink: 32 bytes leftover after parsing attributes in process `syz.0.796'. [ 421.316152][ T26] audit: type=1326 audit(2000000020.010:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 423.278681][ T26] audit: type=1326 audit(2000000020.010:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 423.363863][ T26] audit: type=1326 audit(2000000020.010:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 423.467209][ T26] audit: type=1326 audit(2000000020.010:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 423.529535][ T26] audit: type=1326 audit(2000000020.010:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 423.717179][ T26] audit: type=1326 audit(2000000020.010:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 425.103777][ T26] audit: type=1326 audit(2000000020.010:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7097 comm="syz.2.793" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 425.254785][ T7128] md: invalid raid superblock magic on ram0 [ 425.271467][ T7128] md: ram0 does not have a valid v0.0 superblock, not importing! [ 425.295057][ T7128] md: md_import_device returned -22 [ 425.820563][ T26] kauditd_printk_skb: 41 callbacks suppressed [ 425.820583][ T26] audit: type=1326 audit(2000000025.110:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 425.866315][ T26] audit: type=1326 audit(2000000025.110:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.070398][ T26] audit: type=1326 audit(2000000025.130:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.633118][ T26] audit: type=1326 audit(2000000025.130:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.656824][ T26] audit: type=1326 audit(2000000025.130:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.680115][ T26] audit: type=1326 audit(2000000025.130:699): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.703858][ T26] audit: type=1326 audit(2000000025.130:700): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.728117][ T26] audit: type=1326 audit(2000000025.130:701): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.751577][ T26] audit: type=1326 audit(2000000025.130:702): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 426.774819][ T26] audit: type=1326 audit(2000000025.130:703): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7132 comm="syz.2.805" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93e8f9aeb9 code=0x7ffc0000 [ 428.839459][ T6012] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 429.031361][ T6012] usb 5-1: Using ep0 maxpacket: 8 [ 429.043849][ T6012] usb 5-1: unable to get BOS descriptor or descriptor too short [ 429.093284][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 429.136270][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 429.183696][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 429.251268][ T6012] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 429.287214][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 429.319837][ T6012] usb 5-1: config 0 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 430.801469][ T6012] usb 5-1: string descriptor 0 read error: -71 [ 430.814527][ T6012] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 430.860673][ T6012] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.901691][ T6012] usb 5-1: config 0 descriptor?? [ 430.932904][ T6012] usb 5-1: can't set config #0, error -71 [ 430.964606][ T6012] usb 5-1: USB disconnect, device number 5 [ 432.563669][ T26] kauditd_printk_skb: 43 callbacks suppressed [ 432.563687][ T26] audit: type=1326 audit(2000000031.910:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 432.758116][ T26] audit: type=1326 audit(2000000031.930:748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 432.781784][ T26] audit: type=1326 audit(2000000031.930:749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.089978][ T26] audit: type=1326 audit(2000000031.930:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.116829][ T26] audit: type=1326 audit(2000000031.930:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.280956][ T26] audit: type=1326 audit(2000000031.930:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.323165][ T26] audit: type=1326 audit(2000000031.930:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.370317][ T26] audit: type=1326 audit(2000000032.090:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.917097][ T7197] (syz.4.821,7197,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 433.937855][ T26] audit: type=1326 audit(2000000032.090:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 433.961028][ T26] audit: type=1326 audit(2000000032.090:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7182 comm="syz.4.817" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2ee359aeb9 code=0x7ffc0000 [ 435.702105][ T7214] trusted_key: encrypted_key: insufficient parameters specified [ 436.049442][ T126] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 436.279285][ T126] usb 3-1: Using ep0 maxpacket: 8 [ 436.588118][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.596937][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 436.606067][ T7224] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 436.614732][ T7224] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 438.564214][ T7232] loop1: detected capacity change from 0 to 256 [ 439.348047][ T126] usb 3-1: unable to get BOS descriptor or descriptor too short [ 439.442913][ T126] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 439.485001][ T126] usb 3-1: can't read configurations, error -71 [ 439.492655][ T26] kauditd_printk_skb: 90 callbacks suppressed [ 439.492672][ T26] audit: type=1800 audit(2000000005.570:847): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.832" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 439.582013][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 439.614509][ T26] audit: type=1800 audit(2000000005.630:848): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.832" name="file1" dev="loop1" ino=1048595 res=0 errno=0 [ 439.655688][ T7247] netdevsim netdevsim2: Direct firmware load for . failed with error -2 [ 439.664874][ T7247] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 439.680548][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 439.741319][ T7229] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 439.799728][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 439.829485][ T7229] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 439.991723][ T7254] (syz.3.836,7254,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 440.171044][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.382425][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.395161][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 440.439973][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 440.475877][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 440.496558][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 440.512399][ T7232] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 442.041964][ T26] audit: type=1326 audit(2000000002.050:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 442.764261][ T7280] trusted_key: encrypted_key: insufficient parameters specified [ 443.312275][ T26] audit: type=1326 audit(2000000002.050:850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 443.378225][ T26] audit: type=1326 audit(2000000002.100:851): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=195 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 443.473409][ T26] audit: type=1326 audit(2000000002.100:852): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 444.014319][ T7287] ALSA: mixer_oss: invalid OSS volume '' [ 444.896292][ T26] audit: type=1326 audit(2000000002.110:853): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 445.019468][ T6933] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 445.081682][ T26] audit: type=1326 audit(2000000003.240:854): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 445.289552][ T6933] usb 2-1: Using ep0 maxpacket: 8 [ 446.309104][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.319181][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 446.329366][ T7295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 446.339047][ T7295] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 447.005339][ T26] audit: type=1326 audit(2000000003.270:855): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.048489][ T26] audit: type=1326 audit(2000000003.270:856): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.079480][ T26] audit: type=1326 audit(2000000003.280:857): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.166877][ T26] audit: type=1326 audit(2000000003.280:858): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.285245][ T26] audit: type=1326 audit(2000000003.280:859): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.310995][ T26] audit: type=1326 audit(2000000003.280:860): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.351746][ T26] audit: type=1326 audit(2000000003.280:861): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 447.516854][ T7302] (syz.3.849,7302,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 447.611029][ T26] audit: type=1326 audit(2000000003.280:862): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7266 comm="syz.3.843" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c0ab9aeb9 code=0x7ffc0000 [ 448.089362][ T6933] usb 2-1: unable to get BOS descriptor or descriptor too short [ 448.147219][ T6933] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 448.192594][ T6933] usb 2-1: can't read configurations, error -71 [ 448.686342][ T7311] loop3: detected capacity change from 0 to 128 [ 448.771965][ T7311] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 448.830376][ T7311] ext4 filesystem being mounted at /166/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 449.113854][ T7318] loop1: detected capacity change from 0 to 32768 [ 449.287591][ T7318] XFS (loop1): Mounting V5 Filesystem [ 449.328071][ T7318] XFS (loop1): Ending clean mount [ 449.370985][ T7323] netdevsim netdevsim4: Direct firmware load for . failed with error -2 [ 449.379880][ T7323] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 449.531180][ T7330] afs: Unknown parameter '' [ 449.960305][ T4268] EXT4-fs (loop3): unmounting filesystem. [ 450.242040][ T7333] netlink: 12 bytes leftover after parsing attributes in process `syz.3.855'. [ 450.253192][ T7333] IPVS: sed: FWM 3 0x00000003 - no destination available [ 450.324870][ C1] IPVS: sed: FWM 3 0x00000003 - no destination available [ 450.422940][ T4274] XFS (loop1): Unmounting Filesystem [ 452.584251][ T7357] (syz.2.863,7357,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 453.139820][ T4345] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 453.330323][ T4345] usb 4-1: Using ep0 maxpacket: 8 [ 454.712235][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.721803][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 454.732077][ T7363] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 454.741551][ T7363] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 455.000175][ T7367] loop4: detected capacity change from 0 to 512 [ 455.014793][ T7367] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 455.026451][ T7367] EXT4-fs warning (device loop4): ext4_multi_mount_protect:298: Invalid MMP block in superblock [ 455.031558][ T7365] loop2: detected capacity change from 0 to 128 [ 456.301417][ T4345] usb 4-1: unable to get BOS descriptor or descriptor too short [ 456.392714][ T7365] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 456.410211][ T4345] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 456.417843][ T4345] usb 4-1: can't read configurations, error -71 [ 456.520052][ T7365] ext4 filesystem being mounted at /172/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 456.793913][ T7381] netlink: 12 bytes leftover after parsing attributes in process `syz.4.868'. [ 456.805075][ T7381] IPVS: sed: FWM 3 0x00000003 - no destination available [ 456.810783][ T4269] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 456.822764][ T4269] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 456.833106][ T4269] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 456.859751][ T4269] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 456.872587][ T4269] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 456.880865][ T4269] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 457.423628][ C0] IPVS: sed: FWM 3 0x00000003 - no destination available [ 458.000349][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 458.093797][ T7374] chnl_net:caif_netlink_parms(): no params data found [ 459.027899][ T4283] Bluetooth: hci5: command 0x0409 tx timeout [ 459.074533][ T7401] (syz.1.875,7401,0):dlmfs_mkdir:421 ERROR: invalid domain name for directory. [ 460.068684][ T7374] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.099768][ T7374] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.108248][ T7374] device bridge_slave_0 entered promiscuous mode [ 460.117303][ T7374] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.125656][ T7374] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.134978][ T7374] device bridge_slave_1 entered promiscuous mode [ 460.156792][ T7374] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.172390][ T7374] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.425101][ T7374] team0: Port device team_slave_0 added [ 460.464586][ T7374] team0: Port device team_slave_1 added [ 460.519369][ T4318] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 460.564445][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 460.621878][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.719514][ T4318] usb 4-1: Using ep0 maxpacket: 8 [ 460.734516][ T4318] usb 4-1: unable to get BOS descriptor or descriptor too short [ 460.789923][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 460.809537][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 460.829300][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 460.859006][ T7374] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 460.878280][ T4318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 460.950320][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 461.003035][ T7429] netlink: 12 bytes leftover after parsing attributes in process `syz.2.881'. [ 461.049757][ T4283] Bluetooth: hci5: command 0x041b tx timeout [ 461.080910][ T4318] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 43690, setting to 1024 [ 461.122774][ T4318] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1024 [ 461.160849][ T4318] usb 4-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 461.178143][ T4318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.206919][ T4318] usb 4-1: Product: syz [ 461.223590][ T4318] usb 4-1: Manufacturer: syz [ 461.229301][ T4318] usb 4-1: SerialNumber: syz [ 461.254681][ T4318] usb 4-1: config 0 descriptor?? [ 461.280476][ T7422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 461.290071][ T7422] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 461.326085][ T7374] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.488525][ T7374] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.646125][ T7424] loop1: detected capacity change from 0 to 32768 [ 461.662358][ T7374] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.806399][ T7424] jfs_mkdir: dtInsert returned -EIO [ 461.834466][ T7424] ERROR: (device loop1): jfs_mkdir: [ 461.834466][ T7424] [ 461.856104][ T7424] ERROR: (device loop1): remounting filesystem as read-only [ 461.930957][ T7424] BUG: Bad page state in process syz.1.879 pfn:666f6 [ 461.966134][ T7424] page:ffffea000199bd80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2f pfn:0x666f6 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 462.040515][ T7424] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 462.146025][ T7374] device hsr_slave_0 entered promiscuous mode [ 462.146063][ T7424] raw: 00fff00000002006 ffffea000199bdc8 ffffc900034b7980 0000000000000000 [ 462.229440][ T7424] raw: 000000000000002f ffff8880650fae88 00000000ffffffff 0000000000000000 [ 462.238256][ T7424] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 462.249138][ T7374] device hsr_slave_1 entered promiscuous mode [ 462.320837][ T7374] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 462.338615][ T7374] Cannot create hsr debugfs directory [ 462.399347][ T7424] page_owner tracks the page as allocated [ 462.405625][ T7424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7424, tgid 7423 (syz.1.879), ts 461805633511, free_ts 461797797647 [ 462.749369][ T7424] post_alloc_hook+0x173/0x1a0 [ 462.754231][ T7424] get_page_from_freelist+0x1a1e/0x1ab0 [ 462.769421][ T7424] __alloc_pages+0x1ec/0x4f0 [ 462.774176][ T7424] folio_alloc+0x1c/0x60 [ 462.782189][ T7424] filemap_alloc_folio+0xdb/0x480 [ 462.787368][ T7424] __filemap_get_folio+0x6ab/0xdb0 [ 462.793869][ T7424] pagecache_get_page+0x26/0x250 [ 462.802410][ T7424] __get_metapage+0x2a4/0xfa0 [ 462.807244][ T7424] diNewExt+0x9f1/0x2cc0 [ 462.822469][ T7424] diAllocAG+0xe19/0x1c30 [ 462.826963][ T7424] diAlloc+0x1c9/0x1900 [ 462.832446][ T7424] ialloc+0x88/0x950 [ 462.836490][ T7424] jfs_mkdir+0x1db/0xad0 [ 462.842986][ T7424] vfs_mkdir+0x387/0x570 [ 462.847387][ T7424] do_mkdirat+0x1d8/0x440 [ 462.853256][ T7424] __x64_sys_mkdirat+0x85/0x90 [ 462.871630][ T7424] page last free stack trace: [ 462.876467][ T7424] free_unref_page_prepare+0x8b4/0x9a0 [ 462.884406][ T7424] free_unref_page+0x2e/0x3f0 [ 462.892493][ T7424] __vunmap+0x856/0xa00 [ 462.896817][ T7424] kcov_close+0x27/0x50 [ 462.902891][ T7424] __fput+0x22c/0x920 [ 462.907037][ T7424] task_work_run+0x1d0/0x260 [ 462.912980][ T7424] do_exit+0x982/0x2480 [ 462.917282][ T7424] do_group_exit+0x217/0x2d0 [ 462.923375][ T7424] get_signal+0x1272/0x1350 [ 462.928034][ T7424] arch_do_signal_or_restart+0xc4/0x1350 [ 462.935691][ T7424] exit_to_user_mode_loop+0x70/0x110 [ 462.942310][ T7424] exit_to_user_mode_prepare+0xee/0x180 [ 462.948020][ T7424] syscall_exit_to_user_mode+0x16/0x40 [ 462.954983][ T7424] do_syscall_64+0x58/0xa0 [ 462.960714][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 462.974313][ T7424] Modules linked in: [ 463.020017][ T7424] CPU: 0 PID: 7424 Comm: syz.1.879 Not tainted syzkaller #0 [ 463.027370][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.037535][ T7424] Call Trace: [ 463.040816][ T7424] [ 463.043744][ T7424] dump_stack_lvl+0x188/0x24e [ 463.048425][ T7424] ? show_regs_print_info+0x12/0x12 [ 463.053620][ T7424] ? swiotlb_print_info+0x60/0x60 [ 463.058647][ T7424] bad_page+0x14b/0x170 [ 463.062800][ T7424] free_unref_page_prepare+0x42a/0x9a0 [ 463.068268][ T7424] ? percpu_ref_put+0x19/0x180 [ 463.073064][ T7424] free_unref_page_list+0xbb/0x8e0 [ 463.078241][ T7424] release_pages+0x1fa6/0x2220 [ 463.083072][ T7424] ? lru_cache_disable+0x30/0x30 [ 463.088057][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 463.093639][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 463.099333][ T7424] ? mlock_page_drain_local+0x289/0x490 [ 463.104924][ T7424] __pagevec_release+0x6d/0xe0 [ 463.109732][ T7424] truncate_inode_pages_range+0x352/0x1090 [ 463.115779][ T7424] ? mapping_evict_folio+0x520/0x520 [ 463.121114][ T7424] ? parse_options+0xcdf/0xe40 [ 463.125948][ T7424] ? jfs_fill_super+0xad0/0xad0 [ 463.130995][ T7424] ? sync_filesystem+0x103/0x220 [ 463.136183][ T7424] jfs_remount+0x33d/0x5b0 [ 463.140659][ T7424] ? jfs_statfs+0x550/0x550 [ 463.145206][ T7424] ? hook_sb_remount+0x19/0xc0 [ 463.150020][ T7424] reconfigure_super+0x219/0x8a0 [ 463.155009][ T7424] path_mount+0xe13/0x1020 [ 463.159564][ T7424] ? kmem_cache_free+0xf7/0x290 [ 463.164465][ T7424] __se_sys_mount+0x2e3/0x3d0 [ 463.169183][ T7424] ? __x64_sys_mount+0xc0/0xc0 [ 463.169230][ T4283] Bluetooth: hci5: command 0x040f tx timeout [ 463.174034][ T7424] ? lockdep_hardirqs_on+0x94/0x140 [ 463.185219][ T7424] ? __x64_sys_mount+0x1c/0xc0 [ 463.190002][ T7424] do_syscall_64+0x4c/0xa0 [ 463.194450][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 463.199139][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 463.203863][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.209842][ T7424] RIP: 0033:0x7fab7679c14a [ 463.214253][ T7424] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 463.233864][ T7424] RSP: 002b:00007fab77632e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 463.242280][ T7424] RAX: ffffffffffffffda RBX: 00007fab77632ee0 RCX: 00007fab7679c14a [ 463.250250][ T7424] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 463.258213][ T7424] RBP: 0000200000000f40 R08: 00007fab77632ee0 R09: 0000000001a4a438 [ 463.266179][ T7424] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 463.274155][ T7424] R13: 00007fab77632ea0 R14: 0000000000000000 R15: 0000200000000100 [ 463.282134][ T7424] [ 463.289389][ T7424] Disabling lock debugging due to kernel taint [ 463.295608][ T7424] BUG: Bad page state in process syz.1.879 pfn:666f7 [ 463.385253][ T7424] page:ffffea000199bdc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2e pfn:0x666f7 [ 463.546840][ T7424] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 463.561934][ T7424] raw: 00fff00000002006 ffffea000199be08 ffffc900034b7980 0000000000000000 [ 463.592590][ T7424] raw: 000000000000002e ffff8880650fad90 00000000ffffffff 0000000000000000 [ 463.604443][ T7424] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 463.613889][ T7424] page_owner tracks the page as allocated [ 463.622558][ T7424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7424, tgid 7423 (syz.1.879), ts 461805608454, free_ts 461797803563 [ 463.641665][ T7424] post_alloc_hook+0x173/0x1a0 [ 463.646499][ T7424] get_page_from_freelist+0x1a1e/0x1ab0 [ 463.652845][ T7424] __alloc_pages+0x1ec/0x4f0 [ 463.657570][ T7424] folio_alloc+0x1c/0x60 [ 463.662645][ T7424] filemap_alloc_folio+0xdb/0x480 [ 463.667757][ T7424] __filemap_get_folio+0x6ab/0xdb0 [ 463.674374][ T7424] pagecache_get_page+0x26/0x250 [ 463.682333][ T7424] __get_metapage+0x2a4/0xfa0 [ 463.687115][ T7424] diNewExt+0x9f1/0x2cc0 [ 463.692479][ T7424] diAllocAG+0xe19/0x1c30 [ 463.696887][ T7424] diAlloc+0x1c9/0x1900 [ 463.702944][ T7424] ialloc+0x88/0x950 [ 463.706916][ T7424] jfs_mkdir+0x1db/0xad0 [ 463.713338][ T7424] vfs_mkdir+0x387/0x570 [ 463.717632][ T7424] do_mkdirat+0x1d8/0x440 [ 463.723841][ T7424] __x64_sys_mkdirat+0x85/0x90 [ 463.729771][ T7424] page last free stack trace: [ 463.734574][ T7424] free_unref_page_prepare+0x8b4/0x9a0 [ 463.741534][ T7424] free_unref_page+0x2e/0x3f0 [ 463.746237][ T7424] __vunmap+0x856/0xa00 [ 463.751709][ T7424] kcov_close+0x27/0x50 [ 463.756003][ T7424] __fput+0x22c/0x920 [ 463.761073][ T7424] task_work_run+0x1d0/0x260 [ 463.765729][ T7424] do_exit+0x982/0x2480 [ 463.770958][ T7424] do_group_exit+0x217/0x2d0 [ 463.775719][ T7424] get_signal+0x1272/0x1350 [ 463.781534][ T7424] arch_do_signal_or_restart+0xc4/0x1350 [ 463.787216][ T7424] exit_to_user_mode_loop+0x70/0x110 [ 463.793891][ T7424] exit_to_user_mode_prepare+0xee/0x180 [ 463.801309][ T7424] syscall_exit_to_user_mode+0x16/0x40 [ 463.806852][ T7424] do_syscall_64+0x58/0xa0 [ 463.812822][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 463.820048][ T7424] Modules linked in: [ 463.824104][ T7424] CPU: 0 PID: 7424 Comm: syz.1.879 Tainted: G B syzkaller #0 [ 463.832904][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 463.843004][ T7424] Call Trace: [ 463.846278][ T7424] [ 463.849201][ T7424] dump_stack_lvl+0x188/0x24e [ 463.853878][ T7424] ? show_regs_print_info+0x12/0x12 [ 463.859075][ T7424] ? swiotlb_print_info+0x60/0x60 [ 463.864101][ T7424] bad_page+0x14b/0x170 [ 463.868253][ T7424] free_unref_page_prepare+0x42a/0x9a0 [ 463.873715][ T7424] ? percpu_ref_put+0x19/0x180 [ 463.878493][ T7424] free_unref_page_list+0xbb/0x8e0 [ 463.883636][ T7424] release_pages+0x1fa6/0x2220 [ 463.888591][ T7424] ? lru_cache_disable+0x30/0x30 [ 463.893541][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 463.899014][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 463.904465][ T7424] ? mlock_page_drain_local+0x289/0x490 [ 463.910003][ T7424] __pagevec_release+0x6d/0xe0 [ 463.914762][ T7424] truncate_inode_pages_range+0x352/0x1090 [ 463.920575][ T7424] ? mapping_evict_folio+0x520/0x520 [ 463.925869][ T7424] ? parse_options+0xcdf/0xe40 [ 463.931118][ T7424] ? jfs_fill_super+0xad0/0xad0 [ 463.935994][ T7424] ? sync_filesystem+0x103/0x220 [ 463.941048][ T7424] jfs_remount+0x33d/0x5b0 [ 463.945480][ T7424] ? jfs_statfs+0x550/0x550 [ 463.950023][ T7424] ? hook_sb_remount+0x19/0xc0 [ 463.954800][ T7424] reconfigure_super+0x219/0x8a0 [ 463.959748][ T7424] path_mount+0xe13/0x1020 [ 463.964189][ T7424] ? kmem_cache_free+0xf7/0x290 [ 463.969052][ T7424] __se_sys_mount+0x2e3/0x3d0 [ 463.973747][ T7424] ? __x64_sys_mount+0xc0/0xc0 [ 463.978526][ T7424] ? lockdep_hardirqs_on+0x94/0x140 [ 463.983750][ T7424] ? __x64_sys_mount+0x1c/0xc0 [ 463.988523][ T7424] do_syscall_64+0x4c/0xa0 [ 463.992978][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 463.997660][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 464.002345][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.008420][ T7424] RIP: 0033:0x7fab7679c14a [ 464.012849][ T7424] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.032553][ T7424] RSP: 002b:00007fab77632e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.041068][ T7424] RAX: ffffffffffffffda RBX: 00007fab77632ee0 RCX: 00007fab7679c14a [ 464.049137][ T7424] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 464.057285][ T7424] RBP: 0000200000000f40 R08: 00007fab77632ee0 R09: 0000000001a4a438 [ 464.065264][ T7424] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 464.073434][ T7424] R13: 00007fab77632ea0 R14: 0000000000000000 R15: 0000200000000100 [ 464.081505][ T7424] [ 464.122602][ T7424] BUG: Bad page state in process syz.1.879 pfn:666f8 [ 464.131655][ T7424] page:ffffea000199be00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2d pfn:0x666f8 [ 464.144001][ T7424] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 464.155616][ T7424] raw: 00fff00000002006 ffffea000199be48 ffffc900034b7980 0000000000000000 [ 464.166573][ T7424] raw: 000000000000002d ffff8880650fac98 00000000ffffffff 0000000000000000 [ 464.177271][ T7424] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 464.186413][ T7424] page_owner tracks the page as allocated [ 464.193194][ T7424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7424, tgid 7423 (syz.1.879), ts 461805580374, free_ts 461797809485 [ 464.213231][ T7424] post_alloc_hook+0x173/0x1a0 [ 464.221838][ T7424] get_page_from_freelist+0x1a1e/0x1ab0 [ 464.228233][ T7424] __alloc_pages+0x1ec/0x4f0 [ 464.235028][ T7424] folio_alloc+0x1c/0x60 [ 464.240484][ T7424] filemap_alloc_folio+0xdb/0x480 [ 464.245567][ T7424] __filemap_get_folio+0x6ab/0xdb0 [ 464.251571][ T7424] pagecache_get_page+0x26/0x250 [ 464.256624][ T7424] __get_metapage+0x2a4/0xfa0 [ 464.262494][ T7424] diNewExt+0x9f1/0x2cc0 [ 464.266860][ T7424] diAllocAG+0xe19/0x1c30 [ 464.271878][ T7424] diAlloc+0x1c9/0x1900 [ 464.276308][ T7424] ialloc+0x88/0x950 [ 464.281213][ T7424] jfs_mkdir+0x1db/0xad0 [ 464.285615][ T7424] vfs_mkdir+0x387/0x570 [ 464.290502][ T7424] do_mkdirat+0x1d8/0x440 [ 464.294915][ T7424] __x64_sys_mkdirat+0x85/0x90 [ 464.302016][ T7424] page last free stack trace: [ 464.306772][ T7424] free_unref_page_prepare+0x8b4/0x9a0 [ 464.313275][ T7424] free_unref_page+0x2e/0x3f0 [ 464.318131][ T7424] __vunmap+0x856/0xa00 [ 464.323034][ T7424] kcov_close+0x27/0x50 [ 464.327509][ T7424] __fput+0x22c/0x920 [ 464.332260][ T7424] task_work_run+0x1d0/0x260 [ 464.336986][ T7424] do_exit+0x982/0x2480 [ 464.343355][ T7424] do_group_exit+0x217/0x2d0 [ 464.347998][ T7424] get_signal+0x1272/0x1350 [ 464.353217][ T7424] arch_do_signal_or_restart+0xc4/0x1350 [ 464.359742][ T7424] exit_to_user_mode_loop+0x70/0x110 [ 464.365114][ T7424] exit_to_user_mode_prepare+0xee/0x180 [ 464.371367][ T7424] syscall_exit_to_user_mode+0x16/0x40 [ 464.376892][ T7424] do_syscall_64+0x58/0xa0 [ 464.381908][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.388078][ T7424] Modules linked in: [ 464.392874][ T7424] CPU: 1 PID: 7424 Comm: syz.1.879 Tainted: G B syzkaller #0 [ 464.401721][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.411782][ T7424] Call Trace: [ 464.415114][ T7424] [ 464.418083][ T7424] dump_stack_lvl+0x188/0x24e [ 464.422790][ T7424] ? show_regs_print_info+0x12/0x12 [ 464.428014][ T7424] ? swiotlb_print_info+0x60/0x60 [ 464.433075][ T7424] bad_page+0x14b/0x170 [ 464.437229][ T7424] free_unref_page_prepare+0x42a/0x9a0 [ 464.442690][ T7424] ? percpu_ref_put+0x19/0x180 [ 464.447456][ T7424] free_unref_page_list+0xbb/0x8e0 [ 464.452604][ T7424] release_pages+0x1fa6/0x2220 [ 464.457388][ T7424] ? lru_cache_disable+0x30/0x30 [ 464.462347][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 464.467821][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 464.473375][ T7424] ? mlock_page_drain_local+0x289/0x490 [ 464.479020][ T7424] __pagevec_release+0x6d/0xe0 [ 464.483920][ T7424] truncate_inode_pages_range+0x352/0x1090 [ 464.489827][ T7424] ? mapping_evict_folio+0x520/0x520 [ 464.495130][ T7424] ? parse_options+0xcdf/0xe40 [ 464.499904][ T7424] ? jfs_fill_super+0xad0/0xad0 [ 464.504860][ T7424] ? sync_filesystem+0x103/0x220 [ 464.510161][ T7424] jfs_remount+0x33d/0x5b0 [ 464.514591][ T7424] ? jfs_statfs+0x550/0x550 [ 464.519112][ T7424] ? hook_sb_remount+0x19/0xc0 [ 464.523892][ T7424] reconfigure_super+0x219/0x8a0 [ 464.528852][ T7424] path_mount+0xe13/0x1020 [ 464.533364][ T7424] ? kmem_cache_free+0xf7/0x290 [ 464.538222][ T7424] __se_sys_mount+0x2e3/0x3d0 [ 464.542995][ T7424] ? __x64_sys_mount+0xc0/0xc0 [ 464.547853][ T7424] ? lockdep_hardirqs_on+0x94/0x140 [ 464.553069][ T7424] ? __x64_sys_mount+0x1c/0xc0 [ 464.557869][ T7424] do_syscall_64+0x4c/0xa0 [ 464.562304][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 464.567204][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 464.571916][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.577815][ T7424] RIP: 0033:0x7fab7679c14a [ 464.582239][ T7424] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 464.601976][ T7424] RSP: 002b:00007fab77632e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 464.610567][ T7424] RAX: ffffffffffffffda RBX: 00007fab77632ee0 RCX: 00007fab7679c14a [ 464.618548][ T7424] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 464.626613][ T7424] RBP: 0000200000000f40 R08: 00007fab77632ee0 R09: 0000000001a4a438 [ 464.635046][ T7424] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 464.643217][ T7424] R13: 00007fab77632ea0 R14: 0000000000000000 R15: 0000200000000100 [ 464.651569][ T7424] [ 464.662085][ T7424] BUG: Bad page state in process syz.1.879 pfn:666f9 [ 464.669669][ T7424] page:ffffea000199be40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x2c pfn:0x666f9 [ 464.682630][ T7424] flags: 0xfff00000002006(referenced|uptodate|private|node=0|zone=1|lastcpupid=0x7ff) [ 464.703672][ T7424] raw: 00fff00000002006 ffffea0001a1df08 ffffc900034b7980 0000000000000000 [ 464.721600][ T7424] raw: 000000000000002c ffff8880650faba0 00000000ffffffff 0000000000000000 [ 464.731152][ T7424] page dumped because: PAGE_FLAGS_CHECK_AT_FREE flag(s) set [ 464.753109][ T7424] page_owner tracks the page as allocated [ 464.759887][ T7424] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x140c40(GFP_NOFS|__GFP_COMP|__GFP_HARDWALL), pid 7424, tgid 7423 (syz.1.879), ts 461805341122, free_ts 461797816365 [ 464.781176][ T7424] post_alloc_hook+0x173/0x1a0 [ 464.786026][ T7424] get_page_from_freelist+0x1a1e/0x1ab0 [ 464.792265][ T7424] __alloc_pages+0x1ec/0x4f0 [ 464.796901][ T7424] folio_alloc+0x1c/0x60 [ 464.802924][ T7424] filemap_alloc_folio+0xdb/0x480 [ 464.808143][ T7424] __filemap_get_folio+0x6ab/0xdb0 [ 464.813994][ T7424] pagecache_get_page+0x26/0x250 [ 464.820782][ T7424] __get_metapage+0x2a4/0xfa0 [ 464.825531][ T7424] diNewExt+0x9f1/0x2cc0 [ 464.830602][ T7424] diAllocAG+0xe19/0x1c30 [ 464.835017][ T7424] diAlloc+0x1c9/0x1900 [ 464.841158][ T7424] ialloc+0x88/0x950 [ 464.845146][ T7424] jfs_mkdir+0x1db/0xad0 [ 464.850467][ T7424] vfs_mkdir+0x387/0x570 [ 464.854806][ T7424] do_mkdirat+0x1d8/0x440 [ 464.861292][ T7424] __x64_sys_mkdirat+0x85/0x90 [ 464.866121][ T7424] page last free stack trace: [ 464.871995][ T7424] free_unref_page_prepare+0x8b4/0x9a0 [ 464.877527][ T7424] free_unref_page+0x2e/0x3f0 [ 464.884343][ T7424] __vunmap+0x856/0xa00 [ 464.889868][ T7424] kcov_close+0x27/0x50 [ 464.894154][ T7424] __fput+0x22c/0x920 [ 464.898216][ T7424] task_work_run+0x1d0/0x260 [ 464.904564][ T7424] do_exit+0x982/0x2480 [ 464.910093][ T7424] do_group_exit+0x217/0x2d0 [ 464.914736][ T7424] get_signal+0x1272/0x1350 [ 464.921122][ T7424] arch_do_signal_or_restart+0xc4/0x1350 [ 464.926770][ T7424] exit_to_user_mode_loop+0x70/0x110 [ 464.933986][ T7424] exit_to_user_mode_prepare+0xee/0x180 [ 464.941260][ T7424] syscall_exit_to_user_mode+0x16/0x40 [ 464.946772][ T7424] do_syscall_64+0x58/0xa0 [ 464.953052][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 464.960350][ T7424] Modules linked in: [ 464.964384][ T7424] CPU: 0 PID: 7424 Comm: syz.1.879 Tainted: G B syzkaller #0 [ 464.973185][ T7424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 464.983250][ T7424] Call Trace: [ 464.986539][ T7424] [ 464.989567][ T7424] dump_stack_lvl+0x188/0x24e [ 464.994246][ T7424] ? show_regs_print_info+0x12/0x12 [ 464.999543][ T7424] ? swiotlb_print_info+0x60/0x60 [ 465.004564][ T7424] bad_page+0x14b/0x170 [ 465.008888][ T7424] free_unref_page_prepare+0x42a/0x9a0 [ 465.014381][ T7424] ? percpu_ref_put+0x19/0x180 [ 465.019151][ T7424] free_unref_page_list+0xbb/0x8e0 [ 465.024398][ T7424] release_pages+0x1fa6/0x2220 [ 465.029187][ T7424] ? lru_cache_disable+0x30/0x30 [ 465.034134][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 465.039611][ T7424] ? mlock_page_drain_local+0x75/0x490 [ 465.045090][ T7424] ? mlock_page_drain_local+0x289/0x490 [ 465.050642][ T7424] __pagevec_release+0x6d/0xe0 [ 465.055421][ T7424] truncate_inode_pages_range+0x352/0x1090 [ 465.061416][ T7424] ? mapping_evict_folio+0x520/0x520 [ 465.066799][ T7424] ? parse_options+0xcdf/0xe40 [ 465.071579][ T7424] ? jfs_fill_super+0xad0/0xad0 [ 465.076446][ T7424] ? sync_filesystem+0x103/0x220 [ 465.081399][ T7424] jfs_remount+0x33d/0x5b0 [ 465.085843][ T7424] ? jfs_statfs+0x550/0x550 [ 465.090357][ T7424] ? hook_sb_remount+0x19/0xc0 [ 465.095221][ T7424] reconfigure_super+0x219/0x8a0 [ 465.100171][ T7424] path_mount+0xe13/0x1020 [ 465.104596][ T7424] ? kmem_cache_free+0xf7/0x290 [ 465.109459][ T7424] __se_sys_mount+0x2e3/0x3d0 [ 465.114146][ T7424] ? __x64_sys_mount+0xc0/0xc0 [ 465.118964][ T7424] ? lockdep_hardirqs_on+0x94/0x140 [ 465.124170][ T7424] ? __x64_sys_mount+0x1c/0xc0 [ 465.128961][ T7424] do_syscall_64+0x4c/0xa0 [ 465.133388][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 465.138070][ T7424] ? clear_bhb_loop+0x60/0xb0 [ 465.142757][ T7424] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 465.148658][ T7424] RIP: 0033:0x7fab7679c14a [ 465.153080][ T7424] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.172778][ T7424] RSP: 002b:00007fab77632e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 465.181201][ T7424] RAX: ffffffffffffffda RBX: 00007fab77632ee0 RCX: 00007fab7679c14a [ 465.189185][ T7424] RDX: 0000200000000f40 RSI: 0000200000000f00 RDI: 0000000000000000 [ 465.197159][ T7424] RBP: 0000200000000f40 R08: 00007fab77632ee0 R09: 0000000001a4a438 [ 465.205139][ T7424] R10: 0000000001a4a438 R11: 0000000000000246 R12: 0000200000000f00 [ 465.213120][ T7424] R13: 00007fab77632ea0 R14: 0000000000000000 R15: 0000200000000100 [ 465.221195][ T7424] [ 465.300746][ T4515] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.472615][ T4515] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.531538][ T4318] usb 4-1: USB disconnect, device number 7 [ 465.612464][ T4515] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.655708][ T4515] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.975828][ T4515] bond1: (slave ip6gretap1): Releasing backup interface [ 466.000126][ T4515] bond1: (slave ip6gretap1): the permanent HWaddr of slave - 06:d8:4a:8f:64:85 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 466.450080][ T4515] IPVS: stopping master sync thread 4905 ... [ 466.595244][ T4515] device hsr_slave_0 left promiscuous mode [ 466.601997][ T4515] device hsr_slave_1 left promiscuous mode [ 466.608255][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 466.616100][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.624316][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 466.632104][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 466.641417][ T4515] device veth1_macvtap left promiscuous mode [ 466.647432][ T4515] device veth0_macvtap left promiscuous mode [ 466.654022][ T4515] device veth1_vlan left promiscuous mode [ 466.660173][ T4515] device veth0_vlan left promiscuous mode [ 466.722556][ T4515] bond1 (unregistering): (slave veth3): Releasing backup interface [ 466.736102][ T4515] bond1 (unregistering): Released all slaves [ 466.745960][ T4515] team0 (unregistering): Port device batadv1 removed [ 466.851882][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 466.880514][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 466.906571][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.937333][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.985045][ T4515] bond0 (unregistering): Released all slaves [ 467.448108][ T4515] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.505105][ T4515] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.555359][ T4515] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.613020][ T4515] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.992453][ T4515] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.063581][ T4515] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.114625][ T4515] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.182450][ T4515] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.282901][ T4515] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.323950][ T4515] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.384609][ T4515] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.453842][ T4515] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.700513][ T4515] IPVS: stopping master sync thread 4572 ... [ 469.706973][ T4515] IPVS: stopping master sync thread 4654 ... [ 470.391918][ T4515] device hsr_slave_0 left promiscuous mode [ 470.398596][ T4515] device hsr_slave_1 left promiscuous mode [ 470.404974][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.415323][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.423836][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.432712][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.441642][ T4515] device hsr_slave_0 left promiscuous mode [ 470.447785][ T4515] device hsr_slave_1 left promiscuous mode [ 470.455130][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.462621][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.470403][ T4515] device bridge_slave_1 left promiscuous mode [ 470.476615][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.484645][ T4515] device bridge_slave_0 left promiscuous mode [ 470.490968][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.500672][ T4515] device hsr_slave_0 left promiscuous mode [ 470.506857][ T4515] device hsr_slave_1 left promiscuous mode [ 470.513564][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.521148][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.529250][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.536650][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.544207][ T4515] device bridge_slave_1 left promiscuous mode [ 470.550380][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.558033][ T4515] device bridge_slave_0 left promiscuous mode [ 470.564297][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.573986][ T4515] device hsr_slave_0 left promiscuous mode [ 470.580234][ T4515] device hsr_slave_1 left promiscuous mode [ 470.586355][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 470.593924][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.601399][ T4515] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 470.608835][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.616338][ T4515] device bridge_slave_1 left promiscuous mode [ 470.622677][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.631295][ T4515] device bridge_slave_0 left promiscuous mode [ 470.637436][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.645599][ T4515] device hsr_slave_0 left promiscuous mode [ 470.651891][ T4515] device hsr_slave_1 left promiscuous mode [ 470.658038][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 470.665733][ T4515] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 470.673315][ T4515] device bridge_slave_1 left promiscuous mode [ 470.679533][ T4515] bridge0: port 2(bridge_slave_1) entered disabled state [ 470.687175][ T4515] device bridge_slave_0 left promiscuous mode [ 470.693367][ T4515] bridge0: port 1(bridge_slave_0) entered disabled state [ 470.704103][ T4515] device veth1_macvtap left promiscuous mode [ 470.710172][ T4515] device veth0_macvtap left promiscuous mode [ 470.716229][ T4515] device veth1_vlan left promiscuous mode [ 470.722066][ T4515] device veth0_vlan left promiscuous mode [ 470.728418][ T4515] device veth1_macvtap left promiscuous mode [ 470.734428][ T4515] device veth0_macvtap left promiscuous mode [ 470.740817][ T4515] device veth1_vlan left promiscuous mode [ 470.746578][ T4515] device veth0_vlan left promiscuous mode [ 470.753006][ T4515] device veth1_macvtap left promiscuous mode [ 470.759186][ T4515] device veth0_macvtap left promiscuous mode [ 470.765325][ T4515] device veth1_vlan left promiscuous mode [ 470.771388][ T4515] device veth0_vlan left promiscuous mode [ 470.981019][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 471.003371][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 471.013849][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.025864][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.068299][ T4515] bond0 (unregistering): Released all slaves [ 471.400959][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 471.441255][ T4515] team0 (unregistering): Port device team_slave_0 removed [ 471.477134][ T4515] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 471.513372][ T4515] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 471.750651][ T4515] bond0 (unregistering): Released all slaves [ 471.912979][ T4515] team0 (unregistering): Port device team_slave_1 removed [ 471.936543][ T4515] team0 (unregistering): Port device team_slave_0 removed