last executing test programs: 29m52.37015933s ago: executing program 3 (id=1739): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 29m51.462543331s ago: executing program 3 (id=1745): pipe(&(0x7f0000000080)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64000000100003040000", @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 29m51.283563808s ago: executing program 3 (id=1746): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000004c0), 0xa8201, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x8000) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x9640, 0x0) ppoll(&(0x7f0000000040)=[{r1, 0x2311}], 0x1, 0x0, 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x6) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000100)={0x2, 0x40000105, 0x0, 0x0}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000013000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f00000002c0)="0f01c3660f388188773d0f01d166b98006000066b80b00000066ba000000000f300f1aab750066b97802000066b85000000066ba000000000f300fc71a3e660fc774000f20d86635200000000f22d866b9a30900000f32", 0x57}], 0x1, 0x4c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0xd, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 29m50.603948389s ago: executing program 3 (id=1750): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x20d036, 0x0, 0x0, 0x0, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) move_mount(r1, &(0x7f0000000140)='.\x00', r0, &(0x7f0000000300)='./file0\x00', 0x41) move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x220) 29m50.25022161s ago: executing program 3 (id=1751): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_COALESCE(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x60040, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x50, 0x56a, 0xdb, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x8, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0xfd, {0x9, 0x21, 0xffff, 0x7, 0x1, {0x22, 0xb1e}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0xa, 0x3, 0x13}}}}}]}}]}}, 0x0) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004", @ANYRES32=0x0], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x42901, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_usb_connect(0x5, 0x24, &(0x7f0000000980)={{0x12, 0x1, 0x0, 0x6e, 0x40, 0xb7, 0x40, 0x9e1, 0x5121, 0x40c1, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3c, 0xac, 0x24}}]}}]}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r3, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001240)=@newtfilter={0x2c, 0x10, 0x1, 0x70bd26, 0x0, {0x0, 0x0, 0x74, r3, {}, {0x7, 0x10}, {0xa, 0x1}}, [@TCA_RATE={0x6, 0x5, {0xc9, 0x8}}]}, 0x2c}, 0x1, 0xf0ffffffffffff, 0x0, 0x60001d0}, 0x2000c084) 29m49.708200389s ago: executing program 3 (id=1753): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 29m49.319946434s ago: executing program 32 (id=1753): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x1}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000640)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000440)={0x0, 0x1000000, 0x0, 0x1, 0xa00, &(0x7f00000005c0)="c6"}) 9m53.312853804s ago: executing program 0 (id=6447): syz_usb_connect(0x0, 0x3d, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000020c0)={0xaa, 0x20}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRESHEX, @ANYRES32], 0x50) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000540)=[@text32={0x20, 0x0}], 0x1, 0x10, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000180)=0x2) readahead(r1, 0xffffffffffffffff, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x5, 0x1000086}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 9m49.772133049s ago: executing program 0 (id=6454): r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="000c0100000006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(0xffffffffffffffff, 0x0, 0x8004) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000008c0)={0x34, &(0x7f0000000740)={0x20, 0x31}, &(0x7f0000000780)={0x0, 0xa, 0x1, 0x7c}, 0x0, 0x0, 0x0, &(0x7f0000000880)={0xc0, 0xa2, 0x2f, "9097a0de103530857ea0c87837a74271075ecad308334c742704339eea315d23c2d2a16eb2b1566c4f5790a0f65b0d"}}) 9m46.655458278s ago: executing program 0 (id=6465): socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x48200, 0x0) io_uring_setup(0x4685, &(0x7f0000000440)={0x0, 0x2078, 0x20, 0x0, 0x3a3}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) timer_create(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast2, 0xd402, 0x1, 0x0, 0x4d55ba80e15bd3d8, 0xb5a, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="2000000072009fb3000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0800010001002000a58886a954d661c4e85c3bd409af9b77444610960f86577adec70a7a1ce19ff1bf805a3dd0b5f2765f7f86398a766ff07c62f3a45e98473718993877bb0b0b55af14053d5ecd974dd5bc7f2a7caad26f"], 0x20}}, 0x0) write$cgroup_int(r4, &(0x7f0000000040)=0x1c9, 0x12) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f00000000c0)={&(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8}) syz_open_dev$MSR(0x0, 0x0, 0x0) 9m45.646249447s ago: executing program 0 (id=6467): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xa0, 0x29, 0x36, {0x5e, 0x10, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x8, {0x3, 0x0, 0x0, 0xfff}}, @generic={0x8, 0x56, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900"}, @calipso={0x7, 0x10, {0x3, 0x2, 0x3, 0x7, [0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}, @rthdr_2292={{0x18, 0x29, 0x39, {0x3a, 0x0, 0x2, 0x70}}}], 0x130}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe281810c76577aaf554801815d1ee516cc0752832233d7610ce165a593e43cbaa4f52db28e5aead94767ad0d0ccf1cd422fcfd87e848c94a2be6e254d827012967db0758c0fa31fff90c60693957939c8ce4ed025b", 0xa5}, {0x0}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {&(0x7f0000000980)="3d0296eb70593b74da27ad0ef43cdfacca013f61136666b092f154b82202e7f3b41215fbe3e3381a66b6abde7af0a9f608998408bae2f97394d17cd4fad43a83137abc47e294c03e1c127933e4a232eb62112ca14d3b2323af2120ec24e17f1fc1", 0x61}, {&(0x7f0000000580)}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67e4f5f7a2", 0x22}, {&(0x7f0000000a80)}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d904f", 0x34}], 0x8, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m42.92199436s ago: executing program 0 (id=6470): syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="042ffd02ffffffffffff050800400b07000712c124cdc30d643c235d7359da9e070000004528aa51fa2d9b48e7167b55d05a1b29e5b8e5b773fcce876b3e9fe15e6330b96d4004cb815d14"], 0x200) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08061cdc030ec080000000060000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf", 0x30}], 0x1}, 0x0) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300), 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0xe0, 0x29, 0x36, {0x5e, 0x18, '\x00', [@pad1, @pad1, @padn, @calipso={0x7, 0x30, {0x3, 0xa, 0x0, 0xfff, [0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1]}}, @generic={0x8, 0x72, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1"}, @calipso={0x7, 0x8, {0x3, 0x0, 0x3, 0x7}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @rthdr={{0x18}}], 0x158}}], 0x1, 0x810) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, &(0x7f0000000300)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x4}}, './file0\x00'}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d80)=[{&(0x7f0000000780)="42ebe7f5d8dde5f3e9c5c7e7bc09d8d80f373ae4dc85e6cb597bd322663b986ff272399bec41d811a763bcd2cdc221d2ac6cdeeca815ce250ce959444e7f296cb11433530cfccd0c6f450147b46eb5bbe28181", 0x53}, {&(0x7f0000000880)="3ed8269a24bf45844c983ea0eeeb58f212eeac22d35800c1a94b360b7b20a38c4009daad6421963cbcd5621f4aa4892eb9937191078bfbceee60ee759765c992659367fc8bd35cf5d87272d4c4bbccb6fe258a2bc4cf", 0x56}, {&(0x7f0000000540)="b4e007f06d056aa0367c7356f83c", 0xe}, {0x0}, {&(0x7f0000000580)="1ab9a1fec95331b4b1bb5f840b0a198cb5add980a1e5cd402aaa", 0x1a}, {&(0x7f0000000700)="741f5b18fef5626f948b1919860417488e3e5141e17a3031271340b8ac67", 0x1e}, {&(0x7f0000000a80)}, {&(0x7f0000000d00)="7cedc13b1cbf2308b2000d3d62b333c7c3b9f321ef7bd8e0e1e323da70d8d595f505397d1fda268139275cca00007c8f8cff1d2a3a", 0x35}, {&(0x7f0000000ac0)="50591ee1c54cb070964417fd1f4ffe5a57c4ff8a3c5c5ce1d3957dfc44e8e17c719084f4e8da23c0e4667eeda56ce5d4d14d90", 0x33}], 0x9, 0x4d9e, 0x8) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 9m41.69191547s ago: executing program 0 (id=6475): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, 0x0, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 9m25.812133767s ago: executing program 33 (id=6475): setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000380)={{0x84, @rand_addr=0x64010104, 0x4e24, 0x3, 'nq\x00', 0x8, 0x5, 0x55}, {@remote, 0x4e22, 0x0, 0x7, 0x12d5c, 0x12d58}}, 0x44) bind$alg(0xffffffffffffffff, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-generic)\x00'}, 0x58) sendmsg$sock(r0, 0x0, 0x800) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 15.18810017s ago: executing program 5 (id=7889): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsopen(&(0x7f0000000180)='proc\x00', 0x1) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) r5 = syz_open_dev$vcsa(&(0x7f0000000340), 0x3, 0x100) pread64(r5, &(0x7f0000000780)=""/4096, 0x1000, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000240)={'wlan1\x00', &(0x7f00000002c0)=@ethtool_stats}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x403, 0x2, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0xe}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8044) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r7, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000680)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4012}, 0x4000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x9) munmap(&(0x7f0000002000/0x2000)=nil, 0x2000) getdents64(0xffffffffffffffff, &(0x7f0000001f00)=""/4111, 0x100f) 13.384423432s ago: executing program 5 (id=7891): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000", 0x17}], 0x1}, 0x0) 13.240968264s ago: executing program 5 (id=7894): syz_open_dev$cec(&(0x7f00000000c0), 0xffffffffffffffff, 0x80243) r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="2e000000010002", 0x7) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x38}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000300)={0x34, &(0x7f0000000440)=ANY=[@ANYBLOB="001255"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x20, 0x3, 0x6, "a6d2fd5d95bf"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x40, 0xb, 0x2, "b58b"}, 0x0, 0x0, &(0x7f0000000580)={0x40, 0x17, 0x6, @remote}, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc"], 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0x208e24b) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x40, 0x1ff) syz_usb_control_io$uac1(r0, &(0x7f0000000000)={0x14, &(0x7f0000000080)={0x0, 0x11, 0x2, {0x2, 0x6}}, &(0x7f0000000280)=ANY=[@ANYBLOB="0003020000000203847a409f05aafb8271934f68e264185c8c3a314ba0133433c0f6e42ac2ee2b01da29816e7a9337c67de37de48e088f4292e7a261f85a63cbc989596fa2f9d0dff37c5454"]}, &(0x7f00000005c0)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="000d39000000a0e6c22cde67441e2752a3bc50c21fa5450000000000000d8cad3a7d38f16e0aebf47cd57afb895f979757d4909e9786b0a140f52dc5a5f0e4"], 0x0, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x3}, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x84, 0x2, "ec49"}, 0x0}) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) 13.064258771s ago: executing program 4 (id=7895): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$read(0xb, r3, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) syz_open_dev$sndctrl(&(0x7f0000000600), 0x0, 0x8801) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r4, 0x5609, &(0x7f0000000040)={0x1, 0x7, 0x3}) 11.83463463s ago: executing program 1 (id=7897): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_extract_tcp_res(&(0x7f0000000140), 0x1, 0x3f97be71) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x1, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) write$ppp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00009f4000/0x3000)=nil, 0x3000, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="04040aaaaaaaaaaa10f4602401b3624ee1c9cd42a66adc343a385f5f808e4962e7e28bfc49e53850ba4bb72b22efc7c1377e2b3e9a59137dc65963c5b473409ab19555c09e3b1ca3fb4e67fed98337c095e1fa56961bc222bc884800000000000000008ff44058123f862d65264bff170966d92eee17fbfbfff2100691b5533468e36b58133bb84354912a3187f7a9348ad74294ed0561ef2a499c446aa90fc28f722914460e93c1a2ad2a9b0376cb82d156b2dbf89d458c1ac475671158e6cad08862275c52f6351a26713b25526ff81a0a06d4b212f03f21f33747efaf78810852b4711fc73a98f13087000ccd67f4f4ae480f0319fc50567bdbc30b5b5f80fde7af38e03839ab5897000000"], 0xd) 11.100227346s ago: executing program 2 (id=7898): syz_open_dev$vcsn(&(0x7f0000000080), 0x1, 0x180) r0 = openat$dsp1(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 10.196125907s ago: executing program 1 (id=7899): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000440), 0x0, 0x559e, &(0x7f0000005680)="$eJzs3X9sVeX9B/BzWwoN+C39jhUYfxAgBoMkyJYtjqB4MQa24eKlgsKcCEQlBivYRDcYqUWSZcaghU4EF5GQaDJjscM/FMywy7CMZfzY5hZjs4JSaZZsAzVrHDG69N77XO49l9tembNOXy/SnvPcz3me+9yT88d9X/qcGwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEAURUcSc9+d0f3i0ZE1X77/Hz+e+OjGn4zfvX/roVvu23T/gjMjbto5a1nf+mlN8zdsbDjS/PS+ObdGUSLdL5Htf9u136q/88bbvlsdBly+MLOtrS31lJmuJzON4QUP9vcr/FkRRVFVbIDK7PbV7E5FwQC53cbiAQf0Tuui6O7J8ya1dT01bklyYU/xS6df9VBPYKhkr6ue89dSMv27InZErp136SUKLtFM//gF96m8CADgY5mZSm9yb0ezb3Fz7eZ4PdZOxtotsXZ4h9CS37gYmXGHl5rnpHh9iOaZzESFESXnGatnz3+unYr3j7VjUeNjzLPw0GykqS41z7Wx+lDNEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCzZOzxo2tWtD2y575fdtQceff9OVc+8KWOw22LT4y8eunKHWum/HTWsr7105rmb9jYcKT56X1zbo2i2nS/RKZ74kTL5b9NjZ3fvXfcG427n6vpq8yOG7bD8g6OXg87s0ZH0cq8Sk8Y9q81UZQqLKSb0Y7iwl3pnW+HAgAAAJ8nX0n/rsi1M3GwqqCdSKfJRPpfkAmL77Quiu6ePG9SW9dT45YkF/Zc/HipEuMlLzherl17/ieRF4xD/I2Pd74eDm0sGmdg8RHjef7SMWPefmty/eSvT5v7xA3PjOru+r8nZ2xJ/bGu5oUrru+tf/a6ovxfO3D+D2dO/gcAAOA/If/HxxnYYPn/jqVTt7z+i2Grft3a8MTB+h1/bv3OMzsXneq54Ud9L09N3v7o1UX5f1LBUxbl/zDjkP8roovL/wAAAPBZ9t/O/8micQY2WP5vONM3+wcHX6vr+PucxXt+9dAVi8+e/tv8U7t3DV9zR8v6uoeuLMr/M8vL/8Pypx0e/F2Y8OrRUTSz/JMKAAAAFAj/737+o4WQ1zOfHMTz+rX/vKp5380ffPMbD97zpzff/s2xA7MnrdteN/PgyzfVf1j5ve3dRfk/WV7+r/p0Xi4AAABQhuePrpw773jPucfPvtB18vDu3pMznjyzrqnvdOslLatXbTr2WlH+T5WX/0cMzcsBAAAALuDeO59bsfnVl/oe2H/X2Ck9FVc1XpK4ZduOqU0TPuq8tPfy7VuL8v/y8vL/yOw2u/Ih06kz/BVC6+goqu7fWZspHIparskVAAAAgE9IyOlbP1ixbOzOsb3jj59+rObQG4dn/2Vt55yN13RXdW/uXNZ4WdH9AkJiL3X//3Cng7D+v+D+f0Xr//MKmbv+zXZjAAAAAL6Iitfzh9vjZ765oNT375e7/n9J3cQTiba33lv11XMHzo1ZsP/7129aV9/be8+El37/wz9M/6i6KP83l5f/K/O3n+T3/wEAAMBF+F/7/r+lReMMbLD7/zdV9DWsWrd3+uota7csTCw7UH3qwdV731+w5l9Tb36+qea6A0X5v6W8/B+2o/JfXkc4P5tGR9H4/p3s3QR/Hqa7OlZor8orZE58rMeNoUe20D4ir5C2Ntbja6OjaHL/TnOs8P+h0BIrnK3JFnbFCsdCIXs95Ap7YoWOcKVtq8lON154MRSyCyzawwqKUbklEbEe75Xq0V+4YI+u3JMDAAB8oYTwnM2yVYXNKB5l2xODHTBysAMqBjugcrADhsUOiB9Y6vFoeWEhPH575yMbNjVMSb7y8NzHfvbms40T9j1+WV3v5g9f2XbvxJ3TW6YW5f9d5eX/cCqGZzal1v9HYf1/9nsNc+v/l4dCbazQHgqp+B0DUuE5MmH34fActalsj7PjcwUAAAD4XAufC1QO8TwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/s3evcdJVd0JAj/d9INumqaNE9GMk3TUgGakaWwNw+AoaoxGRZpZddxkNBBoEGmE8FgFURtQZxziZ3ztrJnoCAoiu+qHGFeDwUhcxIw6iWLiA/Cxjq7r+h6VGM2E/XTfOkXVrS67EFDa+X7/6DpVv/O89eg69946FwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/xjuPfjlk4YunP0PHzace8nqqqmL/kfH6Mv+cNW3vvjUPy5b9G9h/i9GnLll3kEXHjd/wbR/6Vi++ogzQmjtKleWFC977oqvPtS613HP3jFw48wbb63fUpWpNxMP/Tr/lGfuXBxbfbF/CHeXhVCRDgypSwKVmft1sb5960LYI2wLZEu01SYl0g2HB2pCWBK2BbJVra4JoS4ncMqG+++7vDNxTU0IXwkhVKfbeKY6aaMmHRhUlQRq04HpFUngt1sT2cBPypMA7LD4Zsi+6Fe15mdo6L5ckddf5U7r2KcrPbw+MdFQPN/rR+3iTuWoSj/QukNPW0F17BIFb4+13m294N1WsJ2v8LTlfpHKfEPZui1UHcontk0aP6d9dnykPDQ19SlW0y56np9+e/6E7Un3mtdh7EDDTnkdXvrYiun9lo2+9OrNvxqz4ayaA3a0m0/lbNLc9K5WHTKvuV7zPEajfJ70grdfwbekRl+6Qghbzz17xtfnTDz7iD63PLnu1QcfrNty9pwFvzhz4nmLLj55w7/Pf6lg/t/w0fP/+HKOt+V5uWOrH9Ync/P4SF1MvFmfzM0BAACg1+gNe01Xnv/6X73+/bWtMxed/u23Dj73w71afz3i/gFVB7yxrqn1/I2ff6Vg/t9Y2vH/eMi/Lne0a0MY1ZVYNCCEvbseTwIrY3e+OyCEL3elWvMDR6UCa0PYpytxULaqVIm+sURjKvByfSYwKhVYHwOtqcDyGLgiFbg4BlalAhNiYG0qcHQMhCn54/hqfWYcJQdqYmBcshFXxbMQ3qmPraW21aZsVQAAADtJZnZYmX8351yHHc0Qp5eranrKEM/ALpqhOlVDegabnVYVraGipxrKe6ohO+6Ojx5+Qc1lPdVccBpGWX6GG9f85X2LXjzsC2P3mvj5xUMvmPKz8eGst++uerx5yYtv7XvEzesK5v/NHz3/r+6mI2UFx/9DGNv1N+Yuz0Tas/FxrXkZAAAAgB1w0R//xR61Lw85oGHT+2X3zl/7xKMrfrl5j1NOf3/c8a//8PCaxnsL5v+jSjv/P+4T6ZOTOTwSd0NMHRBCc34gqXZkYSA56t0vEwAAAIDeIHs8PnssfErmNjlFOz2fLszfup3544H/Ud3m//09/7P2jq3/+mLZBd89d0TNgKX/9GrHhBNOPvqW47/1zj4VB/yyvGD+31ra+f+1+bdJJ9bHXlw9IIS+OYEHYy87A10aY+D5I/MDmfGvjxtgcawqc2JCtqrFscS4GGhOBZYUK/FotsTe+YHMk5VtfFF2HFMyJXICAAAA8ImLuwPicfl4/n/LGSNO++vvzfrbha88eN7qCy75q+Ed80eedP/THzbMvXJp2PTmEQXz/3Hbd/5/1zy44PT+9n4hDK0IoU/6hwGP1CYLA8ZAXVkmcW9tUlefdFULa0MY2TmwdFUvZNb/r0ivMfh4TVJVDOy93y1vD+pMLKsJYWhu4IlvLz2sMzEnFcg2flpNCF/qHG268bv6Jo1Xphu/tm8IX8wJZKua0DeEzsaq0lX9r+rMdQzSVa2qDmHPnEC2quHVIcwNAPRW8X/pxNwHZ82dN3V8e3vbzF2YiDvxa8KkKe1tTROmt0+sLtKniak+561jtKBwTKVe+mZTZo2ixSsnV5aSzv5QsDm3rcyO/IIzBzP345ehyq5xHlKZd7clPeQD9y9sIuR8lSo25PJdPOTa3Eq2PYkF9cf8VaFf6DtnVtvMpvPGz549c1jyt9TshyR/43GmZFsNS2+r2u76VsLLo+hyWSkfd1sNyq1k6OxpM4bOmjtvyJRp4ye3TW47p+XQP2sZMXz410YM7RxUc/K3h5EO6q7m1Ei3Li1xWDtxpF+oyKnkk/jQkJCQ6G2J/f7L5odH77n+nOt/9tqPz+/3zdPu3fvImT889KqpD1Xve/ji24ccWDD/n/HR8//4qRM/+DPrMxQ7/t8QD/Mnj287zD8uBpaUevy/odjR/OyJAY2pQEcMdDjMDwAAwGdD3B0Z92bGndKbb1m/buOSlrk/aHin5dY17Utvuum+U39y58ATvjQ47LXhuhM+VzD/7yjt9/87af3/7NL1JxRb5v+gWKK52Pr/6WX+s+v/dxRb/z+9zH92/f8ln8L6/3OygdQmecf6/wAAwGfBJ7f+f4/L+6cvEFCQocfl/dMXCCjI0OMy/qVeIGC71/9f8+Bff6Wq35g7/qTlN/WXvPZ39xzWeuS6zTP/5Etb10+877qxt6wpmP9fUdr838L9AAAAsPv4z5ddU3H02Xff0bJu6sZxbw5+98m3lgzq80HF0Q+3j3xh4Bu3nlcw/19S2vz/k1//LxQ7/7+xWKC12MKA1v8DAACglyq2/t89Q1sa/zCm/x+eHvab5Q/ePPqnj/z898v3+/mJPyvfZ8Gxz8+8bFLB/H9VafP/eNpFeV7u2JsP65M17UJ6Tbs367M/GQAAAIDeoTw0NVWWmDdvYdSjPn6bT2eWAv2odK7vvXLt2ZtfmH7c46ev+7uaEwbvOWHaBasa/2b4gXd+ftQley7ddGrB/H9tafP/vN9lXPrYiun9lo2+9MOrN/9qzIazag7YdvwfAAAA2HVK3S8BAAAAAAAAAAAAAAB8+s7tWHzhI8uOfe+bt//F/kcseXXwbXcd+Lsh/V664qoHJq1648zJXy/4/X8Y21Wu2O//43X/4u8L/igvd2y15/X/MvdPOfH2uV1LFj5SH8L+uYGpC6fuETLX5h+cG7jvjIMGdiYWpkusefbolzoT30kHjh/yuS2dicNTgXFxkcR90oF4VcUt/VOBuLzi4+lA3B6r0oGqTOCy/sk4ytLb6pW6ZFuVpbfVxroQBuQEstvq7rqkjbL0AK9JBbID/F46EAd4ciZQnu7V7f2SXsVAXSx6Q7+kVwAA7Lbit8DKMGlKe1tz/Aofb79QkX8b5S1ZtqCw2rISm9+UWZps8crJlaWk+6S/i2671nhlqO4cwrCCr6u5Wcq6Rrlzaulh0/1RkSH3tNpbeZFyadu76aqKj6gmGVHThOntEyt7HHhLz1kOqegxy7CCyU5ulvKuTVpCLSX0pYQRlbhtSuhyvF8empr6pHL9eQw2hDw9vSJK/b1+7jp/xV4FuXluO/TKt758zE+f++CfP/9E/2+cVnP7rO+/e+KvX7//wEOOuG5C05otBfP/htLm/9W549qSuRhAR7yy3sgBIYwrcUQAAADw2XfbRbfecfr09a9MWlvx5GOPTS0fc3rl1vl3zp93ycZ7Fx9/2cErdjR+2Fm//f5vBu//b89e9dJPR+7zwA03/58nD3v8z3//8I8eeqduZZ+x7xXM/xtLm//HPViZQ8HJ3o618fr/iwaE0HVp/YYksDIO97sDQvhyV6o1lkguqH9CLNGcBFbGHSYHxRLjWvOr6hsDq1KBl+szgbWpwPoYyOyluCVkduVcWR/CYV2psfklZsQSDanAmBhoTAWaYqA5FegfA6NSgdf6ZwKtqcDDMRCm5G+rH/fPbCsAAIDtkZlnVebfDel53qqKnjKU9ZShtqcM5T1lqO4pQ7FRxPt3xAyVqZNXynIyVaZrrUnVUpAhXgx/u/tVkCE8mp8zXbCg6Xj+QfZ8g7L8DFf+4NlT1w+e/tDqzcd8beBt/zhkz4Obp9e9t+CGp3475pzrnv/TQQXz/+bS5v+1+bdJ6+vj/H/b9f+SwIOxe1fHU8cbY+D5I/MDmR0D6+Nkd3G2qtZMicykfXEsMSoGGlOBGTEwKhUYNzYTWDIwP5CZaWcbX5RtfEqmRE4AAAAAPnFxB0HcTRPn/zce9YOr3x8wccuyeTPvH9vyxMmjv3H1XT+6d/9ld767YvCAce99p2D+P6q0+X9sr19uYxfH3rzYP4S7y7b1JhsYUpcE4n6Muvjz+H3rQtgjZwdHtkRbbVKiKtVweKAm+YV6Vbqq1TXJGgPx/ikb7r/v8s7ENTUhfCVn70u2jWeqkzZq0oFBVUmgNh2YXpEE4p6fbOAn5UkAdlh2r2B8QWVOdclq6L5ckdffZ+WaoOnhFewD7SZfd7+52lWq0w9k9qlmbd/TVlAdu0TB22Otd1tvfLc1eLflfpHKfEPZui1UHcontk0aP6d9dnwk95esBXbR85z7K9VS0jvhddjx8Xvbs+p0B5pTHx/N3Zfr/nVYFqu79LEV0/stG33p1Zt/NWbDWTUHlNyNIuIPhX+05X9XPpWzeXe16pB5zfW6z5NWnye98d9Ao6cthHDZ9cfsu+TdX+/33A3Pnbqu7Maxr/7lrHs2Lf+bysNHrXv/yaGjLy+Y/7eWNv+vSN12+V3cmLMGhHBgzsZ9JG7+YwYkn4M5geRTcs/CQHLI/V/ri35yAgAAwM6W3d2R3V8wJXObnBCenicX5m/dzvxxf8WobvOX2u9j121cedLQN6474G8vOPGNv7/28Kceuv6ysnXL//vYD1avuXzxe08UzP/HffT8v2+qm47/O/7PLuL4f7d2913RfdMPdOzQruiC6tglHP/v1u7+bnP8v1uO/zv+3x3H/3vg+H+3dvenreBb0gxfujonwdff+fPfTbzpg7mN+x180lPPHDrxun+6quXuu0555b+de9601761uWD+P6O0+b/1/7pftC+7/t+4Yuv/zSi2/l+H9f8AAIBdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fdq//t3Dkv1904Q+fb7n2nTvHXb5m07Fnvvr0utXPzFpx3Lnnv9V6112tBfP/jtLm//Hl0C+39d6y/l/j2CJVXREDMywMCAAAwO6o2A4CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPl2HnvbO+5d8/R/aBv1ixc1/f+v/+7/P1q594JvfuGn4L6f86RllazZcM+LMLfMOuvC4+Qum/UvH8tVHnBHClK5yZUnxsueu+OpDrXsd9+wdAzfOvPHW+i3VmXorM7d/nJc7tvphfQhLch6pi4k36zvvbAuccuLtcys6E4/Uh7B/bmDqwql7dCaW14cwODdw3xkHDexMLEyXWPPs0S91Jr6TDhw/5HNbOhOHZwJl6e5e1z/pblm6u5f3D2FATiDb3bP751eVbeO4TKA83caKuqSNGKiLRa+tS9qIgfZYYkrfEIZWhNAnXdU/VydV9UlXdU91UlWfdFUXVYcwMoRQka7quaqkqor0yB+tSqqKgb33u+XtQZ2JpVUhDM0NPPHtpYd1JmamAtnG/1NVCF/qfMmkG/9xZdJ4Zbrx/1oZwhdDCFXpEu9VJCWq0iVeqAhhz5zAto1YEcLcwGdD/PSZmPvgrLnzpo5vb2+buQsTVZm2asKkKe1tTROmt0+sTvWpmLKc9NYFH3/sm96eP6HzdvHKyZWlpCsy5Sq7unxIZd7dlt2997FftbmVbHs+CuqP+atCv9B3zqy2mU3njZ89e+aw5G+p2Q9J/vbJRJNtNay3bKtBuZUMnT1txtBZc+cNmTJt/OS2yW3ntBz6Zy0jhg//2oihnYNqTv7ujJEu/eRH+oWKnEo+ife/hIREb0uU5326Ne/un+MFX/S3dbQyVHd9QBdMK3KzlHWNcmcM+qiPOeKP8zWlxxENK5g4FGQ5pOcsLQWTiW1ZapIsXV/rCiaHuTWVd23SeL88NDX1KbYdGvLv5m7e13dg8z6d2XSlpgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+P/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4FAAA//8fSxmR") mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x8, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r5, &(0x7f0000000b00), 0x0, 0x80000001, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000340)=@req3={0x5, 0x3, 0x7, 0x8, 0x2, 0xa548, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000140)=0x84) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000001c0), 0x4) syz_usb_disconnect(0xffffffffffffffff) 9.856162118s ago: executing program 2 (id=7900): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f5"], 0xfdef) 9.545357626s ago: executing program 2 (id=7901): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x100000000) r3 = inotify_init() r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, 0x0) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETAW(r6, 0x5407, &(0x7f0000000140)={0x7, 0xfff7, 0x8, 0x3, 0x17, "a9b39ba517c50901"}) write(r6, &(0x7f0000000180)="a788b9a48d1de6603c475fe3cfa8a27d7c8425073f756d1cefddc08a6dd4c4c0a5323f8f93d65682bc4974397001a396624e1bd23560952dee5736311e3d06e60f168e59f8a3125595ff42643b55d9addf2ea3fa011611a8c539558baf2581e9a8b722f2108f58cb3d552779ea51ba9462992a9156243c50c162d06280d116e26d280aacfb494b66c66bb4df665381440690afc4854f4a19db6357a3e57802de79c221ae7c5171faa19b3dc84934b452b1c81e98bf2eaeedca4e6cce792c6e01c592688acaefe150f0ffd163d3d54d4318b5df03be5916dd0fc3cbb297cc1cda81fbc3cc8c552216b48289eb4065a84e76d035c469ed7f879f1d522715f615d3d9b4e7b270b25837894d7609819a02fd202762975b2bf49910e57aea28e3632353f29711d460d5e85c5881f265e2372722654532bfb30b7ee54d40cafe09c96e65a6304a570ea8069fa0649f1bd6cbe5b2d8e42fa0ab835b4eae46e983df2fefa0b5e5bec1594ba024b6acef03fc561a86959e3b928c552b39845621b549746ea4157b0d4b72855c0d7f7578474c456a888a7b60a6e73a57bbccc733319619c140728332ae5d4c3a2c949741dd9950774fddd896ad9ca2d190176537eccee02958a68c4eb26384721bf0f3902387902a0e1fc7ce3d1b92291a1da43f29ac9ccccc5224909627819dae861ad9a80bb145e161851017f6967c4d6786df994c99cfd14eeec8a906f919196bf4fe42ba78c1e7c9559a32104562180e23b6bd02556d324d210c05d4c11b375b9a496f245670f1390341c533ed70b927ac87b14dded63dec46c80949c44b344e897deda9c96485a6fdcbfb6a81fa1f06548b62d6e4726d6c7c724c860cc0a3ae911692255cac73c6bd24332f763b7ee4411ac4c7bdfb4dc5243111e80e1275adbec72259dfd7bdbfe8b16ee19f73b444b094b64d33558116e37404b83ccf56fd3002880b44f9f0e46d8549bf061274812047665f83f82f71d0e8260668e026b7914f89a66342c38337e372efb345d4eb5273613a69fd5318cbc21788825895cffd0a93aaf0a25c7c17aadfe0415d00062aff52abea2b080310026189f137188a2fcf134e9f4b98f0e7adf657f3c368853a6d2ab1bb3e534f54208913613561e971f78c0b466d231251e0661bb2d1df030e31168bfed86bb5059096e74aa1f24213edec5a9c55a773b1b0b588d0646887759f73037da3196c596d7d54a10a47950fd52665d4059acf03d89d41201ca51d98baf9f549b09f0bd891850917d294ffd7a6fcfbefdf6192f7e3e51c67f45fb578bcd0ebc8447ded0a40bf17e73f1419e3cb6a8232e52d6646831f87148b7d9de7b4e1b7fae5afd5a22edf95602ac820712343bd79098dcdac62747c32a2657dd94799fe1407573f918355f84cc1c44a6499c0a7a5f188cf7971a952e03e245c022ea1ac6b3115dfaec5072c1a6ef298470899a2223908e099bd9f045a824f7ec21b9ef478f7f1253e99117bc90fb35b155ef4badcc95d1a1e913c1b3d7b5305289ba328d813bf47a2e808e8b96058faddb63dc7d0e039f1c51c872d6497097822ac3a86296ea3963c5bb6aea2ead05d85b859ecc4646c6f078b7ec3b6b9186b4ccdd87bd30653bcdc09ad5f5c5778406708de50653be9a34d9dc57279d1fa418788f4dbd22dcca75a012ca9689c42e93265669a504deb7bb906aa4012074668a546a24ff49f51aad8920a2c48b7390fb479d93e646eac6cfad65d55d1de0f0a3a35ea00b9c6ceb1febe4b838ea74f2444fba078d5d2c740f00064f56b000575de1be6f4fd26086b437d2ae622373b555f8a3ae5a65b158265f8840d3e8ef012e0ae671c9b51abd9c8c0c407e5813ae0ce4bc101363b7b2908b189c4c09efb06cf77985eb82fe229dd3619bf74d24a5010bb4594cb358fd6f182c94a45ba6782f92f6227f3d9e449f327a578647c21384836fbd9d1c25e8b4433b2aa720a6f0acbb069142a18b4c18f909fdff818a28a62d8d91ee8f618a49d42255f303c5b86727e93dd28d0f1ee33e3840f146b130d2e74e291307aa07d581089fc0ed123b788a668e33d69ba44e9375a4c4b5a9c563dcbac76548f6f558376d42a48eed5d2c9ae6e23ee037984fe7fdf752765dee6b03731dae01a59c694e4dbb378ee5cc7e115e768bd", 0x5ff) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 9.127818553s ago: executing program 4 (id=7902): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r1, 0x0, 0x2000c0d5) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x158, 0x18, 0x1, 0x70bd2d, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x40}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x3, 0x9ba3, 0xfffe, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x68, 0x3, {{'deflate\x00'}, 0x100, "258ecb40d7cc532c8c294bdccd86f4d1c0203e02cd23ed409efbb1b92523d85f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4010) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) r8 = socket(0x11, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x5, 0x0, 0x0, 0x100000}}) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000140)=']\x91%.\x00', 0x5) 8.359267152s ago: executing program 5 (id=7903): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x9}) 6.503847788s ago: executing program 5 (id=7904): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdir(0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'generic-gcm-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) writev(0xffffffffffffffff, 0x0, 0x0) unshare(0x480) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2711, &(0x7f0000000600)=""/102389, &(0x7f0000000000)=0x18ff5) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x202}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000980)=@newtaction={0xa4, 0x30, 0x800, 0x70bd2b, 0xbc, {}, [{0x90, 0x1, [@m_ipt={0x58, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x2d, 0x6, "d4404c4a8824b84368d09ccdb5597b825dbbd7aef99c354d3ef3d520abe9d4cb7dce90320fdae5b234"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}, @m_ipt={0x34, 0x16, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8, 0x2, 0x4}]}, {0x4}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0xa4}}, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000500)=""/229, 0xe5}, {&(0x7f0000000300)=""/225, 0xe1}, {&(0x7f0000000640)=""/219, 0xdb}], 0x3}}], 0x1, 0x60, 0x0) 6.299922966s ago: executing program 1 (id=7905): syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'team_slave_0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)) syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x5c}, 0x1, 0xf000}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="2e00000010008188040f80ec59acbc0413010048100000", 0x17}], 0x1}, 0x0) 6.284404047s ago: executing program 2 (id=7906): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) r1 = dup(r0) io_submit(0x0, 0x0, &(0x7f0000000500)) ioctl$SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000040)=0x5) read$FUSE(r1, &(0x7f0000004200)={0x2020}, 0x2020) timerfd_create(0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102384, 0x18ff0) syz_open_dev$dvb_demux(0x0, 0x5, 0x2a4000) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000011, 0x13, r3, 0x0) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$KVM_GET_DEBUGREGS(0xffffffffffffffff, 0x8080aea1, &(0x7f0000000080)) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 5.514002226s ago: executing program 4 (id=7907): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) syz_extract_tcp_res(&(0x7f0000000140), 0x1, 0x3f97be71) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r0 = bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000400)={0x1, r0}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000880)={r1, 0xe0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000005c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x5, &(0x7f0000000600)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1c, &(0x7f0000000680)=[{}, {}], 0x10, 0x10, &(0x7f00000006c0), &(0x7f0000000700), 0x8, 0xee, 0x8, 0x8, &(0x7f0000000740)}}, 0x10) write$ppp(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f00009f4000/0x3000)=nil, 0x3000, 0xa) openat$dma_heap(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x800, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r5, 0xc0d05605, &(0x7f0000000540)={0x2, @pix={0x3, 0x401, 0x3132564e, 0x1, 0x3, 0x3, 0xc, 0x7, 0x0, 0x0, 0x0, 0x3}}) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xd) 5.446086203s ago: executing program 1 (id=7908): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioprio_set$pid(0x3, r1, 0x2007) 4.432864673s ago: executing program 4 (id=7909): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) 4.395262897s ago: executing program 2 (id=7910): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) mount$overlay(0x0, 0x0, 0x0, 0x40000, &(0x7f0000000040)={[], [{@dont_appraise}], 0x3a}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000090000000000000000000000181100", @ANYRES32, @ANYBLOB="0bb1000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x94) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="640000000206010200000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a32000000000500040000000000140007800800124000000000050015002200000005000500020000000500010006"], 0x64}}, 0x0) pipe(&(0x7f0000000540)) sendmsg$IPSET_CMD_FLUSH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x4, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc011}, 0x800) 3.184351635s ago: executing program 4 (id=7911): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) prlimit64(0x0, 0x7, &(0x7f0000000100)={0x4, 0x8f}, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 1.924358038s ago: executing program 1 (id=7912): r0 = syz_open_dev$radio(0x0, 0x2, 0x2) ioctl$VIDIOC_S_HW_FREQ_SEEK(r0, 0x40305652, &(0x7f00000002c0)={0x0, 0x1, 0x8, 0x9}) 1.357546059s ago: executing program 5 (id=7913): syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f0000005600)='./file0\x00', 0x10001, &(0x7f0000000440), 0x0, 0x559e, &(0x7f0000005680)="$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") mq_open(&(0x7f0000000000)='!selinu\xff\x7f\x00\x00inux\x00T\x8b\xb5\xf3\xcb\xdd\xe3\xbf2\x86\x01\x84\xdd\x8a\x8f_l\xa1L\xb1\xef\xb2\xc9\xf7+C\xb2\x8e9\xb8\xec\x1a\xe5\xaeq\x8fZ\xff\xbcY+\xaf0<\xa3\xb8\"Zm\x1c\x18\x11\x93\xb5z \xc2\x8b\xa9\xc5\x9es\t\xfe\x002\xa0-\xaf\xcdP\x9f\xe5Iv\xce*\xa8\xa3\x14i\x05\x8f\x9b\x1eB\x9f\x9d#E\x19\xdc\xfe\xc7\xeb\xb5\xcd\xc8\xe2U\xce\x00\x00', 0x6e93ebbbcc0884f2, 0x2c, 0x0) r0 = syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0xf6b1, 0x8, 0x8000, 0x40024e}, &(0x7f0000000080)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x1}) io_uring_enter(r0, 0xd44, 0x44c1, 0x7, 0x0, 0x0) syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f0000000180)='./file1\x00', 0x804800, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYBLOB="6092034e5823f645654f6e8edfc3b8e1a948efb0d4b9a9d4c30f5dacb3c1a7ea2587d59165777f070017c2921e793ec5a1384e143b57bb832f14bb43afdef6cb4ed4960b6c732be46a927cdd8c57f93ee6c15401df91ebcbe4f9989843313ea9f243d4dc3d276b966b898100a620b69b543033b9b7bcd9069b9248fbdff46c4a49f094a61938776ce1a1d0f0c84cb7a84bf0b1e2ce5f38f95e11d5b1977ead80625337f66dc391089ab8573d008a4bd03f6f9f01406db632558ed25be4beecd844ac00e52f95c5dc96a1e4a25c80d56aebf6cb33914d6bc72a40bf2fc94efed2f941cf3e"], 0xf9, 0x1213, &(0x7f0000000600)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xb}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r5, &(0x7f0000000b00), 0x0, 0x80000001, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000340)=@req3={0x5, 0x3, 0x7, 0x8, 0x2, 0xa548, 0x2}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002340), 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000040), &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e22, @local}}}, &(0x7f0000000140)=0x84) setsockopt$packet_int(r6, 0x107, 0xa, &(0x7f00000001c0), 0x4) syz_usb_disconnect(0xffffffffffffffff) 1.082412573s ago: executing program 2 (id=7914): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x4000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r2, 0x100000000) r3 = inotify_init() r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x34d}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) mremap(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f0000ffb000/0x3000)=nil) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$TIOCSPTLCK(r5, 0x40045431, &(0x7f0000000000)) r6 = ioctl$TIOCGPTPEER(r5, 0x5441, 0x9) ioctl$TCSETAW(r6, 0x5407, 0x0) write(r6, &(0x7f0000000180)="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", 0x5ff) mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000fff000/0x1000)=nil) close_range(r3, 0xffffffffffffffff, 0x0) 131.116448ms ago: executing program 4 (id=7915): syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)=0x0) sched_setscheduler(r1, 0x6, &(0x7f0000000100)) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xa, 0x10, &(0x7f0000000880)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000001000000850000007800000095", @ANYRES8=r1, @ANYBLOB="ca680c07227b9c9ce84d69d50c24b95c534100e78d61d88a61ef488e34648ffe4d3cbe9c99fa61dbb07728f916986145df69e0262f291e8fb0f459ab27697189c53398ac323651d27c539dbc5edc3fa3c081a1c4d25975c2d8ec6145d15a4fc8de46de1ee1f0124e91f0f91f97cebb1b3b2616ac6c43ac9afbc76de8285c5b91ca33ad5321213ca56649bbe9e2a4f673d1830c8126bb8cedcced1aca136adc5df30842f7e805e7674aaa1bc0e69700da1da3749dfbbdd5700dbe467bacff69d894d275063ba609816fbeeaa4bd3235721230bf45d9"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffbff}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) keyctl$negate(0xd, 0x0, 0xfffffffffffffffe, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000700)=@abs={0x0, 0x0, 0x10010}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000480)={0x0, 0x2, [0x1f0, 0x300, 0xb16, 0x146]}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) socket$kcm(0x10, 0x2, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 0s ago: executing program 1 (id=7916): r0 = syz_open_dev$video(&(0x7f0000000100), 0x3, 0x2000) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) prctl$PR_SET_KEEPCAPS(0x59616d61, 0x1ffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) write$dsp(r4, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb", 0x1b) sendmsg$nl_xfrm(r1, 0x0, 0x2000c0d5) syz_emit_ethernet(0x5a, &(0x7f00000002c0)={@local, @broadcast, @void, {@ipv4={0x800, @tipc={{0x8, 0x4, 0x0, 0x3c, 0x4c, 0x67, 0x0, 0x3, 0x6, 0x0, @rand_addr=0x64010100, @local, {[@ssrr={0x89, 0x7, 0x1e, [@multicast1]}, @lsrr={0x83, 0x3, 0x93}]}}, @payload_mcast={{{{{{0x2c, 0x0, 0x0, 0x0, 0x0, 0xb, 0x1, 0x2, 0x5, 0x0, 0x1, 0x1, 0x0, 0x1, 0x800, 0x1, 0x1, 0x4e21, 0x4e22}, 0x1}, 0x3}, 0x1}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_ringparam={0x10, 0x7f, 0x20000a30, 0x0, 0x0, 0x4, 0x7, 0x0, 0x6}}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0x158, 0x18, 0x1, 0x70bd2d, 0x100, {{@in=@multicast2, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x71c, 0x4e23, 0x40}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x3, 0x9ba3, 0xfffe, 0x8251c, 0x5, 0xfffffffffffffffc}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x0, 0x20}, [@algo_comp={0x68, 0x3, {{'deflate\x00'}, 0x100, "258ecb40d7cc532c8c294bdccd86f4d1c0203e02cd23ed409efbb1b92523d85f"}}]}, 0x158}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000380)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e0000001"], 0x40}}, 0x0) sendmsg$key(r7, &(0x7f0000000000)={0x0, 0x3, 0x0}, 0x4010) ioctl$VIDIOC_S_FMT(r0, 0xc0cc5605, 0x0) r8 = socket(0x11, 0x2, 0x0) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x0, 0x18c, 0x203, 0x0, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x320, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x0, 0x0, 0x8, 0x2000000}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x8}, {}, {0x0, 0x0, 0x0, 0xe}, {0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x3}, {0x2, 0x0, 0x4}, {}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0x0, 0x8}, {}, {0x16}, {0x0, 0xff}, {}, {0x7}, {0x0, 0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0x101}, {}, {0x0, 0x0, 0x5}, {}, {0x0, 0x0, 0x0, 0x9}, {0xfffc, 0x0, 0x0, 0x10}, {}, {0xfffe}, {}, {}, {}, {0xfffe, 0xfb}, {}, {0x7a04}, {}, {}, {0x20, 0x6}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb8c, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {0x3}, {}, {}, {}, {}, {0x4}, {}, {}, {}, {}, {0x0, 0xfd}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffd}, {}, {0x0, 0xb}, {0x4, 0x2}]}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x2, 'syz0\x00', {0x8001}}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xb}}, @inet=@rpfilter={{0x28}, {0xd}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xd, 0x0, 0x20040001, 0x0, 0x5, 0x0, 0x0, 0x100000}}) setsockopt$RXRPC_SECURITY_KEY(r8, 0x110, 0x1, &(0x7f0000000140)=']\x91%.\x00', 0x5) kernel console output (not intermixed with test programs): after parsing attributes in process `syz.1.6742'. [ 1726.983488][T22936] Bluetooth: hci3: command 0x1003 tx timeout [ 1726.991111][ T5774] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1727.078308][T28298] kAFS: No cell specified [ 1731.627310][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 1733.349852][T28361] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1733.349852][T28361] program syz.5.6755 not setting count and/or reply_len properly [ 1734.463892][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d066c00: rx timeout, send abort [ 1734.679300][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1734.686081][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1734.964024][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7ec400: rx timeout, send abort [ 1734.972994][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d066c00: abort rx timeout. Force session deactivation [ 1735.472345][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d7ec400: abort rx timeout. Force session deactivation [ 1738.901634][T28380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1738.911367][T28380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1738.921064][T28380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1738.930490][T28380] netlink: 140 bytes leftover after parsing attributes in process `syz.4.6759'. [ 1739.442122][ T786] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1739.857397][T28427] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1739.857397][T28427] program syz.5.6769 not setting count and/or reply_len properly [ 1740.542258][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 1740.550222][ T786] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1740.568196][ T786] usb 3-1: config 0 has no interface number 0 [ 1740.594363][ T786] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1740.624336][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1740.643630][ T786] usb 3-1: Product: syz [ 1740.647931][ T786] usb 3-1: Manufacturer: syz [ 1740.673695][ T786] usb 3-1: SerialNumber: syz [ 1740.713571][ T786] usb 3-1: config 0 descriptor?? [ 1740.742760][ T786] smsc95xx v2.0.0 [ 1742.564223][ T786] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 1742.703407][ T786] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1742.724175][ T786] usb 3-1: USB disconnect, device number 15 [ 1745.396984][T28218] usb 5-1: new high-speed USB device number 115 using dummy_hcd [ 1745.608826][T28491] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6781'. [ 1745.620274][T28218] usb 5-1: Using ep0 maxpacket: 32 [ 1745.664789][T28218] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1745.716496][T28218] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1745.755741][T28218] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1745.846018][T28218] usb 5-1: Product: syz [ 1745.911064][T28218] usb 5-1: Manufacturer: syz [ 1745.922080][T28218] usb 5-1: SerialNumber: syz [ 1745.937505][T28218] usb 5-1: config 0 descriptor?? [ 1745.983711][T28474] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1746.003750][T28218] hub 5-1:0.0: bad descriptor, ignoring hub [ 1746.013515][T28218] hub: probe of 5-1:0.0 failed with error -5 [ 1746.855598][T28474] usb 5-1: reset high-speed USB device number 115 using dummy_hcd [ 1747.142059][ T786] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1747.262546][T28474] usb 5-1: device firmware changed [ 1747.372071][ T786] usb 3-1: Using ep0 maxpacket: 32 [ 1747.446266][ T27] usb 5-1: USB disconnect, device number 115 [ 1747.479888][ T786] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 1747.502056][ T786] usb 3-1: config 0 has no interface number 0 [ 1747.515065][ T786] usb 3-1: config 0 interface 184 has no altsetting 0 [ 1747.534626][ T786] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1747.546453][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1747.568100][ T786] usb 3-1: Product: syz [ 1747.586809][ T786] usb 3-1: Manufacturer: syz [ 1747.591465][ T786] usb 3-1: SerialNumber: syz [ 1747.602121][ T27] usb 5-1: new high-speed USB device number 116 using dummy_hcd [ 1747.615629][ T786] usb 3-1: config 0 descriptor?? [ 1747.630520][ T786] smsc75xx v1.0.0 [ 1747.802049][ T27] usb 5-1: Using ep0 maxpacket: 32 [ 1747.814557][ T27] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1747.853533][ T27] usb 5-1: string descriptor 0 read error: -22 [ 1747.862242][ T27] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1747.882146][ T27] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1747.903090][ T27] usb 5-1: config 0 descriptor?? [ 1747.908937][T28506] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1747.928259][ T27] hub 5-1:0.0: bad descriptor, ignoring hub [ 1747.942171][ T27] hub: probe of 5-1:0.0 failed with error -5 [ 1748.246380][ T9398] usb 5-1: USB disconnect, device number 116 [ 1749.912092][ T2130] usb 5-1: new high-speed USB device number 117 using dummy_hcd [ 1749.941351][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1749.972347][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1750.123967][ T2130] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 1750.162134][ T2130] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBA, skipping [ 1750.212122][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1750.229072][ T2130] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 1750.231977][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1750.259203][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1750.272181][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1750.279598][ T2130] usb 5-1: Product: syz [ 1750.291558][ T2130] usb 5-1: Manufacturer: syz [ 1750.292405][ T786] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1750.303060][ T2130] usb 5-1: SerialNumber: syz [ 1750.341637][ T2130] usb 5-1: config 0 descriptor?? [ 1750.353325][ T786] smsc75xx: probe of 3-1:0.184 failed with error -71 [ 1750.373246][T28535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1750.380621][T28535] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1750.391203][ T786] usb 3-1: USB disconnect, device number 16 [ 1750.449447][ T2130] usb 5-1: ucan: probing device on interface #0 [ 1750.482323][ T2130] usb 5-1: ucan: invalid EP count (1) [ 1750.529904][ T2130] usb 5-1: ucan: probe failed; try to update the device firmware [ 1751.802785][ T9398] usb 5-1: USB disconnect, device number 117 [ 1752.396124][T28591] netlink: 96 bytes leftover after parsing attributes in process `syz.1.6792'. [ 1752.635831][T28596] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 1752.642372][T28596] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 1752.648941][T28596] comedi comedi3: 8255: I/O port conflict (0xffffffffffffffff,4) [ 1752.657854][T28596] comedi comedi3: 8255: I/O port conflict (0x5c952399,4) [ 1752.664996][T28596] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1752.671459][T28596] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 1752.678139][T28596] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 1752.685129][T28596] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 1753.613342][T28602] bridge0: port 3(syz_tun) entered blocking state [ 1753.642078][T28602] bridge0: port 3(syz_tun) entered disabled state [ 1753.652665][T28602] syz_tun: entered allmulticast mode [ 1753.684341][T28602] syz_tun: entered promiscuous mode [ 1753.701055][T28602] bridge0: port 3(syz_tun) entered blocking state [ 1753.707630][T28602] bridge0: port 3(syz_tun) entered forwarding state [ 1753.980570][T22936] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1755.269069][T28630] xt_recent: Unsupported userspace flags (000000de) [ 1757.973425][T28653] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6807'. [ 1758.667797][T28667] trusted_key: encrypted_key: key user:syz not found [ 1759.587782][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026861400: rx timeout, send abort [ 1759.620539][T28680] netlink: 'syz.1.6818': attribute type 10 has an invalid length. [ 1759.632396][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1759.644227][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1759.653499][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1759.663242][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1759.672362][T28680] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6818'. [ 1759.699222][T28682] bridge0: port 3(syz_tun) entered blocking state [ 1759.737230][T28682] bridge0: port 3(syz_tun) entered disabled state [ 1759.754377][T28682] syz_tun: entered allmulticast mode [ 1759.781794][T28682] syz_tun: entered promiscuous mode [ 1759.797729][T28682] bridge0: port 3(syz_tun) entered blocking state [ 1759.804386][T28682] bridge0: port 3(syz_tun) entered forwarding state [ 1760.087828][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026863000: rx timeout, send abort [ 1760.102927][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026861400: abort rx timeout. Force session deactivation [ 1760.596120][ C0] vcan0: j1939_tp_rxtimer: 0xffff888026863000: abort rx timeout. Force session deactivation [ 1760.852589][ T28] audit: type=1326 audit(6062915446.573:638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28698 comm="syz.2.6826" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9916f9c629 code=0x0 [ 1760.999867][T28707] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1761.921582][T28723] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1762.145535][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020ebd000: rx timeout, send abort [ 1762.355257][T17968] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 1762.552065][T17968] usb 6-1: Using ep0 maxpacket: 32 [ 1762.559118][T17968] usb 6-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1762.569512][T17968] usb 6-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1762.585216][T17968] usb 6-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1762.601592][T17968] usb 6-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1762.610741][T17968] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1762.618795][T17968] usb 6-1: Product: syz [ 1762.623043][T17968] usb 6-1: Manufacturer: syz [ 1762.627727][T17968] usb 6-1: SerialNumber: syz [ 1762.639184][T17968] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1762.645333][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020ebe800: rx timeout, send abort [ 1762.646959][T17968] imon 6-1:155.0: unable to initialize intf0, err -19 [ 1762.655184][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020ebd000: abort rx timeout. Force session deactivation [ 1762.661750][T17968] imon:imon_probe: failed to initialize context! [ 1762.685320][T17968] imon 6-1:155.0: unable to register, err -19 [ 1763.155020][ C1] vcan0: j1939_tp_rxtimer: 0xffff888020ebe800: abort rx timeout. Force session deactivation [ 1763.620362][T28739] bridge: RTM_NEWNEIGH with unconfigured vlan 2 on bridge_slave_0 [ 1763.707930][T28743] bridge0: port 3(syz_tun) entered blocking state [ 1763.717389][T28743] bridge0: port 3(syz_tun) entered disabled state [ 1763.727786][T28743] syz_tun: entered allmulticast mode [ 1763.738690][T28743] syz_tun: entered promiscuous mode [ 1763.744853][T28743] bridge0: port 3(syz_tun) entered blocking state [ 1763.751443][T28743] bridge0: port 3(syz_tun) entered forwarding state [ 1764.678164][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf0b000: rx timeout, send abort [ 1765.178235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf0b400: rx timeout, send abort [ 1765.186762][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf0b000: abort rx timeout. Force session deactivation [ 1765.686594][ C1] vcan0: j1939_tp_rxtimer: 0xffff88801cf0b400: abort rx timeout. Force session deactivation [ 1765.758053][ T28] audit: type=1326 audit(6062915451.483:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28765 comm="syz.2.6846" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9916f9c629 code=0x0 [ 1766.894203][ T2130] usb 6-1: USB disconnect, device number 9 [ 1767.454126][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dda8000: rx timeout, send abort [ 1767.954240][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dda9400: rx timeout, send abort [ 1767.962688][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dda8000: abort rx timeout. Force session deactivation [ 1768.462545][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802dda9400: abort rx timeout. Force session deactivation [ 1769.268002][T28832] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1769.268002][T28832] program syz.5.6869 not setting count and/or reply_len properly [ 1769.475936][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eba2400: rx timeout, send abort [ 1769.976077][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eba1c00: rx timeout, send abort [ 1769.992012][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eba2400: abort rx timeout. Force session deactivation [ 1770.484387][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807eba1c00: abort rx timeout. Force session deactivation [ 1770.562078][T17968] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 1771.123267][T17968] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1771.152027][T17968] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 1771.186029][T17968] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1771.217364][T17968] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 1771.269312][T17968] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 1771.299989][T17968] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1771.331089][T17968] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1771.368530][T17968] usb 6-1: Product: syz [ 1771.375831][T17968] usb 6-1: Manufacturer: syz [ 1771.400204][T17968] cdc_wdm 6-1:1.0: skipping garbage [ 1771.412823][T17968] cdc_wdm 6-1:1.0: skipping garbage [ 1771.428730][T17968] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 1771.437130][T17968] cdc_wdm 6-1:1.0: Unknown control protocol [ 1771.830507][T17968] usb 6-1: USB disconnect, device number 10 [ 1771.877152][T28862] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1771.877152][T28862] program syz.4.6882 not setting count and/or reply_len properly [ 1772.131660][T28870] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6881'. [ 1773.810091][T28218] kernel write not supported for file /vcs1 (pid: 28218 comm: kworker/1:4) [ 1774.503366][ T27] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1774.592052][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da07400: rx timeout, send abort [ 1775.092084][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da04800: rx timeout, send abort [ 1775.100296][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da07400: abort rx timeout. Force session deactivation [ 1775.332452][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 1775.360687][ T27] usb 3-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1775.395645][ T27] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1775.452748][ T27] usb 3-1: config 0 descriptor?? [ 1775.600301][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da04800: abort rx timeout. Force session deactivation [ 1776.361968][T28906] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1777.919442][T28917] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 1778.075874][ T27] usbhid 3-1:0.0: can't add hid device: -71 [ 1778.266743][ T27] usbhid: probe of 3-1:0.0 failed with error -71 [ 1778.634841][ T27] usb 3-1: USB disconnect, device number 17 [ 1780.318743][T28934] binder: 28933:28934 ioctl 4018620d 0 returned -22 [ 1782.595143][T22936] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 1782.611736][T28971] binder: BINDER_SET_CONTEXT_MGR already set [ 1782.669495][T28971] binder: 28969:28971 ioctl 4018620d 200000000040 returned -16 [ 1783.601432][T22936] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 1783.612709][T22936] Bluetooth: hci2: Injecting HCI hardware error event [ 1783.625188][ T5774] Bluetooth: hci2: hardware error 0x00 [ 1784.801252][T28999] binder: BINDER_SET_CONTEXT_MGR already set [ 1784.819673][T28999] binder: 28998:28999 ioctl 4018620d 200000000040 returned -16 [ 1785.232617][T29005] block device autoloading is deprecated and will be removed. [ 1785.246573][T29005] syz.1.6929: attempt to access beyond end of device [ 1785.246573][T29005] loop3: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1785.259535][T29005] F2FS-fs (loop3): Unable to read 1th superblock [ 1785.266833][T29005] syz.1.6929: attempt to access beyond end of device [ 1785.266833][T29005] loop3: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1785.279755][T29005] F2FS-fs (loop3): Unable to read 2th superblock [ 1785.946626][ T5774] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1787.105689][ T5811] usb 5-1: new high-speed USB device number 118 using dummy_hcd [ 1787.326935][ T5811] usb 5-1: config 0 has an invalid interface number: 80 but max is 0 [ 1787.355779][ T5811] usb 5-1: config 0 has no interface number 0 [ 1787.374234][ T5811] usb 5-1: too many endpoints for config 0 interface 80 altsetting 25: 34, using maximum allowed: 30 [ 1787.421100][ T5811] usb 5-1: config 0 interface 80 altsetting 25 has 0 endpoint descriptors, different from the interface descriptor's value: 34 [ 1787.450583][ T5811] usb 5-1: config 0 interface 80 has no altsetting 0 [ 1787.470226][ T5811] usb 5-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd [ 1787.498532][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1787.526994][ T5811] usb 5-1: Product: syz [ 1787.550873][ T5811] usb 5-1: Manufacturer: syz [ 1787.556554][ T5811] usb 5-1: SerialNumber: syz [ 1787.581710][ T5811] usb 5-1: config 0 descriptor?? [ 1789.154412][T29037] binder: BINDER_SET_CONTEXT_MGR already set [ 1789.160462][T29037] binder: 29036:29037 ioctl 4018620d 200000000040 returned -16 [ 1789.668212][T29041] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1789.668212][T29041] program syz.2.6940 not setting count and/or reply_len properly [ 1789.928048][ T5811] usb 5-1: USB disconnect, device number 118 [ 1792.542625][T29058] 9pnet_fd: Insufficient options for proto=fd [ 1794.659285][ T2130] IPVS: starting estimator thread 0... [ 1794.668453][T29090] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1794.676052][ C1] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1794.689247][T29090] IPVS: wrr: FWM 3 0x00000003 - no destination available [ 1794.772568][T29091] IPVS: using max 18 ests per chain, 43200 per kthread [ 1796.153844][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1796.160176][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1796.352435][ T2130] usb 5-1: new high-speed USB device number 119 using dummy_hcd [ 1796.563730][ T2130] usb 5-1: config 1 interface 1 altsetting 1 has an invalid endpoint with address 0x0, skipping [ 1796.607587][ T2130] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1796.608973][T29100] 9pnet_fd: Insufficient options for proto=fd [ 1796.632676][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1796.672099][ T2130] usb 5-1: Product: syz [ 1796.698588][ T2130] usb 5-1: Manufacturer: syz [ 1796.703858][ T2130] usb 5-1: SerialNumber: syz [ 1797.882110][ T2130] cdc_ncm 5-1:1.0: bind() failure [ 1797.926184][ T2130] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1797.933327][ T2130] cdc_ncm 5-1:1.1: bind() failure [ 1798.277231][ T9398] usb 5-1: USB disconnect, device number 119 [ 1798.469673][T29117] netlink: 'syz.2.6963': attribute type 30 has an invalid length. [ 1798.527048][T29117] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.536519][T29117] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.545433][T29117] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.554235][T29117] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.625330][T29117] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.634943][T29117] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.644109][T29117] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.653079][T29117] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1798.820796][T29123] netlink: 'syz.2.6963': attribute type 30 has an invalid length. [ 1798.865168][T29123] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.874025][T29123] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.882858][T29123] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1798.891561][T29123] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1799.027640][T29123] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.036906][T29123] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.046406][T29123] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.055416][T29123] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 1799.180375][T29126] netlink: 'syz.4.6965': attribute type 1 has an invalid length. [ 1799.338662][T29128] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1799.448268][T29128] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1799.534353][T29131] netlink: 24 bytes leftover after parsing attributes in process `syz.4.6965'. [ 1799.593228][T29131] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1799.743139][T29126] bond1: (slave gretap1): making interface the new active one [ 1799.751404][T29126] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1799.989702][T29137] macvlan2: entered promiscuous mode [ 1799.996366][T29137] macvlan2: entered allmulticast mode [ 1802.488218][T29161] 9pnet_fd: Insufficient options for proto=fd [ 1802.912111][ T2130] usb 5-1: new high-speed USB device number 120 using dummy_hcd [ 1803.152778][ T2130] usb 5-1: Using ep0 maxpacket: 16 [ 1803.194136][ T2130] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1803.222301][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1803.313617][ T2130] usb 5-1: config 0 descriptor?? [ 1803.844288][T29178] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1804.512146][T29177] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6978'. [ 1804.811508][T29177] nbd: socks must be embedded in a SOCK_ITEM attr [ 1805.658011][ T2130] usbhid 5-1:0.0: can't add hid device: -71 [ 1805.679189][ T2130] usbhid: probe of 5-1:0.0 failed with error -71 [ 1805.752819][ T2130] usb 5-1: USB disconnect, device number 120 [ 1805.757900][T29167] udevd[29167]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 1807.380745][ T42] batman_adv: batadv2: adding TT local entry 33:33:00:00:00:01 to non-existent VLAN -1 [ 1807.746333][T29218] netlink: 96 bytes leftover after parsing attributes in process `syz.2.6988'. [ 1808.822475][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 1809.029437][T29231] block device autoloading is deprecated and will be removed. [ 1809.039950][T29231] syz.4.6992: attempt to access beyond end of device [ 1809.039950][T29231] loop9: rw=0, sector=0, nr_sectors = 8 limit=0 [ 1809.053559][T29231] F2FS-fs (loop9): Unable to read 1th superblock [ 1809.060229][T29231] syz.4.6992: attempt to access beyond end of device [ 1809.060229][T29231] loop9: rw=0, sector=8, nr_sectors = 8 limit=0 [ 1809.073661][T29231] F2FS-fs (loop9): Unable to read 2th superblock [ 1812.795462][T29252] 9pnet_fd: Insufficient options for proto=fd [ 1814.100645][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 1815.488685][ T786] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 1816.304889][ T786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1816.379669][ T786] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1816.403952][ T786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1816.417412][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1816.443542][ T786] usb 6-1: Product: syz [ 1816.457402][ T786] usb 6-1: Manufacturer: syz [ 1816.469582][ T786] usb 6-1: SerialNumber: syz [ 1818.568837][ T786] cdc_ncm 6-1:1.0: bind() failure [ 1818.602261][ T786] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1818.632419][ T786] cdc_ncm 6-1:1.1: bind() failure [ 1818.695156][ T5811] usb 6-1: USB disconnect, device number 11 [ 1818.740698][T29291] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7012'. [ 1821.638372][T29305] netlink: 'syz.2.7016': attribute type 1 has an invalid length. [ 1822.049235][T29310] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1822.106814][T29310] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1822.162496][T29305] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7016'. [ 1822.187827][T29305] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1822.402278][T29311] bond1: (slave gretap1): making interface the new active one [ 1822.420811][T29311] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1822.458448][T29305] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7016'. [ 1824.217877][T29305] macvlan2: entered promiscuous mode [ 1824.249939][T29305] macvlan2: entered allmulticast mode [ 1825.612247][ T2130] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 1826.182301][ T2130] usb 6-1: Using ep0 maxpacket: 16 [ 1826.191434][ T2130] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1826.204027][ T2130] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1826.222762][ T2130] usb 6-1: config 0 descriptor?? [ 1827.426587][T29361] netlink: 'syz.1.7031': attribute type 1 has an invalid length. [ 1829.303452][ T2130] usbhid 6-1:0.0: can't add hid device: -71 [ 1829.310074][ T2130] usbhid: probe of 6-1:0.0 failed with error -71 [ 1829.320769][ T2130] usb 6-1: USB disconnect, device number 12 [ 1829.378747][T29366] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1829.401088][T29366] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1829.430070][T29368] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1829.446821][T29368] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1829.479188][T29361] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7031'. [ 1829.501872][T29361] macvlan2: entered promiscuous mode [ 1829.510457][T29361] macvlan2: entered allmulticast mode [ 1832.456573][T22936] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1832.477934][T22936] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1832.487567][T22936] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1832.573914][T20387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.669530][T22936] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1832.682947][T22936] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1832.694829][T22936] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1832.712131][T27301] usb 5-1: new high-speed USB device number 121 using dummy_hcd [ 1832.767903][T29392] netlink: 96 bytes leftover after parsing attributes in process `syz.2.7033'. [ 1832.839500][T20387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.934569][T20387] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 1832.949263][T20387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1832.974970][T27301] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1832.999905][T27301] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1833.066228][T27301] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1833.076892][T20387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1833.080582][T27301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1833.098551][T27301] usb 5-1: Product: syz [ 1833.102873][T27301] usb 5-1: Manufacturer: syz [ 1833.107633][T27301] usb 5-1: SerialNumber: syz [ 1833.329266][T29388] chnl_net:caif_netlink_parms(): no params data found [ 1833.588311][T29388] bridge0: port 1(bridge_slave_0) entered blocking state [ 1833.595951][T29388] bridge0: port 1(bridge_slave_0) entered disabled state [ 1833.603425][T29388] bridge_slave_0: entered allmulticast mode [ 1833.642084][T29388] bridge_slave_0: entered promiscuous mode [ 1833.713944][T29388] bridge0: port 2(bridge_slave_1) entered blocking state [ 1833.724726][T29388] bridge0: port 2(bridge_slave_1) entered disabled state [ 1833.744151][T29388] bridge_slave_1: entered allmulticast mode [ 1833.755310][T29388] bridge_slave_1: entered promiscuous mode [ 1833.827731][T20387] tipc: Left network mode [ 1834.044249][T29388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1834.152435][T27301] cdc_ncm 5-1:1.0: bind() failure [ 1834.160282][T27301] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1834.182311][T27301] cdc_ncm 5-1:1.1: bind() failure [ 1834.241146][T29388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1834.946525][T29418] ptrace attach of "./syz-executor exec"[29417] was attempted by "./syz-executor exec"[29418] [ 1835.579843][ T5774] Bluetooth: hci0: command tx timeout [ 1835.737164][T27301] usb 5-1: USB disconnect, device number 121 [ 1835.818272][T29388] team0: Port device team_slave_0 added [ 1835.835609][T29388] team0: Port device team_slave_1 added [ 1835.973701][T29423] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7048'. [ 1836.189146][T29388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1836.255308][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.315596][T29388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1836.338224][T29388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1836.348975][T29388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1836.453568][T29388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1836.620106][T29438] netlink: 'syz.4.7046': attribute type 1 has an invalid length. [ 1836.749281][T29439] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1836.760989][T29439] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1838.020459][ T5774] Bluetooth: hci0: command tx timeout [ 1838.321167][T29441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7046'. [ 1838.337058][T29441] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1838.383361][T29443] macvlan3: entered promiscuous mode [ 1838.388767][T29443] macvlan3: entered allmulticast mode [ 1838.428683][T29388] hsr_slave_0: entered promiscuous mode [ 1838.445851][T29388] hsr_slave_1: entered promiscuous mode [ 1838.690197][T20387] bond2: (slave gretap1): Releasing active interface [ 1839.012040][ T786] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 1839.240775][ T786] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1839.271083][ T786] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0 [ 1839.306929][ T786] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1839.331018][ T786] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1839.355947][T20387] hsr_slave_0: left promiscuous mode [ 1839.357374][ T786] usb 6-1: Product: syz [ 1839.366652][T20387] hsr_slave_1: left promiscuous mode [ 1839.380916][ T786] usb 6-1: Manufacturer: syz [ 1839.403017][ T786] usb 6-1: SerialNumber: syz [ 1839.431426][T20387] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1839.446611][T20387] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1839.471689][T20387] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1839.491116][T20387] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1839.502118][T20387] bridge_slave_1: left allmulticast mode [ 1839.507814][T20387] bridge_slave_1: left promiscuous mode [ 1839.542463][T20387] bridge0: port 2(bridge_slave_1) entered disabled state [ 1839.552678][T27301] kernel write not supported for file /dsp1 (pid: 27301 comm: kworker/0:0) [ 1839.581220][T20387] bridge_slave_0: left allmulticast mode [ 1839.610726][T20387] bridge_slave_0: left promiscuous mode [ 1839.621427][T20387] bridge0: port 1(bridge_slave_0) entered disabled state [ 1839.743025][T20387] veth1_macvtap: left promiscuous mode [ 1839.755425][T20387] veth0_macvtap: left promiscuous mode [ 1839.763901][T20387] veth1_vlan: left promiscuous mode [ 1839.769273][T20387] veth0_vlan: left promiscuous mode [ 1840.155586][ T5774] Bluetooth: hci0: command tx timeout [ 1840.968966][ T786] cdc_ncm 6-1:1.0: bind() failure [ 1840.977995][ T786] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1840.985446][ T786] cdc_ncm 6-1:1.1: bind() failure [ 1840.995378][ T786] usb 6-1: USB disconnect, device number 13 [ 1841.023771][T20387] bond3 (unregistering): Released all slaves [ 1841.226511][T20387] bond2 (unregistering): Released all slaves [ 1842.210274][ T5774] Bluetooth: hci0: command tx timeout [ 1842.443345][T20387] bond1 (unregistering): Released all slaves [ 1843.157330][T29497] netlink: 96 bytes leftover after parsing attributes in process `syz.5.7057'. [ 1845.007166][T20387] team0 (unregistering): Port device team_slave_1 removed [ 1845.121462][T20387] team0 (unregistering): Port device team_slave_0 removed [ 1845.234948][T20387] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1845.298117][T20387] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1846.257449][T20387] bond0 (unregistering): (slave team0): Releasing backup interface [ 1846.348788][T20387] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 1846.360024][T20387] bond0 (unregistering): Released all slaves [ 1846.740461][T29484] netlink: 'syz.4.7056': attribute type 1 has an invalid length. [ 1846.768184][T29484] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 1846.830563][T29489] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7056'. [ 1847.292052][T28218] usb 5-1: new high-speed USB device number 122 using dummy_hcd [ 1847.494054][T28218] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1847.509286][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1847.551573][T28218] usb 5-1: Product: syz [ 1847.571881][T28218] usb 5-1: Manufacturer: syz [ 1847.602118][T28218] usb 5-1: SerialNumber: syz [ 1848.268028][T28218] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1848.283243][T28218] cdc_ncm 5-1:1.0: bind() failure [ 1848.311161][T28218] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1848.353992][T28218] cdc_ncm 5-1:1.1: bind() failure [ 1848.557204][ T9396] kernel write not supported for file /dsp1 (pid: 9396 comm: kworker/0:6) [ 1848.638970][T29388] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1848.663879][T29388] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1848.737532][T29388] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1848.867859][T29388] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1849.048761][T20387] IPVS: stop unused estimator thread 0... [ 1849.490707][T29388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1849.711668][T29388] 8021q: adding VLAN 0 to HW filter on device team0 [ 1849.828340][T20249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1849.835491][T20249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1849.907173][T29560] netlink: 'syz.5.7069': attribute type 1 has an invalid length. [ 1849.978231][T29563] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1850.020084][T29563] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1850.070214][ T786] usb 5-1: USB disconnect, device number 122 [ 1850.187653][T29567] macvlan2: entered promiscuous mode [ 1850.203652][T29567] macvlan2: entered allmulticast mode [ 1850.214185][ T2983] bridge0: port 2(bridge_slave_1) entered blocking state [ 1850.221375][ T2983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1850.419384][T29560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7069'. [ 1851.259935][T29560] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1851.335324][T29565] bond1: (slave gretap1): making interface the new active one [ 1851.370959][T29565] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1851.580259][T29388] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1851.639438][T29388] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1854.143185][T29388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1854.319223][T29388] veth0_vlan: entered promiscuous mode [ 1854.443319][T29388] veth1_vlan: entered promiscuous mode [ 1854.714802][ T27] kernel write not supported for file /dsp1 (pid: 27 comm: kworker/1:1) [ 1854.790535][T29388] veth0_macvtap: entered promiscuous mode [ 1854.911308][T29388] veth1_macvtap: entered promiscuous mode [ 1855.027066][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.072551][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.252682][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.322246][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.386554][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1855.515864][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.585523][T29388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1855.652177][T28218] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1855.714847][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.736664][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.750976][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.770342][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.787656][T29388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1855.821110][T29388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1855.845185][T29388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1855.923701][T28218] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1855.962345][T28218] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1855.984576][T28218] usb 3-1: Product: syz [ 1855.997660][T28218] usb 3-1: Manufacturer: syz [ 1856.028437][T28218] usb 3-1: SerialNumber: syz [ 1856.032568][T29388] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.042153][T29388] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.050878][T29388] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.119847][T29388] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1856.979750][T20420] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.072238][T20420] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.157089][T28218] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1857.184322][T28218] cdc_ncm 3-1:1.0: bind() failure [ 1857.205160][ T2983] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1857.212696][T28218] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1857.259690][T28218] cdc_ncm 3-1:1.1: bind() failure [ 1857.265679][ T2983] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1857.430511][T29635] netlink: 'syz.5.7080': attribute type 1 has an invalid length. [ 1857.555719][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1857.562408][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1857.609973][T29637] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1857.671090][T29637] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1857.771292][T29639] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7080'. [ 1857.793324][T29639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1857.828495][T29644] macvlan3: entered promiscuous mode [ 1857.847959][T29644] macvlan3: entered allmulticast mode [ 1857.866267][T29648] binder: 29647:29648 ioctl c0306201 0 returned -14 [ 1858.973794][ T5811] usb 3-1: USB disconnect, device number 18 [ 1861.884097][T29674] netlink: 'syz.4.7092': attribute type 1 has an invalid length. [ 1862.069572][T29676] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1862.148991][T29676] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1862.245632][T29677] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7092'. [ 1862.286852][T29677] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1862.319799][T29681] macvlan4: entered promiscuous mode [ 1862.352129][T29681] macvlan4: entered allmulticast mode [ 1862.439762][T29684] binder: 29683:29684 ioctl c0306201 0 returned -14 [ 1863.832480][ T786] usb 2-1: new high-speed USB device number 127 using dummy_hcd [ 1863.882047][T27301] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 1863.891670][T29699] 9pnet_fd: Insufficient options for proto=fd [ 1864.036091][ T786] usb 2-1: Using ep0 maxpacket: 16 [ 1864.056167][ T786] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1864.074703][ T786] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1864.087443][ T786] usb 2-1: config 0 descriptor?? [ 1864.098229][T27301] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1864.112456][T27301] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1864.120812][T27301] usb 6-1: Product: syz [ 1864.132372][T27301] usb 6-1: Manufacturer: syz [ 1864.137112][T27301] usb 6-1: SerialNumber: syz [ 1865.816889][T29711] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1866.814323][T27301] cdc_ncm 6-1:1.0: failed GET_NTB_PARAMETERS [ 1866.833142][T27301] cdc_ncm 6-1:1.0: bind() failure [ 1866.865392][T27301] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1866.882157][T27301] cdc_ncm 6-1:1.1: bind() failure [ 1867.193293][ T786] usbhid 2-1:0.0: can't add hid device: -71 [ 1867.212814][ T786] usbhid: probe of 2-1:0.0 failed with error -71 [ 1867.223205][ T786] usb 2-1: USB disconnect, device number 127 [ 1867.566396][T29720] binder: 29719:29720 ioctl c0306201 0 returned -14 [ 1867.895266][ T786] usb 6-1: USB disconnect, device number 14 [ 1867.985248][T29726] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1867.994254][T29726] team0: Port device batadv1 added [ 1868.034863][T29726] hub 9-0:1.0: USB hub found [ 1868.039837][T29726] hub 9-0:1.0: 1 port detected [ 1871.594059][T29755] netlink: 'syz.1.7112': attribute type 1 has an invalid length. [ 1871.684285][T29760] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1871.792066][T27301] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1871.811574][T29755] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7112'. [ 1872.832316][T27301] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1872.862063][T27301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1872.892222][T27301] usb 3-1: Product: syz [ 1872.913084][T27301] usb 3-1: Manufacturer: syz [ 1872.917725][T27301] usb 3-1: SerialNumber: syz [ 1875.553860][T27301] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS [ 1875.572189][T27301] cdc_ncm 3-1:1.0: bind() failure [ 1875.619088][T27301] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 1875.648442][T27301] cdc_ncm 3-1:1.1: bind() failure [ 1875.671880][T29784] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1875.680508][T27301] usb 3-1: USB disconnect, device number 19 [ 1875.715142][T29784] team0: Port device batadv1 added [ 1875.989653][T29781] hub 9-0:1.0: USB hub found [ 1876.013517][T29781] hub 9-0:1.0: 1 port detected [ 1878.791564][T29808] netlink: 'syz.4.7127': attribute type 1 has an invalid length. [ 1878.907100][T29808] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1879.874692][T29808] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1880.010105][T29810] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7127'. [ 1880.020871][T29810] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1880.034616][T29819] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7127'. [ 1882.317652][ T9398] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 1882.756658][ T9398] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1882.878264][ T9398] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1882.909780][ T9398] usb 6-1: Product: syz [ 1882.930013][ T9398] usb 6-1: Manufacturer: syz [ 1882.940153][ T9398] usb 6-1: SerialNumber: syz [ 1883.088025][T29838] fuse: Bad value for 'fd' [ 1883.107450][ T9398] cdc_ncm 6-1:1.0: bind() failure [ 1883.126058][ T9398] cdc_ncm 6-1:1.1: CDC Union missing and no IAD found [ 1883.162273][ T9398] cdc_ncm 6-1:1.1: bind() failure [ 1884.080729][T29850] netlink: 'syz.4.7143': attribute type 1 has an invalid length. [ 1884.309228][T29852] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1884.403491][T29852] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1884.535037][T29853] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1884.579842][T29853] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1884.610533][T29856] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7143'. [ 1884.775908][ T9398] usb 6-1: USB disconnect, device number 15 [ 1886.214546][T29869] Bluetooth: hci3: Frame reassembly failed (-90) [ 1886.642312][ T5811] usb 5-1: new high-speed USB device number 123 using dummy_hcd [ 1886.670356][T29876] block device autoloading is deprecated and will be removed. [ 1886.856008][ T5811] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1886.922178][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1886.941722][ T5811] usb 5-1: Product: syz [ 1886.972103][ T5811] usb 5-1: Manufacturer: syz [ 1886.994128][ T5811] usb 5-1: SerialNumber: syz [ 1888.383894][T22936] Bluetooth: hci3: command 0x1003 tx timeout [ 1888.425499][ T5774] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1888.658459][ T5811] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 1888.727714][ T5811] cdc_ncm 5-1:1.0: bind() failure [ 1888.753663][ T5811] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 1888.775275][ T5811] cdc_ncm 5-1:1.1: bind() failure [ 1889.442427][T29893] netlink: 'syz.2.7154': attribute type 1 has an invalid length. [ 1889.707489][T29896] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1889.734028][ T5811] usb 5-1: USB disconnect, device number 123 [ 1889.832361][T29896] bond2: (slave vxcan3): Error -95 calling set_mac_address [ 1889.920456][T29899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1891.312007][ T5774] Bluetooth: hci0: command tx timeout [ 1891.332292][T29899] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1891.393085][T29901] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1892.181810][T29918] block device autoloading is deprecated and will be removed. [ 1892.419922][T29921] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1892.419922][T29921] program syz.5.7160 not setting count and/or reply_len properly [ 1896.611102][T29943] netlink: 'syz.1.7170': attribute type 1 has an invalid length. [ 1896.982676][ T5774] Bluetooth: hci3: command 0x1003 tx timeout [ 1896.991586][T27100] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1897.186094][T29948] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1897.273704][T29948] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1897.420696][T29949] netlink: 24 bytes leftover after parsing attributes in process `syz.1.7170'. [ 1897.457407][T29949] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1899.457517][T29958] kAFS: No cell specified [ 1899.557485][T29943] bond1: (slave gretap1): making interface the new active one [ 1899.623632][T29943] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 1899.632673][T29950] netlink: 44 bytes leftover after parsing attributes in process `syz.1.7170'. [ 1899.863570][T27100] Bluetooth: hci4: command 0x0406 tx timeout [ 1900.122072][ T786] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 1901.820576][ T786] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1901.872518][ T786] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1901.927530][ T786] usb 3-1: Product: syz [ 1901.951151][ T786] usb 3-1: Manufacturer: syz [ 1901.988463][ T786] usb 3-1: SerialNumber: syz [ 1902.142033][ T9396] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 1902.450052][ T9396] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1902.531184][ T9396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1902.621993][ T9396] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1902.631889][ T9396] usb 6-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00 [ 1902.743500][ T9396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1902.826154][ T9396] usb 6-1: config 0 descriptor?? [ 1903.073052][ T786] cdc_ncm 3-1:1.0: failed to get mac address [ 1903.124388][ T786] cdc_ncm 3-1:1.0: bind() failure [ 1903.192468][ T786] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1903.252096][ T786] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1903.302093][ T786] usbtest: probe of 3-1:1.1 failed with error -71 [ 1903.401176][ T786] usb 3-1: USB disconnect, device number 20 [ 1903.562506][T29977] binder: 29976:29977 ioctl c0306201 0 returned -14 [ 1903.792417][T29979] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1903.792417][T29979] program syz.1.7177 not setting count and/or reply_len properly [ 1903.862272][ T9396] usb 6-1: can't set config #0, error -71 [ 1903.924163][ T9396] usb 6-1: USB disconnect, device number 16 [ 1905.610256][T29994] netlink: 'syz.4.7182': attribute type 1 has an invalid length. [ 1905.737594][T29996] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1906.369159][T27100] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1906.846348][T29996] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1906.902135][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 1906.992807][T29994] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1907.043248][T30004] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7182'. [ 1907.054958][T30008] binder: 30006:30008 ioctl c0306201 0 returned -14 [ 1908.392076][ T9396] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 1909.245104][ T9396] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1909.262029][ T9396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1909.343166][ T9396] usb 6-1: Product: syz [ 1909.377990][ T9396] usb 6-1: Manufacturer: syz [ 1909.398340][ T9396] usb 6-1: SerialNumber: syz [ 1910.614358][ T9396] cdc_ncm 6-1:1.0: failed to get mac address [ 1910.752117][T27100] Bluetooth: hci1: command 0x0406 tx timeout [ 1910.752150][ T9396] cdc_ncm 6-1:1.0: bind() failure [ 1911.317824][ T9396] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 1911.382509][ T9396] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 1911.422351][ T9396] usbtest: probe of 6-1:1.1 failed with error -71 [ 1911.529783][ T9396] usb 6-1: USB disconnect, device number 17 [ 1911.819216][T30041] binder: 30040:30041 ioctl c0306201 0 returned -14 [ 1912.066971][T30045] netlink: 'syz.4.7198': attribute type 1 has an invalid length. [ 1912.135005][T30048] Bluetooth: MGMT ver 1.22 [ 1912.231468][T30049] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1912.353251][T30049] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 1912.437163][T30045] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1912.487803][T30045] 8021q: adding VLAN 0 to HW filter on device bond7 [ 1912.517289][T30049] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7198'. [ 1913.552317][T28218] usb 5-1: new high-speed USB device number 124 using dummy_hcd [ 1913.702199][ T5774] Bluetooth: hci3: command 0x1003 tx timeout [ 1913.709714][T27100] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1913.736671][ T2130] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1913.874092][T28218] usb 5-1: Using ep0 maxpacket: 32 [ 1913.914034][T28218] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1913.923536][T28218] usb 5-1: config 0 has no interface number 0 [ 1914.039815][ T2130] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1914.049584][ T2130] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.062264][ T2130] usb 3-1: Product: syz [ 1914.066574][ T2130] usb 3-1: Manufacturer: syz [ 1914.071592][ T2130] usb 3-1: SerialNumber: syz [ 1914.189269][T28218] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1914.198619][T28218] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1914.248847][T28218] usb 5-1: Product: syz [ 1914.272950][T28218] usb 5-1: Manufacturer: syz [ 1914.277735][T28218] usb 5-1: SerialNumber: syz [ 1914.390990][T28218] usb 5-1: config 0 descriptor?? [ 1914.492937][T28218] smsc95xx v2.0.0 [ 1915.314229][T30071] loop1: detected capacity change from 0 to 32768 [ 1915.323615][ T2130] cdc_ncm 3-1:1.0: failed to get mac address [ 1915.381630][ T2130] cdc_ncm 3-1:1.0: bind() failure [ 1915.418073][T30071] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 scanned by syz.1.7205 (30071) [ 1915.439143][ T2130] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1915.447960][ T2130] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1915.508807][ T2130] usbtest: probe of 3-1:1.1 failed with error -71 [ 1915.549772][T30071] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1915.590573][ T2130] usb 3-1: USB disconnect, device number 21 [ 1915.622198][T30071] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 1915.660675][T30071] BTRFS info (device loop1): using free space tree [ 1915.930185][T30071] BTRFS info (device loop1): enabling ssd optimizations [ 1915.980339][T30071] BTRFS info (device loop1): auto enabling async discard [ 1916.286119][T28218] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1916.331795][T30101] netlink: 'syz.2.7210': attribute type 1 has an invalid length. [ 1916.357203][T28218] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1916.370243][T28218] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1916.391798][T28218] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 1916.458230][T28218] usb 5-1: USB disconnect, device number 124 [ 1916.501673][T30102] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1918.096282][T30102] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1918.976230][T30101] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1918.999009][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1919.007215][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1919.178724][T30101] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1919.527919][T30111] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7210'. [ 1919.649135][T29388] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1920.142139][ T9396] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 1920.532364][ T9396] usb 6-1: Using ep0 maxpacket: 32 [ 1920.662298][ T5774] Bluetooth: hci4: command 0x0406 tx timeout [ 1921.083515][ T9396] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 1921.091706][ T9396] usb 6-1: config 0 has no interface number 0 [ 1921.182514][T28218] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1921.249010][ T9396] usb 6-1: config 0 interface 184 has no altsetting 0 [ 1921.312144][ T9396] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 1921.397295][T28218] usb 3-1: Using ep0 maxpacket: 32 [ 1921.415323][T28218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1921.448481][ T9396] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.483486][ T5811] usb 5-1: new high-speed USB device number 125 using dummy_hcd [ 1921.498529][T28218] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1921.517855][ T9396] usb 6-1: Product: syz [ 1921.548314][T28218] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1921.552021][ T9396] usb 6-1: Manufacturer: syz [ 1921.571549][T28218] usb 3-1: Product: syz [ 1921.611086][T28218] usb 3-1: Manufacturer: syz [ 1921.616086][ T9396] usb 6-1: SerialNumber: syz [ 1921.625337][ T9396] usb 6-1: config 0 descriptor?? [ 1921.641579][ T2952] Bluetooth: hci3: Frame reassembly failed (-84) [ 1921.687304][ T9396] smsc75xx v1.0.0 [ 1921.693645][T28218] usb 3-1: SerialNumber: syz [ 1921.724408][T28218] usb 3-1: config 0 descriptor?? [ 1921.778743][ T5811] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1921.799384][T30133] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1921.802539][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1921.854731][T28218] hub 3-1:0.0: bad descriptor, ignoring hub [ 1921.881618][ T5811] usb 5-1: Product: syz [ 1921.900041][T28218] hub: probe of 3-1:0.0 failed with error -5 [ 1921.916108][ T5811] usb 5-1: Manufacturer: syz [ 1921.920840][ T5811] usb 5-1: SerialNumber: syz [ 1922.722193][T30133] usb 3-1: reset high-speed USB device number 22 using dummy_hcd [ 1922.756133][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 1922.792499][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1922.938261][T30133] usb 3-1: device firmware changed [ 1922.962859][T28218] usb 3-1: USB disconnect, device number 22 [ 1923.053490][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 1923.057956][ T5811] cdc_ncm 5-1:1.0: failed to get mac address [ 1923.102681][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 1923.109090][ T5811] cdc_ncm 5-1:1.0: bind() failure [ 1923.142030][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 1923.142138][ T5811] cdc_ncm: probe of 5-1:1.1 failed with error -71 [ 1923.190983][ T9396] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 1923.203462][T28218] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1923.233599][ T5811] cdc_mbim: probe of 5-1:1.1 failed with error -71 [ 1923.238249][ T9396] smsc75xx: probe of 6-1:0.184 failed with error -71 [ 1923.241291][ T5811] usbtest: probe of 5-1:1.1 failed with error -71 [ 1923.287868][ T5811] usb 5-1: USB disconnect, device number 125 [ 1923.323002][ T9396] usb 6-1: USB disconnect, device number 18 [ 1923.412463][T28218] usb 3-1: Using ep0 maxpacket: 32 [ 1923.424912][T28218] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 1923.438625][T28218] usb 3-1: string descriptor 0 read error: -22 [ 1923.445183][T28218] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 1923.472295][T28218] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 1923.495229][T28218] usb 3-1: config 0 descriptor?? [ 1923.517276][T30141] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1923.566855][T28218] hub 3-1:0.0: bad descriptor, ignoring hub [ 1923.585610][T28218] hub: probe of 3-1:0.0 failed with error -5 [ 1923.702193][T27100] Bluetooth: hci3: command 0x1003 tx timeout [ 1923.712176][ T5774] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1923.742338][T28218] usb 3-1: USB disconnect, device number 23 [ 1924.787957][T30152] netlink: 'syz.5.7223': attribute type 1 has an invalid length. [ 1924.979955][T30152] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1925.077224][T30152] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 1925.203830][T30156] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1925.376458][T30156] 8021q: adding VLAN 0 to HW filter on device bond3 [ 1925.430874][T30152] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7223'. [ 1927.432170][ T2130] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 1927.502021][ T5811] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1927.742270][ T2130] usb 6-1: Using ep0 maxpacket: 32 [ 1927.761399][ T2130] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1927.772272][ T2130] usb 6-1: config 0 has no interface number 0 [ 1928.522273][ T2130] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1928.532081][ T2130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.540328][ T2130] usb 6-1: Product: syz [ 1928.544638][ T2130] usb 6-1: Manufacturer: syz [ 1928.552061][ T2130] usb 6-1: SerialNumber: syz [ 1928.559720][ T5811] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1928.589988][ T2130] usb 6-1: config 0 descriptor?? [ 1928.612088][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1928.625841][ T5811] usb 3-1: Product: syz [ 1928.631395][ T2130] smsc95xx v2.0.0 [ 1928.637989][ T5811] usb 3-1: Manufacturer: syz [ 1928.652010][ T5811] usb 3-1: SerialNumber: syz [ 1929.382178][ T5774] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1929.382221][T30184] Bluetooth: hci3: command 0x1003 tx timeout [ 1929.723488][ T5811] cdc_ncm 3-1:1.0: failed to get mac address [ 1929.756464][ T5811] cdc_ncm 3-1:1.0: bind() failure [ 1929.828633][ T5811] cdc_ncm: probe of 3-1:1.1 failed with error -71 [ 1929.862077][ T5774] Bluetooth: hci0: command tx timeout [ 1929.865950][ T5811] cdc_mbim: probe of 3-1:1.1 failed with error -71 [ 1929.886498][T30193] netlink: 'syz.4.7236': attribute type 1 has an invalid length. [ 1929.934513][ T5811] usbtest: probe of 3-1:1.1 failed with error -71 [ 1930.006044][ T5811] usb 3-1: USB disconnect, device number 24 [ 1930.075173][T30194] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1930.128281][T30194] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 1930.206082][T30193] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1930.221092][T30193] 8021q: adding VLAN 0 to HW filter on device bond8 [ 1930.236137][T30198] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1930.265976][T30198] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7236'. [ 1930.406904][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1930.452468][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1930.472494][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1930.492191][ T2130] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1930.522387][ T2130] usb 6-1: USB disconnect, device number 19 [ 1930.569576][T29619] udevd[29619]: setting mode of /dev/bus/usb/006/019 to 020664 failed: No such file or directory [ 1930.614344][T29619] udevd[29619]: setting owner of /dev/bus/usb/006/019 to uid=0, gid=0 failed: No such file or directory [ 1930.882887][T27100] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1932.233697][T30220] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1932.233697][T30220] program syz.2.7240 not setting count and/or reply_len properly [ 1932.841344][T30231] netlink: 'syz.2.7246': attribute type 1 has an invalid length. [ 1932.930745][T30233] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1933.081281][T30233] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1933.161529][T30231] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1933.934006][T30231] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1933.945787][T30233] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1933.955480][T30233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7246'. [ 1933.972073][ T5850] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 1934.101786][ T2952] Bluetooth: hci5: Frame reassembly failed (-84) [ 1934.185302][ T5850] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1934.194983][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1934.203400][ T5850] usb 2-1: Product: syz [ 1934.207731][ T5850] usb 2-1: Manufacturer: syz [ 1934.218365][ T5850] usb 2-1: SerialNumber: syz [ 1934.342730][T22936] Bluetooth: hci0: command tx timeout [ 1934.662145][ T5774] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1934.662370][T22936] Bluetooth: hci3: command 0x1003 tx timeout [ 1936.370869][T27100] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1936.475675][ T5850] cdc_ncm 2-1:1.0: bind() failure [ 1936.502962][ T5850] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found [ 1936.518801][ T5850] cdc_ncm 2-1:1.1: bind() failure [ 1936.560441][ T5850] usb 2-1: USB disconnect, device number 2 [ 1938.361158][T30271] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1938.361158][T30271] program syz.4.7256 not setting count and/or reply_len properly [ 1938.520571][T30277] netlink: 'syz.2.7258': attribute type 1 has an invalid length. [ 1938.720168][T30279] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1938.770679][T30279] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1938.804931][T30280] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1940.130146][T30280] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1940.192464][T30277] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1940.219716][T30277] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7258'. [ 1943.230895][T27100] Bluetooth: hci3: command 0x1003 tx timeout [ 1943.239279][T30249] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1943.803756][T30319] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1943.803756][T30319] program syz.5.7267 not setting count and/or reply_len properly [ 1944.451316][T30323] netlink: 'syz.2.7271': attribute type 1 has an invalid length. [ 1944.530444][T30328] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1944.568907][T30328] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 1944.702166][T30323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7271'. [ 1945.136258][T28848] Bluetooth: hci3: Frame reassembly failed (-84) [ 1945.866326][T30359] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1945.866326][T30359] program syz.5.7281 not setting count and/or reply_len properly [ 1946.545892][T30361] netlink: 'syz.5.7283': attribute type 1 has an invalid length. [ 1946.630126][T30365] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1946.653553][T30365] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 1946.689083][T30361] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7283'. [ 1946.702764][T30361] 8021q: adding VLAN 0 to HW filter on device bond4 [ 1946.712802][T30361] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7283'. [ 1947.142239][T30249] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1947.143557][T27100] Bluetooth: hci3: command 0x1003 tx timeout [ 1947.662227][ T5850] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 1947.925611][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 1947.979539][ T5850] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1948.026514][ T5850] usb 6-1: config 0 has no interface number 0 [ 1948.139118][ T5850] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1948.150374][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1948.159969][ T5850] usb 6-1: Product: syz [ 1948.173107][ T5850] usb 6-1: Manufacturer: syz [ 1948.190198][ T5850] usb 6-1: SerialNumber: syz [ 1948.233674][ T5850] usb 6-1: config 0 descriptor?? [ 1948.273161][ T5850] smsc95xx v2.0.0 [ 1948.367763][T30395] netlink: 'syz.4.7295': attribute type 1 has an invalid length. [ 1948.450312][T30398] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1948.484474][T30398] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 1950.669110][T30395] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7295'. [ 1950.741096][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 1950.763254][T30395] 8021q: adding VLAN 0 to HW filter on device bond9 [ 1951.994344][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1952.012462][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1952.023572][ T5850] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 1952.043942][ T5850] usb 6-1: USB disconnect, device number 20 [ 1954.732286][T30249] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1956.236360][T30449] netlink: 'syz.4.7311': attribute type 1 has an invalid length. [ 1956.351031][T30451] bond10: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1956.411151][T30451] bond10: (slave vxcan3): Error -95 calling set_mac_address [ 1956.482990][T30449] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7311'. [ 1956.520054][T30449] 8021q: adding VLAN 0 to HW filter on device bond10 [ 1956.540743][T30451] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7311'. [ 1957.992163][ T5811] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1958.202425][ T5811] usb 2-1: Using ep0 maxpacket: 32 [ 1958.215084][ T5811] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 1958.238454][ T5811] usb 2-1: config 0 has no interface number 0 [ 1958.254621][ T5811] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1958.279103][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1959.440781][ T5811] usb 2-1: Product: syz [ 1959.451012][ T5811] usb 2-1: Manufacturer: syz [ 1959.501016][ T5811] usb 2-1: SerialNumber: syz [ 1959.516530][ T5811] usb 2-1: config 0 descriptor?? [ 1959.525133][ T5811] smsc95xx v2.0.0 [ 1959.599360][T30476] fuse: Bad value for 'fd' [ 1959.780187][T30480] netlink: 'syz.5.7321': attribute type 1 has an invalid length. [ 1959.883329][T30480] bond5: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1959.927209][T30480] bond5: (slave vxcan3): Error -95 calling set_mac_address [ 1960.006381][T30485] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7321'. [ 1960.038085][T30485] 8021q: adding VLAN 0 to HW filter on device bond5 [ 1960.058047][T30480] netlink: 16 bytes leftover after parsing attributes in process `syz.5.7321'. [ 1960.371165][T30494] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1960.371165][T30494] program syz.4.7322 not setting count and/or reply_len properly [ 1960.857381][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 1960.900577][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 1960.935727][ T5811] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1960.976091][ T5811] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 1961.022572][ T5811] usb 2-1: USB disconnect, device number 3 [ 1962.228633][T30249] Bluetooth: hci3: command 0x1003 tx timeout [ 1962.232435][T30184] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1962.386274][T30505] 9pnet_fd: Insufficient options for proto=fd [ 1962.534834][T30507] fuse: Bad value for 'fd' [ 1963.273613][T30516] netlink: 'syz.4.7331': attribute type 1 has an invalid length. [ 1963.357897][T30516] bond11: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1963.377406][T30516] bond11: (slave vxcan3): Error -95 calling set_mac_address [ 1964.169219][T30521] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1964.189938][T30522] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7331'. [ 1964.227853][T30522] 8021q: adding VLAN 0 to HW filter on device bond11 [ 1964.622050][ T9398] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1964.842396][ T9398] usb 3-1: Using ep0 maxpacket: 32 [ 1964.888002][ T9398] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1964.911792][ T9398] usb 3-1: config 0 has no interface number 0 [ 1965.050939][ T9398] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1965.060794][ T9398] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1965.070480][ T9398] usb 3-1: Product: syz [ 1965.074841][ T9398] usb 3-1: Manufacturer: syz [ 1965.079459][ T9398] usb 3-1: SerialNumber: syz [ 1965.092829][ T9398] usb 3-1: config 0 descriptor?? [ 1965.115324][ T9398] smsc95xx v2.0.0 [ 1966.244322][T30549] 9pnet_fd: Insufficient options for proto=fd [ 1967.371529][T30561] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1967.371529][T30561] program syz.5.7338 not setting count and/or reply_len properly [ 1967.440653][ T9398] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 1967.463155][ T9398] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 1967.473030][ T9398] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 1967.484249][ T9398] smsc95xx: probe of 3-1:0.67 failed with error -71 [ 1967.510127][ T9398] usb 3-1: USB disconnect, device number 25 [ 1971.557214][T30592] Bluetooth: hci0: unsupported parameter 255 [ 1971.582760][T30592] Bluetooth: hci0: unsupported parameter 255 [ 1975.054564][T30630] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1975.054564][T30630] program syz.1.7355 not setting count and/or reply_len properly [ 1975.444440][T30635] Bluetooth: hci0: unsupported parameter 255 [ 1975.460835][T30635] Bluetooth: hci0: unsupported parameter 255 [ 1976.141616][T30645] netlink: 'syz.4.7369': attribute type 3 has an invalid length. [ 1976.159639][T30645] netlink: 'syz.4.7369': attribute type 10 has an invalid length. [ 1976.188250][T30645] 8021q: adding VLAN 0 to HW filter on device team0 [ 1976.200060][T30645] bond0: (slave team0): Enslaving as an active interface with an up link [ 1977.544932][T30659] Bluetooth: hci0: unsupported parameter 255 [ 1977.551018][T30659] Bluetooth: hci0: unsupported parameter 255 [ 1979.352777][T30685] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1979.352777][T30685] program syz.1.7378 not setting count and/or reply_len properly [ 1980.493098][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 1980.500352][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 1984.104921][T30747] netlink: 'syz.2.7395': attribute type 3 has an invalid length. [ 1984.129845][T30747] netlink: 'syz.2.7395': attribute type 10 has an invalid length. [ 1984.151736][T30747] 8021q: adding VLAN 0 to HW filter on device team0 [ 1984.625041][T30747] bond0: (slave team0): Enslaving as an active interface with an up link [ 1985.813466][T30778] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1985.813466][T30778] program syz.2.7402 not setting count and/or reply_len properly [ 1986.592069][ T2130] usb 5-1: new high-speed USB device number 126 using dummy_hcd [ 1986.757003][T30798] netlink: 'syz.5.7411': attribute type 3 has an invalid length. [ 1986.779554][T30798] netlink: 'syz.5.7411': attribute type 10 has an invalid length. [ 1986.837387][T30798] 8021q: adding VLAN 0 to HW filter on device team0 [ 1986.862966][ T2130] usb 5-1: Using ep0 maxpacket: 16 [ 1986.886918][ T2130] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1986.908336][T30798] bond0: (slave team0): Enslaving as an active interface with an up link [ 1986.921893][ T2130] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1986.961249][ T2130] usb 5-1: config 0 descriptor?? [ 1987.817591][T30804] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1989.425400][ T2130] usbhid 5-1:0.0: can't add hid device: -71 [ 1989.472159][ T2130] usbhid: probe of 5-1:0.0 failed with error -71 [ 1989.514502][ T2130] usb 5-1: USB disconnect, device number 126 [ 1990.606103][T30838] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1990.606103][T30838] program syz.4.7416 not setting count and/or reply_len properly [ 1992.712188][ T9396] usb 5-1: new high-speed USB device number 127 using dummy_hcd [ 1992.912358][ T9396] usb 5-1: Using ep0 maxpacket: 16 [ 1992.942435][ T9396] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 1992.954221][ T9396] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1992.966675][ T9396] usb 5-1: config 0 descriptor?? [ 1993.443860][T30883] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 1994.151810][T30884] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1994.151810][T30884] program syz.5.7436 not setting count and/or reply_len properly [ 1995.230961][ T9396] usbhid 5-1:0.0: can't add hid device: -71 [ 1995.237255][ T9396] usbhid: probe of 5-1:0.0 failed with error -71 [ 1995.523910][ T9396] usb 5-1: USB disconnect, device number 127 [ 1998.322506][ T5811] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 1998.532262][ T5811] usb 5-1: Using ep0 maxpacket: 32 [ 1998.610474][ T5811] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1998.618931][ T5811] usb 5-1: config 0 has no interface number 0 [ 1998.633912][ T5811] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1998.645118][ T5811] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1998.671184][ T5811] usb 5-1: Product: syz [ 1998.696329][ T5811] usb 5-1: Manufacturer: syz [ 1998.712442][ T5811] usb 5-1: SerialNumber: syz [ 1998.729106][ T5811] usb 5-1: config 0 descriptor?? [ 1998.758743][ T5811] smsc95xx v2.0.0 [ 1999.297167][T30932] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 1999.297167][T30932] program syz.1.7454 not setting count and/or reply_len properly [ 2000.056525][T30942] netlink: 'syz.2.7456': attribute type 3 has an invalid length. [ 2000.082910][T30942] netlink: 'syz.2.7456': attribute type 10 has an invalid length. [ 2000.274231][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2000.340617][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2000.372441][ T5811] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2000.402171][ T5811] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 2000.422114][ T5811] usb 5-1: USB disconnect, device number 2 [ 2002.945918][T30978] netlink: 'syz.2.7466': attribute type 3 has an invalid length. [ 2002.979621][T30980] netlink: 'syz.4.7467': attribute type 1 has an invalid length. [ 2003.035492][T30978] netlink: 'syz.2.7466': attribute type 10 has an invalid length. [ 2003.230311][T30982] bond12: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2003.243480][T30982] bond12: (slave vxcan3): Error -95 calling set_mac_address [ 2003.291064][T30980] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7467'. [ 2003.319485][T30980] 8021q: adding VLAN 0 to HW filter on device bond12 [ 2003.406952][T30988] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2003.406952][T30988] program syz.5.7468 not setting count and/or reply_len properly [ 2003.500899][T30980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7467'. [ 2005.682981][T31017] netlink: 'syz.5.7477': attribute type 3 has an invalid length. [ 2005.698830][T31017] netlink: 'syz.5.7477': attribute type 10 has an invalid length. [ 2006.433731][T31028] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7482'. [ 2006.895677][T31039] batadv_slave_1: entered promiscuous mode [ 2006.996657][T31047] netlink: 'syz.4.7487': attribute type 3 has an invalid length. [ 2007.065079][T31050] netlink: 'syz.4.7487': attribute type 10 has an invalid length. [ 2007.288208][T31031] batadv_slave_1: left promiscuous mode [ 2008.711622][T31075] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7496'. [ 2011.632121][T30184] Bluetooth: hci4: command 0x0406 tx timeout [ 2012.688506][T31116] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7509'. [ 2014.264171][T30184] Bluetooth: hci4: command 0x0406 tx timeout [ 2015.542791][T31149] netlink: 'syz.2.7520': attribute type 10 has an invalid length. [ 2015.853212][T31154] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7521'. [ 2017.782349][T30184] Bluetooth: hci0: command tx timeout [ 2018.699174][T31182] netlink: 'syz.4.7529': attribute type 10 has an invalid length. [ 2021.542202][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2022.794615][T31212] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7535'. [ 2023.296768][T31226] netlink: 'syz.1.7540': attribute type 10 has an invalid length. [ 2023.495432][T31226] 8021q: adding VLAN 0 to HW filter on device team0 [ 2023.520799][T31226] bond0: (slave team0): Enslaving as an active interface with an up link [ 2025.943836][T30184] Bluetooth: hci0: command tx timeout [ 2026.068551][T31247] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7548'. [ 2026.250135][T31259] netlink: 'syz.2.7551': attribute type 10 has an invalid length. [ 2027.963026][T31284] netlink: 'syz.4.7560': attribute type 10 has an invalid length. [ 2029.692439][ T5811] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 2029.952731][ T5811] usb 2-1: Using ep0 maxpacket: 16 [ 2029.983698][ T5811] usb 2-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2030.002024][ T5811] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2030.022985][ T5811] usb 2-1: config 0 descriptor?? [ 2031.170965][T31297] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 2032.102620][T31305] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 2032.460040][ T5811] usbhid 2-1:0.0: can't add hid device: -71 [ 2032.472476][ T5811] usbhid: probe of 2-1:0.0 failed with error -71 [ 2032.490060][ T5811] usb 2-1: USB disconnect, device number 4 [ 2033.162891][T31316] netlink: 'syz.1.7569': attribute type 10 has an invalid length. [ 2033.225400][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2033.251393][T31318] 9pnet_fd: Insufficient options for proto=fd [ 2035.736299][T31342] netlink: 'syz.4.7581': attribute type 10 has an invalid length. [ 2037.057580][ T5850] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 2037.072960][T30184] Bluetooth: hci0: command tx timeout [ 2037.252206][ T5850] usb 6-1: Using ep0 maxpacket: 16 [ 2037.283384][ T5850] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2037.345429][ T5850] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2037.374229][ T5850] usb 6-1: config 0 descriptor?? [ 2037.916810][T31354] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 2038.857838][T31360] 9pnet_fd: Insufficient options for proto=fd [ 2039.481475][T31370] netlink: 'syz.1.7590': attribute type 10 has an invalid length. [ 2039.643108][ T5850] usbhid 6-1:0.0: can't add hid device: -71 [ 2039.649188][ T5850] usbhid: probe of 6-1:0.0 failed with error -71 [ 2039.669808][ T5850] usb 6-1: USB disconnect, device number 21 [ 2041.073084][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2041.132478][T31378] netlink: 'syz.5.7592': attribute type 1 has an invalid length. [ 2041.363863][T31380] bond6: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2041.416538][T31380] bond6: (slave vxcan3): Error -95 calling set_mac_address [ 2041.543011][T31383] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7592'. [ 2041.590949][T31383] 8021q: adding VLAN 0 to HW filter on device bond6 [ 2041.868617][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2041.875352][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2042.077760][T31396] netlink: 'syz.4.7599': attribute type 10 has an invalid length. [ 2043.426913][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2044.263236][T31412] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7598'. [ 2044.836699][T31419] netlink: 'syz.2.7605': attribute type 1 has an invalid length. [ 2045.011806][T31421] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2045.053723][T31421] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 2045.129219][T31419] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7605'. [ 2045.193208][T31419] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2045.224759][T31426] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7605'. [ 2046.254767][T31435] netlink: 'syz.5.7609': attribute type 10 has an invalid length. [ 2046.342314][T30184] Bluetooth: hci4: command 0x0406 tx timeout [ 2048.882185][T31457] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7614'. [ 2049.741498][T31471] 9pnet_fd: Insufficient options for proto=fd [ 2049.858343][T31473] netlink: 'syz.5.7616': attribute type 1 has an invalid length. [ 2050.312480][T31478] bond7: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2050.363839][T31478] bond7: (slave vxcan3): Error -95 calling set_mac_address [ 2050.427934][T31473] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7616'. [ 2050.472578][T31473] 8021q: adding VLAN 0 to HW filter on device bond7 [ 2050.495125][T31483] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7616'. [ 2050.509104][T31485] netlink: 'syz.4.7620': attribute type 10 has an invalid length. [ 2053.209343][T31495] fuse: Unknown parameter 'grou00000000000000000000' [ 2053.566660][T31498] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7626'. [ 2056.368112][T31528] netlink: 'syz.4.7630': attribute type 1 has an invalid length. [ 2056.517482][T31530] bond13: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2056.566055][T31530] bond13: (slave vxcan3): Error -95 calling set_mac_address [ 2056.834153][T31528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7630'. [ 2056.862978][T31534] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2056.862978][T31534] program syz.2.7631 not setting count and/or reply_len properly [ 2057.077366][T31528] 8021q: adding VLAN 0 to HW filter on device bond13 [ 2057.106922][T31530] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7630'. [ 2059.695204][T31560] netlink: 'syz.5.7641': attribute type 1 has an invalid length. [ 2059.813764][T31562] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2059.853637][T31562] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 2059.920341][T31560] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7641'. [ 2059.968730][T31560] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2059.999909][T31560] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7641'. [ 2061.362251][T30249] Bluetooth: hci1: command 0x0406 tx timeout [ 2061.709299][T31575] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2061.709299][T31575] program syz.4.7644 not setting count and/or reply_len properly [ 2062.806955][T31579] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7645'. [ 2063.431152][T31586] 9pnet_fd: Insufficient options for proto=fd [ 2063.869135][T31595] netlink: 'syz.2.7650': attribute type 1 has an invalid length. [ 2065.166702][T31601] bond8: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2065.213368][T31601] bond8: (slave vxcan3): Error -95 calling set_mac_address [ 2065.259566][T31595] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7650'. [ 2065.282066][T31595] 8021q: adding VLAN 0 to HW filter on device bond8 [ 2065.491575][T31605] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7650'. [ 2065.538270][T31606] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2065.538270][T31606] program syz.5.7653 not setting count and/or reply_len properly [ 2066.477127][T31622] 9pnet_fd: Insufficient options for proto=fd [ 2068.593170][T30184] Bluetooth: hci0: command tx timeout [ 2070.455343][T31648] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2070.455343][T31648] program syz.1.7666 not setting count and/or reply_len properly [ 2074.177098][T31674] netlink: 'syz.4.7675': attribute type 1 has an invalid length. [ 2074.330947][T31678] bond14: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2074.383562][T31678] bond14: (slave vxcan3): Error -95 calling set_mac_address [ 2074.402526][T31679] netlink: 24 bytes leftover after parsing attributes in process `syz.4.7675'. [ 2074.413471][T31679] 8021q: adding VLAN 0 to HW filter on device bond14 [ 2074.427048][T31674] netlink: 44 bytes leftover after parsing attributes in process `syz.4.7675'. [ 2074.873314][T31686] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2074.873314][T31686] program syz.4.7678 not setting count and/or reply_len properly [ 2074.916279][T31688] netlink: 'syz.2.7672': attribute type 10 has an invalid length. [ 2076.478529][T30249] Bluetooth: hci4: command 0x0406 tx timeout [ 2078.074535][ T786] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 2078.292559][ T786] usb 5-1: Using ep0 maxpacket: 8 [ 2078.328556][ T786] usb 5-1: config 2 has an invalid interface number: 31 but max is 0 [ 2078.467971][ T786] usb 5-1: config 2 has no interface number 0 [ 2078.480796][ T786] usb 5-1: config 2 interface 31 has no altsetting 0 [ 2078.516047][ T786] usb 5-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f [ 2078.529548][ T786] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2078.533709][T31706] netlink: 'syz.5.7685': attribute type 1 has an invalid length. [ 2078.538267][ T786] usb 5-1: Product: syz [ 2078.579396][ T786] usb 5-1: Manufacturer: syz [ 2078.593576][T31706] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2078.598977][ T786] usb 5-1: SerialNumber: syz [ 2078.606272][T31706] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 2078.655236][T31708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.7685'. [ 2078.693286][T31708] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2078.723374][T31706] netlink: 44 bytes leftover after parsing attributes in process `syz.5.7685'. [ 2079.516978][ T786] ch9200: probe of 5-1:2.31 failed with error -22 [ 2079.528883][ T786] usb 5-1: USB disconnect, device number 3 [ 2079.627789][T31726] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2079.627789][T31726] program syz.1.7689 not setting count and/or reply_len properly [ 2082.602736][T31744] netlink: 'syz.2.7694': attribute type 1 has an invalid length. [ 2082.792513][T31745] bond9: (slave vxcan3): The slave device specified does not support setting the MAC address [ 2082.836627][T31745] bond9: (slave vxcan3): Error -95 calling set_mac_address [ 2082.897510][T31747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7694'. [ 2082.941408][T31747] 8021q: adding VLAN 0 to HW filter on device bond9 [ 2082.987221][T31745] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7694'. [ 2083.062113][T30249] Bluetooth: hci0: command tx timeout [ 2083.628359][ T2983] Bluetooth: hci3: Frame reassembly failed (-84) [ 2085.622415][T30249] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2085.782514][ T5811] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 2085.972082][ T5811] usb 6-1: Using ep0 maxpacket: 16 [ 2085.979908][ T5811] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2086.042232][ T5811] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2086.086376][ T5811] usb 6-1: config 0 descriptor?? [ 2088.228473][ T5811] usbhid 6-1:0.0: can't add hid device: -71 [ 2088.237416][ T5811] usbhid: probe of 6-1:0.0 failed with error -71 [ 2088.275053][ T5811] usb 6-1: USB disconnect, device number 22 [ 2088.428761][T31805] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 2089.652106][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2090.502211][T30249] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2092.242105][T31836] syz.4.7722: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 2092.261159][T31836] CPU: 1 PID: 31836 Comm: syz.4.7722 Not tainted syzkaller #0 [ 2092.268601][T31836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2092.278646][T31836] Call Trace: [ 2092.281913][T31836] [ 2092.284842][T31836] dump_stack_lvl+0x18c/0x250 [ 2092.289529][T31836] ? show_regs_print_info+0x20/0x20 [ 2092.294713][T31836] ? load_image+0x400/0x400 [ 2092.299199][T31836] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 2092.305604][T31836] ? cpuset_print_current_mems_allowed+0x2e7/0x360 [ 2092.312100][T31836] warn_alloc+0x246/0x340 [ 2092.316458][T31836] ? zone_watermark_ok_safe+0x230/0x230 [ 2092.322019][T31836] ? _raw_spin_unlock+0x28/0x40 [ 2092.326858][T31836] ? netlink_rcv_skb+0x241/0x4d0 [ 2092.331785][T31836] __vmalloc_node_range+0x662/0x1330 [ 2092.337079][T31836] ? __asan_memset+0x22/0x40 [ 2092.341668][T31836] ? free_vm_area+0x50/0x50 [ 2092.346155][T31836] ? kvmalloc_node+0x70/0x180 [ 2092.350815][T31836] ? rcu_is_watching+0x15/0xb0 [ 2092.355604][T31836] ? kvmalloc_node+0x70/0x180 [ 2092.360262][T31836] ? trace_kmalloc+0x1f/0x90 [ 2092.364841][T31836] kvmalloc_node+0x13f/0x180 [ 2092.369421][T31836] ? hash_ipportnet6_resize+0x28f/0x1e50 [ 2092.375045][T31836] hash_ipportnet6_resize+0x28f/0x1e50 [ 2092.380534][T31836] ? lockdep_hardirqs_on+0x98/0x150 [ 2092.385733][T31836] call_ad+0x454/0xb40 [ 2092.389813][T31836] ? ip_set_ad+0x9c0/0x9c0 [ 2092.394219][T31836] ? __nla_parse+0x40/0x50 [ 2092.398627][T31836] ip_set_ad+0x81a/0x9c0 [ 2092.402854][T31836] ? ip_set_dump_done+0x1e0/0x1e0 [ 2092.407860][T31836] ? rcu_is_watching+0x15/0xb0 [ 2092.412630][T31836] nfnetlink_rcv_msg+0xbf0/0x12b0 [ 2092.417642][T31836] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2092.423699][T31836] ? nfnetlink_rcv_msg+0x22a/0x12b0 [ 2092.428954][T31836] ? nfnetlink_unbind+0x160/0x160 [ 2092.433977][T31836] ? __dev_queue_xmit+0x1ac2/0x36b0 [ 2092.439161][T31836] ? __netlink_deliver_tap+0x5ab/0x830 [ 2092.444633][T31836] ? netlink_deliver_tap+0x19c/0x1b0 [ 2092.449902][T31836] ? netlink_unicast+0x72c/0x8d0 [ 2092.454824][T31836] ? netlink_sendmsg+0x8d0/0xbf0 [ 2092.459758][T31836] ? ____sys_sendmsg+0x5ba/0x960 [ 2092.464857][T31836] ? ___sys_sendmsg+0x2a6/0x360 [ 2092.469683][T31836] ? __se_sys_sendmsg+0x1c2/0x2b0 [ 2092.474691][T31836] ? do_syscall_64+0x55/0xa0 [ 2092.479270][T31836] netlink_rcv_skb+0x241/0x4d0 [ 2092.484019][T31836] ? nfnetlink_unbind+0x160/0x160 [ 2092.489028][T31836] ? netlink_ack+0x1180/0x1180 [ 2092.493782][T31836] ? apparmor_capable+0x137/0x1a0 [ 2092.498790][T31836] ? bpf_lsm_capable+0x9/0x10 [ 2092.503449][T31836] ? security_capable+0x89/0xb0 [ 2092.508286][T31836] nfnetlink_rcv+0x2c9/0x24a0 [ 2092.512954][T31836] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2092.518315][T31836] ? lockdep_hardirqs_on+0x98/0x150 [ 2092.523501][T31836] ? __local_bh_enable_ip+0x13a/0x1c0 [ 2092.528857][T31836] ? _local_bh_enable+0xa0/0xa0 [ 2092.533691][T31836] ? __dev_queue_xmit+0x26b/0x36b0 [ 2092.538806][T31836] ? __dev_queue_xmit+0x26b/0x36b0 [ 2092.543900][T31836] ? __dev_queue_xmit+0x124f/0x36b0 [ 2092.549082][T31836] ? nfnetlink_net_exit_batch+0xa0/0xa0 [ 2092.554614][T31836] ? __dev_queue_xmit+0x26b/0x36b0 [ 2092.559718][T31836] ? ref_tracker_free+0x690/0x840 [ 2092.564729][T31836] ? refcount_inc+0x70/0x70 [ 2092.569216][T31836] ? __asan_memcpy+0x40/0x70 [ 2092.573812][T31836] ? __skb_clone+0x63/0x790 [ 2092.578299][T31836] ? __skb_clone+0x480/0x790 [ 2092.582878][T31836] ? __netlink_deliver_tap+0x7e8/0x830 [ 2092.588317][T31836] ? netlink_deliver_tap+0x2e/0x1b0 [ 2092.593500][T31836] ? __lock_acquire+0x7d40/0x7d40 [ 2092.598509][T31836] ? netlink_deliver_tap+0x2e/0x1b0 [ 2092.603703][T31836] netlink_unicast+0x751/0x8d0 [ 2092.608468][T31836] netlink_sendmsg+0x8d0/0xbf0 [ 2092.613224][T31836] ? netlink_getsockopt+0x590/0x590 [ 2092.618405][T31836] ? aa_sock_msg_perm+0x94/0x150 [ 2092.623340][T31836] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 2092.628625][T31836] ? security_socket_sendmsg+0x80/0xa0 [ 2092.634073][T31836] ? netlink_getsockopt+0x590/0x590 [ 2092.639266][T31836] ____sys_sendmsg+0x5ba/0x960 [ 2092.644148][T31836] ? __asan_memset+0x22/0x40 [ 2092.648750][T31836] ? __sys_sendmsg_sock+0x30/0x30 [ 2092.653822][T31836] ? __import_iovec+0x5f2/0x850 [ 2092.658756][T31836] ? import_iovec+0x73/0xa0 [ 2092.663268][T31836] ___sys_sendmsg+0x2a6/0x360 [ 2092.668018][T31836] ? __sys_sendmsg+0x2a0/0x2a0 [ 2092.672795][T31836] __se_sys_sendmsg+0x1c2/0x2b0 [ 2092.677629][T31836] ? __x64_sys_sendmsg+0x80/0x80 [ 2092.682641][T31836] ? lockdep_hardirqs_on+0x98/0x150 [ 2092.687823][T31836] do_syscall_64+0x55/0xa0 [ 2092.692226][T31836] ? clear_bhb_loop+0x40/0x90 [ 2092.696885][T31836] ? clear_bhb_loop+0x40/0x90 [ 2092.701545][T31836] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2092.707422][T31836] RIP: 0033:0x7f19e519c629 [ 2092.711830][T31836] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2092.731426][T31836] RSP: 002b:00007f19e6072028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2092.739829][T31836] RAX: ffffffffffffffda RBX: 00007f19e5415fa0 RCX: 00007f19e519c629 [ 2092.747783][T31836] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 2092.755741][T31836] RBP: 00007f19e5232b39 R08: 0000000000000000 R09: 0000000000000000 [ 2092.763694][T31836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2092.771654][T31836] R13: 00007f19e5416038 R14: 00007f19e5415fa0 R15: 00007ffe2536c0e8 [ 2092.779615][T31836] [ 2092.783512][T31836] Mem-Info: [ 2092.786620][T31836] active_anon:15892 inactive_anon:0 isolated_anon:0 [ 2092.786620][T31836] active_file:18509 inactive_file:40784 isolated_file:0 [ 2092.786620][T31836] unevictable:16414 dirty:60 writeback:0 [ 2092.786620][T31836] slab_reclaimable:8222 slab_unreclaimable:99038 [ 2092.786620][T31836] mapped:32467 shmem:9784 pagetables:737 [ 2092.786620][T31836] sec_pagetables:0 bounce:0 [ 2092.786620][T31836] kernel_misc_reclaimable:0 [ 2092.786620][T31836] free:1305897 free_pcp:11621 free_cma:0 [ 2092.832992][T31836] Node 0 active_anon:62032kB inactive_anon:0kB active_file:74036kB inactive_file:162928kB unevictable:65656kB isolated(anon):0kB isolated(file):0kB mapped:129868kB dirty:240kB writeback:0kB shmem:37600kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12744kB pagetables:2948kB sec_pagetables:0kB all_unreclaimable? no [ 2092.865546][T31836] Node 1 active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2092.895739][T31836] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2092.922848][T31836] lowmem_reserve[]: 0 2521 2522 2522 2522 [ 2092.928577][T31836] Node 0 DMA32 free:1318716kB boost:0kB min:34644kB low:43304kB high:51964kB reserved_highatomic:0KB active_anon:61992kB inactive_anon:0kB active_file:74036kB inactive_file:162112kB unevictable:65656kB writepending:240kB present:3129332kB managed:2586972kB mlocked:0kB bounce:0kB free_pcp:15512kB local_pcp:1852kB free_cma:0kB [ 2092.959788][T31836] lowmem_reserve[]: 0 0 0 0 0 [ 2092.964514][T31836] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2092.991205][T31836] lowmem_reserve[]: 0 0 0 0 0 [ 2092.995914][T31836] Node 1 Normal free:3889504kB boost:0kB min:55244kB low:69052kB high:82860kB reserved_highatomic:0KB active_anon:1536kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:0kB writepending:0kB present:4194304kB managed:4117312kB mlocked:0kB bounce:0kB free_pcp:30964kB local_pcp:17312kB free_cma:0kB [ 2093.025403][T31836] lowmem_reserve[]: 0 0 0 0 0 [ 2093.030097][T31836] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2093.043353][T31836] Node 0 DMA32: 13*4kB (UE) 471*8kB (ME) 847*16kB (ME) 961*32kB (UME) 323*64kB (UME) 195*128kB (UME) 109*256kB (UME) 70*512kB (UME) 20*1024kB (UME) 13*2048kB (UM) 272*4096kB (UM) = 1318716kB [ 2093.063842][T31836] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 2093.075677][T31836] Node 1 Normal: 310*4kB (U) 81*8kB (UME) 58*16kB (UME) 177*32kB (UME) 47*64kB (UE) 7*128kB (UME) 3*256kB (ME) 1*512kB (U) 1*1024kB (E) 2*2048kB (UE) 945*4096kB (M) = 3889504kB [ 2093.093324][T31836] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.102878][T31836] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2093.112164][T31836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2093.121686][T31836] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2093.130991][T31836] 85478 total pagecache pages [ 2093.136308][T31836] 0 pages in swap cache [ 2093.140447][T31836] Free swap = 124300kB [ 2093.144668][T31836] Total swap = 124996kB [ 2093.148800][T31836] 2097051 pages RAM [ 2093.152663][T31836] 0 pages HighMem/MovableOnly [ 2093.157320][T31836] 416922 pages reserved [ 2093.161448][T31836] 0 pages cma reserved [ 2093.612696][T28218] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 2094.532120][T28218] usb 5-1: Using ep0 maxpacket: 16 [ 2094.562508][T28218] usb 5-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2094.582284][T28218] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2094.617183][T28218] usb 5-1: config 0 descriptor?? [ 2095.061885][T31848] [ 2096.214102][T31859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7727'. [ 2096.259007][T20387] Bluetooth: hci3: Frame reassembly failed (-90) [ 2096.410726][T31672] udevd[31672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2096.444285][T31672] udevd[31672]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 2096.813858][T28218] usbhid 5-1:0.0: can't add hid device: -71 [ 2096.906860][T28218] usbhid: probe of 5-1:0.0 failed with error -71 [ 2096.933890][T28218] usb 5-1: USB disconnect, device number 4 [ 2098.265401][T30184] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 2098.272666][T30249] Bluetooth: hci3: command 0x1003 tx timeout [ 2098.918299][ T5811] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 2099.037667][T31892] netlink: 48 bytes leftover after parsing attributes in process `syz.5.7738'. [ 2099.048216][T28218] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 2099.172159][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 2099.683309][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2099.753126][ T5811] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2099.808331][ T5811] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 2099.836506][ T5811] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2099.862913][T28218] usb 2-1: too many configurations: 13, using maximum allowed: 8 [ 2099.885637][ T5811] usb 3-1: config 0 descriptor?? [ 2099.906309][T28218] usb 2-1: config 0 has no interfaces? [ 2099.913501][ T5811] hub 3-1:0.0: USB hub found [ 2099.956111][T28218] usb 2-1: config 0 has no interfaces? [ 2099.984125][T28218] usb 2-1: config 0 has no interfaces? [ 2099.990830][T28218] usb 2-1: config 0 has no interfaces? [ 2099.998964][T28218] usb 2-1: config 0 has no interfaces? [ 2100.013471][T28218] usb 2-1: config 0 has no interfaces? [ 2100.028888][T28218] usb 2-1: config 0 has no interfaces? [ 2100.043500][T28218] usb 2-1: config 0 has no interfaces? [ 2100.054128][T28218] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 2100.081288][T28218] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.092589][T28218] usb 2-1: Product: syz [ 2100.096827][T28218] usb 2-1: Manufacturer: syz [ 2100.102717][T28218] usb 2-1: SerialNumber: syz [ 2100.111256][T28218] usb 2-1: config 0 descriptor?? [ 2100.120362][ T5811] hub 3-1:0.0: 1 port detected [ 2100.327343][T31885] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2100.348301][T31885] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2100.356313][ T5850] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 2100.378725][T28218] usb 2-1: USB disconnect, device number 5 [ 2100.531795][T31904] fuse: Bad value for 'user_id' [ 2100.572282][ T5850] usb 6-1: Using ep0 maxpacket: 32 [ 2100.579690][ T5850] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2100.599353][ T5850] usb 6-1: config 0 has no interface number 0 [ 2100.612711][ T5850] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2100.629219][ T5850] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2100.637740][ T5850] usb 6-1: Product: syz [ 2100.642212][ T5850] usb 6-1: Manufacturer: syz [ 2100.646898][ T5850] usb 6-1: SerialNumber: syz [ 2100.663312][ T5850] usb 6-1: config 0 descriptor?? [ 2100.673543][ T5850] smsc95xx v2.0.0 [ 2100.777115][T28218] hub 3-1:0.0: activate --> -90 [ 2101.082341][ T5811] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 2101.294727][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 2101.302459][T17968] usb 3-1: USB disconnect, device number 26 [ 2101.306004][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 2101.321760][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 2101.335279][ T5811] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0 [ 2101.349458][ T5811] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 2101.378369][ T5811] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.392469][ T5811] usb 2-1: Product: syz [ 2101.398152][ T5811] usb 2-1: Manufacturer: syz [ 2101.403335][ T5811] usb 2-1: SerialNumber: syz [ 2101.426261][ T5811] usb 2-1: config 0 descriptor?? [ 2101.649506][ T5811] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 2101.874921][ T5811] usb 2-1: USB disconnect, device number 6 [ 2102.712669][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2102.760004][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2102.782728][ T5850] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2102.795207][ T5850] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 2102.856902][ T5850] usb 6-1: USB disconnect, device number 23 [ 2103.318141][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2103.324629][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2103.547550][T31936] fuse: Bad value for 'fd' [ 2104.238394][T31949] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2104.238394][T31949] program syz.2.7755 not setting count and/or reply_len properly [ 2105.862968][T30184] Bluetooth: hci0: command tx timeout [ 2106.212189][T31970] fuse: Bad value for 'fd' [ 2106.339624][T31974] 9pnet_fd: Insufficient options for proto=fd [ 2106.622500][ T5850] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 2106.736371][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a3e9800: rx timeout, send abort [ 2106.778619][T31986] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7768'. [ 2106.932604][T31991] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2106.932604][T31991] program syz.2.7769 not setting count and/or reply_len properly [ 2107.236488][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a3e8800: rx timeout, send abort [ 2107.251991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a3e9800: abort rx timeout. Force session deactivation [ 2107.622136][ T5850] usb 5-1: Using ep0 maxpacket: 32 [ 2107.639013][ T5850] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2107.652027][ T5850] usb 5-1: config 0 has no interface number 0 [ 2107.690656][ T5850] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2107.712514][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2107.720567][ T5850] usb 5-1: Product: syz [ 2107.732402][ T5850] usb 5-1: Manufacturer: syz [ 2107.742894][ T5850] usb 5-1: SerialNumber: syz [ 2107.747647][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805a3e8800: abort rx timeout. Force session deactivation [ 2108.150370][ T5850] usb 5-1: config 0 descriptor?? [ 2108.244408][ T5850] smsc95xx v2.0.0 [ 2109.669551][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000034: -71 [ 2109.757367][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 2109.792727][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2109.832228][ T5850] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 2109.882455][ T5850] usb 5-1: USB disconnect, device number 5 [ 2110.332827][T32022] fuse: Bad value for 'fd' [ 2110.588211][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da68400: rx timeout, send abort [ 2110.767402][T32029] netlink: 71 bytes leftover after parsing attributes in process `syz.2.7780'. [ 2111.088345][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da6b000: rx timeout, send abort [ 2111.096822][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da68400: abort rx timeout. Force session deactivation [ 2111.220622][T32035] 9pnet_fd: Insufficient options for proto=fd [ 2111.596688][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805da6b000: abort rx timeout. Force session deactivation [ 2111.682119][ T2130] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 2111.882057][ T2130] usb 5-1: Using ep0 maxpacket: 32 [ 2111.899162][ T2130] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2111.917785][ T2130] usb 5-1: config 0 has no interface number 0 [ 2111.940393][ T2130] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2111.963840][ T2130] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2111.991285][ T2130] usb 5-1: Product: syz [ 2111.999838][ T2130] usb 5-1: Manufacturer: syz [ 2112.010227][ T2130] usb 5-1: SerialNumber: syz [ 2112.027214][ T2130] usb 5-1: config 0 descriptor?? [ 2112.057216][ T2130] smsc95xx v2.0.0 [ 2112.150503][T32050] fuse: Bad value for 'fd' [ 2115.023800][ T2130] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2115.052009][ T2130] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2115.081586][ T2130] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2115.127878][ T2130] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 2115.156762][ T2130] usb 5-1: USB disconnect, device number 6 [ 2115.642923][T32079] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7792'. [ 2115.712175][ T9398] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 2115.912020][ T9398] usb 6-1: Using ep0 maxpacket: 16 [ 2115.924242][ T9398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2115.936686][ T9398] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2115.947364][ T9398] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2115.961274][ T9398] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 2115.971180][ T9398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2115.983449][ T9398] usb 6-1: config 0 descriptor?? [ 2116.342048][T30184] Bluetooth: hci0: command tx timeout [ 2117.024468][T32097] netlink: 'syz.5.7790': attribute type 21 has an invalid length. [ 2117.032450][T32097] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7790'. [ 2117.041657][T32097] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7790'. [ 2117.053656][T32097] netlink: 'syz.5.7790': attribute type 21 has an invalid length. [ 2117.061512][T32097] netlink: 128 bytes leftover after parsing attributes in process `syz.5.7790'. [ 2117.070857][T32097] netlink: 3 bytes leftover after parsing attributes in process `syz.5.7790'. [ 2119.446025][ T9398] usbhid 6-1:0.0: can't add hid device: -71 [ 2119.481302][ T9398] usbhid: probe of 6-1:0.0 failed with error -71 [ 2119.550962][ T9398] usb 6-1: USB disconnect, device number 24 [ 2123.503667][T30184] Bluetooth: hci1: command 0x0406 tx timeout [ 2123.989320][T32133] netlink: 71 bytes leftover after parsing attributes in process `syz.1.7806'. [ 2125.995974][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bd7e400: rx timeout, send abort [ 2126.496098][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a977800: rx timeout, send abort [ 2126.512036][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802bd7e400: abort rx timeout. Force session deactivation [ 2127.004452][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a977800: abort rx timeout. Force session deactivation [ 2128.843453][T32175] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2128.843453][T32175] program syz.4.7817 not setting count and/or reply_len properly [ 2129.535312][T31992] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 2129.753878][T31992] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2129.787444][T31992] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xBE, skipping [ 2129.807787][T31992] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 2129.832637][T31992] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 2129.851629][T31992] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 2129.882973][T31992] usb 2-1: Product: syz [ 2129.887198][T31992] usb 2-1: Manufacturer: syz [ 2129.891808][T31992] usb 2-1: SerialNumber: syz [ 2129.998572][T31992] usb 2-1: config 0 descriptor?? [ 2130.818036][T31992] radio-si470x 2-1:0.0: could not find interrupt in endpoint [ 2130.826830][T31992] radio-si470x: probe of 2-1:0.0 failed with error -5 [ 2130.851479][T31992] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 2131.874427][T32195] netlink: 71 bytes leftover after parsing attributes in process `syz.5.7818'. [ 2134.449544][ T9398] usb 2-1: USB disconnect, device number 7 [ 2134.670664][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8fb000: rx timeout, send abort [ 2134.833980][T32218] sg_write: data in/out 124/1 bytes for SCSI command 0x1c-- guessing data in; [ 2134.833980][T32218] program syz.1.7830 not setting count and/or reply_len properly [ 2135.170791][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8f9c00: rx timeout, send abort [ 2135.179153][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8fb000: abort rx timeout. Force session deactivation [ 2135.666520][T32222] kvm: emulating exchange as write [ 2135.679142][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8f9c00: abort rx timeout. Force session deactivation [ 2135.681325][T32223] md: md2 stopped. [ 2136.126476][T32232] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7834'. [ 2136.232386][ T9398] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 2138.424539][T32244] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 2138.462242][ T9398] usb 6-1: Using ep0 maxpacket: 16 [ 2138.492636][ T9398] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2138.529075][ T9398] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2138.555440][ T9398] usb 6-1: config 0 descriptor?? [ 2138.841378][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ce47000: rx timeout, send abort [ 2139.339475][T32254] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 2139.346337][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d494c00: rx timeout, send abort [ 2139.354631][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805ce47000: abort rx timeout. Force session deactivation [ 2139.846406][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d494c00: abort rx timeout. Force session deactivation [ 2140.949266][ T9398] usbhid 6-1:0.0: can't add hid device: -71 [ 2140.955545][ T9398] usbhid: probe of 6-1:0.0 failed with error -71 [ 2140.965791][ T9398] usb 6-1: USB disconnect, device number 25 [ 2143.614533][T32286] netlink: 71 bytes leftover after parsing attributes in process `syz.4.7847'. [ 2144.691410][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cbe6400: rx timeout, send abort [ 2145.191570][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cbe4800: rx timeout, send abort [ 2145.200180][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cbe6400: abort rx timeout. Force session deactivation [ 2145.700108][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802cbe4800: abort rx timeout. Force session deactivation [ 2147.335139][ T9396] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 2147.552317][ T2130] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 2147.597668][ T9396] usb 6-1: Using ep0 maxpacket: 16 [ 2147.752308][ T2130] usb 2-1: Using ep0 maxpacket: 32 [ 2147.769560][ T2130] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 2147.777867][ T2130] usb 2-1: config 0 has no interface number 0 [ 2147.797438][ T9396] usb 6-1: New USB device found, idVendor=06a3, idProduct=0ccd, bcdDevice= 0.00 [ 2147.889521][ T2130] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2147.902144][ T9396] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2147.909116][ T2130] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2147.947898][ T2130] usb 2-1: Product: syz [ 2147.959438][ T2130] usb 2-1: Manufacturer: syz [ 2147.960580][ T9396] usb 6-1: config 0 descriptor?? [ 2147.992203][ T2130] usb 2-1: SerialNumber: syz [ 2148.023173][ T2130] usb 2-1: config 0 descriptor?? [ 2148.064603][ T2130] smsc95xx v2.0.0 [ 2148.590325][T32326] IPVS: set_ctl: invalid protocol: 59 100.1.1.1:20004 [ 2150.202104][ T9396] usbhid 6-1:0.0: can't add hid device: -71 [ 2150.208137][ T9396] usbhid: probe of 6-1:0.0 failed with error -71 [ 2150.336571][ T9396] usb 6-1: USB disconnect, device number 26 [ 2151.608358][ T2130] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2151.652220][ T2130] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2151.689038][ T2130] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2151.742787][ T2130] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 2151.792452][ T2130] usb 2-1: USB disconnect, device number 8 [ 2151.999661][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8b6c00: rx timeout, send abort [ 2152.499758][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8b7400: rx timeout, send abort [ 2152.508248][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8b6c00: abort rx timeout. Force session deactivation [ 2153.008089][ C0] vcan0: j1939_tp_rxtimer: 0xffff88805d8b7400: abort rx timeout. Force session deactivation [ 2153.982837][T17968] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 2154.544136][T17968] usb 5-1: Using ep0 maxpacket: 32 [ 2154.635977][T17968] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 2154.659297][T17968] usb 5-1: config 0 has no interface number 0 [ 2154.713452][T17968] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2154.756300][T17968] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2154.793312][T17968] usb 5-1: Product: syz [ 2154.804942][T17968] usb 5-1: Manufacturer: syz [ 2154.832421][T17968] usb 5-1: SerialNumber: syz [ 2154.888533][T17968] usb 5-1: config 0 descriptor?? [ 2154.905579][T17968] smsc95xx v2.0.0 [ 2155.280035][T32387] binder: 32386:32387 ioctl 4018620d 0 returned -22 [ 2158.092700][T17968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2158.144362][T17968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2158.170989][T17968] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2158.225349][T17968] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 2158.311188][T17968] usb 5-1: USB disconnect, device number 7 [ 2159.398673][T32423] bridge1: entered promiscuous mode [ 2159.403993][T32423] bridge1: entered allmulticast mode [ 2161.362065][ T2130] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 2161.562027][ T2130] usb 6-1: Using ep0 maxpacket: 32 [ 2161.583885][ T2130] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 2161.603212][ T2130] usb 6-1: config 0 has no interface number 0 [ 2161.644497][ T2130] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 2161.675525][ T2130] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2161.698193][ T2130] usb 6-1: Product: syz [ 2161.726990][ T2130] usb 6-1: Manufacturer: syz [ 2161.749718][ T2130] usb 6-1: SerialNumber: syz [ 2161.781200][ T2130] usb 6-1: config 0 descriptor?? [ 2161.834217][ T2130] smsc95xx v2.0.0 [ 2164.003846][T32449] 9pnet_fd: Insufficient options for proto=fd [ 2164.750828][ T1288] ieee802154 phy0 wpan0: encryption failed: -22 [ 2164.757385][ T1288] ieee802154 phy1 wpan1: encryption failed: -22 [ 2165.036106][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000030: -71 [ 2165.050071][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error writing E2P_CMD [ 2165.071182][ T2130] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 2165.094817][ T2130] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 2165.128300][ T2130] usb 6-1: USB disconnect, device number 27 [ 2165.441090][T32463] netlink: 96 bytes leftover after parsing attributes in process `syz.4.7902'. [ 2165.462921][T30249] Bluetooth: hci0: command tx timeout [ 2172.222359][T30249] Bluetooth: hci1: command 0x0406 tx timeout [ 2174.440610][T32517] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7916'. [ 2174.452040][T19468] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 2174.652073][T19468] usb 5-1: Using ep0 maxpacket: 16 [ 2174.659356][T19468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.674120][T19468] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2175.160176][ C1] ------------[ cut here ]------------ [ 2175.165848][ C1] WARNING: CPU: 1 PID: 32519 at net/mac80211/tx.c:5031 __ieee80211_beacon_get+0x1233/0x1600 [ 2175.176035][ C1] Modules linked in: [ 2175.179973][ C1] CPU: 1 PID: 32519 Comm: syz.5.7913 Not tainted syzkaller #0 [ 2175.187515][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2175.197640][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 2175.204043][ C1] Code: 24 4c 89 e7 e8 5e 3f c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 85 84 f7 0f 0b e9 f6 f7 ff ff e8 8d 85 84 f7 <0f> 0b e9 48 fb ff ff e8 81 85 84 f7 48 c7 c7 20 51 64 8e 4c 89 e6 [ 2175.223702][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 2175.229868][ C1] RAX: ffffffff8a028e13 RBX: ffffffff8a027c16 RCX: ffff888026438000 [ 2175.238090][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2175.246120][ C1] RBP: 0000000000000000 R08: ffff888026438000 R09: 0000000000000003 [ 2175.254111][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880682e63c0 [ 2175.262104][ C1] R13: dffffc0000000000 R14: ffff8880682e68b0 R15: ffff88807eba1824 [ 2175.270071][ C1] FS: 00007f8fb0e0a6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 2175.279024][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2175.285635][ C1] CR2: 00007f8faffe9d40 CR3: 000000006528e000 CR4: 00000000003506e0 [ 2175.293618][ C1] DR0: 0000000000000002 DR1: 0000000000000001 DR2: 000000000000004e [ 2175.301666][ C1] DR3: 0000000000000008 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 2175.309952][ C1] Call Trace: [ 2175.313275][ C1] [ 2175.316194][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2175.321754][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 2175.327244][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2175.334030][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2175.339694][ C1] __iterate_interfaces+0x243/0x500 [ 2175.344958][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2175.351249][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2175.358497][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2175.364773][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2175.371896][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2175.377207][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 2175.382441][ C1] ? hw_scan_work+0xf60/0xf60 [ 2175.387119][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2175.392338][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2175.398415][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2175.403551][ C1] handle_softirqs+0x280/0x820 [ 2175.408673][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2175.413456][ C1] ? do_softirq+0x1a0/0x1a0 [ 2175.417952][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2175.423197][ C1] __irq_exit_rcu+0xd3/0x190 [ 2175.427786][ C1] ? irq_exit_rcu+0x20/0x20 [ 2175.432332][ C1] irq_exit_rcu+0x9/0x20 [ 2175.436565][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2175.442230][ C1] [ 2175.445239][ C1] [ 2175.448158][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2175.454449][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 2175.460950][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 79 ce f6 65 8b 05 ec af 75 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 2175.480593][ C1] RSP: 0018:ffffc90004db75a0 EFLAGS: 00000206 [ 2175.486678][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ad92400b7ef57500 [ 2175.494688][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 2175.502684][ C1] RBP: ffffc90004db7638 R08: ffffffff911bf5af R09: 1ffffffff2237eb5 [ 2175.510656][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb6 R12: dffffc0000000000 [ 2175.518654][ C1] R13: 1ffff1100f202c46 R14: ffff8880790161d0 R15: 1ffff920009b6eb4 [ 2175.526660][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2175.531513][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 2175.537013][ C1] ? sock_load_diag_module+0x140/0x140 [ 2175.542521][ C1] __unix_dgram_recvmsg+0x2f8/0xd80 [ 2175.547746][ C1] ? unix_unhash+0x10/0x10 [ 2175.552188][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2175.558338][ C1] ? mark_lock+0x94/0x320 [ 2175.562682][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 2175.567720][ C1] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 2175.573237][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 2175.578108][ C1] ____sys_recvmsg+0x4e8/0x5e0 [ 2175.582906][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 2175.587932][ C1] ? import_iovec+0x73/0xa0 [ 2175.592475][ C1] ___sys_recvmsg+0x216/0x590 [ 2175.597214][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 2175.602030][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 2175.607102][ C1] ? __might_fault+0xc6/0x120 [ 2175.611783][ C1] ? __might_fault+0xaa/0x120 [ 2175.616477][ C1] do_recvmmsg+0x39a/0x870 [ 2175.620891][ C1] ? __sys_recvmmsg+0x290/0x290 [ 2175.625765][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2175.631662][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 2175.637322][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 2175.642369][ C1] ? do_recvmmsg+0x870/0x870 [ 2175.646964][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2175.652173][ C1] do_syscall_64+0x55/0xa0 [ 2175.656585][ C1] ? clear_bhb_loop+0x40/0x90 [ 2175.661261][ C1] ? clear_bhb_loop+0x40/0x90 [ 2175.665956][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2175.671841][ C1] RIP: 0033:0x7f8faff9c629 [ 2175.676356][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2175.695986][ C1] RSP: 002b:00007f8fb0e0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2175.704420][ C1] RAX: ffffffffffffffda RBX: 00007f8fb0216090 RCX: 00007f8faff9c629 [ 2175.712399][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2175.720359][ C1] RBP: 00007f8fb0032b39 R08: 0000000000000000 R09: 0000000000000000 [ 2175.728341][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2175.736324][ C1] R13: 00007f8fb0216128 R14: 00007f8fb0216090 R15: 00007fff1a3c2d98 [ 2175.744318][ C1] [ 2175.747324][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2175.754587][ C1] CPU: 1 PID: 32519 Comm: syz.5.7913 Not tainted syzkaller #0 [ 2175.762092][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 2175.772172][ C1] Call Trace: [ 2175.775462][ C1] [ 2175.778656][ C1] dump_stack_lvl+0x18c/0x250 [ 2175.783332][ C1] ? show_regs_print_info+0x20/0x20 [ 2175.788526][ C1] ? load_image+0x400/0x400 [ 2175.793027][ C1] panic+0x2dc/0x730 [ 2175.796918][ C1] ? bpf_jit_dump+0xd0/0xd0 [ 2175.801413][ C1] __warn+0x2e0/0x470 [ 2175.805399][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.811136][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.816864][ C1] report_bug+0x2be/0x4f0 [ 2175.821252][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.826996][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.832747][ C1] ? __ieee80211_beacon_get+0x1235/0x1600 [ 2175.838464][ C1] handle_bug+0xcf/0x120 [ 2175.842706][ C1] exc_invalid_op+0x1a/0x50 [ 2175.847222][ C1] asm_exc_invalid_op+0x1a/0x20 [ 2175.852152][ C1] RIP: 0010:__ieee80211_beacon_get+0x1233/0x1600 [ 2175.858477][ C1] Code: 24 4c 89 e7 e8 5e 3f c2 f7 45 31 f6 4c 8b bc 24 a0 00 00 00 e9 7a fe ff ff e8 99 85 84 f7 0f 0b e9 f6 f7 ff ff e8 8d 85 84 f7 <0f> 0b e9 48 fb ff ff e8 81 85 84 f7 48 c7 c7 20 51 64 8e 4c 89 e6 [ 2175.878087][ C1] RSP: 0018:ffffc900001f0a18 EFLAGS: 00010246 [ 2175.884182][ C1] RAX: ffffffff8a028e13 RBX: ffffffff8a027c16 RCX: ffff888026438000 [ 2175.892232][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 2175.900199][ C1] RBP: 0000000000000000 R08: ffff888026438000 R09: 0000000000000003 [ 2175.908188][ C1] R10: 0000000000000007 R11: 0000000000000100 R12: ffff8880682e63c0 [ 2175.916186][ C1] R13: dffffc0000000000 R14: ffff8880682e68b0 R15: ffff88807eba1824 [ 2175.924195][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2175.929743][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.935461][ C1] ? __ieee80211_beacon_get+0x1233/0x1600 [ 2175.941185][ C1] ? __ieee80211_beacon_get+0x36/0x1600 [ 2175.946738][ C1] ieee80211_beacon_get_tim+0xbf/0x580 [ 2175.952214][ C1] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 2175.958991][ C1] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 2175.964537][ C1] __iterate_interfaces+0x243/0x500 [ 2175.969728][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2175.976061][ C1] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 2175.983349][ C1] ? mac80211_hwsim_vendor_cmd_test+0x2f0/0x2f0 [ 2175.989588][ C1] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 2175.996618][ C1] mac80211_hwsim_beacon+0xbb/0x1b0 [ 2176.001835][ C1] __hrtimer_run_queues+0x52a/0xc40 [ 2176.007031][ C1] ? hw_scan_work+0xf60/0xf60 [ 2176.011713][ C1] ? hrtimer_interrupt+0x9c0/0x9c0 [ 2176.016830][ C1] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 2176.022896][ C1] hrtimer_run_softirq+0x187/0x2b0 [ 2176.028005][ C1] handle_softirqs+0x280/0x820 [ 2176.032765][ C1] ? __irq_exit_rcu+0xd3/0x190 [ 2176.037516][ C1] ? do_softirq+0x1a0/0x1a0 [ 2176.042020][ C1] ? irqtime_account_irq+0xb6/0x1c0 [ 2176.047213][ C1] __irq_exit_rcu+0xd3/0x190 [ 2176.051789][ C1] ? irq_exit_rcu+0x20/0x20 [ 2176.056285][ C1] irq_exit_rcu+0x9/0x20 [ 2176.060514][ C1] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 2176.066252][ C1] [ 2176.069175][ C1] [ 2176.072115][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2176.078096][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 2176.084592][ C1] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 1b 79 ce f6 65 8b 05 ec af 75 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 2176.104200][ C1] RSP: 0018:ffffc90004db75a0 EFLAGS: 00000206 [ 2176.110266][ C1] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: ad92400b7ef57500 [ 2176.118250][ C1] RDX: dffffc0000000000 RSI: ffffffff8acac900 RDI: 0000000000000001 [ 2176.126303][ C1] RBP: ffffc90004db7638 R08: ffffffff911bf5af R09: 1ffffffff2237eb5 [ 2176.134277][ C1] R10: dffffc0000000000 R11: fffffbfff2237eb6 R12: dffffc0000000000 [ 2176.142262][ C1] R13: 1ffff1100f202c46 R14: ffff8880790161d0 R15: 1ffff920009b6eb4 [ 2176.150422][ C1] ? _raw_spin_unlock+0x40/0x40 [ 2176.155284][ C1] __skb_try_recv_datagram+0x17d/0x4d0 [ 2176.160739][ C1] ? sock_load_diag_module+0x140/0x140 [ 2176.166229][ C1] __unix_dgram_recvmsg+0x2f8/0xd80 [ 2176.171438][ C1] ? unix_unhash+0x10/0x10 [ 2176.175852][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 2176.182019][ C1] ? mark_lock+0x94/0x320 [ 2176.186382][ C1] ? unix_dgram_recvmsg+0xad/0xd0 [ 2176.191402][ C1] ? unix_dgram_sendmsg+0x16d0/0x16d0 [ 2176.196783][ C1] sock_recvmsg_nosec+0x82/0xd0 [ 2176.201674][ C1] ____sys_recvmsg+0x4e8/0x5e0 [ 2176.206464][ C1] ? __sys_recvmsg_sock+0x50/0x50 [ 2176.211490][ C1] ? import_iovec+0x73/0xa0 [ 2176.216129][ C1] ___sys_recvmsg+0x216/0x590 [ 2176.220805][ C1] ? __sys_recvmsg+0x2a0/0x2a0 [ 2176.225572][ C1] ? __lock_acquire+0x7d40/0x7d40 [ 2176.230590][ C1] ? __might_fault+0xc6/0x120 [ 2176.235257][ C1] ? __might_fault+0xaa/0x120 [ 2176.239922][ C1] do_recvmmsg+0x39a/0x870 [ 2176.244335][ C1] ? __sys_recvmmsg+0x290/0x290 [ 2176.249182][ C1] ? __ia32_sys_get_robust_list+0x110/0x110 [ 2176.255078][ C1] ? rcu_read_lock_sched_held+0x8a/0x110 [ 2176.260713][ C1] __x64_sys_recvmmsg+0x199/0x250 [ 2176.265729][ C1] ? do_recvmmsg+0x870/0x870 [ 2176.270308][ C1] ? lockdep_hardirqs_on+0x98/0x150 [ 2176.275758][ C1] do_syscall_64+0x55/0xa0 [ 2176.280168][ C1] ? clear_bhb_loop+0x40/0x90 [ 2176.284842][ C1] ? clear_bhb_loop+0x40/0x90 [ 2176.289596][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2176.295612][ C1] RIP: 0033:0x7f8faff9c629 [ 2176.300014][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2176.319611][ C1] RSP: 002b:00007f8fb0e0a028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 2176.328013][ C1] RAX: ffffffffffffffda RBX: 00007f8fb0216090 RCX: 00007f8faff9c629 [ 2176.335973][ C1] RDX: 0000000000010106 RSI: 00002000000000c0 RDI: 0000000000000004 [ 2176.343933][ C1] RBP: 00007f8fb0032b39 R08: 0000000000000000 R09: 0000000000000000 [ 2176.351906][ C1] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 2176.359959][ C1] R13: 00007f8fb0216128 R14: 00007f8fb0216090 R15: 00007fff1a3c2d98 [ 2176.367934][ C1] [ 2176.371439][ C1] Kernel Offset: disabled [ 2176.375845][ C1] Rebooting in 86400 seconds..