last executing test programs: 9m53.377181604s ago: executing program 0 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000ff0108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x40}}, 0x0) 9m52.648855432s ago: executing program 0 (id=878): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m51.920341034s ago: executing program 0 (id=880): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) setresgid(0xee00, 0xee01, 0x0) fsopen(&(0x7f0000000440)='cgroup2\x00', 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000200)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@user_xattr}, {@errors_remount}, {@quota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) unlink(&(0x7f0000000080)='./file1\x00') 9m47.76151116s ago: executing program 0 (id=884): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2082, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="89edee2c78daddb4b473fec988cafbe863cac50580088b77fb3cf321872b", 0x1e}, {&(0x7f0000000440)="9c74df4d92d5", 0x6}], 0x2) 9m43.757150182s ago: executing program 0 (id=892): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[], 0x60}}, 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) mmap$xdp(&(0x7f0000398000/0x3000)=nil, 0x3000, 0xf5fffffd, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x82000) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 9m38.257478595s ago: executing program 3 (id=900): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000001001"], 0x18, 0x68000000}, 0x0) r0 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=ANY=[], 0x18, 0x68000000}, 0x80fe) 9m38.22476265s ago: executing program 0 (id=901): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_open_dev$media(&(0x7f0000000480), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r7, 0xe}}, 0x48) 9m35.773115203s ago: executing program 3 (id=903): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c0002800500010000000000080007"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="6c000000000101040000000000000000020000002c0001801400018008000100e000ff0108000200ac1414000c00028005000100000000000600034000040000240002801400018008000100e000000108000200e00000010c0002800500010000000000080007"], 0x6c}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x40}}, 0x0) 9m34.330562506s ago: executing program 3 (id=906): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x38, &(0x7f0000000280)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, &(0x7f0000000440)=""/220, 0xdc, 0x1, 0x29}, @fda={0x66646185, 0x5, 0x1, 0x18}}, &(0x7f0000000240)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 9m33.700998761s ago: executing program 3 (id=909): r0 = socket$tipc(0x1e, 0x5, 0x0) io_uring_setup(0x576b, &(0x7f0000000280)={0x0, 0xd3d5, 0x100, 0x5, 0x10002b0}) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000080)=0x200000000) r2 = dup2(r1, r1) preadv2(r2, &(0x7f0000000880)=[{0x0}], 0x1, 0x7, 0x3, 0x1) close_range(r0, r1, 0x0) 9m32.905386406s ago: executing program 3 (id=912): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xfe, 0x44d, &(0x7f0000000900)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, 0x0) 9m32.0517843s ago: executing program 3 (id=914): socket$inet6(0xa, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x9964, 0x3010}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 9m20.471979934s ago: executing program 32 (id=901): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100002e0001b7b70000000000000001"], 0x114}], 0x1}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) r6 = syz_open_dev$media(&(0x7f0000000480), 0x0, 0x20004) ioctl$MEDIA_IOC_ENUM_ENTITIES(r6, 0xc1007c01, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000240)={0xffffffffffffffff}, 0x106, 0x9}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x4, @mcast2, 0x14}, r7}}, 0x30) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000007c0)={0x3, 0x40, 0xfa02, {{0x0, 0x4e24, 0x40003, @empty}, {0x2, 0x4e23, 0x6, @loopback, 0x5852}, r7, 0xe}}, 0x48) 9m16.366573153s ago: executing program 33 (id=914): socket$inet6(0xa, 0x2, 0x0) openat$6lowpan_control(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) connect$qrtr(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x9964, 0x3010}, &(0x7f0000000140)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 7m23.034065743s ago: executing program 1 (id=1096): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="020bf409010000002cbd7000fcdadf2505001700330000000a004e23fffff76220010000000000000000000000006c3ce6d907f4ff0c0000000000000004000200040000000a000000000000004a850000000000000500000000"], 0x60}}, 0x800) openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/slabinfo\x00', 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'vlan0\x00'}) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea90, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x6) mmap$xdp(&(0x7f0000398000/0x3000)=nil, 0x3000, 0xf5fffffd, 0x12, 0xffffffffffffffff, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) ioctl$IOMMU_HWPT_ALLOC$TEST(0xffffffffffffffff, 0x3b89, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) socket$packet(0x11, 0x2, 0x300) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x0, 0x8, {0x8, 0x0, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_open_dev$hidraw(&(0x7f0000000040), 0x0, 0x82000) syz_open_dev$hidraw(&(0x7f0000001580), 0xffffffffffffff74, 0x8c441) 7m19.702145121s ago: executing program 1 (id=1103): syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 7m18.061071952s ago: executing program 1 (id=1110): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x141, 0x80, 0x73, 0x98, 0x20, 0x2eca, 0xc101, 0x7df, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x3, 0x10, 0x0, [{{0x9, 0x4, 0xf2, 0x4, 0x2, 0xff, 0xf0, 0x12, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x12, 0x4, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0xfe, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000500)={0x14, 0x0, &(0x7f00000004c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000340)={0x1c, &(0x7f00000005c0)={0x20, 0x18, 0x3, "e365b7"}, 0x0, 0x0}) 7m14.377536974s ago: executing program 1 (id=1120): syz_usb_connect$printer(0x4, 0x36, &(0x7f0000000040)=ANY=[], 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) socket$inet_tcp(0x2, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 7m12.657210052s ago: executing program 1 (id=1128): openat$dsp(0xffffffffffffff9c, &(0x7f0000000140), 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$pppoe(0x18, 0x1, 0x0) syz_usb_connect(0x3, 0x2d, &(0x7f0000000780)={{0x12, 0x1, 0x110, 0x9f, 0xad, 0xa2, 0x20, 0x10c4, 0x818a, 0x7144, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0xfe, 0x20, 0x0, [{{0x9, 0x4, 0x5, 0x9, 0x1, 0x3, 0x0, 0x0, 0x60, [], [{{0x9, 0x5, 0x7, 0x3, 0x8, 0x97, 0x6, 0x4}}]}}]}}]}}, 0x0) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x2, @random="f41c0cedfafd", 'ip6_vti0\x00'}}, 0x1e) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_io_uring_setup(0x239, 0x0, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}}, 0x0) 7m7.900953964s ago: executing program 1 (id=1133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 6m51.467243451s ago: executing program 34 (id=1133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0) r2 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) write(r2, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r2, &(0x7f0000002ec0), 0x400000000000ec0, 0x2, &(0x7f00000001c0)={0x77359400}) 53.647679863s ago: executing program 2 (id=1832): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) sendmsg$inet(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000540)='`', 0x1}], 0x1}, 0x4010) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) writev(r0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="49e6", 0x2}], 0x1) sendmsg$inet6(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x1}], 0x1}, 0x20044800) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, 0x0, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000340)=',', 0x34000}], 0x1) 52.637282965s ago: executing program 2 (id=1836): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000840)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="3c00028038"], 0x58}, 0x1, 0x1000000, 0x0, 0x24004000}, 0x24040840) 51.296502241s ago: executing program 2 (id=1839): ioperm(0x0, 0x40, 0xfff) socket$inet_sctp(0x2, 0xfacd5c4550d1f5d0, 0x84) 50.514119266s ago: executing program 2 (id=1842): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001d80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}, @NFT_MSG_NEWSETELEM={0x40, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "0661"}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc4}}, 0x0) 47.644078953s ago: executing program 2 (id=1845): syz_usb_connect(0x9, 0x4bb, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[], 0xfc, 0x5a84, &(0x7f000000c100)="$eJzs3X+QHNV9IPDXM7Pa1a5WWgkcZDCrRUYJwbG14lf5RypWcomdAscll1MO4mTDglZEtiRU+hFAJrHIgc8qsMtOOZXg5A/iwtxhFBdVcDEKZcKPkzgbW8XFR11h6uwc9h9OEQ6VAR3l8nmvdqbf7EzP9Pbs7KyQxOdT0vb0mzffft39pqe/r3t3AgAAAG8KR27fffzDZ//ed/588rXP/P4/br81DJWr5QOxwkg6vemNaiEnUn9lZXWa7Re/9umv/2Tsut/59gODX3v98Obztvzgd8+47pFPXn7orr95/NXhh375QlHc2J8unJlPXkpCGPjWsb/87OGnz5ouS5ZO/yztD2F5suLx5UkItzWGGP95CGFzOrMyE//B1y7eMj299Y7+pvJlmXr6+5vb9H5OQgj7jt/4jvDD39542/dWfePv+w6+uH+mSjLQ0J9CWHpN4+v7QgiL0//TYm+L/TFJpxtCCIMNr3t3Qbve3mH71+bMn5NOF6XToYI48fnVmflSpl52PurLTAcLljdfee3otl6RJZn5pEdxo7x2xvLl6fSb6fTCOcYvp+tQTkIpCZV687clM30kNOy3JCTVfTlQny/V921I1z8zn2TmS5n5cl9mvarLTTtaOUmay2O9THk8HFfS8vMaj9VtfLThcWO9t8ay9I36erZOJuhQy4P6elXFdh2bpS0nQqnhGNSuvL7j050xlJYNJStaXjPVRnzu8MY715Q3PXFkJKcdyQNJGj/pKv6+7y5f8on7D+zNfq7X419TSuOXuor/oyuOvnzVga9+JTf+F2P8clfxL3p08KUrnrx9de72ORa3T6Wr+BMvPPX5VWdeezC3/XfH+ANdxV9/6Gj/8PFHH8tt/3jcPou7iv/8+z7w4/ueffjF3Pghxh/sKv6mQzu/0D96/ILc+I/F7TPUXf955eBlz42O/nQsL/4zMf5wV/Hv3d//3nuW3XF57v7dELfPSFfxP3T+I7ctOf7wuXnHzuTuXn1yArw5nZGeY30une82z5yvhnzhr8cqtXO+Jen/4V4uKHPymc0TCvQ6rQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgNPWWd/y3D/7vj428VEnn+9MHz5dq01i+KIRkcQhh956JXXu27rh+7JM37N21Y2Lb2MSesckde3bdPHbJb4ztmty5beLm6WfH33lx7XUrQlKbJue2LLt/amqqNNJcFpf3784/+MM17/7Xfwth/C3fH63ktn/tXdvvObPNz4xk/dT7t+/98Pcv/bt0vUbSdo20adfU1NRUyGnX/7nyF/f8xbGfXBDC+K/M1q6nnv+tf2pqULVgJk6q1B9qDepPBtu2o97qtD1xe1W2bN02OT779p1+fTlnPf79p1/8+ZabvvSL2vYdyF2PDrfv4vVT20p/tfFD/++vbqkVFLXrjdrvRds7rkVsX9x+A+n2Xpqu19Kc9arkrNft33vs2W+dfeDV/WG88sqq1mUXrVdf2gH6krd2tNy4hMFkeVP5QFo/7vH4urV7tu9cu/vmfe/cun3i+snrJ3e8Z90l6y4bv/SyS9dW13xtj9c/Lv9XO1z/3venF/61dbnL/mT/N+PPzvpTc7sWzXl7TLereHs0tijv/Tf40c9++T13PfnhWkFRP4+168eTdDo4vZ/XhYb+1vLytutVtH9CCGPttsPLr14ezvqfW28rOg417pnGnxnJ+qmnV//s7979tyt/s1ZwQo7zjQ3q8jhfb/VMe6rbayDdH1Mn6fbtD+V0vYbatmvd00/23Xnk3/603r5Fi8JNE3v27FpX+7kkbemS5Jy27cqWxvVaVf1ZDulmCfVu2qa/TusLtfZlj5+xenarDqXPDSUr2q5XVnzu8MY715Q3PXEkb0snD9SWuDgM16bJ23Jqbsu8sFxvcLvln6zvv6L+MfrBv33oYw/9wyUt/eOi2s+i9Upy1usbz9775a996T/+Q+/W64O/dXTkZ//rj9fUCk7640q51pB6q9P2JI3HlYtCKHr/rQrt1yP3/Vdqvz5F77/scmbqt483lpkfCuWu3q8XPTr40hVP3r469/16bLb3a+PK3tL0unLB+/Vk6T/Z91dSaW7Hwr2/mjpKsn7q2587Y//jn9lwdq2g6POyXrtdv764g/wjZ73+6arnRm8Y+w//o3fHja//xoNX/2Bi/Z/VCrrf77EtvdnvA+n2HcjZvvVWx7yzcfu+67obtm2ulRdt5zfu/DedFuQ/8VCy++Z9n5rYtm1y1+7O1qvTz9O4nOxW7vbzNB7dVhSsV6llvRbuQSfbq9P3W2z/5q63V/P7bSgkXX0u7Pvu8iWfuP/A3pGWV6ULuqaUxi91Ff9HVxx9+aoDX/1KbvwvxviVruJPvPDU51edee3B3Ph3J2n8geL4S0NL/PWHjvYPH3/0sdz447H9i7tq//Pv+8CP73v24Rdz44cYf6i77f/KwcueGx39aW78Z5J0OdPnSCE8+NrFW2rzSehL32+xHX1N7QrZ+SQzX8rMlxvnS3EUIV1AOUmay2O9tPy8hra080c55fEsbGBlbfp6nA/ZB7OXn2xKDcf+duVF56kAAKe7eP0/noPG6/+T6YlS/kgDzJhvHrYyJ27Mw2bGc5qvsa5M48fXx3HA0XeF8enprWO1E/25XkeI74fsOGdczgVvb47RdnziUONCqstvGecsGn9fnZmP7aqNl1ca8tBUa15TCR2Mv7cuZ/bx98zqF1/PGvtcS7PGGsatsvuvLx0xa3e/Q6a9lekIef0jOy4W7+cYXRo2VJfXYf/I3kcT90P2Ppq4nLMzB85u76PJ6x8jrduhqV2xf8R6s/SPapOLr0e27r8wy/ad2X/to2X33xz298B0/YW+PtuDccO2h7QTN264sNfDTopxyTbxT/C45JKW+Okb7GQfN4zlcTtVOhxP/FhOea/GE+PhIrbr2CxtORGMJwKnq5j/x8+I6fx/+gT8/2bqFeUp2bPGGC/3PqFy+/YU5R2t9+kNdvU5vunQzi/0jx6/IPc857FO79Pb2TQ3WHDfT9F2XJOZL9yOOQM0RfledjlF2z17X8ZQGO5qu9+7/6733rPsjstzt/uG2gdp8Xb/ctPccMF2PwXyhfbx5QunXL5QfgPuYygaP8vPR8r1dsyWj4Ru85H0xqeFykf+MKd8rvnIYMuD+npVnbz5yMwHaVM+0ndi2wUAnDpi/l+/fpbm//8STyzS84iivPXCzHyMl5u35pyf5OWtf5BOb8rUH6r+RkX7YLOdN3/o/EduW3L84XNz85a7O81D/3PT3EhhHjq/vDk3j9jQm/vFc/OIep41vzwxt/31PHF+eXrOZdqGPH1+eXTu9qnn0c3jAF8+OpNpzBY/jgPkxq+PA/Qwz/3lTKUTd79+wXhdZmFxttPxuhOdR0+X9C1tXs/mvHiwN9f10l+fXag8+qM55XPNo4daHtTXq+rkzaOby+XRAMDpKub/8TSumv/3h/BkrLA4PpjfdfbcvKBH5+3ZvwdSj//MguSVM/F7dP23OO9b6Lx1ofP6hR6XOHmu/051lRcv9LjQSPUPeM41fqfjZG/Y/a4Lkhf/S/1Rx3lxulB5MQAAJ7OY/8c0P17/fzJTb775SUv+1lc7hZzJT069/Lyx3imcn18ZTlR+3n8q5+en+vjXSFfx35z5/4wur4u/PnUa5//VNsv/AQBOSTH/j7/2GP/+339N57N/t77DPP3u7O28rqO7jh7mlacPhxDeDHl6j8fZYvzG+wBO4XGA8qk1DlB7sHim/uk0DlDVFwwGAACcAvqqmVLr79l/PJ1mf88+7/fyr8qp36lKenp87Z5dk5NX7925eWLP5NU7btg8ufvqG3dt3bNnsn7uPL/ru7l5S5o39oVKuj3a18vmbcvSv4ewLOfvIWTrx7DnVB+0/j2E7GIXF/wdgZn911l78/ZfaZb67fpH3v7Oi/9HOfWj+v6/7o8vunrL7qu37ti6Z+vEtq37JpvrjVR/k7rz782M1ynn9H2pmR8tSnP//s64e+bXjlJLO/rS7ZH3/exJph3L05Ysz/v+g5x2f+e//8WfnD/1i/tCGH9L+W3t233H/e0bn5Gsn/ovV07+wZ4j39853f7SrO2v10zbVfR9pdn6cX0q227YvecdW27YuyP7jZLdieMZpfr8At3XkL79yx2OT2zKKZ/r7++XWx6cnDoenwAAoEm8/h/PZ+P1wy+lJ1CxvDBP31GrN9/rx7l5+nhneXr2e8mK8vRs/bi+nebpA/PM07PLL8rT29Vvl6fn5d158f8wp/5cdd5PurjPo5Juh/sP7M3tJ9d01k+y32dQ1E+y9efaT5J59pPs8ov6Sbv67fpJ3n7Pi/+RnPp5ivpDpd4f5ndfTm5/+GJn/eHXM/NF/SFbf679oTTP/pBdflF/aFe/XX/I27+t8ctNm7w347/THaPaLyavvvGGXZ9qqLfQ338RWm/J6KR9i2Zeu7Df/9Gtzrfvwt73Nf/2h7C+WpLX/nh9YNGc2t/p73/Nv/1F238O95UtDS33leW2/5n5jYR13v6F/X6XjLzqra8/UeO1abcruv+saBx3Y075XMdxF7U8ODkZx4U3Tsz/4+WemP/fkU57fRno1P+etC4+5+Ix+BT7HrNuzpPme3980XnMm+7zPHvJ3ec5AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwGmhv7KyOj1y++7jHz77977z55Ovfeb3/3H7rb/26a//ZOy63/n2A4Nfe/3w5vO2/OB3z7jukU9efuiuv3n81eGHfvlCYeCR6s/KhensQAjJS0kIA9869pefPfz0WdNlSQihnIzsD2F5suLx5UkmwvjPQwib6+1sfvLB1y7eMj299Y7+pvJlmSDZ9QpD5diexnaGcFPhGnEKGkj72b7jN74j/PC3N972vVXf+Pu+gy/un6mSDDT0pxCWXtP4+r4QwuL0/7TY21bGF6fTDSGEwYbXvbugXW/vsP1rc+bPSaeL0ulQQZz4/OrMfClTLzsf9WWmDeu6uGDRXclrR7f1iizJzGcPRvOV185YvjydfjOdXjjH+OX4PwmlJFTqzd+WzPSR0LDfkpBU9+VAfb5U37chXf/MfJKZL2Xmy32Z9aouN+1o5SRpLo/1MuXxcFxJy89rPFa38dGc8rem04H0jfp6nA/ZBzVDLQ/q61UV23Vslrak/lP74krxKztQajgGtSuv7/h0ZwylZUPJipbXTLURnzu88c415U1PHBnJaUfyQJLGT7qKv++7y5d84v4De1fmxb+mlMYvdRX/R1ccffmqA1/9Sm78L8b45a7iX/To4EtXPHn76tztcyxun0pX8SdeeOrzq8689mBu+++O8Qe6ir/+0NH+4eOPPpbb/vG4fRZ3Ff/5933gx/c9+/CLufFDjD/YVfxNh3Z+oX/0+AW58R+L22eou/7zysHLnhsd/elYXvxnYvzhruLfu/+u996z7I7Lc/fvhrh9RrqK/6HzH7ltyfGHz807diZ39+qTE+DN6Yz0HOtz6Xy3eeZ8NeQLfz1WqZ3zLUn/D/dyQRnTy1m6gPEBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg9/fMtl3z8yvd/ZGMlCSHJqTPVRnyuvGj9+rEuljvxwlOfX3XmtQcby1Z2EQcAAAAoFvPwUr1kIKwMNyaLwzlt68cxgnPiXNJcnh1DiHGyYwTdxim1iVPqIk65R+2p9ChOX4/iLOpRnP4exRkoiDMQOouzeJY4leke0GF7BmdtT+dxhnoUZ0mP4gxnQnQbZ2mP2rOsR3FGZo3TeT9c3qM4K3oU54wexTmzR3He0qM4v9KjOGf1KE52THmu/XA4rXl2Xpzqg3JhnEpSrj/Rbjz9rHQ5585zOUMFyxku+jzucDmLO1zO2zOvK81xOQMdLudX57mcpMPl/Po8l1MqWE7stzdl2xeXE+c67P839yjOvh7F+XSP4tzSozh/2qM4f9ajOJ8JzSenc40D0KmY/8/keyOhv/KbYTA94mRHAWK+u6r6s/XzLu+AFOO9LVO+qCheNlHPxFs11/ZlBxAy8VZnyvua4lXq+cgs8QYa463JPDnb+r5vffu2Nca7MFPeP0u8phUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgBPgn2+55ONXvv8jG0MSpv+1NdVGfK68aP36sS6We3jjnWvKm5440ljWX+kiEAAAAFAo5uF99ZKB0F9ZF/qTRU31BtJxgIF0vjxSm44uDRump8lYqTo/mCyf9XWV9HVr92zfuXb3zfveuXX7xPWT10/ueM+6S9ZdNn7pZZeu3bJ12+R47WcI/QXxQgjV4YfdN+/71MS2bZO7dtcKs+1fmb5uZTqfpK8bfVcYn57emrZ/RcHySi3LW7gHxXsPAAAAAAAAAAAAAAAAAAD4/+zaW4hcZx0A8O/MzM5Mt41d6W0amu2QS4laNYlbSbV0DwgWmgtZCjJbXUuwCRY3TWiTEuvYBmxrgiK0BEIkD0ZisbX40ostYi8EIjUacGOQtmge9EFptZKWPEjKyM7OmdvOZNaxZJP4+z2cb+b//b/vf75DCPzPLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcG5NlUcmSqNj44NRCFGXnEoHyVw6G8fFPup+5aVtP8gNn17eHMtl+tgIAAAA6CnpwwfqkXzIZdIhHa6tflscmiZCo+8HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+/0yVRyZKo2Pjl0YhRF1yKh0kc+lsHBf7qHvyvWc++8bw8N+aY4U+9gEAAAB6S/rwVD2SD4WwJAxE1053/vVo8m5gYdv6mbyGZJ9Fc8xrf3fQLW/JHPNumGPex3rkra+NOwMAAABc+JL+P1OPDIVcZsGsfjjp/3v19Une9W156dpYbE46q+xckgAAAIA5SPr/XD1SCLlMod6vz7XfX9wIVX86T9b3+t0+Wb+sLS9Z3+v3/HW10e/0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHDhmCqPTJRGx8bTUQhRl5xKB8lcOhvHxT7qrnp58B9rDj+6uDmWy/SxEQAAANBT0oc3Wu98yGUGw0C4tNr3D9924LkvPffCSAhhps3PZsPOjdu337dq+hpWJXkrjx4e+P6Rd749K2/lzHXeDggAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHxopsojE6XRsfFLohCiLjmVDpK5dDaOi33UfevzX/zLUydefLs5VuhjHwAAAKC3pA9v9P75UAjZkA1XV7819/rTUm3ru70zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4e93/zwW9snJzcdJ8P8/Ohkg7hPLiN//FD8s/pfLmfC/9Dfr5vY37/XwIAAD5814coVP5L12yY77sGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOB1PlkYnS6Nh4Pgoh6pJT6SCZS2fjuNhH3filY7kFp19+tTlW6GMfAAAAoLekD2/0/vlQCANhIFxV/dbpnUC1/x86hzcJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnFemyiMTpdGx8QVRCFGXnEoHyVw6G8fFPuo+uWv/5w5d/r3bm2O5TB8bAQAAAD0lfXi2HsmHXObjIReuq32fbF0QpWtj5/cCjXXbWpYNznlduWVd+mzrokwI9XW7206WqZ1mZl0+2W9oZqzXKzbWpWrrik3rCqFevlhfV31Ye1uqLehxvtlPHgAAAM6dpP/P1SNDIZfJNfX/P62Nl9RGfS4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0NlUeWSiNDo2HkUhRF1yKh0kc+lsHBf7qPvgbz962Vd/tmdHc6zQxz4AAABAb0kf3uj986EQFoWPhEXVvj8MteYnef8snTn0xL/+ujyEFVcfH860b/uj5MOv37r1lfZLCKnW7FQIl9fqRV3q/eb3TzywtHLmqRBWXJW+bla9cPZ6rVvGledLm9ZtP3J8W4+HAwAAABeJpP8fqEeGQi5zb9f+P+m8e/T/ddUG/PIHdv3iytq11pG3rUgN1eqlutT7wtJn/rxs9d/fme7/Z9f7ZP3Tp/dvOXRlS8GZSJsoroxu2bH++E0HU8mpZ+qn2+onz+XL33r735t3Pn5mpn4+5GvxhW23MlNt9rWtfIgrk6l942s/2FdurZ/pcv5Hf/fqiV8t3PP+dP33rh+s179h+pJrrz9z8kzX+uGSuDJ4x2N7b95/eH1r/RBCsVP9d9+/PVzzx3seaT//YNvGzU+++dr+AOLK0cWnDq4+ULiltX7UVj95/j8/8eTenzz+3ReS+snfiixfMtf6qbb6r+++YtdrD29Y2Fo/1eX8r9z5xvDW4nf+0H7+u1t2zXS9i9nnf/rGZ+96c2P8UPsUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAxWWqPDJRGh0bT0UhRF1yKh0kc+lsHBf7qHtyzbF379zz4x82xwp97AMAAAD0lvThjd4/HwohG7JhsNr3P1/atG77kePbwtDMbFQbM5Nb79/+ic1bd9x79zzdOQAAADBXJ9dE1f4/U48MhVxmaRio9f+jW3asP37TwVTS/6emxyiEsPmeyU0rQj3v9d1X7Hrt4Q0L6+8JQqj+WUB+Ou8zjbzbbj02dOpPX1/WMW9VI+/o4lMHVx8o3JLkhea8laH+fuLpG5+9682N8UP1+2vO+9TXtk7WXk8k+w7e8djem/cfXp9K3mPUxsHavkneZGrf+NoP9pVTQyE3PZ+u5eVr5wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAZpsqj0yURsfGQzqEqEtOpVktkMyls3Fc7KPu2qW/fOSy0y8uao7lMn1sBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD8hx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirs11+IVFUcB/BzZnbbP7Oruxq0Fa2rFYU9KAUR9VJRERoh9GRIWJoPURBEFPbQGhqJFb0EWS8SFVRbCAa5SaLFGv2TXnqooMB6CERaqB2kh4qdOXd29jq30VkLys8HhrPn3Hu/93fvPXNmLwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyn9HSN1NojOx6p3nnRrZ89df/Mk7d/8NC2K55466exTTd/urf/9ZNTm5dv+faWpZsOPLBmcvcrh38bfO+PY22DH683K1O3N4R4IobQ++H0i09PfX7B7FgMIZTj0HgIw3HJ4eGYS1j9ewhhc6PO+Rv3zVyzZbbdtqtn3vjiXEj+ukKlnNVTNzS/Xv5fetM821p97Krw/U3rt3+57N13uieOj8/tEmf3Kaf5FMKijc3Hd4cQ+tJnVjbbRrKDU7suhNDfdNx1beq69DTrXxVCNdevuTi156W20iYn274i1y/l9sv3M925tr/N+RaqqI5O92tnINfPL0YL1ahzVevx4dS+n9qVZ5hfzj4xlGLoapT/YJybI6H+3GoraQyx9iyzdTCGUuPZhnT9uX7M9Uu5frk7d12186aJVo5x/ni2X248W4670vjy5rW6hbsKxi9MbW/6op7M+iH/R13llD8a11WT1TX9N7X8G0pNa1Cr8VRv4/lXUqcSl5xyzJ8tZNum1j97eXnDR0eGCuqIe2PKjx3lb/1ieOCet3c+OlKUv7GU8ksd5f+w9ugvd+989eXC/Bey/HJH+Vcf7D+x9uMdKwrvz/TcCnI6+TH1s233HvvkuWXn3zfR6lnXMvdk97+3o/pvnDzaM1g9eKiw/tXZ/enrKP+7G2778c2v9x8vzA9Zfn9H+RsmH36+Z7R6ZWH+ofp3oFKboR3Mn18nrv1mdPTnsaL8r7L7P9giP7bNf2N89/WvLd61pnB+rsvuz1DK7zuj+u+47MD2ger+S4rWzrjnbP1yApyblqb/sZ5J/XbvmftmSi3fMxeq6X3hpbGu+i/QQPoMns0T5cyeZ9E/mA8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/MUOHJAAAAAACPr/uh2BAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBTAQAA//9hRxeo") prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mount$bind(0x0, 0x0, 0x0, 0x21, 0x0) 44.702319646s ago: executing program 2 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x44}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 29.035503063s ago: executing program 35 (id=1850): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = syz_io_uring_setup(0x109, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x44}) io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0) 19.708365409s ago: executing program 6 (id=1891): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 18.427905699s ago: executing program 6 (id=1893): socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x7a, 0x0, &(0x7f0000000040)) 15.651761545s ago: executing program 6 (id=1896): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) 13.26243531s ago: executing program 6 (id=1901): chdir(0x0) r0 = creat(&(0x7f0000000540)='./file0\x00', 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 12.225968744s ago: executing program 4 (id=1903): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="02070c070200000028bd7000fcdbdf258a017ef2b7cdf9352dc9e219ac522faf036333d37de7d809bf822223ae239b028043c7efa5447ef110e0e88d79ae1b4ceb41db009b2b619ef9c8edfeddf16f41decc9aa1118f6c5203e6f468e14adbc76e7b61224c5c1c3830bb4325245905145aeebd924d10c7583953c169f097e223dcee1015f0bc36cf37aa1b6a1509860cb6eb4f0374edfe8547f33a7ae7ee3aad48d1a4236cbf954de6e7a3d961"], 0x10}}, 0x4400c030) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000440)=0xd, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x8, 0xfff00000}, {0x16, 0x10, 0x1c, 0x4f}]}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) futex_waitv(&(0x7f0000002040)=[{0x0, &(0x7f0000001580)=0x7, 0x2}, {0x800, &(0x7f00000015c0)=0x4, 0x2}, {0x9, &(0x7f0000001600)=0x3, 0x82}, {0x1, &(0x7f0000001640)=0x6, 0x2}, {0x9, &(0x7f0000001680)=0x2000000000000000, 0x2}], 0x5, 0x0, &(0x7f0000002480)={0x0, 0x989680}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1100000004000000000000000900000000010000", @ANYRES32=r6, @ANYBLOB="000200000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 12.077618506s ago: executing program 6 (id=1904): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000003000/0x18000)=nil, 0x0, 0x0, 0x43, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00003e1000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x40, 0x0, 0x0) syz_usb_connect(0x9, 0x4bb, &(0x7f0000000780)=ANY=[@ANYBLOB], &(0x7f0000000180)={0xa, &(0x7f0000000000)={0xa, 0x6, 0x110, 0x5, 0x1, 0x3, 0x20, 0x8}, 0x19, &(0x7f0000000040)=ANY=[@ANYBLOB]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000100)='./file0\x00', 0x10, &(0x7f0000000280)=ANY=[], 0xfc, 0x5a84, &(0x7f000000c100)="$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") sync() socket$inet6_tcp(0xa, 0x1, 0x0) close(0xffffffffffffffff) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r0, &(0x7f0000001240)="89", 0x1, 0xc040840, 0x0, 0x0) mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0) 11.957805557s ago: executing program 7 (id=1905): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f0000000480)=""/140, &(0x7f00000000c0)=0x8c) prlimit64(0x0, 0xe, 0x0, 0x0) close(0xffffffffffffffff) execve(0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(0xffffffffffffffff, 0x0, 0x61, 0x0, 0x48) io_setup(0x7ffe, &(0x7f0000000300)) r4 = gettid() r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r5, 0x0, 0x0) write$rfkill(r5, &(0x7f0000000340)={0x53, 0x8, 0x0, 0x1, 0xcc}, 0x8) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.481369197s ago: executing program 4 (id=1907): creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 9.30333311s ago: executing program 7 (id=1908): r0 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TIOCSTI(r0, 0x5412, 0x0) 8.045433803s ago: executing program 7 (id=1909): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffff9c, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x700) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 7.94312225s ago: executing program 4 (id=1910): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 7.685968868s ago: executing program 6 (id=1911): sendmsg(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0}) 7.567580864s ago: executing program 5 (id=1912): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) 7.126467565s ago: executing program 7 (id=1913): chdir(0x0) r0 = creat(0x0, 0x0) close(r0) r1 = socket$packet(0x11, 0x3, 0x300) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000640), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 6.753468429s ago: executing program 5 (id=1914): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10rust\xe3cusg\x91\xdeeH\xe5+\xf0', 0xffffffffffffffff) 6.319056901s ago: executing program 7 (id=1915): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x1005e, 0x43, 0x1, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600), &(0x7f0000001600), 0x1, r0}, 0x38) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup(0xffffffffffffffff) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_emit_ethernet(0x4a, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, 0x0, 0x0) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) dup2(0xffffffffffffffff, 0xffffffffffffffff) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x2000000, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}}, 0x24}}, 0x0) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_CPUID(0xffffffffffffffff, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB]) 6.035060655s ago: executing program 5 (id=1916): r0 = socket$key(0xf, 0x3, 0x2) socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="02070c070200000028bd7000fcdbdf258a017ef2b7cdf9352dc9e219ac522faf036333d37de7d809bf822223ae239b028043c7efa5447ef110e0e88d79ae1b4ceb41db009b2b619ef9c8edfeddf16f41decc9aa1118f6c5203e6f468e14adbc76e7b61224c5c1c3830bb4325245905145aeebd924d10c7583953c169f097e223dcee1015f0bc36cf37aa1b6a1509860cb6eb4f0374edfe8547f33a7ae7ee3aad48d1a4236cbf954de6e7a3d961"], 0x10}}, 0x4400c030) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r1, 0x10e, 0x8, &(0x7f0000000440)=0xd, 0x4) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r1) r2 = socket$inet6(0x10, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x8, 0xfff00000}, {0x16, 0x10, 0x1c, 0x4f}]}, 0x10) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) close(0x4) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000500), 0x28002) r5 = dup(r4) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') mount$9p_fd(0x0, &(0x7f00000001c0)='.\x00', &(0x7f0000000180), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}}) fsopen(&(0x7f0000000280)='ceph\x00', 0x0) futex_waitv(&(0x7f0000002040)=[{0x0, &(0x7f0000001580)=0x7, 0x2}, {0x800, &(0x7f00000015c0)=0x4, 0x2}, {0x9, &(0x7f0000001600)=0x3, 0x82}, {0x1, &(0x7f0000001640)=0x6, 0x2}, {0x9, &(0x7f0000001680)=0x2000000000000000, 0x2}], 0x5, 0x0, &(0x7f0000002480)={0x0, 0x989680}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1100000004000000000000000900000000010000", @ANYRES32=r6, @ANYBLOB="000200000000008000"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000020000000100"/28], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000000040), 0x3, 0x1, 0x4}, 0x38) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r7, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) 5.797427204s ago: executing program 4 (id=1917): r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) fallocate(r0, 0x0, 0xfc01, 0x1000f4) 3.442005376s ago: executing program 4 (id=1918): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@upd={0xe0, 0x12, 0x2, 0x0, 0x0, {{'ccm_base(rfc3686(cryptd(ctr-aes-neon)),hmac(sha1-avx2))\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x1}, 0x881) r1 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000001600)) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x47, '\x00', 0x0, @fallback=0x23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff8c, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000040)={'pim6reg1\x00', {0x2, 0x4e23, @loopback}}) 2.741865248s ago: executing program 5 (id=1919): creat(&(0x7f00000002c0)='./file0\x00', 0x109) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1, 0x1}}, 0x40) r1 = open$dir(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) 1.682215724s ago: executing program 5 (id=1920): r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) munmap(&(0x7f0000001000/0x2000)=nil, 0x2000) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) 1.601307959s ago: executing program 4 (id=1921): syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000040)='./file1\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0x625f, &(0x7f00000072c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x103041, 0x10) pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f0000000080)="ff", 0xfdef}], 0x1, 0xe7b, 0x0, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl$Q_SETQUOTA(0xffffffff80000900, &(0x7f0000000c80)=@loop={'/dev/loop', 0x0}, r1, 0x0) setxattr$security_capability(&(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000080)=@v3={0x3000000, [{0x10000, 0xf115}, {0x20003, 0x2d36}], r1}, 0x18, 0x0) 921.333353ms ago: executing program 5 (id=1922): socket$can_j1939(0x1d, 0x2, 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000200), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_sctp(0x2, 0x1, 0x84) socket(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) openat$ptmx(0xffffffffffffff9c, 0x0, 0x41, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x700) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000080), 0xfffffebe}], 0x1) 0s ago: executing program 7 (id=1923): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[], &(0x7f0000000180), 0x0) kernel console output (not intermixed with test programs): oduct=c101, bcdDevice=f9.f9 [ 753.221454][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 753.230787][ T11] usb 3-1: Product: syz [ 753.235184][ T11] usb 3-1: Manufacturer: syz [ 753.240081][ T11] usb 3-1: SerialNumber: syz [ 753.356430][ T11] usb 3-1: config 0 descriptor?? [ 753.366439][ T9744] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 755.133745][ T11] usb 3-1: USB disconnect, device number 49 [ 756.740761][ T11] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 756.918446][ T11] usb 6-1: Using ep0 maxpacket: 8 [ 756.945610][ T11] usb 6-1: config 0 has no interfaces? [ 756.951891][ T11] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 756.962057][ T11] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 757.082932][ T11] usb 6-1: config 0 descriptor?? [ 757.340455][ T9676] usb 6-1: USB disconnect, device number 6 [ 757.709769][ T11] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 757.809054][ T4215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 757.817196][ T4215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 757.869903][ T11] usb 3-1: Using ep0 maxpacket: 32 [ 757.915172][ T11] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 757.924377][ T11] usb 3-1: config 1 has no interface number 0 [ 757.931080][ T11] usb 3-1: config 1 interface 242 has no altsetting 0 [ 757.982894][ T11] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 757.992579][ T11] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.001914][ T11] usb 3-1: Product: syz [ 758.006289][ T11] usb 3-1: Manufacturer: syz [ 758.012386][ T11] usb 3-1: SerialNumber: syz [ 758.034663][ T14] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.043182][ T14] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.088544][ T5857] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 758.270412][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 758.282443][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 758.292938][ T5857] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 758.302513][ T5857] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 758.420083][ T5857] usb 5-1: config 0 descriptor?? [ 758.915922][ T5857] cp2112 0003:10C4:EA90.0021: unknown main item tag 0x0 [ 759.858676][ T11] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 759.870893][ T11] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 760.855538][ T5857] cp2112 0003:10C4:EA90.0021: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 760.869878][ T11] usb 3-1: USB disconnect, device number 50 [ 761.882429][ T5857] cp2112 0003:10C4:EA90.0021: error requesting version [ 762.884638][ T5857] cp2112 0003:10C4:EA90.0021: probe with driver cp2112 failed with error -71 [ 763.600887][ T5857] usb 5-1: USB disconnect, device number 29 [ 765.212278][ T9807] fido_id[9807]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 765.644653][ T9676] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 765.889347][ T9676] usb 6-1: Using ep0 maxpacket: 32 [ 766.552603][ T9676] usb 6-1: config 0 has an invalid interface association descriptor of length 5, skipping [ 766.566126][ T9676] usb 6-1: config 0 has an invalid interface number: 230 but max is 1 [ 766.575666][ T9676] usb 6-1: config 0 has no interface number 1 [ 766.582374][ T9676] usb 6-1: config 0 interface 0 altsetting 192 bulk endpoint 0x9 has invalid maxpacket 16 [ 766.592767][ T9676] usb 6-1: config 0 interface 0 has no altsetting 0 [ 766.599794][ T9676] usb 6-1: config 0 interface 230 has no altsetting 0 [ 772.712199][ T9676] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice=f9.f9 [ 772.721846][ T9676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.305543][ T9676] usb 6-1: config 0 descriptor?? [ 773.642099][ T9676] usb 6-1: can't set config #0, error -71 [ 773.652262][ T9676] usb 6-1: USB disconnect, device number 7 [ 774.031906][ T9837] loop6: detected capacity change from 0 to 2048 [ 774.081082][ T9676] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 774.300204][ T9676] usb 6-1: Using ep0 maxpacket: 8 [ 774.311064][ T9837] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 774.334846][ T9676] usb 6-1: config 0 has no interfaces? [ 774.341004][ T9676] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 774.353683][ T9676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.411001][ T9676] usb 6-1: config 0 descriptor?? [ 774.717339][ T11] usb 6-1: USB disconnect, device number 8 [ 775.023063][ T9676] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 775.239812][ T9676] usb 3-1: Using ep0 maxpacket: 32 [ 775.300113][ T9676] usb 3-1: config 1 has an invalid interface number: 242 but max is 0 [ 775.310372][ T9676] usb 3-1: config 1 has no interface number 0 [ 775.316759][ T9676] usb 3-1: config 1 interface 242 has no altsetting 0 [ 775.468723][ T9676] usb 3-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 775.481404][ T9676] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 775.490754][ T9676] usb 3-1: Product: syz [ 775.495180][ T9676] usb 3-1: Manufacturer: syz [ 775.500235][ T9676] usb 3-1: SerialNumber: syz [ 775.688640][ T24] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 775.920848][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.932527][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 775.943073][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 775.952801][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.222767][ T24] usb 7-1: config 0 descriptor?? [ 776.511569][ T9676] aqc111 3-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 776.524308][ T9676] aqc111 3-1:1.242: probe with driver aqc111 failed with error -71 [ 776.666064][ T9676] usb 3-1: USB disconnect, device number 51 [ 776.718987][ T24] cp2112 0003:10C4:EA90.0022: unknown main item tag 0x0 [ 776.815279][ T24] cp2112 0003:10C4:EA90.0022: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0 [ 777.367602][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 777.375824][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 777.802141][ T9866] loop5: detected capacity change from 0 to 40427 [ 777.821760][ T24] cp2112 0003:10C4:EA90.0022: error requesting version [ 777.840828][ T24] cp2112 0003:10C4:EA90.0022: probe with driver cp2112 failed with error -71 [ 777.862078][ T24] usb 7-1: USB disconnect, device number 12 [ 777.931176][ T9866] F2FS-fs (loop5): invalid crc value [ 778.259748][ T9866] F2FS-fs (loop5): Start checkpoint disabled! [ 778.299641][ T9866] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 778.834959][ T9870] fido_id[9870]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/report_descriptor': No such file or directory [ 779.363538][ T24] usb 7-1: new full-speed USB device number 13 using dummy_hcd [ 779.590073][ T24] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 779.600678][ T24] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 779.746104][ T24] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 779.755647][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.764205][ T24] usb 7-1: Product: syz [ 779.772212][ T24] usb 7-1: Manufacturer: syz [ 779.777067][ T24] usb 7-1: SerialNumber: syz [ 780.214796][ T24] usb 7-1: 0:2 : does not exist [ 780.705946][ T4837] kworker/u8:21: attempt to access beyond end of device [ 780.705946][ T4837] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 780.722242][ T4837] CPU: 0 UID: 0 PID: 4837 Comm: kworker/u8:21 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 780.722380][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 780.722480][ T4837] Workqueue: writeback wb_workfn (flush-7:5) [ 780.722701][ T4837] Call Trace: [ 780.722749][ T4837] [ 780.722800][ T4837] __dump_stack+0x26/0x30 [ 780.722959][ T4837] dump_stack_lvl+0x1df/0x270 [ 780.723141][ T4837] dump_stack+0x1e/0x25 [ 780.723307][ T4837] f2fs_handle_critical_error+0xa6f/0xc20 [ 780.723499][ T4837] f2fs_stop_checkpoint+0x60/0x70 [ 780.723654][ T4837] f2fs_write_end_io+0xd98/0x1e20 [ 780.723836][ T4837] ? f2fs_write_end_io+0xa51/0x1e20 [ 780.724004][ T4837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 780.724166][ T4837] bio_endio+0xe05/0xf60 [ 780.724328][ T4837] submit_bio_noacct+0x214/0x2710 [ 780.724561][ T4837] submit_bio+0x5a9/0x5d0 [ 780.724755][ T4837] f2fs_submit_write_bio+0x92/0x250 [ 780.724902][ T4837] __submit_merged_bio+0x16f/0x6a0 [ 780.725042][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.725235][ T4837] __submit_merged_write_cond+0x458/0x9a0 [ 780.725402][ T4837] f2fs_write_data_pages+0x509a/0x58e0 [ 780.725686][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.725916][ T4837] ? put_system+0x270/0x2c0 [ 780.726089][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.726264][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.726440][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.726634][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.726822][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.727017][ T4837] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 780.727197][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.727370][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.727552][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.727726][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.727908][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.728089][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 780.728270][ T4837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 780.728426][ T4837] do_writepages+0x448/0xcb0 [ 780.728608][ T4837] ? stack_depot_save_flags+0x35/0x7c0 [ 780.728739][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.728961][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.729179][ T4837] __writeback_single_inode+0x101/0x1190 [ 780.729351][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.729568][ T4837] writeback_sb_inodes+0xaa9/0x1c90 [ 780.729895][ T4837] wb_writeback+0x4ce/0xc00 [ 780.730076][ T4837] ? queue_io+0x401/0x790 [ 780.730241][ T4837] wb_workfn+0x397/0x1910 [ 780.730441][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 780.730679][ T4837] ? __pfx_wb_workfn+0x10/0x10 [ 780.730877][ T4837] process_scheduled_works+0xb97/0x1d90 [ 780.731135][ T4837] worker_thread+0xedf/0x1590 [ 780.731373][ T4837] kthread+0xd59/0xf00 [ 780.731546][ T4837] ? __pfx_worker_thread+0x10/0x10 [ 780.731735][ T4837] ? __pfx_kthread+0x10/0x10 [ 780.731931][ T4837] ret_from_fork+0x6e/0x90 [ 780.732135][ T4837] ? __pfx_kthread+0x10/0x10 [ 780.732313][ T4837] ret_from_fork_asm+0x1a/0x30 [ 780.732515][ T4837] [ 781.042035][ T4837] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 781.713372][ T24] usb 7-1: USB disconnect, device number 13 [ 782.511632][ T8501] udevd[8501]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 783.399614][ T24] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 783.658944][ T24] usb 7-1: Using ep0 maxpacket: 8 [ 783.708412][ T24] usb 7-1: config 0 has no interfaces? [ 783.714247][ T24] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 783.723726][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.780438][ T24] usb 7-1: config 0 descriptor?? [ 784.019363][ T9897] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1270'. [ 784.090732][ T9906] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 784.096927][ T9906] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 784.138718][ T9906] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 784.144991][ T9906] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 784.149706][ T24] usb 5-1: new full-speed USB device number 30 using dummy_hcd [ 784.197901][ T9906] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 784.204488][ T9906] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 784.231470][ T5857] usb 7-1: USB disconnect, device number 14 [ 784.319156][ T8713] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 784.435097][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 784.461557][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 784.471114][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.479705][ T24] usb 5-1: Product: syz [ 784.484074][ T24] usb 5-1: Manufacturer: syz [ 784.492046][ T24] usb 5-1: SerialNumber: syz [ 784.523448][ T8713] usb 8-1: Using ep0 maxpacket: 32 [ 784.569169][ T8713] usb 8-1: config 1 has an invalid interface number: 242 but max is 0 [ 784.577815][ T8713] usb 8-1: config 1 has no interface number 0 [ 784.587296][ T8713] usb 8-1: config 1 interface 242 has no altsetting 0 [ 784.677821][ T8713] usb 8-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 784.690609][ T8713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.700038][ T8713] usb 8-1: Product: syz [ 784.704450][ T8713] usb 8-1: Manufacturer: syz [ 784.709427][ T8713] usb 8-1: SerialNumber: syz [ 785.062082][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 785.511750][ T24] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 785.686831][ T8713] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 785.699193][ T8713] aqc111 8-1:1.242: probe with driver aqc111 failed with error -71 [ 785.765418][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.777536][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 785.787974][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 785.797585][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.799691][ T8713] usb 8-1: USB disconnect, device number 2 [ 786.032226][ T24] usb 3-1: config 0 descriptor?? [ 786.540654][ T24] cp2112 0003:10C4:EA90.0023: unknown main item tag 0x0 [ 786.652532][ T24] cp2112 0003:10C4:EA90.0023: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 786.731116][ T24] cp2112 0003:10C4:EA90.0023: error requesting version [ 786.784724][ T24] cp2112 0003:10C4:EA90.0023: probe with driver cp2112 failed with error -71 [ 786.915336][ T24] usb 3-1: USB disconnect, device number 52 [ 786.963387][ C1] usblp0: nonzero write bulk status received: -71 [ 787.004841][ T8584] usb 5-1: USB disconnect, device number 30 [ 787.114171][ T8584] usblp0: removed [ 787.154081][ T9927] loop5: detected capacity change from 0 to 1024 [ 787.318374][ T9676] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 787.569705][ T9676] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 787.580448][ T9676] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 787.590476][ T9676] usb 8-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 787.599970][ T9676] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 787.640742][ T9928] fido_id[9928]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 787.767320][ T9676] usb 8-1: config 0 descriptor?? [ 787.922142][ T14] hfsplus: bad catalog file entry [ 788.042946][ T9676] usb 8-1: USB disconnect, device number 3 [ 789.038640][ T9676] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 789.104720][ T9937] loop2: detected capacity change from 0 to 40427 [ 789.173711][ T9937] F2FS-fs (loop2): invalid crc value [ 789.328924][ T9676] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.339948][ T9676] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 789.485017][ T9676] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 789.495042][ T9676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 789.506330][ T9676] usb 6-1: Product: syz [ 789.512135][ T9676] usb 6-1: Manufacturer: syz [ 789.516945][ T9676] usb 6-1: SerialNumber: syz [ 789.563951][ T9937] F2FS-fs (loop2): Start checkpoint disabled! [ 789.648719][ T9937] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 789.881543][ T9676] usb 6-1: 0:2 : does not exist [ 790.313081][ T9676] usb 6-1: USB disconnect, device number 9 [ 790.884724][ T6215] udevd[6215]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 791.570065][ T9573] kworker/u8:3: attempt to access beyond end of device [ 791.570065][ T9573] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 791.584875][ T9573] CPU: 0 UID: 0 PID: 9573 Comm: kworker/u8:3 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 791.585030][ T9573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 791.585143][ T9573] Workqueue: writeback wb_workfn (flush-7:2) [ 791.585349][ T9573] Call Trace: [ 791.585395][ T9573] [ 791.585440][ T9573] __dump_stack+0x26/0x30 [ 791.585590][ T9573] dump_stack_lvl+0x1df/0x270 [ 791.585749][ T9573] dump_stack+0x1e/0x25 [ 791.585887][ T9573] f2fs_handle_critical_error+0xa6f/0xc20 [ 791.586074][ T9573] f2fs_stop_checkpoint+0x60/0x70 [ 791.586235][ T9573] f2fs_write_end_io+0xd98/0x1e20 [ 791.586415][ T9573] ? f2fs_write_end_io+0xa51/0x1e20 [ 791.586584][ T9573] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 791.586738][ T9573] bio_endio+0xe05/0xf60 [ 791.586893][ T9573] submit_bio_noacct+0x214/0x2710 [ 791.587096][ T9573] submit_bio+0x5a9/0x5d0 [ 791.587266][ T9573] f2fs_submit_write_bio+0x92/0x250 [ 791.587412][ T9573] __submit_merged_bio+0x16f/0x6a0 [ 791.587552][ T9573] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 791.587747][ T9573] __submit_merged_write_cond+0x458/0x9a0 [ 791.587914][ T9573] f2fs_write_data_pages+0x509a/0x58e0 [ 791.588250][ T9573] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 791.588440][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.588634][ T9573] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 791.588844][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.589042][ T9573] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 791.589244][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.589441][ T9573] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 791.589647][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.589864][ T9573] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 791.590056][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.590304][ T9573] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 791.590521][ T9573] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 791.590708][ T9573] do_writepages+0x448/0xcb0 [ 791.590921][ T9573] ? stack_depot_save_flags+0x35/0x7c0 [ 791.591081][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.591320][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.591544][ T9573] __writeback_single_inode+0x101/0x1190 [ 791.591722][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.591942][ T9573] writeback_sb_inodes+0xaa9/0x1c90 [ 791.592269][ T9573] wb_writeback+0x4ce/0xc00 [ 791.592445][ T9573] ? queue_io+0x401/0x790 [ 791.592620][ T9573] wb_workfn+0x397/0x1910 [ 791.592843][ T9573] ? kmsan_get_metadata+0x105/0x1b0 [ 791.593078][ T9573] ? __pfx_wb_workfn+0x10/0x10 [ 791.593291][ T9573] process_scheduled_works+0xb97/0x1d90 [ 791.593536][ T9573] worker_thread+0xedf/0x1590 [ 791.593749][ T9573] kthread+0xd59/0xf00 [ 791.593935][ T9573] ? __pfx_worker_thread+0x10/0x10 [ 791.594142][ T9573] ? __pfx_kthread+0x10/0x10 [ 791.594316][ T9573] ret_from_fork+0x6e/0x90 [ 791.594492][ T9573] ? __pfx_kthread+0x10/0x10 [ 791.594667][ T9573] ret_from_fork_asm+0x1a/0x30 [ 791.594869][ T9573] [ 791.887534][ T9573] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 791.984294][ T9958] loop6: detected capacity change from 0 to 32768 [ 791.994288][ T9958] XFS: noikeep mount option is deprecated. [ 792.193502][ T9958] XFS (loop6): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 792.328332][ T9676] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 792.608730][ T9676] usb 8-1: Using ep0 maxpacket: 32 [ 792.663028][ T9676] usb 8-1: config 1 has an invalid interface number: 242 but max is 0 [ 792.680475][ T9676] usb 8-1: config 1 has no interface number 0 [ 792.681495][ T8713] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 792.686736][ T9676] usb 8-1: config 1 interface 242 has no altsetting 0 [ 792.766580][ T9958] XFS (loop6): Ending clean mount [ 792.793388][ T9958] XFS (loop6): Quotacheck needed: Please wait. [ 792.875784][ T9958] XFS (loop6): Quotacheck: Done. [ 792.930429][ T8713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 792.942160][ T8713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 792.945838][ T9676] usb 8-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 792.952390][ T8713] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 792.961558][ T9676] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 792.961683][ T9676] usb 8-1: Product: syz [ 792.961778][ T9676] usb 8-1: Manufacturer: syz [ 792.961873][ T9676] usb 8-1: SerialNumber: syz [ 792.997997][ T8713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.579107][ T8584] usb 5-1: new full-speed USB device number 31 using dummy_hcd [ 793.610729][ T8713] usb 6-1: config 0 descriptor?? [ 793.680055][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1290'. [ 793.690361][ T9983] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1290'. [ 793.727562][ T9983] bond0: entered promiscuous mode [ 793.733004][ T9983] bond_slave_0: entered promiscuous mode [ 793.740062][ T9983] bond_slave_1: entered promiscuous mode [ 793.861170][ T9983] bond0: left promiscuous mode [ 793.866489][ T9983] bond_slave_0: left promiscuous mode [ 793.874314][ T9983] bond_slave_1: left promiscuous mode [ 793.918692][ T8584] usb 5-1: config 1 interface 0 has no altsetting 0 [ 793.942028][ T9676] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 793.954112][ T9676] aqc111 8-1:1.242: probe with driver aqc111 failed with error -71 [ 794.012859][ T8584] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 794.023606][ T8584] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 794.032253][ T8584] usb 5-1: Product: syz [ 794.036643][ T8584] usb 5-1: Manufacturer: syz [ 794.041604][ T8584] usb 5-1: SerialNumber: syz [ 794.054079][ T9676] usb 8-1: USB disconnect, device number 4 [ 794.121931][ T8713] cp2112 0003:10C4:EA90.0024: unknown main item tag 0x0 [ 794.212679][ T8713] cp2112 0003:10C4:EA90.0024: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.5-1/input0 [ 794.362762][ T8713] cp2112 0003:10C4:EA90.0024: error requesting version [ 794.419799][ T8713] cp2112 0003:10C4:EA90.0024: probe with driver cp2112 failed with error -71 [ 794.467278][ T8713] usb 6-1: USB disconnect, device number 10 [ 794.571342][ T8584] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 795.074458][ T9985] fido_id[9985]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 795.320496][ T8461] XFS (loop6): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 796.459783][ C1] usblp0: nonzero write bulk status received: -71 [ 796.470607][ T8713] usb 5-1: USB disconnect, device number 31 [ 796.542724][ T8713] usblp0: removed [ 797.400988][T10007] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1297'. [ 798.412427][T10018] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1301'. [ 798.614627][ T9676] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 799.266334][T10015] loop7: detected capacity change from 0 to 40427 [ 799.347001][T10015] F2FS-fs (loop7): invalid crc value [ 799.599614][T10021] loop4: detected capacity change from 0 to 32768 [ 799.610028][T10021] XFS: noikeep mount option is deprecated. [ 799.641954][ T9676] usb 6-1: Using ep0 maxpacket: 32 [ 799.670207][T10015] F2FS-fs (loop7): Start checkpoint disabled! [ 799.697690][ T9676] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 799.706709][ T9676] usb 6-1: config 1 has no interface number 0 [ 799.713256][ T9676] usb 6-1: config 1 interface 242 has no altsetting 0 [ 799.805495][T10021] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 799.857859][T10015] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 799.882667][ T9676] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 799.892357][ T9676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.900867][ T9676] usb 6-1: Product: syz [ 799.905286][ T9676] usb 6-1: Manufacturer: syz [ 799.910378][ T9676] usb 6-1: SerialNumber: syz [ 800.448984][ T24] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 800.647231][T10021] XFS (loop4): Ending clean mount [ 800.710332][T10021] XFS (loop4): Quotacheck needed: Please wait. [ 800.757828][T10021] XFS (loop4): Quotacheck: Done. [ 800.773323][ T24] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 800.784289][ T24] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 800.794675][ T24] usb 7-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 800.799036][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 800.805148][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.813968][T10037] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1304'. [ 800.845830][T10037] bond0: entered promiscuous mode [ 800.851395][T10037] bond_slave_0: entered promiscuous mode [ 800.858397][T10037] bond_slave_1: entered promiscuous mode [ 800.929211][T10037] bond0: left promiscuous mode [ 800.934573][T10037] bond_slave_0: left promiscuous mode [ 800.942488][T10037] bond_slave_1: left promiscuous mode [ 801.094941][ T9676] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 801.107031][ T9676] aqc111 6-1:1.242: probe with driver aqc111 failed with error -71 [ 801.151930][ T24] usb 7-1: config 0 descriptor?? [ 801.626417][ T24] usb 7-1: USB disconnect, device number 15 [ 801.636471][ T9676] usb 6-1: USB disconnect, device number 11 [ 801.693592][ T4837] kworker/u8:21: attempt to access beyond end of device [ 801.693592][ T4837] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 801.709283][ T4837] CPU: 1 UID: 0 PID: 4837 Comm: kworker/u8:21 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 801.709441][ T4837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 801.709538][ T4837] Workqueue: writeback wb_workfn (flush-7:7) [ 801.709744][ T4837] Call Trace: [ 801.709791][ T4837] [ 801.709838][ T4837] __dump_stack+0x26/0x30 [ 801.709987][ T4837] dump_stack_lvl+0x1df/0x270 [ 801.710187][ T4837] dump_stack+0x1e/0x25 [ 801.710350][ T4837] f2fs_handle_critical_error+0xa6f/0xc20 [ 801.710580][ T4837] f2fs_stop_checkpoint+0x60/0x70 [ 801.710765][ T4837] f2fs_write_end_io+0xd98/0x1e20 [ 801.710978][ T4837] ? f2fs_write_end_io+0xa51/0x1e20 [ 801.711179][ T4837] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 801.711377][ T4837] bio_endio+0xe05/0xf60 [ 801.711536][ T4837] submit_bio_noacct+0x214/0x2710 [ 801.711745][ T4837] submit_bio+0x5a9/0x5d0 [ 801.711903][ T4837] f2fs_submit_write_bio+0x92/0x250 [ 801.712050][ T4837] __submit_merged_bio+0x16f/0x6a0 [ 801.712196][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.712391][ T4837] __submit_merged_write_cond+0x458/0x9a0 [ 801.712554][ T4837] f2fs_write_data_pages+0x509a/0x58e0 [ 801.712876][ T4837] ? f2fs_balance_fs_bg+0x11e7/0x1240 [ 801.713009][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.713181][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.713357][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.713528][ T4837] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 801.713710][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.713880][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.714061][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.714236][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.714416][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.714597][ T4837] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 801.714778][ T4837] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 801.714936][ T4837] do_writepages+0x448/0xcb0 [ 801.715118][ T4837] ? stack_depot_save_flags+0x35/0x7c0 [ 801.715252][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.715433][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.715627][ T4837] __writeback_single_inode+0x101/0x1190 [ 801.715778][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.715966][ T4837] writeback_sb_inodes+0xaa9/0x1c90 [ 801.716238][ T4837] wb_writeback+0x4ce/0xc00 [ 801.716386][ T4837] ? queue_io+0x401/0x790 [ 801.716522][ T4837] wb_workfn+0x397/0x1910 [ 801.716698][ T4837] ? kmsan_get_metadata+0x105/0x1b0 [ 801.716914][ T4837] ? __pfx_wb_workfn+0x10/0x10 [ 801.717092][ T4837] process_scheduled_works+0xb97/0x1d90 [ 801.717324][ T4837] worker_thread+0xedf/0x1590 [ 801.717526][ T4837] kthread+0xd59/0xf00 [ 801.717691][ T4837] ? __pfx_worker_thread+0x10/0x10 [ 801.717866][ T4837] ? __pfx_kthread+0x10/0x10 [ 801.718035][ T4837] ret_from_fork+0x6e/0x90 [ 801.718202][ T4837] ? __pfx_kthread+0x10/0x10 [ 801.718366][ T4837] ret_from_fork_asm+0x1a/0x30 [ 801.718555][ T4837] [ 802.013249][ T4837] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 804.358541][ T5799] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab [ 804.384871][T10057] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1311'. [ 805.379299][T10070] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1314'. [ 805.423901][T10064] loop5: detected capacity change from 0 to 1024 [ 805.509838][ T9676] usb 5-1: new full-speed USB device number 32 using dummy_hcd [ 805.717628][ T9676] usb 5-1: config 1 interface 0 has no altsetting 0 [ 805.728514][ T24] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 805.836317][ T9676] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 805.846091][ T9676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 805.854715][ T9676] usb 5-1: Product: syz [ 805.859269][ T9676] usb 5-1: Manufacturer: syz [ 805.864127][ T9676] usb 5-1: SerialNumber: syz [ 805.872803][ T8713] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 805.976116][ T24] usb 8-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 805.989670][ T24] usb 8-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 806.000252][ T24] usb 8-1: config 220 interface 0 has no altsetting 0 [ 806.111840][T10075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'. [ 806.122081][T10075] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1317'. [ 806.128325][ T8713] usb 7-1: Using ep0 maxpacket: 32 [ 806.157873][T10075] bond0: entered promiscuous mode [ 806.163829][T10075] bond_slave_0: entered promiscuous mode [ 806.171826][T10075] bond_slave_1: entered promiscuous mode [ 806.178440][ T8713] usb 7-1: config 1 has an invalid interface number: 242 but max is 0 [ 806.187082][ T8713] usb 7-1: config 1 has no interface number 0 [ 806.196548][ T8713] usb 7-1: config 1 interface 242 has no altsetting 0 [ 806.253751][ T24] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 806.263562][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.272304][ T24] usb 8-1: Product: syz [ 806.276880][ T24] usb 8-1: Manufacturer: syz [ 806.281993][ T24] usb 8-1: SerialNumber: syz [ 806.322683][T10075] bond0: left promiscuous mode [ 806.327803][T10075] bond_slave_0: left promiscuous mode [ 806.334634][T10075] bond_slave_1: left promiscuous mode [ 806.457210][ T8713] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 806.467366][ T8713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 806.475889][ T8713] usb 7-1: Product: syz [ 806.480389][ T8713] usb 7-1: Manufacturer: syz [ 806.485227][ T8713] usb 7-1: SerialNumber: syz [ 806.622091][ T9676] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 806.807815][ T24] usb 8-1: Found UVC 0.00 device syz (8086:0b07) [ 806.814907][ T24] usb 8-1: No valid video chain found. [ 806.923078][ T24] usb 8-1: USB disconnect, device number 5 [ 807.519087][ T24] usb 6-1: new full-speed USB device number 12 using dummy_hcd [ 807.632895][ T8713] aqc111 7-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71 [ 807.645890][ T8713] aqc111 7-1:1.242: probe with driver aqc111 failed with error -71 [ 807.716916][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 807.717268][ T8713] usb 7-1: USB disconnect, device number 16 [ 807.731240][ T24] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 807.731448][ T24] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 807.757159][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.987019][ T24] usb 6-1: config 0 descriptor?? [ 808.294973][ T24] usb 6-1: USB disconnect, device number 12 [ 808.593404][ T9676] usb 5-1: USB disconnect, device number 32 [ 808.700412][ T9676] usblp0: removed [ 810.148376][T10102] netlink: 136 bytes leftover after parsing attributes in process `syz.7.1325'. [ 810.935409][T10108] loop5: detected capacity change from 0 to 1024 [ 811.387878][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1330'. [ 811.398265][T10118] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1330'. [ 811.510575][ T9676] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 811.541087][T10118] bond0: entered promiscuous mode [ 811.546415][T10118] bond_slave_0: entered promiscuous mode [ 811.554969][T10118] bond_slave_1: entered promiscuous mode [ 811.671792][T10118] bond0: left promiscuous mode [ 811.677111][T10118] bond_slave_0: left promiscuous mode [ 811.683994][T10118] bond_slave_1: left promiscuous mode [ 811.758583][ T9676] usb 5-1: Using ep0 maxpacket: 32 [ 811.823729][ T9676] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 811.835786][ T9676] usb 5-1: config 1 has no interface number 0 [ 811.842506][ T9676] usb 5-1: config 1 interface 242 has no altsetting 0 [ 812.077758][ T9676] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 812.088489][ T9676] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.096762][ T9676] usb 5-1: Product: syz [ 812.102661][ T9676] usb 5-1: Manufacturer: syz [ 812.107502][ T9676] usb 5-1: SerialNumber: syz [ 812.989651][ T9676] aqc111 5-1:1.242: probe with driver aqc111 failed with error -71 [ 813.039972][ T9676] usb 5-1: USB disconnect, device number 33 [ 813.172696][ T8713] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 813.438913][ T8713] usb 6-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 813.448349][ T8713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.448884][ T24] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 813.530672][ T8713] usb 6-1: config 0 descriptor?? [ 813.718780][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 813.794959][ T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 813.804623][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.813225][ T24] usb 3-1: Product: syz [ 813.817686][ T24] usb 3-1: Manufacturer: syz [ 813.822595][ T24] usb 3-1: SerialNumber: syz [ 813.855595][ T8713] usb 6-1: USB disconnect, device number 13 [ 814.637491][ T24] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 53 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 815.059050][T10151] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1339'. [ 815.884424][T10162] loop6: detected capacity change from 0 to 1024 [ 816.367872][T10157] loop7: detected capacity change from 0 to 4096 [ 816.445899][ T8713] usb 3-1: USB disconnect, device number 53 [ 816.464081][T10157] ntfs3(loop7): ino=3, Correct links count -> 2. [ 816.504566][ T8713] usblp0: removed [ 816.610491][ T3568] hfsplus: bad catalog file entry [ 816.697920][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 816.707443][T10167] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1346'. [ 818.611686][ T24] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 818.857254][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 818.911394][ T24] usb 3-1: config 0 has an invalid interface number: 239 but max is 0 [ 818.920223][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 818.930824][ T24] usb 3-1: config 0 has no interface number 0 [ 818.937186][ T24] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 818.947449][ T24] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81 [ 818.959729][ T24] usb 3-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 818.971784][ T24] usb 3-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid wMaxPacketSize 0 [ 818.982147][ T24] usb 3-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 0 [ 818.995643][ T24] usb 3-1: config 0 interface 239 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 819.010076][ T24] usb 3-1: config 0 interface 239 has no altsetting 0 [ 819.140369][ T24] usb 3-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 819.150006][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.159405][ T24] usb 3-1: Product: syz [ 819.163821][ T24] usb 3-1: Manufacturer: syz [ 819.168912][ T24] usb 3-1: SerialNumber: syz [ 819.266440][ T24] usb 3-1: config 0 descriptor?? [ 819.276205][T10173] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 819.341748][ T5797] Bluetooth: hci0: urb ffff88804b5a83c0 submission failed (90) [ 819.743672][ T8713] usb 3-1: USB disconnect, device number 54 [ 822.664386][ T8713] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 822.979524][ T8713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.995183][ T8713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.006675][ T8713] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 823.016301][ T8713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.080463][T10202] loop7: detected capacity change from 0 to 1024 [ 823.338799][ T8713] usb 3-1: config 0 descriptor?? [ 823.748814][ T5857] usb 7-1: new full-speed USB device number 17 using dummy_hcd [ 823.957374][ T8713] cp2112 0003:10C4:EA90.0025: unknown main item tag 0x0 [ 824.143436][ T5857] usb 7-1: config 1 interface 0 has no altsetting 0 [ 825.111872][ T8713] cp2112 0003:10C4:EA90.0025: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 826.113759][ T8713] cp2112 0003:10C4:EA90.0025: error requesting version [ 826.183338][ T8713] cp2112 0003:10C4:EA90.0025: probe with driver cp2112 failed with error -71 [ 826.579927][ T8713] usb 3-1: USB disconnect, device number 55 [ 827.482342][ T7241] hfsplus: bad catalog file entry [ 828.742634][ T5857] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 828.752089][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 828.760553][ T5857] usb 7-1: Product: syz [ 828.764947][ T5857] usb 7-1: Manufacturer: syz [ 828.969402][ T5857] usb 7-1: can't set config #1, error -71 [ 829.013035][ T5857] usb 7-1: USB disconnect, device number 17 [ 829.079508][T10215] fido_id[10215]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 829.259545][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 829.269135][T10226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1362'. [ 829.292929][T10226] bond0: entered promiscuous mode [ 829.298303][T10226] bond_slave_0: entered promiscuous mode [ 829.305085][T10226] bond_slave_1: entered promiscuous mode [ 829.408540][T10226] bond0: left promiscuous mode [ 829.414208][T10226] bond_slave_0: left promiscuous mode [ 829.421519][T10226] bond_slave_1: left promiscuous mode [ 829.559477][ T5857] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 829.788360][ T5857] usb 7-1: Using ep0 maxpacket: 32 [ 829.816563][ T5857] usb 7-1: config 0 has an invalid interface number: 5 but max is 0 [ 829.825911][ T5857] usb 7-1: config 0 has no interface number 0 [ 829.833193][ T5857] usb 7-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 829.848473][ T5857] usb 7-1: config 0 interface 5 has no altsetting 0 [ 829.905592][ T5857] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 829.915172][ T5857] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 829.923523][ T5857] usb 7-1: Product: syz [ 829.928264][ T5857] usb 7-1: Manufacturer: syz [ 829.935077][ T5857] usb 7-1: SerialNumber: syz [ 830.091310][ T5857] usb 7-1: config 0 descriptor?? [ 830.451930][ T5857] radio-si470x 7-1:0.5: could not find interrupt in endpoint [ 830.464750][ T5857] radio-si470x 7-1:0.5: probe with driver radio-si470x failed with error -5 [ 830.518898][ T5857] radio-raremono 7-1:0.5: this is not Thanko's Raremono. [ 830.526932][ T5857] usbhid 7-1:0.5: couldn't find an input interrupt endpoint [ 830.638463][ T5857] usb 7-1: USB disconnect, device number 18 [ 830.749339][ T8501] udevd[8501]: setting mode of /dev/bus/usb/007/018 to 020664 failed: No such file or directory [ 830.829463][ T8501] udevd[8501]: setting owner of /dev/bus/usb/007/018 to uid=0, gid=0 failed: No such file or directory [ 831.731050][T10259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1373'. [ 831.793041][ T8584] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 831.874779][ T24] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 831.990418][ T8584] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 832.005092][ T8584] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 832.147735][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 832.159255][ T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 832.169444][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 832.178883][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 832.233404][ T8584] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 832.243597][ T8584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.252070][ T8584] usb 8-1: Product: syz [ 832.256447][ T8584] usb 8-1: Manufacturer: syz [ 832.261444][ T8584] usb 8-1: SerialNumber: syz [ 832.419312][ T45] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 832.533123][ T24] usb 3-1: config 0 descriptor?? [ 832.626481][ T8584] usb 8-1: 0:2 : does not exist [ 832.633936][ T8584] usb 8-1: unit 3 not found! [ 832.644882][ T45] usb 6-1: config 1 interface 0 has no altsetting 0 [ 832.722596][ T45] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 832.732257][ T45] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 832.740998][ T45] usb 6-1: Product: syz [ 832.745775][ T45] usb 6-1: Manufacturer: syz [ 832.751007][ T45] usb 6-1: SerialNumber: syz [ 832.856816][ T8584] usb 8-1: USB disconnect, device number 6 [ 833.002333][ T24] cp2112 0003:10C4:EA90.0026: unknown main item tag 0x0 [ 833.055243][ T24] cp2112 0003:10C4:EA90.0026: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.2-1/input0 [ 833.237351][ T8501] udevd[8501]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 833.286044][ T24] cp2112 0003:10C4:EA90.0026: error requesting version [ 833.396257][ T24] cp2112 0003:10C4:EA90.0026: probe with driver cp2112 failed with error -71 [ 833.538353][ T24] usb 3-1: USB disconnect, device number 56 [ 833.550549][ T45] usblp 6-1:1.0: usblp0: USB Unidirectional printer dev 14 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 834.206928][T10273] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 834.226734][T10273] bridge0: port 2(bridge_slave_1) entered disabled state [ 834.236337][T10273] bridge0: port 1(bridge_slave_0) entered disabled state [ 834.397819][T10267] fido_id[10267]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 834.958520][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1378'. [ 834.971511][T10278] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1378'. [ 835.012403][T10278] bond0: entered promiscuous mode [ 835.017905][T10278] bond_slave_0: entered promiscuous mode [ 835.025913][T10278] bond_slave_1: entered promiscuous mode [ 835.188766][T10278] bond0: left promiscuous mode [ 835.193990][T10278] bond_slave_0: left promiscuous mode [ 835.201334][T10278] bond_slave_1: left promiscuous mode [ 835.470360][ C0] usblp0: nonzero write bulk status received: -71 [ 835.488381][ T5857] usb 6-1: USB disconnect, device number 14 [ 835.554388][T10260] usblp0: removed [ 836.029888][ T24] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 836.209236][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 836.244088][ T24] usb 7-1: config 0 has an invalid interface number: 5 but max is 0 [ 836.254450][ T24] usb 7-1: config 0 has no interface number 0 [ 836.260992][ T24] usb 7-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 836.272686][ T24] usb 7-1: config 0 interface 5 has no altsetting 0 [ 836.460029][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 836.469696][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 836.477926][ T24] usb 7-1: Product: syz [ 836.482616][ T24] usb 7-1: Manufacturer: syz [ 836.487463][ T24] usb 7-1: SerialNumber: syz [ 836.619801][ T24] usb 7-1: config 0 descriptor?? [ 837.363626][ T24] radio-si470x 7-1:0.5: could not find interrupt in endpoint [ 837.372847][ T24] radio-si470x 7-1:0.5: probe with driver radio-si470x failed with error -5 [ 837.671219][ T24] radio-raremono 7-1:0.5: this is not Thanko's Raremono. [ 837.679662][ T24] usbhid 7-1:0.5: couldn't find an input interrupt endpoint [ 837.806171][ T24] usb 7-1: USB disconnect, device number 19 [ 838.786670][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 838.796468][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 839.498509][ T24] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 839.757414][ T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 839.768942][ T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 839.848505][ T8713] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 839.901008][ T24] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 839.910737][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.919068][ T24] usb 3-1: Product: syz [ 839.923354][ T24] usb 3-1: Manufacturer: syz [ 839.928393][ T24] usb 3-1: SerialNumber: syz [ 840.310043][ T24] usb 3-1: 0:2 : does not exist [ 840.315338][ T24] usb 3-1: unit 3 not found! [ 840.400062][ T8713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.411674][ T8713] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.421964][ T8713] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 840.431450][ T8713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.519721][ T24] usb 3-1: USB disconnect, device number 57 [ 840.771469][ T8713] usb 5-1: config 0 descriptor?? [ 840.825825][ T8501] udevd[8501]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 841.150851][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1391'. [ 841.160477][T10323] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1391'. [ 841.185370][T10323] bond0: entered promiscuous mode [ 841.190913][T10323] bond_slave_0: entered promiscuous mode [ 841.197971][T10323] bond_slave_1: entered promiscuous mode [ 841.235588][ T8713] cp2112 0003:10C4:EA90.0027: unknown main item tag 0x0 [ 841.296251][ T8713] cp2112 0003:10C4:EA90.0027: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 841.309143][T10323] bond0: left promiscuous mode [ 841.316903][T10323] bond_slave_0: left promiscuous mode [ 841.323811][T10323] bond_slave_1: left promiscuous mode [ 841.475530][ T8713] cp2112 0003:10C4:EA90.0027: error requesting version [ 841.515779][ T8713] cp2112 0003:10C4:EA90.0027: probe with driver cp2112 failed with error -71 [ 841.603636][ T8713] usb 5-1: USB disconnect, device number 34 [ 841.829048][ T5857] usb 8-1: new full-speed USB device number 7 using dummy_hcd [ 842.073319][ T5857] usb 8-1: config 1 interface 0 has no altsetting 0 [ 842.129153][ T5857] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 842.142092][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.151030][ T5857] usb 8-1: Product: syz [ 842.155337][ T5857] usb 8-1: Manufacturer: syz [ 842.160172][ T5857] usb 8-1: SerialNumber: syz [ 842.199706][T10328] fido_id[10328]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 842.775501][ T5857] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 7 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 843.238597][ T24] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 843.469725][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 843.530963][ T24] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 843.539614][ T24] usb 5-1: config 0 has no interface number 0 [ 843.546084][ T24] usb 5-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 843.557619][ T24] usb 5-1: config 0 interface 5 has no altsetting 0 [ 843.733365][ T24] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 843.743437][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.752207][ T24] usb 5-1: Product: syz [ 843.756626][ T24] usb 5-1: Manufacturer: syz [ 843.761743][ T24] usb 5-1: SerialNumber: syz [ 843.915970][ T24] usb 5-1: config 0 descriptor?? [ 844.473439][T10350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1398'. [ 844.483412][ T24] radio-si470x 5-1:0.5: could not find interrupt in endpoint [ 844.494307][ T24] radio-si470x 5-1:0.5: probe with driver radio-si470x failed with error -5 [ 844.645151][ T24] radio-raremono 5-1:0.5: this is not Thanko's Raremono. [ 844.653414][ T24] usbhid 5-1:0.5: couldn't find an input interrupt endpoint [ 844.712062][T10352] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1399'. [ 844.765095][ T24] usb 5-1: USB disconnect, device number 35 [ 844.777512][ T8713] usb 8-1: USB disconnect, device number 7 [ 844.867026][ T8713] usblp0: removed [ 847.327952][T10368] loop5: detected capacity change from 0 to 1024 [ 847.552730][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1404'. [ 847.564534][T10370] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1404'. [ 848.108606][ T14] hfsplus: bad catalog file entry [ 848.508986][ T8713] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 848.795780][ T8713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 848.809378][ T8713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 848.821011][ T8713] usb 8-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 848.830572][ T8713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 849.216251][ T8713] usb 8-1: config 0 descriptor?? [ 849.735096][ T8713] usbhid 8-1:0.0: can't add hid device: -71 [ 849.742029][ T8713] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 849.868475][ T8713] usb 8-1: USB disconnect, device number 8 [ 850.499699][T10385] tipc: Started in network mode [ 850.505180][T10385] tipc: Node identity b2e0c3c12a41, cluster identity 4711 [ 850.513483][T10385] tipc: Enabled bearer , priority 0 [ 850.707012][T10389] syzkaller0: entered promiscuous mode [ 850.712768][T10389] syzkaller0: entered allmulticast mode [ 850.721096][T10389] tipc: Resetting bearer [ 850.829154][T10384] tipc: Resetting bearer [ 850.858684][ T24] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 850.907693][T10392] capability: warning: `syz.4.1411' uses deprecated v2 capabilities in a way that may be insecure [ 851.035522][T10384] tipc: Disabling bearer [ 851.086061][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 851.128963][ T24] usb 3-1: config 0 has an invalid interface number: 5 but max is 0 [ 851.137302][ T24] usb 3-1: config 0 has no interface number 0 [ 851.147181][ T24] usb 3-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 851.159640][ T24] usb 3-1: config 0 interface 5 has no altsetting 0 [ 851.299580][ T24] usb 3-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 851.309108][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.317381][ T24] usb 3-1: Product: syz [ 851.322283][ T24] usb 3-1: Manufacturer: syz [ 851.327099][ T24] usb 3-1: SerialNumber: syz [ 851.407000][ T24] usb 3-1: config 0 descriptor?? [ 852.041551][ T24] radio-si470x 3-1:0.5: could not find interrupt in endpoint [ 852.051080][ T24] radio-si470x 3-1:0.5: probe with driver radio-si470x failed with error -5 [ 852.145733][ T24] radio-raremono 3-1:0.5: this is not Thanko's Raremono. [ 852.153883][ T24] usbhid 3-1:0.5: couldn't find an input interrupt endpoint [ 852.290177][ T24] usb 3-1: USB disconnect, device number 58 [ 853.688550][T10415] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1418'. [ 853.697902][T10415] team0: No ports can be present during mode change [ 853.973680][T10426] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1420'. [ 854.154376][T10431] vivid-000: disconnect [ 854.328615][ T8713] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 854.574685][ T24] usb 8-1: new full-speed USB device number 9 using dummy_hcd [ 854.589224][ T8713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 854.601032][ T8713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 854.611377][ T8713] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 854.620803][ T8713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.824375][ T24] usb 8-1: config index 0 descriptor too short (expected 63186, got 210) [ 854.837157][ T24] usb 8-1: config 0 has an invalid interface number: 106 but max is 0 [ 854.847388][ T24] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 854.858050][ T24] usb 8-1: config 0 has no interface number 0 [ 854.864407][ T24] usb 8-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 854.874755][ T24] usb 8-1: config 0 interface 106 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 6 [ 854.888328][ T24] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 854.897747][ T24] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.963588][ T8713] usb 6-1: config 0 descriptor?? [ 855.367607][ T24] usb 8-1: config 0 descriptor?? [ 855.470306][ T8713] usbhid 6-1:0.0: can't add hid device: -71 [ 855.476961][ T8713] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 855.529939][ T8713] usb 6-1: USB disconnect, device number 15 [ 855.556281][ T24] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 856.092604][ T1862] usb 8-1: Failed to submit usb control message: -71 [ 856.100374][ T24] usb 8-1: USB disconnect, device number 9 [ 856.106610][ T1862] usb 8-1: unable to send the bmi data to the device: -71 [ 856.114059][ T1862] usb 8-1: unable to get target info from device [ 856.120763][ T1862] usb 8-1: could not get target info (-71) [ 856.126869][ T1862] usb 8-1: could not probe fw (-71) [ 856.135972][T10431] vivid-000: reconnect [ 856.842270][T10452] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1426'. [ 857.069587][ T8713] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 857.290108][ T8713] usb 5-1: Using ep0 maxpacket: 32 [ 857.338629][ T8713] usb 5-1: config 0 has an invalid interface number: 5 but max is 0 [ 857.347094][ T8713] usb 5-1: config 0 has no interface number 0 [ 857.353724][ T8713] usb 5-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 857.365151][ T8713] usb 5-1: config 0 interface 5 has no altsetting 0 [ 857.531111][ T8713] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 857.540917][ T8713] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 857.549934][ T8713] usb 5-1: Product: syz [ 857.554328][ T8713] usb 5-1: Manufacturer: syz [ 857.559267][ T8713] usb 5-1: SerialNumber: syz [ 857.621863][ T8713] usb 5-1: config 0 descriptor?? [ 858.301330][ T8713] radio-si470x 5-1:0.5: could not find interrupt in endpoint [ 858.309298][ T8713] radio-si470x 5-1:0.5: probe with driver radio-si470x failed with error -5 [ 858.399323][ T8713] radio-raremono 5-1:0.5: this is not Thanko's Raremono. [ 858.407288][ T8713] usbhid 5-1:0.5: couldn't find an input interrupt endpoint [ 858.489800][ T8713] usb 5-1: USB disconnect, device number 36 [ 858.961571][T10467] loop5: detected capacity change from 0 to 8 [ 859.119847][T10469] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1433'. [ 859.133337][T10469] team0: No ports can be present during mode change [ 859.155299][T10467] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 859.247588][ T9976] udevd[9976]: incorrect cramfs checksum on /dev/loop5 [ 859.527263][ T5982] udevd[5982]: incorrect cramfs checksum on /dev/loop5 [ 861.368841][ T24] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 861.586460][T10502] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1441'. [ 861.621929][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 861.633388][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.644211][ T24] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 861.653763][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.839496][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1443'. [ 861.864373][ T24] usb 7-1: config 0 descriptor?? [ 862.135596][ T8713] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 862.409927][ T8713] usb 6-1: Using ep0 maxpacket: 32 [ 862.421203][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 862.428316][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 862.475831][ T8713] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 862.484240][ T8713] usb 6-1: config 0 has no interface number 0 [ 862.490652][ T8713] usb 6-1: config 0 interface 5 altsetting 9 endpoint 0x7 has an invalid bInterval 151, changing to 11 [ 862.502472][ T8713] usb 6-1: config 0 interface 5 has no altsetting 0 [ 862.559832][ T24] usb 7-1: USB disconnect, device number 20 [ 862.665541][ T8713] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 862.676476][ T8713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.685156][ T8713] usb 6-1: Product: syz [ 862.689711][ T8713] usb 6-1: Manufacturer: syz [ 862.694515][ T8713] usb 6-1: SerialNumber: syz [ 862.719477][T10513] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1445'. [ 862.728890][T10513] team0: No ports can be present during mode change [ 862.852449][ T8713] usb 6-1: config 0 descriptor?? [ 863.273079][T10520] Lens B: ================= START STATUS ================= [ 863.281166][T10520] Lens B: Focus, Absolute: 0 [ 863.286240][T10520] Lens B: ================== END STATUS ================== [ 863.305336][ T8713] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 863.313339][ T8713] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 863.624545][ T8713] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 863.633490][ T8713] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 863.814031][ T8713] usb 6-1: USB disconnect, device number 16 [ 865.319575][ T8713] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 865.516572][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1455'. [ 865.526442][T10541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1455'. [ 865.549383][T10541] bond0: entered promiscuous mode [ 865.554631][T10541] bond_slave_0: entered promiscuous mode [ 865.561830][T10541] bond_slave_1: entered promiscuous mode [ 865.713302][ T8713] usb 5-1: Using ep0 maxpacket: 8 [ 865.724912][T10541] bond0: left promiscuous mode [ 865.730444][T10541] bond_slave_0: left promiscuous mode [ 865.737033][T10541] bond_slave_1: left promiscuous mode [ 866.750063][ T8713] usb 5-1: config 0 has no interfaces? [ 866.755787][ T8713] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 866.765216][ T8713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.562434][ T8713] usb 5-1: config 0 descriptor?? [ 867.676104][T10547] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1456'. [ 868.208521][ T8584] usb 5-1: USB disconnect, device number 37 [ 868.849606][ T8713] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 870.172607][T10555] team0: No ports can be present during mode change [ 870.342635][ T8713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.355316][ T8713] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.365556][ T8713] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 870.375228][ T8713] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.325498][ T8713] usb 7-1: config 0 descriptor?? [ 871.608966][ T8713] usb 7-1: can't set config #0, error -71 [ 871.664812][ T8713] usb 7-1: USB disconnect, device number 21 [ 873.168597][ T8584] usb 7-1: new full-speed USB device number 22 using dummy_hcd [ 874.684952][ T8584] usb 7-1: config 1 interface 0 has no altsetting 0 [ 874.760007][ T8584] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 874.769554][ T8584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.777825][ T8584] usb 7-1: Product: syz [ 874.782486][ T8584] usb 7-1: Manufacturer: syz [ 874.787450][ T8584] usb 7-1: SerialNumber: syz [ 875.410371][ T8584] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 22 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 875.498496][ T8584] usb 7-1: USB disconnect, device number 22 [ 875.551266][T10581] tipc: Started in network mode [ 875.556537][T10581] tipc: Node identity 727398095229, cluster identity 4711 [ 875.567166][T10581] tipc: Enabled bearer , priority 0 [ 875.600096][ T8584] usblp0: removed [ 875.745661][T10585] syzkaller0: entered promiscuous mode [ 875.753419][T10585] syzkaller0: entered allmulticast mode [ 875.763878][T10585] tipc: Resetting bearer [ 875.794629][T10579] tipc: Resetting bearer [ 875.826483][T10584] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1467'. [ 876.009580][T10579] tipc: Disabling bearer [ 876.061925][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1469'. [ 876.071602][T10592] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1469'. [ 876.402003][T10592] bond0: entered promiscuous mode [ 876.407429][T10592] bond_slave_0: entered promiscuous mode [ 876.414545][T10592] bond_slave_1: entered promiscuous mode [ 876.490425][T10592] bond0: left promiscuous mode [ 876.495615][T10592] bond_slave_0: left promiscuous mode [ 876.503077][T10592] bond_slave_1: left promiscuous mode [ 877.228876][ T8713] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 877.409578][ T8713] usb 5-1: Using ep0 maxpacket: 8 [ 877.494838][ T8713] usb 5-1: config 0 has no interfaces? [ 877.500799][ T8713] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 877.510291][ T8713] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.608318][ T8584] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 877.613747][ T8713] usb 5-1: config 0 descriptor?? [ 877.644211][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1473'. [ 877.909172][ T8584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 877.920928][ T8584] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 877.931509][ T8584] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 877.940965][ T8584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.948673][ T8713] usb 5-1: USB disconnect, device number 38 [ 878.019231][ T8584] usb 3-1: config 0 descriptor?? [ 879.889577][ T8584] usbhid 3-1:0.0: can't add hid device: -71 [ 879.896299][ T8584] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 879.912009][ T8584] usb 3-1: USB disconnect, device number 59 [ 880.448801][T10627] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1478'. [ 880.542613][ T8713] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 880.758599][ T8713] usb 6-1: Using ep0 maxpacket: 32 [ 880.823207][ T8713] usb 6-1: config 0 interface 0 has no altsetting 0 [ 880.911731][ T8713] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 880.921551][ T8713] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 880.934134][ T8713] usb 6-1: Product: syz [ 880.938699][ T8713] usb 6-1: Manufacturer: syz [ 880.947497][ T8713] usb 6-1: SerialNumber: syz [ 881.063017][ T8713] usb 6-1: config 0 descriptor?? [ 881.288403][ T8584] usb 7-1: new full-speed USB device number 23 using dummy_hcd [ 881.550521][ T8713] gs_usb 6-1:0.0: Configuring for 1 interfaces [ 881.563000][ T8584] usb 7-1: config 1 interface 0 has no altsetting 0 [ 881.645753][T10639] tipc: Started in network mode [ 881.651782][T10639] tipc: Node identity ca5ba1002047, cluster identity 4711 [ 881.665412][T10639] tipc: Enabled bearer , priority 0 [ 881.668700][ T8584] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 881.682259][ T8584] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 881.690766][ T8584] usb 7-1: Product: syz [ 881.695195][ T8584] usb 7-1: Manufacturer: syz [ 881.700166][ T8584] usb 7-1: SerialNumber: syz [ 881.897624][T10639] syzkaller0: entered promiscuous mode [ 881.904572][T10639] syzkaller0: entered allmulticast mode [ 881.913844][T10639] tipc: Resetting bearer [ 881.960278][ T8713] gs_usb 6-1:0.0: Disabling termination support for channel 0 (-EPROTO) [ 882.055928][T10638] tipc: Resetting bearer [ 882.086290][ T8713] usb 6-1: USB disconnect, device number 17 [ 882.277486][T10638] tipc: Disabling bearer [ 882.394665][T10644] loop2: detected capacity change from 0 to 512 [ 882.507758][T10644] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 882.528616][ T8584] usblp 7-1:1.0: usblp0: USB Unidirectional printer dev 23 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 882.626381][ T8584] usb 7-1: USB disconnect, device number 23 [ 882.694194][ T8584] usblp0: removed [ 882.807708][T10644] EXT4-fs (loop2): 1 truncate cleaned up [ 882.817252][T10644] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 883.872045][ T5800] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 885.138226][ T8584] usb 8-1: new full-speed USB device number 10 using dummy_hcd [ 885.748440][ T5857] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 886.021867][ T5857] usb 7-1: Using ep0 maxpacket: 8 [ 886.069519][ T5857] usb 7-1: config 0 has no interfaces? [ 886.075655][ T5857] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 886.085498][ T5857] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 886.272980][ T5857] usb 7-1: config 0 descriptor?? [ 886.531341][T10667] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1488'. [ 886.578285][ T8584] usb 8-1: config 1 interface 0 has no altsetting 0 [ 886.607353][ T5857] usb 7-1: USB disconnect, device number 24 [ 886.896276][ T45] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 887.435627][ T8584] usb 8-1: string descriptor 0 read error: -71 [ 887.443155][ T8584] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 887.452902][ T8584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 888.071944][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 888.083741][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 888.094112][ T45] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 888.103575][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.590254][ T8584] usb 8-1: can't set config #1, error -71 [ 888.705393][ T8584] usb 8-1: USB disconnect, device number 10 [ 889.425891][ T45] usb 3-1: config 0 descriptor?? [ 890.937498][T10679] syz.4.1491 (10679): drop_caches: 2 [ 891.276891][ T45] usb 3-1: can't set config #0, error -71 [ 891.321728][ T45] usb 3-1: USB disconnect, device number 60 [ 891.860348][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1498'. [ 891.860979][T10700] tipc: Enabled bearer , priority 0 [ 891.870074][T10701] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1498'. [ 891.905861][T10701] bond0: entered promiscuous mode [ 891.911363][T10701] bond_slave_0: entered promiscuous mode [ 891.918363][T10701] bond_slave_1: entered promiscuous mode [ 891.979007][T10701] bond0: left promiscuous mode [ 891.984190][T10701] bond_slave_0: left promiscuous mode [ 891.991066][T10701] bond_slave_1: left promiscuous mode [ 892.008180][ T5857] usb 6-1: new full-speed USB device number 18 using dummy_hcd [ 892.211999][T10697] syzkaller0: entered promiscuous mode [ 892.217764][T10697] syzkaller0: entered allmulticast mode [ 892.227167][T10697] tipc: Resetting bearer [ 892.264023][ T5857] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 892.275197][ T5857] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 892.304894][T10702] loop4: detected capacity change from 0 to 2048 [ 892.373492][T10695] tipc: Resetting bearer [ 892.418886][ T5857] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 892.428296][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 892.436526][ T5857] usb 6-1: Product: syz [ 892.441158][ T5857] usb 6-1: Manufacturer: syz [ 892.442161][T10704] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 892.445923][ T5857] usb 6-1: SerialNumber: syz [ 892.577490][T10695] tipc: Disabling bearer [ 892.985470][ T5857] usb 6-1: 0:2 : does not exist [ 892.991147][ T5857] usb 6-1: unit 6 not found! [ 893.084714][ T5857] usb 6-1: USB disconnect, device number 18 [ 893.166172][ T9976] udevd[9976]: setting mode of /dev/bus/usb/006/018 to 020664 failed: No such file or directory [ 893.262143][ T9976] udevd[9976]: setting owner of /dev/bus/usb/006/018 to uid=0, gid=0 failed: No such file or directory [ 893.698448][ T45] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 895.898982][ T45] usb 7-1: Using ep0 maxpacket: 16 [ 896.504978][ T8501] udevd[8501]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 896.723765][ T45] usb 7-1: device descriptor read/all, error -71 [ 897.058809][ T5857] usb 8-1: new full-speed USB device number 11 using dummy_hcd [ 897.128477][ T8713] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 899.582394][ T8713] usb 6-1: Using ep0 maxpacket: 8 [ 900.006526][ T8713] usb 6-1: config 0 has no interfaces? [ 900.012653][ T8713] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 900.027776][ T8713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.038371][ T5857] usb 8-1: device descriptor read/all, error -71 [ 900.126178][ T8713] usb 6-1: config 0 descriptor?? [ 900.253205][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 900.260854][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 900.360561][ T8713] usb 6-1: can't set config #0, error -71 [ 900.386698][ T8713] usb 6-1: USB disconnect, device number 19 [ 900.506540][T10750] loop4: detected capacity change from 0 to 16 [ 900.630456][T10750] erofs (device loop4): mounted with root inode @ nid 36. [ 901.111194][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1512'. [ 901.125537][T10755] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1512'. [ 901.893689][ T30] audit: type=1800 audit(1747368140.740:15): pid=10761 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1510" name="file3" dev="loop4" ino=89 res=0 errno=0 [ 901.952665][ T5797] erofs (device loop4): failed to decompress 6887 in[4096, 0] out[9000] [ 906.778639][ T5857] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 907.000289][ T5857] usb 5-1: Using ep0 maxpacket: 16 [ 907.519113][ T5857] usb 5-1: config index 0 descriptor too short (expected 1828, got 36) [ 907.527792][ T5857] usb 5-1: config 0 has an invalid interface number: 0 but max is -1 [ 907.536368][ T5857] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 907.545707][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 907.555868][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 907.569841][ T5857] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 910.308726][ T5857] usb 5-1: string descriptor 0 read error: -71 [ 910.315758][ T5857] usb 5-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=1a.1e [ 910.325282][ T5857] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 910.511370][ T5857] usb 5-1: config 0 descriptor?? [ 910.562825][ T5857] usb 5-1: can't set config #0, error -71 [ 910.605460][ T5857] usb 5-1: USB disconnect, device number 39 [ 910.640388][ T9976] udevd[9976]: setting owner of /dev/bus/usb/005/039 to uid=0, gid=0 failed: No such file or directory [ 910.704068][ T8713] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 910.718881][ T45] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 910.918625][ T8713] usb 3-1: Using ep0 maxpacket: 8 [ 910.997236][ T8713] usb 3-1: config 0 has no interfaces? [ 911.004054][ T8713] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 911.013534][ T8713] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.174203][ T8713] usb 3-1: config 0 descriptor?? [ 911.416035][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 911.489863][ T8713] usb 3-1: USB disconnect, device number 61 [ 911.528891][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.540369][ T45] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.550756][ T45] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 911.563366][ T45] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.706737][ T45] usb 6-1: config 0 descriptor?? [ 912.249623][ T8584] usb 8-1: new full-speed USB device number 13 using dummy_hcd [ 912.569105][ T8584] usb 8-1: config 1 interface 0 has no altsetting 0 [ 912.798600][ T8584] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 912.808500][ T8584] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 912.817015][ T8584] usb 8-1: Product: syz [ 912.821825][ T8584] usb 8-1: Manufacturer: syz [ 912.826873][ T8584] usb 8-1: SerialNumber: syz [ 912.952240][ T45] usbhid 6-1:0.0: can't add hid device: -71 [ 912.959370][ T45] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 913.153497][ T45] usb 6-1: USB disconnect, device number 20 [ 913.627450][T10812] syzkaller0: entered promiscuous mode [ 913.633535][T10812] syzkaller0: entered allmulticast mode [ 913.937666][ T8584] usblp 8-1:1.0: usblp0: USB Unidirectional printer dev 13 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 914.048587][ T8584] usb 8-1: USB disconnect, device number 13 [ 914.098569][ T30] audit: type=1804 audit(1747368152.920:16): pid=10814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1527" name="/newroot/326/file0" dev="tmpfs" ino=1700 res=1 errno=0 [ 914.853611][ T8584] usblp0: removed [ 919.928621][ T8584] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 920.108877][ T8584] usb 6-1: Using ep0 maxpacket: 8 [ 920.116442][ T30] audit: type=1804 audit(1747368158.960:17): pid=10852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.1540" name="/newroot/127/file0" dev="tmpfs" ino=671 res=1 errno=0 [ 920.158717][ T45] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 920.176211][ T8584] usb 6-1: config 0 has no interfaces? [ 920.182552][ T8584] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 920.192206][ T8584] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.261024][ T8584] usb 6-1: config 0 descriptor?? [ 920.421049][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 920.432617][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 920.442997][ T45] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 920.452514][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 920.505355][T10846] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1537'. [ 920.646617][ T8713] usb 6-1: USB disconnect, device number 21 [ 921.289935][ T45] usb 5-1: config 0 descriptor?? [ 921.378726][T10860] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 923.100199][ T45] usbhid 5-1:0.0: can't add hid device: -71 [ 923.106916][ T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 923.333365][ T45] usb 5-1: USB disconnect, device number 40 [ 927.763819][T10888] tipc: Enabled bearer , priority 0 [ 927.945571][T10888] syzkaller0: entered promiscuous mode [ 927.951683][T10888] syzkaller0: entered allmulticast mode [ 927.960794][T10888] tipc: Resetting bearer [ 928.087203][T10886] tipc: Resetting bearer [ 928.315201][T10886] tipc: Disabling bearer [ 928.622478][ T30] audit: type=1804 audit(1747368167.470:18): pid=10900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.7.1552" name="/newroot/57/file0" dev="tmpfs" ino=309 res=1 errno=0 [ 929.269712][T10912] xt_TCPMSS: Only works on TCP SYN packets [ 929.278799][ T8584] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 929.335909][T10914] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1558'. [ 929.477409][ T8584] usb 3-1: Using ep0 maxpacket: 8 [ 929.535013][ T8584] usb 3-1: config 0 has no interfaces? [ 929.541342][ T8584] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 929.551079][ T8584] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 929.641104][ T8584] usb 3-1: config 0 descriptor?? [ 929.917287][T10905] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1554'. [ 930.015408][ T8713] usb 3-1: USB disconnect, device number 62 [ 930.759580][ T8584] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 930.951164][ T8584] usb 6-1: Using ep0 maxpacket: 32 [ 930.987041][ T8584] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 930.996048][ T8584] usb 6-1: config 0 has no interface number 0 [ 931.002677][ T8584] usb 6-1: config 0 interface 5 has no altsetting 0 [ 931.096824][ T8584] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 931.107051][ T8584] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 931.115531][ T8584] usb 6-1: Product: syz [ 931.123100][ T8584] usb 6-1: Manufacturer: syz [ 931.129082][ T8584] usb 6-1: SerialNumber: syz [ 931.264232][ T8584] usb 6-1: config 0 descriptor?? [ 931.358589][T10941] tipc: Started in network mode [ 931.364036][T10941] tipc: Node identity 6a08e1f0c535, cluster identity 4711 [ 931.372740][T10941] tipc: Enabled bearer , priority 0 [ 931.498603][T10943] syzkaller0: entered promiscuous mode [ 931.504298][T10943] syzkaller0: entered allmulticast mode [ 931.513217][T10943] tipc: Resetting bearer [ 931.899177][ T8584] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 931.907018][ T8584] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 931.924229][T10934] tipc: Resetting bearer [ 932.104473][T10934] tipc: Disabling bearer [ 932.144215][ T8584] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 932.153299][ T8584] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 932.175666][ T8584] usb 6-1: USB disconnect, device number 22 [ 932.549459][ T30] audit: type=1804 audit(1747368171.400:19): pid=10949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1568" name="/newroot/320/file0" dev="tmpfs" ino=1662 res=1 errno=0 [ 932.913519][T10955] netlink: 260 bytes leftover after parsing attributes in process `syz.7.1570'. [ 933.259013][T10960] xt_TCPMSS: Only works on TCP SYN packets [ 934.559386][ T9676] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 934.778381][ T9676] usb 5-1: Using ep0 maxpacket: 8 [ 934.808237][ T9676] usb 5-1: config 0 has no interfaces? [ 934.813994][ T9676] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 934.823791][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 934.961676][ T9676] usb 5-1: config 0 descriptor?? [ 935.216573][T10978] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1576'. [ 935.278336][ T11] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 935.288571][ T9676] usb 5-1: USB disconnect, device number 41 [ 935.443067][T10995] tipc: Enabled bearer , priority 0 [ 935.502327][ T11] usb 6-1: Using ep0 maxpacket: 32 [ 935.545236][ T11] usb 6-1: config 0 has an invalid interface number: 5 but max is 0 [ 935.553610][ T11] usb 6-1: config 0 has no interface number 0 [ 935.560622][ T11] usb 6-1: config 0 interface 5 has no altsetting 0 [ 935.634675][ T11] usb 6-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=71.44 [ 935.644151][ T11] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 935.653202][ T11] usb 6-1: Product: syz [ 935.655821][T10995] syzkaller0: entered promiscuous mode [ 935.657505][ T11] usb 6-1: Manufacturer: syz [ 935.663578][T10995] syzkaller0: entered allmulticast mode [ 935.667699][ T11] usb 6-1: SerialNumber: syz [ 935.676389][T10995] tipc: Resetting bearer [ 935.803607][ T11] usb 6-1: config 0 descriptor?? [ 935.882442][T10994] tipc: Resetting bearer [ 936.015798][T10994] tipc: Disabling bearer [ 936.453890][ T11] radio-si470x 6-1:0.5: could not find interrupt in endpoint [ 936.462327][ T11] radio-si470x 6-1:0.5: probe with driver radio-si470x failed with error -5 [ 936.618602][ T11] radio-raremono 6-1:0.5: this is not Thanko's Raremono. [ 936.626558][ T11] usbhid 6-1:0.5: couldn't find an input interrupt endpoint [ 936.710134][ T11] usb 6-1: USB disconnect, device number 23 [ 936.900205][T11009] netlink: 260 bytes leftover after parsing attributes in process `syz.4.1585'. [ 937.861967][T11027] xt_TCPMSS: Only works on TCP SYN packets [ 938.998503][ T11] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 939.268292][ T11] usb 3-1: Using ep0 maxpacket: 8 [ 939.319963][ T11] usb 3-1: config 0 has no interfaces? [ 939.325740][ T11] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 939.335248][ T11] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 939.460074][ T11] usb 3-1: config 0 descriptor?? [ 939.464938][T11054] netlink: 260 bytes leftover after parsing attributes in process `syz.6.1599'. [ 939.728751][T11042] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1595'. [ 939.790437][ T9676] usb 3-1: USB disconnect, device number 63 [ 941.097838][T11075] xt_TCPMSS: Only works on TCP SYN packets [ 941.835392][T11084] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1608'. [ 942.797536][T11097] netlink: 'syz.2.1612': attribute type 3 has an invalid length. [ 942.805760][T11097] netlink: 136 bytes leftover after parsing attributes in process `syz.2.1612'. [ 943.708656][ T9676] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 943.923762][ T9676] usb 7-1: Using ep0 maxpacket: 8 [ 943.980529][ T9676] usb 7-1: config 0 has no interfaces? [ 943.986333][ T9676] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 943.996015][ T9676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 944.049684][ T9676] usb 7-1: config 0 descriptor?? [ 944.317809][T11106] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1616'. [ 944.529387][ T11] usb 7-1: USB disconnect, device number 27 [ 944.919427][T11125] xt_TCPMSS: Only works on TCP SYN packets [ 947.227421][T11139] loop6: detected capacity change from 0 to 1024 [ 947.312890][T11139] EXT4-fs: Ignoring removed orlov option [ 947.410643][T11139] EXT4-fs (loop6): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 947.779467][T11139] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 948.233854][T11149] netlink: 'syz.4.1628': attribute type 3 has an invalid length. [ 948.242694][T11149] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1628'. [ 948.511119][ T8461] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 950.702382][T11178] xt_TCPMSS: Only works on TCP SYN packets [ 950.819805][ T9676] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 950.978717][ T11] usb 5-1: new full-speed USB device number 42 using dummy_hcd [ 951.047673][ T9676] usb 6-1: Using ep0 maxpacket: 8 [ 951.126089][ T9676] usb 6-1: config 0 has no interfaces? [ 951.132196][ T9676] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 951.142037][ T9676] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.328611][ T11] usb 5-1: config 1 interface 0 has no altsetting 0 [ 951.418554][ T9676] usb 6-1: config 0 descriptor?? [ 951.446020][ T11] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 951.455599][ T11] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.464370][ T11] usb 5-1: Product: syz [ 951.468845][ T11] usb 5-1: Manufacturer: syz [ 951.473674][ T11] usb 5-1: SerialNumber: syz [ 951.670109][T11175] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1636'. [ 951.744332][ T9676] usb 6-1: USB disconnect, device number 24 [ 952.163285][ T11] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8 [ 952.805743][T11196] loop7: detected capacity change from 0 to 1024 [ 952.869010][T11196] EXT4-fs: Ignoring removed orlov option [ 952.932970][T11196] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 953.276474][T11196] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 953.810021][T11204] netlink: 'syz.5.1643': attribute type 3 has an invalid length. [ 953.818725][T11204] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1643'. [ 954.255165][ T11] usb 5-1: USB disconnect, device number 42 [ 954.337787][ T9424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 954.366388][ T11] usblp0: removed [ 956.677125][T11229] xt_TCPMSS: Only works on TCP SYN packets [ 956.727106][T11230] binder: 11226:11230 ioctl 4018620d 0 returned -22 [ 957.187168][T11234] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1654'. [ 957.242129][ T9676] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 957.459107][ T9676] usb 5-1: Using ep0 maxpacket: 8 [ 957.504584][ T9676] usb 5-1: config 0 has no interfaces? [ 957.510682][ T9676] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 957.520397][ T9676] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.616601][T11238] loop7: detected capacity change from 0 to 1024 [ 957.660891][ T9676] usb 5-1: config 0 descriptor?? [ 957.715620][T11238] EXT4-fs: Ignoring removed orlov option [ 957.818560][T11238] EXT4-fs (loop7): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 957.901190][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1653'. [ 957.914869][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1653'. [ 958.038491][ T9676] usb 5-1: USB disconnect, device number 43 [ 958.092613][T11238] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 958.372991][T11258] netlink: 276 bytes leftover after parsing attributes in process `syz.5.1656'. [ 958.492243][ T9424] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 959.438382][ T9676] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 959.662565][ T9676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 959.672723][ T9676] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 959.682844][ T9676] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 959.695794][ T9676] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 959.706868][ T9676] usb 7-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 959.716456][ T9676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 959.960434][ T9676] usb 7-1: config 0 descriptor?? [ 960.261938][ T9676] hdpvr 7-1:0.0: firmware version 0xf4 dated êМ~¯ÏLµj¶uU$«[-Må¿/h&ÉçûXgÁÞ†<|’ [ 960.272991][ T9676] hdpvr 7-1:0.0: untested firmware, the driver might not work. [ 960.485317][T11283] binder: 11281:11283 ioctl 4018620d 0 returned -22 [ 960.723881][T11285] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1666'. [ 960.759343][T11287] xt_TCPMSS: Only works on TCP SYN packets [ 960.889898][ T9676] hdpvr 7-1:0.0: Could not setup controls [ 960.899256][ T9676] hdpvr 7-1:0.0: registering videodev failed [ 960.981428][ T9676] hdpvr 7-1:0.0: probe with driver hdpvr failed with error -71 [ 961.247815][ T9676] usb 7-1: USB disconnect, device number 28 [ 961.673963][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 961.681098][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 963.118380][ T9676] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 964.912648][ T9676] usb 7-1: Using ep0 maxpacket: 8 [ 965.919888][ T9676] usb 7-1: config 0 has no interfaces? [ 965.925934][ T9676] usb 7-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 965.938494][ T9676] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 966.831796][ T9676] usb 7-1: config 0 descriptor?? [ 967.845342][ T9676] usb 7-1: can't set config #0, error -71 [ 967.915716][ T9676] usb 7-1: USB disconnect, device number 29 [ 968.335610][T11330] binder: 11329:11330 ioctl c0306201 0 returned -14 [ 968.497066][T11332] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1680'. [ 968.919294][T11341] xt_TCPMSS: Only works on TCP SYN packets [ 969.580852][T11354] netlink: 'syz.2.1686': attribute type 30 has an invalid length. [ 972.595828][T11363] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1689'. [ 973.968474][ T5857] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 975.425067][ T5857] usb 3-1: Using ep0 maxpacket: 8 [ 975.965942][ T5857] usb 3-1: device descriptor read/all, error -71 [ 976.397198][T11380] binder: 11378:11380 ioctl c0306201 0 returned -14 [ 976.455897][T11385] loop7: detected capacity change from 0 to 16 [ 976.575177][T11385] erofs (device loop7): mounted with root inode @ nid 36. [ 977.160761][T11391] xt_TCPMSS: Only works on TCP SYN packets [ 977.652115][ T5797] erofs (device loop7): failed to decompress 6887 in[4096, 0] out[9000] [ 977.979772][T11400] netlink: 284 bytes leftover after parsing attributes in process `syz.5.1700'. [ 978.515172][T11398] erofs (device loop7): failed to decompress 6887 in[4096, 0] out[9000] [ 978.524964][T11398] erofs (device loop7): read error -117 @ 0 of nid 89 [ 978.708415][ T30] audit: type=1800 audit(2000000005.940:20): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1696" name="file3" dev="loop7" ino=89 res=0 errno=0 [ 981.060276][T11417] ptrace attach of "./syz-executor exec"[8813] was attempted by ""[11417] [ 981.519333][T11419] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1704'. [ 984.592349][T11430] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1709'. [ 984.802162][T11433] binder: 11431:11433 ioctl c0306201 0 returned -14 [ 985.437010][T11444] netlink: 'syz.5.1713': attribute type 3 has an invalid length. [ 985.445464][T11444] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1713'. [ 990.117856][T11478] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1724'. [ 992.235435][T11488] netlink: 'syz.5.1728': attribute type 3 has an invalid length. [ 992.243754][T11488] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1728'. [ 992.846253][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1729'. [ 994.673293][T11498] loop2: detected capacity change from 0 to 40427 [ 994.717830][T11498] F2FS-fs (loop2): build fault injection attr: rate: 771, type: 0x3fffff [ 994.734749][T11498] F2FS-fs (loop2): invalid crc value [ 995.238714][T11498] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 999.749405][T11530] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1739'. [ 999.838688][ T5857] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 1000.081641][ T5857] usb 6-1: Using ep0 maxpacket: 32 [ 1000.116648][ T5857] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 1000.125349][ T5857] usb 6-1: config 1 has no interface number 0 [ 1000.132619][ T5857] usb 6-1: config 1 interface 242 has no altsetting 0 [ 1000.248475][ T5857] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1000.261011][ T5857] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1000.273800][ T5857] usb 6-1: Product: syz [ 1000.278405][ T5857] usb 6-1: Manufacturer: syz [ 1000.283262][ T5857] usb 6-1: SerialNumber: syz [ 1000.837707][T11540] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1742'. [ 1001.318581][ T5857] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1001.330851][ T5857] aqc111 6-1:1.242: probe with driver aqc111 failed with error -32 [ 1001.528976][ T5857] usb 6-1: USB disconnect, device number 25 [ 1004.200000][T11558] loop5: detected capacity change from 0 to 2048 [ 1004.503101][T11564] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1005.862678][T11567] netlink: 56 bytes leftover after parsing attributes in process `syz.7.1751'. [ 1006.828702][T11574] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1752'. [ 1008.473358][T11585] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1755'. [ 1009.499030][ T5857] usb 8-1: new high-speed USB device number 14 using dummy_hcd [ 1009.738244][ T5857] usb 8-1: Using ep0 maxpacket: 32 [ 1009.810653][ T5857] usb 8-1: config 1 has an invalid interface number: 242 but max is 0 [ 1009.819289][ T5857] usb 8-1: config 1 has no interface number 0 [ 1009.825691][ T5857] usb 8-1: config 1 interface 242 has no altsetting 0 [ 1009.962153][ T5857] usb 8-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1009.981465][ T5857] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.990334][ T5857] usb 8-1: Product: syz [ 1009.994756][ T5857] usb 8-1: Manufacturer: syz [ 1009.999696][ T5857] usb 8-1: SerialNumber: syz [ 1011.509273][ T5857] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -32 [ 1011.521643][ T5857] aqc111 8-1:1.242: probe with driver aqc111 failed with error -32 [ 1011.801618][ T5857] usb 8-1: USB disconnect, device number 14 [ 1013.861756][T11615] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1016.680961][T11621] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1765'. [ 1018.546023][T11635] netlink: 292 bytes leftover after parsing attributes in process `syz.7.1768'. [ 1019.568337][T11651] loop2: detected capacity change from 0 to 1764 [ 1020.423248][T11663] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1776'. [ 1020.806432][T11669] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1780'. [ 1023.137969][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1023.145069][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1028.254138][T11714] loop5: detected capacity change from 0 to 32768 [ 1029.427622][T11727] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 1030.826379][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1798'. [ 1037.687408][ T11] usb 8-1: new high-speed USB device number 15 using dummy_hcd [ 1038.798303][ T11] usb 8-1: device descriptor read/64, error -71 [ 1038.873239][T11786] binder: 11784:11786 ioctl c0306201 0 returned -14 [ 1039.422867][ T11] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 1039.463596][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1808'. [ 1040.495272][ T8713] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1041.707415][ T8713] usb 7-1: Using ep0 maxpacket: 32 [ 1043.434615][ T8713] usb 7-1: config 1 has an invalid interface number: 242 but max is 0 [ 1043.443213][ T8713] usb 7-1: config 1 has no interface number 0 [ 1043.453043][ T8713] usb 7-1: config 1 interface 242 has no altsetting 0 [ 1045.417022][ T8713] usb 7-1: string descriptor 0 read error: -71 [ 1045.425271][ T8713] usb 7-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1045.435971][ T8713] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1045.739917][ T8713] usb 7-1: can't set config #1, error -71 [ 1045.898505][ T8713] usb 7-1: USB disconnect, device number 30 [ 1050.376999][T11827] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1818'. [ 1051.779168][T11832] binder: 11830:11832 ioctl c0306201 0 returned -14 [ 1052.788707][ T9676] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1052.960542][T11845] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1823'. [ 1052.986202][ T9676] usb 7-1: device descriptor read/64, error -71 [ 1053.258469][ T9676] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 1053.459033][ T9676] usb 7-1: device descriptor read/64, error -71 [ 1053.579733][ T9676] usb usb7-port1: attempt power cycle [ 1054.000154][ T9676] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1054.055477][ T9676] usb 7-1: device descriptor read/8, error -71 [ 1054.291208][T11838] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 1054.319645][ T9676] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1054.396558][ T9676] usb 7-1: device descriptor read/8, error -71 [ 1054.514534][T11838] usb 8-1: Using ep0 maxpacket: 32 [ 1054.521781][ T9676] usb usb7-port1: unable to enumerate USB device [ 1054.562747][T11838] usb 8-1: config 1 has an invalid interface number: 242 but max is 0 [ 1054.571903][T11838] usb 8-1: config 1 has no interface number 0 [ 1054.578792][T11838] usb 8-1: config 1 interface 242 has no altsetting 0 [ 1054.657302][T11838] usb 8-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1054.668936][T11838] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1054.677196][T11838] usb 8-1: Product: syz [ 1054.681893][T11838] usb 8-1: Manufacturer: syz [ 1054.686749][T11838] usb 8-1: SerialNumber: syz [ 1055.874012][T11838] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1055.940501][T11838] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1056.022392][T11838] aqc111 8-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1056.061007][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1830'. [ 1056.071915][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1830'. [ 1056.193345][T11838] aqc111 8-1:1.242 eth13: register 'aqc111' at usb-dummy_hcd.7-1, Aquantia AQtion USB to 5GbE Controller, 7a:51:80:88:ff:ff [ 1056.257458][T11838] usb 8-1: USB disconnect, device number 17 [ 1056.269964][T11838] aqc111 8-1:1.242 eth13: unregister 'aqc111' usb-dummy_hcd.7-1, Aquantia AQtion USB to 5GbE Controller [ 1056.397362][T11872] binder: 11868:11872 ioctl c0306201 200000000480 returned -14 [ 1056.447473][T11838] aqc111 8-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1056.461303][T11838] aqc111 8-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1056.472627][T11838] aqc111 8-1:1.242 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1057.449219][T11838] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1057.474240][T11880] binder: 11879:11880 ioctl c0306201 0 returned -14 [ 1057.674701][T11838] usb 8-1: Using ep0 maxpacket: 8 [ 1057.718405][T11838] usb 8-1: config 0 has no interfaces? [ 1057.724207][T11838] usb 8-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1057.733900][T11838] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1057.872866][T11838] usb 8-1: config 0 descriptor?? [ 1058.130868][T11877] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1833'. [ 1058.244388][T11838] usb 8-1: USB disconnect, device number 18 [ 1060.643434][T11905] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1840'. [ 1061.938557][T11838] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 1062.590419][T11838] usb 5-1: Using ep0 maxpacket: 32 [ 1062.688524][T11838] usb 5-1: config 1 has an invalid interface number: 242 but max is 0 [ 1062.697033][T11838] usb 5-1: config 1 has no interface number 0 [ 1062.706835][T11838] usb 5-1: config 1 interface 242 has no altsetting 0 [ 1062.849955][T11838] usb 5-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1062.859565][T11838] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.868973][T11838] usb 5-1: Product: syz [ 1062.873399][T11838] usb 5-1: Manufacturer: syz [ 1062.878440][T11838] usb 5-1: SerialNumber: syz [ 1063.017373][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1844'. [ 1063.026995][T11914] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1844'. [ 1064.147143][T11917] loop2: detected capacity change from 0 to 32768 [ 1064.252818][T11838] aqc111 5-1:1.242: probe with driver aqc111 failed with error -71 [ 1064.369752][T11838] usb 5-1: USB disconnect, device number 44 [ 1064.477657][T11917] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 1064.529668][T11917] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1064.529668][T11917] allowing incompatible features above 0.0: (unknown version) [ 1064.564580][T11917] bcachefs (loop2): initializing new filesystem [ 1064.576451][T11917] bcachefs (loop2): going read-write [ 1064.641369][T11917] bcachefs (loop2): marking superblocks [ 1064.711412][T11917] bcachefs (loop2): initializing freespace [ 1064.729244][T11917] bcachefs (loop2): done initializing freespace [ 1064.755499][T11917] bcachefs (loop2): reading snapshots table [ 1064.762653][T11917] bcachefs (loop2): reading snapshots done [ 1064.950931][T11917] bcachefs (loop2): done starting filesystem [ 1065.472143][T11942] 9pnet_fd: Insufficient options for proto=fd [ 1065.710681][ T5800] bcachefs (loop2): shutting down [ 1065.715971][ T5800] bcachefs (loop2): going read-only [ 1065.722015][ T5800] bcachefs (loop2): finished waiting for writes to stop [ 1065.898581][ T5800] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3 [ 1067.091238][T11838] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1067.350331][T11838] usb 5-1: Using ep0 maxpacket: 8 [ 1067.439246][T11838] usb 5-1: config 0 has no interfaces? [ 1067.445066][T11838] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 1067.457127][T11838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1067.761866][T11838] usb 5-1: config 0 descriptor?? [ 1068.137007][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1851'. [ 1068.337432][T11838] usb 5-1: USB disconnect, device number 45 [ 1069.414732][ T5800] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 11 [ 1069.573437][ T5800] bcachefs (loop2): clean shutdown complete, journal seq 12 [ 1069.653298][ T5800] bcachefs (loop2): marking filesystem clean [ 1069.919436][ T8713] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1069.941582][T12021] loop5: detected capacity change from 0 to 32768 [ 1070.026427][ T5800] bcachefs (loop2): shutdown complete [ 1070.054163][T12021] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1070.062722][T12021] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1070.182465][ T8713] usb 8-1: Using ep0 maxpacket: 32 [ 1070.191615][T12021] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1070.322384][ T8713] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1070.331740][ T8713] usb 8-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1070.342305][ T8713] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1070.518591][T12021] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1070.524608][ T8713] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1070.535599][ T8713] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1070.544229][ T8713] usb 8-1: Product: 瀞 [ 1070.548852][ T8713] usb 8-1: Manufacturer: К [ 1070.553620][ T8713] usb 8-1: SerialNumber: syz [ 1070.691692][T11838] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1070.918925][T11838] usb 5-1: Using ep0 maxpacket: 16 [ 1070.974526][T11838] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1070.985828][T11838] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1071.002964][T11838] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1071.013620][T11838] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1071.051211][T11838] usb 5-1: config 0 descriptor?? [ 1071.205735][ T8713] usb 8-1: 0:2 : does not exist [ 1071.248876][T11838] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1071.419996][ T8713] usb 8-1: USB disconnect, device number 19 [ 1072.858947][ T9976] udevd[9976]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1072.998324][ T9676] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1073.188314][ T9676] usb 6-1: Using ep0 maxpacket: 32 [ 1073.265422][ T9676] usb 6-1: config 1 has an invalid interface number: 242 but max is 0 [ 1073.274288][ T9676] usb 6-1: config 1 has no interface number 0 [ 1073.280870][ T9676] usb 6-1: config 1 interface 242 has no altsetting 0 [ 1073.464591][ T9676] usb 6-1: New USB device found, idVendor=2eca, idProduct=c101, bcdDevice= 7.df [ 1073.475013][ T9676] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.483704][ T9676] usb 6-1: Product: syz [ 1073.488417][ T9676] usb 6-1: Manufacturer: syz [ 1073.493264][ T9676] usb 6-1: SerialNumber: syz [ 1074.431030][T11838] usb 5-1: USB disconnect, device number 46 [ 1074.828674][ T9676] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1074.859062][ T9676] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1074.911636][ T9676] aqc111 6-1:1.242 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71 [ 1075.128615][ T9676] aqc111 6-1:1.242 eth13: register 'aqc111' at usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller, ba:fe:54:61:9f:03 [ 1075.259050][ T9676] usb 6-1: USB disconnect, device number 26 [ 1075.268247][ T9676] aqc111 6-1:1.242 eth13: unregister 'aqc111' usb-dummy_hcd.5-1, Aquantia AQtion USB to 5GbE Controller [ 1075.549087][ T9676] aqc111 6-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1075.562031][ T9676] aqc111 6-1:1.242 eth13 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 1075.572390][ T9676] aqc111 6-1:1.242 eth13 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 1076.086313][T12064] 9pnet_fd: Insufficient options for proto=fd [ 1078.871838][T12129] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1866'. [ 1080.402139][T12131] loop7: detected capacity change from 0 to 32768 [ 1080.441609][T12131] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1080.450304][T12131] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1080.483003][T12131] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 1080.846980][T12131] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 1081.201994][T12144] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1869'. [ 1081.852436][ T8713] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1082.118391][ T8713] usb 6-1: Using ep0 maxpacket: 16 [ 1082.212085][ T8713] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1082.222276][ T8713] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1082.235570][ T8713] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1082.245040][ T8713] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1082.541982][ T8713] usb 6-1: config 0 descriptor?? [ 1082.645298][ T8713] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 1083.129093][T11944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.175837][T11944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.196804][T11944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.236745][T11944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.254270][T11944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.304199][ T5797] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1083.392074][ T5797] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1083.405391][ T5797] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1083.441470][ T5797] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1083.491101][ T5797] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1083.970663][T12158] lo speed is unknown, defaulting to 1000 [ 1084.544271][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 1084.551777][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 1084.916136][T12158] chnl_net:caif_netlink_parms(): no params data found [ 1085.097613][ T9676] usb 6-1: USB disconnect, device number 27 [ 1085.260708][T12177] 9pnet_fd: Insufficient options for proto=fd [ 1085.630874][T11944] Bluetooth: hci0: command tx timeout [ 1087.730623][T11944] Bluetooth: hci0: command tx timeout [ 1088.509887][T12244] binder: 12243:12244 ioctl c0306201 200000000100 returned -14 [ 1089.092022][ T5800] syz-executor (5800) used greatest stack depth: 832 bytes left [ 1089.183455][ T8058] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.744166][ T8058] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1089.788221][T11944] Bluetooth: hci0: command tx timeout [ 1089.878897][T12158] bridge0: port 1(bridge_slave_0) entered blocking state [ 1089.886655][T12158] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.894931][T12158] bridge_slave_0: entered allmulticast mode [ 1089.904965][T12158] bridge_slave_0: entered promiscuous mode [ 1090.019738][ T8058] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.114705][T12158] bridge0: port 2(bridge_slave_1) entered blocking state [ 1090.122831][T12158] bridge0: port 2(bridge_slave_1) entered disabled state [ 1090.131109][T12158] bridge_slave_1: entered allmulticast mode [ 1090.254420][T12158] bridge_slave_1: entered promiscuous mode [ 1090.274241][ T8058] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.688357][ T8713] usb 8-1: new high-speed USB device number 20 using dummy_hcd [ 1090.757688][T12158] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1090.916936][ T8713] usb 8-1: Using ep0 maxpacket: 16 [ 1090.942967][T12274] 9pnet_fd: Insufficient options for proto=fd [ 1090.986459][ T8713] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1090.998759][ T8713] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1091.012387][ T8713] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1091.021821][ T8713] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.143457][T12158] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1091.260387][ T8713] usb 8-1: config 0 descriptor?? [ 1091.903859][T11944] Bluetooth: hci0: command tx timeout [ 1091.943905][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1091.953384][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1091.962854][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1091.972525][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1091.981430][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1091.994115][ T8713] microsoft 0003:045E:07DA.0028: unknown main item tag 0x0 [ 1092.002832][ T8713] microsoft 0003:045E:07DA.0028: item fetching failed at offset 32/34 [ 1092.981648][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1892'. [ 1093.246316][ T8058] bridge_slave_1: left allmulticast mode [ 1093.255634][ T8058] bridge_slave_1: left promiscuous mode [ 1093.262633][ T8058] bridge0: port 2(bridge_slave_1) entered disabled state [ 1093.485101][ T8713] microsoft 0003:045E:07DA.0028: parse failed [ 1093.492090][ T8713] microsoft 0003:045E:07DA.0028: probe with driver microsoft failed with error -22 [ 1093.827822][ T8058] bridge_slave_0: left allmulticast mode [ 1093.838320][ T8058] bridge_slave_0: left promiscuous mode [ 1093.845136][ T8058] bridge0: port 1(bridge_slave_0) entered disabled state [ 1093.870100][ T8713] usb 8-1: USB disconnect, device number 20 [ 1094.932784][T12339] loop4: detected capacity change from 0 to 32768 [ 1095.139514][T12339] [ 1095.139514][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.139514][T12339] [ 1095.280233][T12339] [ 1095.280233][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.280233][T12339] [ 1095.291324][T12339] [ 1095.291324][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.291324][T12339] [ 1095.302254][T12339] [ 1095.302254][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.302254][T12339] [ 1095.313055][T12339] [ 1095.313055][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.313055][T12339] [ 1095.327196][T12339] [ 1095.327196][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.327196][T12339] [ 1095.341827][T12339] [ 1095.341827][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.341827][T12339] [ 1095.358675][T12339] [ 1095.358675][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.358675][T12339] [ 1095.378559][T12339] [ 1095.378559][T12339] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.378559][T12339] [ 1095.392958][ T113] [ 1095.392958][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.392958][ T113] [ 1095.538307][ T5799] [ 1095.538307][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.538307][ T5799] [ 1095.647727][ T5799] [ 1095.647727][ T5799] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1095.647727][ T5799] [ 1095.998079][ T8058] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1096.099766][ T8058] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1096.164195][ T8058] bond0 (unregistering): Released all slaves [ 1096.346237][ T8058] bond1 (unregistering): (slave veth3): Releasing backup interface [ 1096.430619][ T8058] bond1 (unregistering): Released all slaves [ 1096.603753][ T8058] bond2 (unregistering): (slave veth5): Releasing backup interface [ 1096.651103][ T8058] bond2 (unregistering): Released all slaves [ 1096.840488][ T8058] bond3 (unregistering): (slave veth7): Releasing backup interface [ 1096.935336][ T8058] bond3 (unregistering): Released all slaves [ 1097.129828][ T8058] bond4 (unregistering): (slave veth9): Releasing backup interface [ 1097.187317][ T8058] bond4 (unregistering): Released all slaves [ 1097.265445][ T8058] bond5 (unregistering): Released all slaves [ 1097.502463][ T8058] bond6 (unregistering): Released all slaves [ 1097.530587][ T8058] bond7 (unregistering): Released all slaves [ 1097.837010][T12158] team0: Port device team_slave_0 added [ 1097.967006][T12158] team0: Port device team_slave_1 added [ 1098.422708][ T8058] tipc: Left network mode [ 1098.447550][T12158] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1098.456119][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.482861][T12158] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1098.749575][T12158] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1098.758175][T12158] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1098.785035][T12158] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1098.931793][T12369] 9pnet_fd: Insufficient options for proto=fd [ 1099.618537][T12372] loop6: detected capacity change from 0 to 32768 [ 1099.710701][ T8058] hsr_slave_0: left promiscuous mode [ 1099.737087][ T8058] hsr_slave_1: left promiscuous mode [ 1099.745563][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1099.753513][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1099.851988][ T8058] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1099.860203][ T8058] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1099.893934][T12372] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0 [ 1099.945235][T12372] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 1099.945235][T12372] allowing incompatible features above 0.0: (unknown version) [ 1099.978642][T12372] bcachefs (loop6): initializing new filesystem [ 1099.991293][T12372] bcachefs (loop6): going read-write [ 1100.124095][ T8058] veth1_macvtap: left promiscuous mode [ 1100.130189][ T8058] veth0_macvtap: left promiscuous mode [ 1100.136283][ T8058] veth1_vlan: left promiscuous mode [ 1100.142309][ T8058] veth0_vlan: left promiscuous mode [ 1100.151785][T12372] bcachefs (loop6): marking superblocks [ 1100.219852][T12372] bcachefs (loop6): initializing freespace [ 1100.236995][T12372] bcachefs (loop6): done initializing freespace [ 1100.258719][T12372] bcachefs (loop6): reading snapshots table [ 1100.265179][T12372] bcachefs (loop6): reading snapshots done [ 1100.343570][T12372] bcachefs (loop6): done starting filesystem [ 1100.869880][T12396] bcachefs (loop6): going read-only [ 1100.875380][T12396] bcachefs (loop6): finished waiting for writes to stop [ 1101.105224][T12396] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3 [ 1101.601421][T12396] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4 [ 1101.826774][ T8058] team0 (unregistering): Port device team_slave_1 removed [ 1101.832300][T12396] bcachefs (loop6): clean shutdown complete, journal seq 5 [ 1101.911820][T12396] bcachefs (loop6): marking filesystem clean [ 1101.926700][ T8058] team0 (unregistering): Port device team_slave_0 removed [ 1102.619899][ T8461] bcachefs (loop6): shutting down [ 1102.885864][ T8461] bcachefs (loop6): shutdown complete [ 1103.088186][T12158] hsr_slave_0: entered promiscuous mode [ 1103.098478][T12158] hsr_slave_1: entered promiscuous mode [ 1103.107096][T12158] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1103.115178][T12158] Cannot create hsr debugfs directory [ 1103.628844][ T8058] IPVS: stop unused estimator thread 0... [ 1104.630793][T12434] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1915'. [ 1105.107718][T12438] 9pnet_fd: Insufficient options for proto=fd [ 1105.397264][T12158] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1105.750041][T12158] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1106.122846][T12158] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1106.421995][T12158] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1109.306807][T12158] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1109.583172][T12158] 8021q: adding VLAN 0 to HW filter on device team0 [ 1109.707397][T11990] bridge0: port 1(bridge_slave_0) entered blocking state [ 1109.715168][T11990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1109.881532][T11990] bridge0: port 2(bridge_slave_1) entered blocking state [ 1109.889329][T11990] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1110.267018][T12158] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1110.354187][T12016] ===================================================== [ 1110.362844][T12016] BUG: KMSAN: uninit-value in __ipv6_dev_mc_inc+0x4f0/0x1640 [ 1110.371197][T12016] __ipv6_dev_mc_inc+0x4f0/0x1640 [ 1110.376500][T12016] ipv6_dev_mc_inc+0x38/0x50 [ 1110.381595][T12016] addrconf_dad_work+0x401/0x1d10 [ 1110.386835][T12016] process_scheduled_works+0xb97/0x1d90 [ 1110.392713][T12016] worker_thread+0xedf/0x1590 [ 1110.397633][T12016] kthread+0xd59/0xf00 [ 1110.402109][T12016] ret_from_fork+0x6e/0x90 [ 1110.407277][T12016] ret_from_fork_asm+0x1a/0x30 [ 1110.412507][T12016] [ 1110.414973][T12016] Local variable maddr.i.i created at: [ 1110.423331][T12016] addrconf_dad_work+0x244/0x1d10 [ 1110.429585][T12016] process_scheduled_works+0xb97/0x1d90 [ 1110.435382][T12016] [ 1110.437937][T12016] CPU: 0 UID: 0 PID: 12016 Comm: kworker/u8:28 Not tainted 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 1110.452106][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.462737][T12016] Workqueue: ipv6_addrconf addrconf_dad_work [ 1110.469171][T12016] ===================================================== [ 1110.476261][T12016] Disabling lock debugging due to kernel taint [ 1110.482763][T12016] Kernel panic - not syncing: kmsan.panic set ... [ 1110.489341][T12016] CPU: 0 UID: 0 PID: 12016 Comm: kworker/u8:28 Tainted: G B 6.15.0-rc6-syzkaller-00173-gf1f2797f8a24 #0 PREEMPT(undef) [ 1110.503572][T12016] Tainted: [B]=BAD_PAGE [ 1110.507845][T12016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1110.518102][T12016] Workqueue: ipv6_addrconf addrconf_dad_work [ 1110.524318][T12016] Call Trace: [ 1110.527732][T12016] [ 1110.530872][T12016] __dump_stack+0x26/0x30 [ 1110.535416][T12016] dump_stack_lvl+0x53/0x270 [ 1110.540204][T12016] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1110.546287][T12016] dump_stack+0x1e/0x25 [ 1110.550634][T12016] panic+0x4bd/0xd50 [ 1110.554791][T12016] kmsan_report+0x29d/0x2a0 [ 1110.559550][T12016] ? __msan_warning+0x96/0x120 [ 1110.564529][T12016] ? __ipv6_dev_mc_inc+0x4f0/0x1640 [ 1110.569971][T12016] ? ipv6_dev_mc_inc+0x38/0x50 [ 1110.574970][T12016] ? addrconf_dad_work+0x401/0x1d10 [ 1110.580371][T12016] ? process_scheduled_works+0xb97/0x1d90 [ 1110.586300][T12016] ? worker_thread+0xedf/0x1590 [ 1110.591359][T12016] ? kthread+0xd59/0xf00 [ 1110.595823][T12016] ? ret_from_fork+0x6e/0x90 [ 1110.600644][T12016] ? ret_from_fork_asm+0x1a/0x30 [ 1110.605833][T12016] ? kmsan_get_metadata+0x105/0x1b0 [ 1110.611285][T12016] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1110.617346][T12016] ? netdev_refcnt_read+0x21/0x60 [ 1110.622572][T12016] ? filter_irq_stacks+0x13f/0x190 [ 1110.627897][T12016] ? kmsan_get_metadata+0x105/0x1b0 [ 1110.633343][T12016] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1110.639909][T12016] ? kmsan_get_metadata+0x105/0x1b0 [ 1110.645344][T12016] __msan_warning+0x96/0x120 [ 1110.650137][T12016] __ipv6_dev_mc_inc+0x4f0/0x1640 [ 1110.655442][T12016] ipv6_dev_mc_inc+0x38/0x50 [ 1110.660280][T12016] addrconf_dad_work+0x401/0x1d10 [ 1110.665501][T12016] ? kmsan_get_metadata+0x105/0x1b0 [ 1110.670937][T12016] ? __pfx_addrconf_dad_work+0x10/0x10 [ 1110.676610][T12016] process_scheduled_works+0xb97/0x1d90 [ 1110.682421][T12016] worker_thread+0xedf/0x1590 [ 1110.687357][T12016] kthread+0xd59/0xf00 [ 1110.691613][T12016] ? __pfx_worker_thread+0x10/0x10 [ 1110.696927][T12016] ? __pfx_kthread+0x10/0x10 [ 1110.701703][T12016] ret_from_fork+0x6e/0x90 [ 1110.706309][T12016] ? __pfx_kthread+0x10/0x10 [ 1110.711109][T12016] ret_from_fork_asm+0x1a/0x30 [ 1110.716112][T12016] [ 1110.719570][T12016] Kernel Offset: disabled [ 1110.723981][T12016] Rebooting in 86400 seconds..