last executing test programs: 5.706749778s ago: executing program 1 (id=1036): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$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") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x2000, 0x0, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x1, 0xffffffffffffffff}) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) 4.653675692s ago: executing program 0 (id=1043): r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.790377806s ago: executing program 4 (id=1045): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f00000000c0)='wg0\x00', 0x4) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000010c0)=0x1, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000000)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) syz_usb_connect$uac1(0x0, 0xa4, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.781254305s ago: executing program 0 (id=1055): r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 3.401847547s ago: executing program 0 (id=1048): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) ioctl$PPPIOCGL2TPSTATS(r2, 0x80047453, &(0x7f0000005280)) 3.400998097s ago: executing program 1 (id=1049): io_uring_setup(0x2e34, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0x14) 2.809015509s ago: executing program 0 (id=1050): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 2.327913411s ago: executing program 3 (id=1054): r0 = socket(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 2.234691492s ago: executing program 3 (id=1057): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001200010a001800000000000080"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) 2.028428673s ago: executing program 2 (id=1059): r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.797409044s ago: executing program 2 (id=1060): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e23, 0x6, @loopback={0x91ffffff}, 0x3}, 0x1c) 1.674161454s ago: executing program 4 (id=1061): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 1.622873084s ago: executing program 0 (id=1062): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000940)='./bus\x00', 0x8, &(0x7f00000004c0)={[{@autodefrag}, {@acl}, {@max_inline={'max_inline', 0x3d, [0x54]}}, {@ssd}, {@compress_algo={'compress', 0x3d, 'lzo'}}, {@ssd}, {@noenospc_debug}, {@barrier}, {@nodiscard}, {@acl}]}, 0x1, 0x55a4, &(0x7f000000ac40)="$eJzs3X9snHUdB/DnruvaFdeWMOuArGwDJFtEOjdNCCR2bNNpYTnphE3I+gNH0DmtY8NVCCtinIERijWMwQoLbn9MEYqucyiJBewqul8IJtNFBbPFNWOkOBExYTG9u+d299zaHhMpwuu1tM/zvc/z/d73njx/3PvW73MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABEHwx+N3TL/t3roJ26+ru++8a85e+2D3kuMX3rq1avND20v2dTz31aNVq1qPLF1w0/2JpkfW93d3BkEs2S+W7t9w2fwrr69vuKI0HLDxc6ltZeVQT5nq+mKqMTbnwcF+uT9NQRAURwYoSm/npXfiOQNkdlfkDzisayf1tE4dP69x28qujc8uu3xL/ktnUOloT2C0pK+rgyeupdrk73jkiEw769KL5Vyiqf7RC+4deREAwFtSk0huMm9H029xM+22aD3Sro202yPt8B1Ce3bjVKTGHTvUPCdH66M0z9pUVCgZcp6Revr8Z9qJaP9IOxI13sI8cw9NR5rSoebZEqmP1jwBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA3k0uuH5m/d49D7/8ldbf/u7h17/16sePrGq8ZaC7/qJ1ix/v2PG9vx2tWtV6ZOmCm+5PND2yvr+7Mwgqk/1iqe6xZ6ri8ZkDddseu6e3puFDC9cUpccNt2OyDg72hzsXVwRBc1blYDhsf3kQJHILyWawIb/wpeTOZ8ICAAAA7yVnJn/HM+1UHCzOaceSaTKW/BdKhcVrJ/W0Th0/r3Hbyq6Nzy67fMupj5cYYrzak46XaVee+IllBeMw/kbHO1EPD12RN87woiNG8/zpx/qnNdfdUHrl7gsWzphdv+XS4CfTD3csX3TfhBfHL9nXXpOX/yuHz//hmZP/AQAA+G/I/9FxhjdS/m+uqZh0cOp3ix67rur44fkP/Lyz7/kn4w8VD3Q//dLYcbf9cnVe/p+c85R5+T+ccZj/48Gp5X8AAAB4N/tf5//avHGGN1L+/8X+zZ//98pvTDk84187Xnj69xdvnVI+/7WyGTe8+cSCVxp2tf0pL//XFJb/x2RPO3xwVzjhZRVBUFP4SQUAAAByhP/vfuKjhTCvpz45iOb1y+4qe3LXG+tvjJ/V8o8zFvfPqv7i7tVf37ApNrChc92O5XNX5OX/2sLyf/E783IBAACAAvxm+y13V395ydYtew7N2XFnYvPYS+a+uuennVf1vXwsUfT8zX15+T9RWP4vGZ2XAwAAAJzEU+MmPnfo0UNfm7177YS9q9rmPD5t3+qFD/xz9t+veOnPxzddWJ6X/xsLy/9l6W165UOq087wrxA6KoKgdHCnJVXoC9o/mSkAAAAAb5Mwpzc1revduX7MrNfOPvzDNSuW/2rvpd++a2P1zQd+XXX7ucf2996Yl/9bhr//f3ing3D9f879//LW/2cVUnf9u8SNAQAAAHg/yl/PH94eP/XNBUN9/36h6/8/euaBko7m8ysnx7dVz3rig31Xra1+fVHHRZ/YfusbH46V//VTefm/rbD8X5S9fTu//w8AAABOwf/b9/8tzhtneCPd/79v3DPnrPnsPT+o/WbZU+e+eXfzd9oPTj9v87QzPlJ0fvecmX/4fl7+by8s/4fb07JfXk94fm6vCIKJgzvpuwluDae7LFLoKs4qpE58pEd92CNd6CrJKiS1RHp8rCIIpgzutEUKp4eF9khhoDxd2BQp7A0L6eshU3g0UugJr7R7y9PTjRZ+FhbSCyy6whUUp2WWRER6HBuqx2DhpD0OZJ4cAADgfSUMz+ksW5zbDKJRtis20gFlIx0QH+mAopEOGBM5IHrgUI8HjbmF8PEfz+1e+so1D9b1Xt1w9KzZe5bc0faBnkW9O7/wo55z/nL1Cws/nZf/NxWW/8NTMTa1GWr9fxCu/09/r2Fm/X9jWKiMFLrCQiJ6x4BE+BypsHtn+ByViXSPgYmZAgAAALynhZ8LFI3yPAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/sHfvcVJVd4LATzf9oJum6YgBY4ygRkR3aZomGEQcUXRXo4tNJKtjhtAIjXZoAwq4YsyKr3GV6GLUmBjZwY+jJg6r+CDqRIXoiElGJfE5Kz4HnciqS9BR45gs++m+dYqqW112IaC0+/3+0XWqfud569H33HvrFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/P/hsiX3Nrw58H9965ffW/f697409TdTD9m8y19uqHt3yDlPbT5ocN0tbw1asPCNtklnXtsyffk1G1YuDaGlq1xZUrzsoUHl5aP/cMxdt13xcNO0wVPOrcrUm4mHfp1/yjN3Loytvto/hLvLQqhIB0bUJYHKzP26WN8edSF8LmwJZEu01SYl0g2Hh2tCWBa2BLJV3VsTQl1OYMoTD666rDNxVU0I+4YQqtNtvFCdtFGTDgyrSgK16cCciiTw/uZENnBPeRKAbRbfDNkX/YqW/AwN3Zcr8vqr3G4d+3Slh9cnJhqK53vrsB3cqRxV6QdatulpK6iOHaLg7bHau60XvNsKtvMST1vujlRmD2XzllB11x7Q9AUd8+Mj5aGxsU+xmnbQ87xu0zkztibda16HsQMN2+V1+EDtpPrL3p548MqT/3j6vvPXTt3Wbj6Xs0lz0ztadZjZNqvzNddrnsdogs+TXvD2K9hLGmqnK4Rw/J8+X/bMnJd23/jBqydOvP2Fi6+etvCaKROfHfSLsf947S53T7u8YP7f8NHz//hyjrflebljqx/WJ3Pz+EhdTGysT+bmAAAA0Gv0hqOmXx396kunPnT3oheXH1fx3XG/Omm3+oqzv99x/K4rx3/x0ivbH9+lYP4/tLTz//GUf13uaFeHMKErccGAEHbrejwJ/Cx25+QBIezVlWrJDxyWCqwO4Qtdif2zVaVK9I0lhqYCv6/PBCakAmtioCUVuDEGlqQCF8bAilRgRgysTgUOj4HQnj+OA+oz4yg5UBMDrclGXBGvQninPraW2lbrslUBAABsJ5nZYWX+3ZxrHbY1Q5xerqjpKUO8ArtohupUDekZbHZaVbSGip5qKO+phuy4F3308AtqLuup5oLLMMryM3w45DvlAybu/aO7bhxxU/OLE7/77tjjv/LnN99dvf8//fd7zpl/3QEF8/+mj57/V3fTkbKC8/8hTO76G3OXZyId2XhrS14GAAAAYBtc9djSJ2844Kj/c9/L9935pWtvKF999df/7ysbL9h71HHDy/r+3bdXFMz/J5R2/X88JtInJ3N4NB6GmD0ghKb8QFLtwYWB5Kx3v0wAAAAAeoPs+fjsufD2zG1yiXZ6Pl2Yv2Ur88cT/xO6zX/5pr9+9svXPnniwmH7bLjiv535Qdnnx/5ul2PXjnz8rT2H/UND38Lr/1tKu/6/Nv826cSa2IsrB4TQNyfwSOxlZ6DL0Bh4+dD8QGb8a+IGWByrylyYkK1qcSzRGgNNqcCyYiV+my2xW34g82RlG78gO472TImcAAAAAHzi4uGAeF4+Xv9/z+QDvrT/oJfGvLjnvQtfm7D0hFNrf7jPLbu+PqBj0pgDJxxyxDMF8//Wrbv+v2seXHB5f0e/EEZWhNAn/cWAR2uThQFjoK4sk7i/NqmrT7qq82pDGN85sHRVr2TW/69IrzH4RE1SVQzstvdPNw3rTNxQE8LI3MAz37x+TGdifiqQbfwbNSEM6RxtuvGVfZPGK9ONX9M3hD1zAtmqTu4bQmdjVemqHqzO/I5BuqrbqkMYmBPIVnVgdQgLAwC9VPxXOjP3wXkLz549vaOj7YwdmIjH8GvCrPaOtsYZczpmVhfp08xUn/OWMTqvcEyl/vLN85kliqYOuX14Kens9wSbctvKHMcvuHAwcz/uC1V2jbO5Mu/u6PSQh+9T2ETI2ZMqNuTyHTzk2txKtjyJBfXH/FWhX+i7YF7bGY1nTZ8//4xRyd9Sszcnf+NppmRbjUpvq9ru+lbCy6PoalkpH3db7Zdbycj5p80dOW/h2SPaT5t+Stspbd9pHjuquXnMV8eOaR7ZOaqm5G8PQ92vu6pTQ918fYnj2o5D3b0ip5JP4lNDQkKityWmLyk7f8K0X9//rT3WnHbWSXv8/R4zR5z0V5f/Zu6JjYdM/tX1f7m2YP4/96Pn//FTJ37yZ9ZnKHb+vyGe5k8e33KavzUGlpV6/r+h2Nn87IUBQ1OBRTGwyGl+AAAAPhvi4ch4NDMelb6u7p/uPnLmjEPe/+UJU67+27HjTj1r/b4NF1997JL/sP6dJauOeLtg/r+otO//b6f1/7NL13+t2DL/+8cSTcXW/08v859d/39RsfX/08v8Z9f/X/YprP+/IBtIbZJ3rP8PAAB8Fnxy6//3uLx/+gcCCjL0uLx/+gcCCjL0uIx/qT8QsNXr/8/p+IvaQZfPGXfoiLk/fmTV3ksG3val5yf+ep+lB424d+Ut7426tWD+v6S0+b+F+wEAAGDn8dAv+3774neH3f/UI+8fWXbpbzfedPxftR1wyB8GNp8y+eia79/0bwXz/2Wlzf8/+fX/QrHr/4cWC7QUWxjQ+n8AAAD0UsXW/7t54MtDV88fceNjP3/zlpdafzFz/Gv/bskPvjJ9WNPNa9b9pmHG+oL5/4rS5v/xsovyvNyxNx/WJ2vahfSadhvrs18ZAAAAgN6hPDQ2VpaYN29l1MM+fpvrMkuBflQ619P3DVq1oPyhq8qqN/7gkmmHNJ577Jlzjrxo/fdrn/xJ7dTG6jMK5v+rS5v/530v44HaSfWXvT3x4A9XnvzH0/edv3bqlvP/AAAAwI5T6nEJAAAAAAAAAAAAAADg0/dU69KDPhh19Bsz9xr1p28c+8IPFn/xm4/8zbV/PvPnh9+3V/vmYVMKvv8fJneVK/b9//i7f/H7Bbvm5Y6t9rz+X+b+lGNuXdi1ZOGj9SHskxuYff7sz4XMb/PvlxtYNXX/wZ2J89Ml7nvx8Nc6E9PSgaNG7PJeZ2J8KtAaF0n8QjoQf1Xxvf6pQFxe8cl0IG6PFelAVSZwSf9kHGXpbbWhLtlWZelt9VxdCANyAtltdXdd0kZZeoBXpQLZAZ6eDsQBTsoEytO9urVf0qsYqItF/6Zf0isAAHZacS+wMsxq72hrirvw8Xb3ivzbKG/JsvMKqy0rsfnnM0uTTR1y+/BS0n3S+6Jbfmu8MlR3DmFUwe5qbpayrlFun1p62HS7FhlyT6u9lRcpl7a1m66q+IhqkhE1zpjTMbOyx4GP7jlLc0WPWUYVTHZys5R3bdISaimhLyWMqMRtU0KX4/3y0NjYJ5VrXAw2hDw9vSJK/b5+7jp/xV4FuXn+tubaS/sM7vP+v42/6KEHB1R2nDq57aLdH/vngaNm/viHD7Ze8/uC+X9DafP/6txxvZf5MYBF8Zf1Dh4QQmuJIwIAAIDPvv957vI7TpyzZsOs1RXP/u53s8uPO7Fy8zl3nXP2Rc/dv/ioS/79zdsaX1H21KYT39h01l+/8ZOvXPfwWS8dPuOsuyatO2R9W/WN3/2L5acOKZj/Dy1t/h+PYGVOBSdHO1bH3/+/YEAIXT+t35AEfhaHe/KAEPbqSrXEEskP6n8tlmhKAj+LB0z2jyVaW/Kr6hsDK1KB39dnAqtTgTUxkDlK8dOQOZRzRX0IY7pSk/NLzI0lGlKB42JgaCrQGANNqUD/GJiQCrzZPxNoSQX+MQZCe/62urN/ZlsBAABsjcw8qzL/bkjP81ZU9JShrKcMtT1lKO8pQ3VPGYqNIt6/I2aoTF28UpaTqTJda02qloIM8cfwt7pfBRnCb/NzpgsWNB2vP8heb1CWn2HcD+9oPehr83686eIfPX7kgRceueTKty89ut/gK5/93+3n9uu/qbZg/t9U2vy/Nv82aX1NnP9v+f2/JPBI7N6V8dLxoTHw8qH5gcyBgTVxsrs4W1VLpkRm0r44lpgQA0NTgbkxMCEVaJ2cCSwbnB/IzLSzjV+Qbbw9UyInAAAAAJ+4eIAgHqaJ8/+V48I7exz5fvPuVw6cO+7xR847YnrNrtU1/zx+7dLxl1Y/tF/fgvn/hNLm/7G9frmNXRh782r/EO4u29KbbGBEXRKIxzHq4tfj96gL4XM5BziyJdpqkxJVqYbDwzXJN9Sr0lXdW5OsMRDvT3niwVWXdSauqglh35yjL9k2XqhO2qhJB4ZVJYHadGBORRKIR36ygXvKkwBss+xRwfiCylzqktXQfbkir7/Pym+CpodXcAy0m3zdfedqR6lOP5A5ppq1dU9bQXXsEAVvj9Xebb3x3dbg3Za7I5XZQ9m8JVQdyme2zZq+oGN+fCT3m6wFdtDznPst1VLS2+F1uOjj97Zn1ekONKU+Ppq6L9f967AsVvdA7aT6y96eePDKk/94+r7z104tuRtFxC8KH3zr3AOey9m8O1p1yLzmet3nSYvPk974b2Copy2EsPyCWU8+8S/vP1+xvvm/HDh2+W1vPrb8Jwc9MGvEFzZc8uWNb717VMH8v6W0+X9F6rbLB3FjzhsQwvCcjfto3PwTBySfgzmB5FNyYGEgOeW+vr7oJycAAABsb9nDHdnjBe2Z2+SC8PQ8uTB/y1bmj8crJnSbv9R+DxzzD9879KrXv/H19btf/ujSp9b9pzdfOWLaoQ9senrFytebj/380wXz/9aPnv/3TXXT+X/n/9lBnP/v1s5+KLpv+oFF23QouqA6dgjn/7u1s7/bnP/vlvP/zv93x/n/Hjj/362d/Wkr2Euaa6crhNA64Ibbf1E7fXi/K8751oy1P3/6naZxL9Sde/Sd/+PwxeGa81b9uWD+P7e0+b/1/7pftC+7/l9rsfX/5hZb/2+R9f8AAIAdqshCc+l5XsHqfQUZ0qv3FWTocYHAHpcYtP7fVq//V3vS2Se9Uv/WXtdMvP0/3zn9wudPOvHZffs8f8LtJ9w08urhL315Q8H8f1Fp8//4cuiX23pvWf9v6OQiVS2JgbkWBgQAAGBnVOwAAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ+uFQ8u/uLmxfscdNOzn7/p8H9dtmbW3r86YPPoMSc3Dl88sOzKv/uXtwYtWPhG26Qzr22ZvvyaDSuXhtDeVa4sKV720KDy8tF/OOau2654uGna4CnnVmfqrczcfjEvd2z1w/oQluU8UhcTG+s772wJTDnm1oUVnYlH60PYJzcw+/zZn+tM3Fgfwn65gVVT9x/cmTg/XeK+Fw9/rTMxLR04asQu73UmxmcCZenuXtc/6W5ZuruX9Q9hQE4g291v98+vKtvGf8wEytNt3FyXtBEDdbHoj+qSNmKgI5Zo7xvCyIoQ+qSr+nV1UlWfdFV/X51U1Sdd1X+tDmF8CKEiXdWLVUlVFemRr61KqoqB3fb+6aZhnYllVSGMzA08883rx3QmTk8Fso1/vSqEIZ0vmXTjd1QmjVemG7+qMoQ9QwhV6RL/WpGUqEqXeKUihIE5gWzjp1aEsDDwmRA/fGbmPjhv4dmzp3d0tJ2xAxNVmbZqwqz2jrbGGXM6Zlan+lRMWU5683kff+zPbzpnRuft1CG3Dy8lXZEpV9nV5ebKvLujd/bex37V5lay5fkoqD/mrwr9Qt8F89rOaDxr+vz5Z4xK/paavTn52ycTTbbVqN6yrfbLrWTk/NPmjpy38OwR7adNP6XtlLbvNI8d1dw85qtjxzSP7BxVU/J3ewz1+k9+qLtX5FTySXwASEhI9LZEed6nW9PO/kFesKO/paOVobrrA7pgWpGbpaxrlNtj0Id9zBF/nP2UHkc0qmDiUJCluecsowsmE1uy1CRZuvbrCiaHuTWVd23SeL88NDb2KbYdGvLv5m7et7Zh867LbLpS0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/jx04EAAAAAAA8n9thKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqirswIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQeOBQAAAACE+VuH0bMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABcCgAA//9aTM01") r0 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r0, &(0x7f0000000240)=[{}], 0x1, 0x2000, 0x0, 0x3) socket$inet6_udp(0xa, 0x2, 0x0) syz_open_dev$loop(&(0x7f0000000640), 0x0, 0x22400) ioctl$BTRFS_IOC_QUOTA_CTL(0xffffffffffffffff, 0xc0109428, &(0x7f0000000180)={0x1, 0xffffffffffffffff}) open(&(0x7f00000005c0)='./bus\x00', 0x0, 0x0) 1.455197584s ago: executing program 1 (id=1063): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x4c, &(0x7f0000000080)=0xcdb, 0x4) bind$unix(r0, &(0x7f0000000440)=@abs={0x1, 0x0, 0xfffffffe}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.307865765s ago: executing program 4 (id=1064): syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="02c8200c00080001000608"], 0x11) 1.305650125s ago: executing program 3 (id=1065): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 1.144667266s ago: executing program 3 (id=1066): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) recvmmsg(r0, &(0x7f0000002dc0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000080)=""/27, 0x1b}], 0x1}}], 0x1, 0x0, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x4000000000000d8, 0x9200000000000000) 1.144540646s ago: executing program 4 (id=1067): r0 = socket(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2={0xff, 0x5}, 0x6}, 0x1c) r1 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) 1.141786126s ago: executing program 1 (id=1076): r0 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) 1.093576906s ago: executing program 4 (id=1068): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000280)=0x4) 1.052630156s ago: executing program 1 (id=1069): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 827.779817ms ago: executing program 2 (id=1070): r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 794.395377ms ago: executing program 3 (id=1071): setsockopt$inet_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000000)={@in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x35}}}, 0x0, 0x0, 0x2f, 0x0, "4f4ecd54a7fe441bb141a0a49697ed1cee520175924b4455c67909f2c2e6bb5f0ecba84a03f0821c50341fe8b9619b9adfec79e3b0c82ca6f300000000000000000000b0f0ce9bb96ec5f500"}, 0xd8) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r3, 0xae9a) ioctl$KVM_RUN(r3, 0xae80, 0x0) 571.714758ms ago: executing program 3 (id=1072): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x4000001, 0x13, r1, 0x0) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) 570.767678ms ago: executing program 2 (id=1083): r0 = request_key(&(0x7f0000000080)='.request_key_auth\x00', 0x0, 0x0, 0x0) add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000000)={@multicast1, @local}, 0xc) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000380)={[0x0, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x2004c8, 0x8000000, 0x0, 0x0, 0xfffffffffffffffe]}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x400000000000002, 0x5, 0xfffffffffffffffe, 0x4, 0x2, 0x0, 0xefffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x3], 0x0, 0x41901}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 393.168819ms ago: executing program 2 (id=1073): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) unshare(0x400) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000340)=r0) 271.790989ms ago: executing program 2 (id=1074): io_uring_setup(0x2e34, &(0x7f0000000180)) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) 169.90144ms ago: executing program 4 (id=1075): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_STATION(r1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 144.673259ms ago: executing program 1 (id=1077): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x40080, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, "810000cc2b000000000000fa25ffff00ffffff"}) r1 = syz_open_pts(r0, 0x141601) fcntl$setstatus(r1, 0x4, 0x0) write(r1, &(0x7f0000000000)="d5", 0xfffffedf) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x3) 0s ago: executing program 0 (id=1078): r0 = socket$nl_crypto(0x10, 0x3, 0x15) getsockopt$netlink(r0, 0x10e, 0xa, &(0x7f0000000100)=""/34, &(0x7f0000000180)=0x22) kernel console output (not intermixed with test programs): hsr0: link becomes ready [ 64.485231][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.503248][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 64.515046][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.533139][ T4171] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.544729][ T4171] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.572532][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 64.600434][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 64.609909][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 64.619489][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 64.640453][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 64.648686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.659196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.669309][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.676455][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.685119][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 64.694502][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 64.703117][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.710280][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.719812][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 64.738663][ T4172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.754279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 64.765173][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 64.786161][ T4180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.811521][ T4173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.830169][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 64.840190][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 64.850529][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 64.859548][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 64.867972][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.876197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.889958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 64.898930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 64.908695][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 64.918507][ T4172] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.937841][ T4180] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.951893][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 64.960676][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 64.970561][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.977736][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.988091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 64.996993][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.005806][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.014331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.022679][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.045480][ T4171] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.064527][ T4174] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.078414][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.106240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.116638][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.126368][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.133434][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.134183][ T4226] Bluetooth: hci2: command 0x041b tx timeout [ 65.143064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.153214][ T4226] Bluetooth: hci3: command 0x041b tx timeout [ 65.155789][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.160733][ T4226] Bluetooth: hci0: command 0x041b tx timeout [ 65.167951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.179982][ T4226] Bluetooth: hci1: command 0x041b tx timeout [ 65.183077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.188213][ T4226] Bluetooth: hci4: command 0x041b tx timeout [ 65.198025][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.209268][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.218656][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.229452][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.238536][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.248077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.257226][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.265720][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.275118][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.283630][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.290726][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.299140][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.308417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.317608][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.346290][ T4173] device veth0_vlan entered promiscuous mode [ 65.361982][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.388894][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.408659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 65.418135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 65.430518][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.442335][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 65.450793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 65.468476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.477458][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.490704][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 65.502843][ T4173] device veth1_vlan entered promiscuous mode [ 65.524946][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.542795][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.552051][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 65.568854][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 65.595516][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 65.620055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.629290][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.639514][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 65.649090][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 65.681114][ T4172] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.691873][ T4172] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.709995][ T4180] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.722628][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 65.732592][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 65.742664][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 65.752141][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 65.768908][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 65.778469][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 65.787490][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 65.808742][ T4173] device veth0_macvtap entered promiscuous mode [ 65.821213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 65.847469][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 65.866683][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 65.887131][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 65.896133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 65.920618][ T4173] device veth1_macvtap entered promiscuous mode [ 65.950409][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.989622][ T4180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.003137][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.012853][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.021666][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.030801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.038655][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.047547][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.056532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.065686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.074726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.082213][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.094159][ T4171] device veth0_vlan entered promiscuous mode [ 66.109479][ T4172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.120191][ T4173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.130416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.138726][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.147074][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.156083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.174648][ T4171] device veth1_vlan entered promiscuous mode [ 66.188324][ T4173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.198579][ T4173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.208507][ T4173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.217483][ T4173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.267273][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.275686][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.285958][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.295347][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.305114][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.314954][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.357759][ T4180] device veth0_vlan entered promiscuous mode [ 66.389332][ T4171] device veth0_macvtap entered promiscuous mode [ 66.398564][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.410612][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.421225][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.430046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.439062][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.448103][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.457415][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.466316][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.475503][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.483448][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.491509][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.502203][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.510724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.526683][ T4174] device veth0_vlan entered promiscuous mode [ 66.550093][ T4174] device veth1_vlan entered promiscuous mode [ 66.558682][ T4171] device veth1_macvtap entered promiscuous mode [ 66.579054][ T4172] device veth0_vlan entered promiscuous mode [ 66.589830][ T4180] device veth1_vlan entered promiscuous mode [ 66.606787][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.615805][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.628437][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.636541][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.689188][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.701533][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.716037][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.726872][ T4171] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.739562][ T4171] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.750924][ T4171] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.785122][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.793179][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.802807][ T4174] device veth0_macvtap entered promiscuous mode [ 66.814928][ T4174] device veth1_macvtap entered promiscuous mode [ 66.821971][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.830447][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.839649][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.851164][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.860741][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.870264][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.879293][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.888818][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.898974][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.907627][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.917848][ T4172] device veth1_vlan entered promiscuous mode [ 66.927761][ T4171] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.938564][ T4171] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.947655][ T4171] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.959152][ T4171] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.978483][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.983241][ T4180] device veth0_macvtap entered promiscuous mode [ 66.987215][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.005916][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.016155][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.024737][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.032791][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.083535][ T4180] device veth1_macvtap entered promiscuous mode [ 67.116542][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.130586][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.142151][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.152757][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.169813][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.192179][ T4172] device veth0_macvtap entered promiscuous mode [ 67.205020][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.213259][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.221838][ T2355] Bluetooth: hci4: command 0x040f tx timeout [ 67.221961][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.228138][ T2355] Bluetooth: hci1: command 0x040f tx timeout [ 67.228235][ T2355] Bluetooth: hci0: command 0x040f tx timeout [ 67.228316][ T2355] Bluetooth: hci3: command 0x040f tx timeout [ 67.228400][ T2355] Bluetooth: hci2: command 0x040f tx timeout [ 67.262201][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.271662][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.282264][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.291542][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.320612][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.338576][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.380681][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.392982][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.406586][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.416083][ T4172] device veth1_macvtap entered promiscuous mode [ 67.427479][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.457347][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.467723][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.478239][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.488288][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.498878][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.511003][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.527636][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.543071][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.561736][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.571581][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.583142][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.594990][ T4174] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.605332][ T4174] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.616055][ T4174] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.625144][ T4174] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.652398][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.663188][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.674996][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.685678][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.696199][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.707011][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.716946][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.727414][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.738593][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.755895][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.766503][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.777563][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.789911][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.799771][ T4172] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.810463][ T4172] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.821532][ T4172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.832321][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.843596][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.855590][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.866390][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.877934][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.888489][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.900264][ T4180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.910835][ T4180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.922094][ T4180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.933229][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.944716][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.953362][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.962522][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.971514][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.980461][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.003585][ T4172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.012567][ T4172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.023012][ T4172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.032774][ T4172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.074931][ T4180] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.075819][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.083678][ T4180] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.093357][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.110771][ T4180] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.120459][ T4180] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.149238][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.157440][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.166600][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.180972][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.349973][ T1230] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.365188][ T1230] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.376225][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.386227][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.403524][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.421091][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.435121][ T4237] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.446823][ T4237] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.461365][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.490576][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.525268][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.532814][ T4237] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.538213][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.548080][ T4237] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.550674][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.568262][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.576737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.587016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.766392][ T4262] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 69.294808][ T1107] Bluetooth: hci2: command 0x0419 tx timeout [ 69.303931][ T1107] Bluetooth: hci3: command 0x0419 tx timeout [ 69.322071][ T1107] Bluetooth: hci0: command 0x0419 tx timeout [ 69.329723][ T1107] Bluetooth: hci1: command 0x0419 tx timeout [ 69.341369][ T1107] Bluetooth: hci4: command 0x0419 tx timeout [ 69.424346][ T4218] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 69.839704][ T4218] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 69.850519][ T4218] usb 4-1: config 0 has no interface number 0 [ 69.863983][ T4218] usb 4-1: too many endpoints for config 0 interface 98 altsetting 20: 68, using maximum allowed: 30 [ 69.881000][ T4218] usb 4-1: config 0 interface 98 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 69.900228][ T4218] usb 4-1: config 0 interface 98 has no altsetting 0 [ 70.025007][ T4286] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 70.044325][ T4218] usb 4-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 70.053430][ T4218] usb 4-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 70.080390][ T4218] usb 4-1: Product: syz [ 70.084672][ T4218] usb 4-1: SerialNumber: syz [ 70.093657][ T4218] usb 4-1: config 0 descriptor?? [ 70.322921][ T4289] loop2: detected capacity change from 0 to 32768 [ 70.366638][ T4289] ======================================================= [ 70.366638][ T4289] WARNING: The mand mount option has been deprecated and [ 70.366638][ T4289] and is ignored by this kernel. Remove the mand [ 70.366638][ T4289] option from the mount to silence this warning. [ 70.366638][ T4289] ======================================================= [ 70.450559][ T4289] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 70.464058][ T4218] ldusb 4-1:0.98: Interrupt in endpoint not found [ 70.483107][ T4218] usb 4-1: USB disconnect, device number 2 [ 71.157452][ T4289] loop_set_status: loop2 () has still dirty pages (nrpages=7) [ 71.218565][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.225210][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.381973][ T4289] syz.2.10 (4289) used greatest stack depth: 19360 bytes left [ 71.503868][ T1107] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 71.797024][ T4174] ocfs2: Unmounting device (7,2) on (node local) [ 71.844490][ T4300] loop3: detected capacity change from 0 to 32768 [ 71.874123][ T1107] usb 5-1: config 0 has an invalid interface number: 20 but max is 0 [ 71.882240][ T1107] usb 5-1: config 0 has no interface number 0 [ 71.952991][ T4300] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.17 (4300) [ 72.042605][ T4300] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 72.062431][ T4300] BTRFS info (device loop3): enabling auto defrag [ 72.082445][ T4300] BTRFS info (device loop3): max_inline at 0 [ 72.084084][ T1107] usb 5-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 72.108389][ T4300] BTRFS info (device loop3): enabling ssd optimizations [ 72.118831][ T1107] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.132853][ T4300] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 72.160551][ T1107] usb 5-1: Product: syz [ 72.175610][ T4300] BTRFS info (device loop3): use lzo compression, level 0 [ 72.193898][ T1107] usb 5-1: Manufacturer: syz [ 72.224363][ T1107] usb 5-1: SerialNumber: syz [ 72.229963][ T4300] BTRFS info (device loop3): using free space tree [ 72.250999][ T1107] usb 5-1: config 0 descriptor?? [ 72.259731][ T4300] BTRFS info (device loop3): has skinny extents [ 72.316174][ T1107] usb-storage 5-1:0.20: USB Mass Storage device detected [ 72.369854][ T1107] usb-storage 5-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 72.398076][ T4358] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 72.574995][ T1107] usb 5-1: USB disconnect, device number 2 [ 72.609875][ T4377] loop2: detected capacity change from 0 to 7 [ 72.680845][ T4377] Dev loop2: unable to read RDB block 7 [ 72.738135][ T4377] loop2: unable to read partition table [ 72.755269][ T26] audit: type=1800 audit(1731272162.145:2): pid=4300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.17" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 72.755604][ T4377] loop2: partition table beyond EOD, truncated [ 72.825026][ T26] audit: type=1804 audit(1731272162.185:3): pid=4300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.17" name="/newroot/2/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 72.864569][ T4377] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 73.443882][ T1107] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 73.448713][ T4399] netlink: 52 bytes leftover after parsing attributes in process `syz.2.40'. [ 73.471089][ T4400] binder: 4393:4400 ioctl c0306201 20000480 returned -14 [ 73.616325][ T4405] process 'syz.0.41' launched './file1' with NULL argv: empty string added [ 73.824016][ T1107] usb 2-1: config 0 has an invalid interface number: 98 but max is 0 [ 73.853909][ T1107] usb 2-1: config 0 has no interface number 0 [ 73.860055][ T1107] usb 2-1: too many endpoints for config 0 interface 98 altsetting 20: 68, using maximum allowed: 30 [ 73.937160][ T1107] usb 2-1: config 0 interface 98 altsetting 20 has 0 endpoint descriptors, different from the interface descriptor's value: 68 [ 73.951378][ T4423] loop2: detected capacity change from 0 to 7 [ 73.991236][ T1107] usb 2-1: config 0 interface 98 has no altsetting 0 [ 73.994840][ T4423] Dev loop2: unable to read RDB block 7 [ 74.043132][ T4423] loop2: unable to read partition table [ 74.064088][ T4423] loop2: partition table beyond EOD, truncated [ 74.080033][ T4423] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 74.105512][ T3545] Dev loop2: unable to read RDB block 7 [ 74.124207][ T3545] loop2: unable to read partition table [ 74.142406][ T3545] loop2: partition table beyond EOD, truncated [ 74.149014][ T1107] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.02 [ 74.166904][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=232, SerialNumber=255 [ 74.192167][ T1107] usb 2-1: Product: syz [ 74.201354][ T1107] usb 2-1: SerialNumber: syz [ 74.219408][ T1107] usb 2-1: config 0 descriptor?? [ 74.513813][ T1110] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 74.553930][ T1107] ldusb 2-1:0.98: Interrupt in endpoint not found [ 74.617035][ T1107] usb 2-1: USB disconnect, device number 2 [ 74.757704][ T4422] loop3: detected capacity change from 0 to 32768 [ 74.833348][ T4422] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.45 (4422) [ 74.913908][ T1110] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 74.928351][ T1110] usb 1-1: config 0 has no interface number 0 [ 74.942197][ T4422] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 75.015972][ T4422] BTRFS info (device loop3): enabling auto defrag [ 75.041289][ T4422] BTRFS info (device loop3): max_inline at 0 [ 75.049765][ T4422] BTRFS info (device loop3): enabling ssd optimizations [ 75.080124][ T4422] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 75.091143][ T4422] BTRFS info (device loop3): use lzo compression, level 0 [ 75.098524][ T4422] BTRFS info (device loop3): using free space tree [ 75.123281][ T4422] BTRFS info (device loop3): has skinny extents [ 75.129889][ T1110] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 75.143749][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.163012][ T1110] usb 1-1: Product: syz [ 75.167283][ T1110] usb 1-1: Manufacturer: syz [ 75.174386][ T1110] usb 1-1: SerialNumber: syz [ 75.183831][ T1110] usb 1-1: config 0 descriptor?? [ 75.231709][ T4459] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 75.252366][ T1110] usb-storage 1-1:0.20: USB Mass Storage device detected [ 75.296337][ T1110] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 75.527240][ T26] audit: type=1800 audit(1731272164.915:4): pid=4422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.45" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 75.593431][ T4218] usb 1-1: USB disconnect, device number 2 [ 75.648805][ T26] audit: type=1804 audit(1731272165.035:5): pid=4486 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.45" name="/newroot/4/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 76.361530][ T4511] binder: 4510:4511 ioctl c0306201 20000480 returned -14 [ 76.605288][ T4521] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.532859][ T4541] kvm: emulating exchange as write [ 77.558633][ T4532] loop2: detected capacity change from 0 to 32768 [ 77.627197][ T4532] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.66 (4532) [ 77.662835][ T4532] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 77.684969][ T4532] BTRFS info (device loop2): enabling auto defrag [ 77.691460][ T4532] BTRFS info (device loop2): max_inline at 0 [ 77.708177][ T4532] BTRFS info (device loop2): enabling ssd optimizations [ 77.727358][ T4532] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 77.750990][ T4532] BTRFS info (device loop2): use lzo compression, level 0 [ 77.762807][ T4532] BTRFS info (device loop2): using free space tree [ 77.798544][ T4532] BTRFS info (device loop2): has skinny extents [ 78.248031][ T26] audit: type=1800 audit(1731272167.635:6): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.66" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 78.323807][ T4218] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 78.365891][ T26] audit: type=1804 audit(1731272167.755:7): pid=4532 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.66" name="/newroot/10/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 78.724016][ T4218] usb 4-1: config 0 has an invalid interface number: 20 but max is 0 [ 78.733988][ T4218] usb 4-1: config 0 has no interface number 0 [ 78.915619][ T4218] usb 4-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 78.924972][ T4218] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.932987][ T4218] usb 4-1: Product: syz [ 78.938560][ T4218] usb 4-1: Manufacturer: syz [ 78.943651][ T4218] usb 4-1: SerialNumber: syz [ 78.952056][ T4218] usb 4-1: config 0 descriptor?? [ 78.965754][ T4612] binder: 4607:4612 ioctl c0306201 20000480 returned -14 [ 79.024942][ T4218] usb-storage 4-1:0.20: USB Mass Storage device detected [ 79.096122][ T4218] usb-storage 4-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 79.280759][ T4504] usb 4-1: USB disconnect, device number 3 [ 79.669294][ T4610] loop1: detected capacity change from 0 to 32768 [ 79.760263][ T4610] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.88 (4610) [ 79.844701][ T4610] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 79.889758][ T4610] BTRFS info (device loop1): enabling auto defrag [ 79.929965][ T4610] BTRFS info (device loop1): max_inline at 0 [ 79.963808][ T4610] BTRFS info (device loop1): enabling ssd optimizations [ 79.980216][ T4655] binder: 4653:4655 ioctl c0306201 20000480 returned -14 [ 80.016831][ T4610] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 80.064251][ T4610] BTRFS info (device loop1): use lzo compression, level 0 [ 80.106387][ T4610] BTRFS info (device loop1): using free space tree [ 80.113152][ T4610] BTRFS info (device loop1): has skinny extents [ 80.253042][ T4678] netlink: 'syz.0.100': attribute type 10 has an invalid length. [ 80.572423][ T26] audit: type=1800 audit(1731272169.955:8): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.88" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 80.671971][ T26] audit: type=1804 audit(1731272170.055:9): pid=4610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.88" name="/newroot/18/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 80.704324][ T4395] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 81.104189][ T4395] usb 3-1: config 0 has an invalid interface number: 20 but max is 0 [ 81.118116][ T4395] usb 3-1: config 0 has no interface number 0 [ 81.333960][ T4395] usb 3-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 81.373749][ T4395] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.398555][ T4739] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 81.406208][ T4395] usb 3-1: Product: syz [ 81.440476][ T4395] usb 3-1: Manufacturer: syz [ 81.444291][ T4739] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 81.450632][ T4395] usb 3-1: SerialNumber: syz [ 81.466328][ T21] cfg80211: failed to load regulatory.db [ 81.505975][ T4395] usb 3-1: config 0 descriptor?? [ 81.586115][ T4395] usb-storage 3-1:0.20: USB Mass Storage device detected [ 81.616179][ T4395] usb-storage 3-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 81.693470][ T4762] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 81.693470][ T4762] The task syz.1.116 (4762) triggered the difference, watch for misbehavior. [ 81.794740][ T21] usb 3-1: USB disconnect, device number 2 [ 82.163811][ T4504] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 82.358477][ T4770] loop3: detected capacity change from 0 to 32768 [ 82.416725][ T4770] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.120 (4770) [ 82.513018][ T4770] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 82.534004][ T4504] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 82.543115][ T4504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.543960][ T4770] BTRFS info (device loop3): enabling auto defrag [ 82.600948][ T4504] usb 5-1: config 0 descriptor?? [ 82.608632][ T4770] BTRFS info (device loop3): max_inline at 0 [ 82.644747][ T4770] BTRFS info (device loop3): enabling ssd optimizations [ 82.671001][ T4770] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 82.741053][ T4770] BTRFS info (device loop3): use lzo compression, level 0 [ 82.756605][ T4770] BTRFS info (device loop3): using free space tree [ 82.783649][ T4770] BTRFS info (device loop3): has skinny extents [ 83.076783][ T4801] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 83.085184][ T4801] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 83.163876][ T4504] [drm:udl_init] *ERROR* Selecting channel failed [ 83.181372][ T26] audit: type=1800 audit(1731272172.565:10): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.120" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 83.182898][ T4504] [drm] Initialized udl 0.0.1 20120220 for 5-1:0.0 on minor 2 [ 83.220673][ T4504] [drm] Initialized udl on minor 2 [ 83.245324][ T4504] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 83.268597][ T4504] udl 5-1:0.0: [drm] Cannot find any crtc or sizes [ 83.310007][ T26] audit: type=1804 audit(1731272172.655:11): pid=4770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.120" name="/newroot/18/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 83.325554][ T4504] usb 5-1: USB disconnect, device number 3 [ 83.785607][ T4848] syz.0.145 uses obsolete (PF_INET,SOCK_PACKET) [ 84.027382][ T4861] binder: 4860:4861 ioctl 4018620d 0 returned -22 [ 84.084505][ T4856] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 84.101434][ T4856] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 84.120685][ T4862] binder: 4860:4862 ioctl c0306201 0 returned -14 [ 84.580224][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.589819][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 84.815094][ T4859] loop4: detected capacity change from 0 to 32768 [ 84.909692][ T4871] Zero length message leads to an empty skb [ 84.993485][ T4859] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.150 (4859) [ 85.084142][ T4859] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 85.144803][ T4859] BTRFS info (device loop4): enabling auto defrag [ 85.179461][ T4859] BTRFS info (device loop4): max_inline at 0 [ 85.190227][ T4879] netlink: 160 bytes leftover after parsing attributes in process `syz.0.156'. [ 85.221663][ T4859] BTRFS info (device loop4): enabling ssd optimizations [ 85.249519][ T4859] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 85.266252][ T4881] binder: 4880:4881 unknown command 0 [ 85.274589][ T4859] BTRFS info (device loop4): use lzo compression, level 0 [ 85.320522][ T4881] binder: 4880:4881 ioctl c0306201 200001c0 returned -22 [ 85.329030][ T4859] BTRFS info (device loop4): using free space tree [ 85.366794][ T4859] BTRFS info (device loop4): has skinny extents [ 85.947743][ T4909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.163'. [ 86.030643][ T26] audit: type=1800 audit(1731272175.415:12): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.150" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 86.089694][ T4917] binder: 4915:4917 ioctl 4018620d 0 returned -22 [ 86.148535][ T4919] binder: 4915:4919 ioctl c0306201 0 returned -14 [ 86.165583][ T26] audit: type=1804 audit(1731272175.555:13): pid=4859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.150" name="/newroot/32/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 86.503953][ T4492] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 86.881065][ T4492] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 86.904754][ T4492] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.940810][ T4492] usb 1-1: config 0 descriptor?? [ 87.473942][ T4492] [drm:udl_init] *ERROR* Selecting channel failed [ 87.508834][ T4492] [drm] Initialized udl 0.0.1 20120220 for 1-1:0.0 on minor 2 [ 87.529991][ T4492] [drm] Initialized udl on minor 2 [ 87.573869][ T4492] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 87.607152][ T4492] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 87.641477][ T4492] usb 1-1: USB disconnect, device number 3 [ 87.662443][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 87.740175][ T13] [drm:udl_get_edid_block] *ERROR* Read EDID byte 0 failed err ffffffed [ 87.782034][ T13] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 88.060037][ T4956] loop2: detected capacity change from 0 to 32768 [ 88.141204][ T4956] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.179 (4956) [ 88.274620][ T4956] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 88.283333][ T4956] BTRFS info (device loop2): enabling auto defrag [ 88.340895][ T4956] BTRFS info (device loop2): max_inline at 0 [ 88.353747][ T4956] BTRFS info (device loop2): enabling ssd optimizations [ 88.373813][ T4956] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 88.403429][ T4956] BTRFS info (device loop2): use lzo compression, level 0 [ 88.416658][ T4956] BTRFS info (device loop2): using free space tree [ 88.457260][ T4956] BTRFS info (device loop2): has skinny extents [ 88.927691][ T26] audit: type=1800 audit(1731272178.315:14): pid=4956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.179" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 91.137563][ T5059] loop4: detected capacity change from 0 to 32768 [ 91.248672][ T5059] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.202 (5059) [ 91.331294][ T5059] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 91.354620][ T5059] BTRFS info (device loop4): enabling auto defrag [ 91.420597][ T5059] BTRFS info (device loop4): max_inline at 0 [ 91.470112][ T5101] netlink: 104 bytes leftover after parsing attributes in process `syz.2.209'. [ 91.497936][ T5059] BTRFS info (device loop4): enabling ssd optimizations [ 91.534233][ T5059] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 91.620138][ T5059] BTRFS info (device loop4): use lzo compression, level 0 [ 91.683888][ T5059] BTRFS info (device loop4): using free space tree [ 91.690443][ T5059] BTRFS info (device loop4): has skinny extents [ 92.226651][ T26] audit: type=1800 audit(1731272181.615:15): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.202" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 92.332641][ T26] audit: type=1804 audit(1731272181.685:16): pid=5059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.202" name="/newroot/42/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 93.258231][ T5160] loop0: detected capacity change from 0 to 32768 [ 93.331402][ T5160] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.232 (5160) [ 93.362267][ T5160] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 93.377636][ T5160] BTRFS info (device loop0): enabling auto defrag [ 93.384545][ T5160] BTRFS info (device loop0): max_inline at 0 [ 93.394224][ T5160] BTRFS info (device loop0): enabling ssd optimizations [ 93.442595][ T5160] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 93.465864][ T5160] BTRFS info (device loop0): use lzo compression, level 0 [ 93.473167][ T5160] BTRFS info (device loop0): using free space tree [ 93.485973][ T5160] BTRFS info (device loop0): has skinny extents [ 93.631680][ T26] audit: type=1800 audit(1731272183.015:17): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.232" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 93.693088][ T26] audit: type=1804 audit(1731272183.075:18): pid=5160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.232" name="/newroot/59/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 94.116742][ T13] Bluetooth: hci1: command 0x0409 tx timeout [ 94.414007][ T4493] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 94.663948][ T4493] usb 5-1: Using ep0 maxpacket: 16 [ 94.784063][ T4493] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 94.814056][ T4493] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 94.864061][ T4493] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 94.905389][ T4493] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 94.948855][ T4493] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 95.064016][ T4493] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 95.095711][ T4493] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 95.185550][ T4493] usb 5-1: SerialNumber: syz [ 95.234297][ T5208] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.241755][ T5208] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.277688][ T4493] cdc_acm 5-1:1.0: Control and data interfaces are not separated! [ 95.488962][ T5225] loop2: detected capacity change from 0 to 32768 [ 95.498051][ T4493] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 95.542809][ T5225] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.238 (5225) [ 95.554906][ T4493] usb 5-1: USB disconnect, device number 4 [ 95.618838][ T5225] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 95.668617][ T5225] BTRFS info (device loop2): enabling auto defrag [ 95.714239][ T5225] BTRFS info (device loop2): max_inline at 0 [ 95.743878][ T5225] BTRFS info (device loop2): enabling ssd optimizations [ 95.781395][ T5225] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 95.824071][ T5225] BTRFS info (device loop2): use lzo compression, level 0 [ 95.843623][ T5225] BTRFS info (device loop2): using free space tree [ 95.869766][ T5225] BTRFS info (device loop2): has skinny extents [ 96.335046][ T26] audit: type=1800 audit(1731272185.725:19): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.238" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 96.405646][ T26] audit: type=1804 audit(1731272185.795:20): pid=5225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.238" name="/newroot/43/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 97.348994][ T5293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.258'. [ 97.720104][ T5317] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 98.027239][ T5328] capability: warning: `syz.3.268' uses 32-bit capabilities (legacy support in use) [ 98.080126][ T5331] program syz.4.269 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 98.626887][ T5302] loop1: detected capacity change from 0 to 32768 [ 98.691621][ T5302] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.262 (5302) [ 98.738546][ T5302] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 98.754943][ T5302] BTRFS info (device loop1): enabling auto defrag [ 98.761433][ T5302] BTRFS info (device loop1): max_inline at 0 [ 98.785973][ T5302] BTRFS info (device loop1): enabling ssd optimizations [ 98.792968][ T5302] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 98.870388][ T5302] BTRFS info (device loop1): use lzo compression, level 0 [ 98.898112][ T5302] BTRFS info (device loop1): using free space tree [ 98.958950][ T5302] BTRFS info (device loop1): has skinny extents [ 99.291117][ T26] audit: type=1800 audit(1731272188.675:21): pid=5302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.262" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 99.423250][ T5401] input: syz0 as /devices/virtual/input/input5 [ 99.446482][ T26] audit: type=1804 audit(1731272188.835:22): pid=5406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.262" name="/newroot/59/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 99.474829][ T5401] input: failed to attach handler leds to device input5, error: -6 [ 101.830643][ T5446] loop0: detected capacity change from 0 to 32768 [ 101.940251][ T5446] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.297 (5446) [ 101.998965][ T5446] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 102.014683][ T5446] BTRFS info (device loop0): enabling auto defrag [ 102.021271][ T5446] BTRFS info (device loop0): max_inline at 0 [ 102.044409][ T5446] BTRFS info (device loop0): enabling ssd optimizations [ 102.072783][ T5446] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 102.091190][ T5446] BTRFS info (device loop0): use lzo compression, level 0 [ 102.110109][ T5446] BTRFS info (device loop0): using free space tree [ 102.113870][ T4492] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.120258][ T5446] BTRFS info (device loop0): has skinny extents [ 102.134783][ T4503] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 102.256735][ T5377] syz.3.278 (5377): drop_caches: 1 [ 102.278096][ T26] audit: type=1800 audit(1731272191.665:23): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.297" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 102.331361][ T26] audit: type=1804 audit(1731272191.715:24): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.297" name="/newroot/71/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 102.363949][ T4492] usb 5-1: Using ep0 maxpacket: 16 [ 102.485394][ T4492] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 102.497920][ T4503] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 102.523160][ T4492] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xD7, skipping [ 102.541258][ T4503] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 102.561036][ T4503] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 102.571464][ T4492] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 102.588185][ T5536] binder: BINDER_SET_CONTEXT_MGR already set [ 102.598288][ T4503] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.608511][ T5536] binder: 5533:5536 ioctl 4018620d 20000040 returned -16 [ 102.655467][ T5501] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 102.776875][ T4492] usb 5-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 102.794320][ T4492] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.822700][ T4492] usb 5-1: Product: syz [ 102.841045][ T4492] usb 5-1: Manufacturer: syz [ 102.880919][ T4492] usb 5-1: SerialNumber: syz [ 102.943111][ T4492] usb 5-1: config 0 descriptor?? [ 102.986640][ T4492] appledisplay 5-1:0.0: Could not find int-in endpoint [ 103.005450][ T4492] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 103.044188][ T4492] usb 2-1: USB disconnect, device number 3 [ 103.199421][ T4603] usb 5-1: USB disconnect, device number 5 [ 103.312480][ T5565] netlink: 8 bytes leftover after parsing attributes in process `syz.3.326'. [ 103.414323][ T5550] udevd[5550]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 103.523965][ T4499] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.773985][ T4499] usb 3-1: Using ep0 maxpacket: 8 [ 103.894159][ T4499] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32 [ 103.923376][ T4499] usb 3-1: config 1 interface 0 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 103.969594][ T4499] usb 3-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 104.018296][ T4499] usb 3-1: config 1 interface 0 has no altsetting 0 [ 104.184158][ T4499] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 104.213154][ T4499] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.231981][ T4499] usb 3-1: Product: syz [ 104.246773][ T4499] usb 3-1: Manufacturer: syz [ 104.251510][ T4499] usb 3-1: SerialNumber: syz [ 104.284088][ T5553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.291521][ T5553] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 104.341667][ T5569] loop3: detected capacity change from 0 to 32768 [ 104.399666][ T5569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.327 (5569) [ 104.423968][ T4503] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 104.467122][ T5569] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 104.485441][ T5569] BTRFS info (device loop3): enabling auto defrag [ 104.492307][ T5569] BTRFS info (device loop3): max_inline at 0 [ 104.501201][ T4603] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 104.509646][ T5569] BTRFS info (device loop3): enabling ssd optimizations [ 104.517321][ T5569] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 104.527291][ T5569] BTRFS info (device loop3): use lzo compression, level 0 [ 104.538062][ T5569] BTRFS info (device loop3): using free space tree [ 104.545506][ T5569] BTRFS info (device loop3): has skinny extents [ 104.585499][ T4499] cdc_ether: probe of 3-1:1.0 failed with error -71 [ 104.644871][ T26] audit: type=1800 audit(1731272194.035:25): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.327" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 104.673156][ T4503] usb 2-1: Using ep0 maxpacket: 8 [ 104.691999][ T4499] usb 3-1: USB disconnect, device number 3 [ 104.739268][ T26] audit: type=1804 audit(1731272194.125:26): pid=5634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.327" name="/newroot/56/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 104.760496][ C1] vkms_vblank_simulate: vblank timer overrun [ 104.886313][ T5636] kvm: pic: non byte read [ 104.890930][ T4503] usb 2-1: config 7 has an invalid interface number: 63 but max is 0 [ 104.906114][ T5636] kvm: pic: level sensitive irq not supported [ 104.906949][ T4503] usb 2-1: config 7 has no interface number 0 [ 104.925746][ T5636] kvm: pic: non byte read [ 104.930556][ T5636] kvm: pic: level sensitive irq not supported [ 104.930629][ T5636] kvm: pic: non byte read [ 104.948011][ T4503] usb 2-1: config 7 interface 63 has no altsetting 0 [ 104.950644][ T4603] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 104.957327][ T5636] kvm: pic: level sensitive irq not supported [ 104.966918][ T4603] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 104.973451][ T5636] kvm: pic: non byte read [ 104.984471][ T4603] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 104.995496][ T5636] kvm: pic: level sensitive irq not supported [ 104.996587][ T5636] kvm: pic: non byte read [ 104.997836][ T4603] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.002872][ T5636] kvm: pic: level sensitive irq not supported [ 105.025583][ T5636] kvm: pic: non byte read [ 105.027161][ T5609] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 105.031894][ T5636] kvm: pic: level sensitive irq not supported [ 105.071235][ T5636] kvm: pic: non byte read [ 105.134202][ T4503] usb 2-1: New USB device found, idVendor=12d1, idProduct=752f, bcdDevice=8f.f4 [ 105.147667][ T4503] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 105.156268][ T4503] usb 2-1: Product: syz [ 105.160463][ T4503] usb 2-1: Manufacturer: syz [ 105.182403][ T4503] usb 2-1: SerialNumber: syz [ 105.274756][ T4216] Bluetooth: hci0: command 0x0409 tx timeout [ 105.505567][ T4503] option 2-1:7.63: GSM modem (1-port) converter detected [ 105.526753][ T4503] usb 2-1: USB disconnect, device number 4 [ 105.566278][ T4503] option 2-1:7.63: device disconnected [ 105.597126][ T4499] usb 1-1: USB disconnect, device number 4 [ 105.844212][ T26] audit: type=1326 audit(1731272195.225:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 105.897010][ T26] audit: type=1326 audit(1731272195.265:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 105.964007][ T26] audit: type=1326 audit(1731272195.265:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 106.061253][ T26] audit: type=1326 audit(1731272195.265:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 106.122774][ T26] audit: type=1326 audit(1731272195.265:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5658 comm="syz.4.351" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 107.286846][ T5663] loop2: detected capacity change from 0 to 32768 [ 107.364974][ T5663] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.353 (5663) [ 107.490445][ T5663] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 107.553846][ T5663] BTRFS info (device loop2): enabling auto defrag [ 107.583204][ T5663] BTRFS info (device loop2): max_inline at 0 [ 107.640556][ T5663] BTRFS info (device loop2): enabling ssd optimizations [ 107.754074][ T5663] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 107.840022][ T5663] BTRFS info (device loop2): use lzo compression, level 0 [ 107.899682][ T5663] BTRFS info (device loop2): using free space tree [ 107.941659][ T5663] BTRFS info (device loop2): has skinny extents [ 108.083869][ T4391] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 108.321215][ T26] audit: type=1800 audit(1731272197.705:32): pid=5663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.353" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 108.417854][ T26] audit: type=1804 audit(1731272197.805:33): pid=5773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.353" name="/newroot/66/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 108.534152][ T4391] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 108.602935][ T4391] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 108.656184][ T4391] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 108.713782][ T4391] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 108.764277][ T5734] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 109.234757][ T4217] usb 4-1: USB disconnect, device number 4 [ 109.593926][ T4495] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 109.753098][ T5787] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.802646][ T5776] loop1: detected capacity change from 0 to 32768 [ 109.841484][ T4495] usb 1-1: Using ep0 maxpacket: 8 [ 109.908430][ T5776] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.388 (5776) [ 109.974102][ T4495] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 109.982493][ T4495] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 109.994801][ T5776] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 110.003467][ T5776] BTRFS info (device loop1): enabling auto defrag [ 110.047996][ T5776] BTRFS info (device loop1): max_inline at 0 [ 110.054463][ T4495] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.071435][ T5776] BTRFS info (device loop1): enabling ssd optimizations [ 110.113789][ T4495] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.123861][ T5776] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 110.133090][ T5776] BTRFS info (device loop1): use lzo compression, level 0 [ 110.143921][ T4495] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.181174][ T5776] BTRFS info (device loop1): using free space tree [ 110.215504][ T4495] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.230253][ T5776] BTRFS info (device loop1): has skinny extents [ 110.253729][ T4495] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.544062][ T4495] usb 1-1: usb_control_msg returned -32 [ 110.553797][ T4495] usbtmc 1-1:16.0: can't read capabilities [ 110.655612][ T26] audit: type=1800 audit(1731272200.045:34): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.388" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 110.744849][ T4186] Bluetooth: unknown link type 135 [ 110.773750][ T26] audit: type=1804 audit(1731272200.085:35): pid=5776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.388" name="/newroot/81/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 111.009671][ T4189] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 10 /dev/loop1 scanned by udevd (4189) [ 111.588137][ T4493] usb 1-1: USB disconnect, device number 5 [ 112.163863][ T26] audit: type=1326 audit(1731272201.545:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 112.271355][ T26] audit: type=1326 audit(1731272201.595:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 112.293613][ C0] vkms_vblank_simulate: vblank timer overrun [ 112.428457][ T26] audit: type=1326 audit(1731272201.595:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 112.547310][ T5900] mmap: syz.4.409 (5900) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 112.631899][ T26] audit: type=1326 audit(1731272201.595:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 112.734527][ T26] audit: type=1326 audit(1731272201.595:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f548a2de719 code=0x7ffc0000 [ 112.814431][ T4395] Bluetooth: hci4: command 0x0409 tx timeout [ 112.871493][ T26] audit: type=1326 audit(1731272201.595:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5883 comm="syz.4.404" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f548a2dcfb7 code=0x7ffc0000 [ 113.374722][ T5885] loop1: detected capacity change from 0 to 32768 [ 113.482772][ T5885] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 113.511834][ T5885] BTRFS info (device loop1): enabling auto defrag [ 113.539086][ T5885] BTRFS info (device loop1): max_inline at 0 [ 113.553811][ T5885] BTRFS info (device loop1): enabling ssd optimizations [ 113.581942][ T5885] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 113.608860][ T5885] BTRFS info (device loop1): use lzo compression, level 0 [ 113.624726][ T4395] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 113.642916][ T5885] BTRFS info (device loop1): using free space tree [ 113.672754][ T5885] BTRFS info (device loop1): has skinny extents [ 113.903893][ T4395] usb 3-1: Using ep0 maxpacket: 8 [ 113.958070][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 113.958086][ T26] audit: type=1800 audit(1731272203.345:46): pid=5885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.405" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 114.043925][ T4395] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 114.073077][ T4395] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 114.083208][ T4395] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 114.095461][ T26] audit: type=1804 audit(1731272203.485:47): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.405" name="/newroot/87/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 114.130257][ T4395] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 114.167397][ T4395] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 114.226929][ T4395] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 114.246631][ T4395] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 114.549412][ T4395] usb 3-1: usb_control_msg returned -32 [ 114.555208][ T4395] usbtmc 3-1:16.0: can't read capabilities [ 115.609452][ T1107] usb 3-1: USB disconnect, device number 4 [ 117.199853][ T6038] loop3: detected capacity change from 0 to 32768 [ 117.315015][ T6057] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.449'. [ 117.338128][ T6055] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.449'. [ 117.344367][ T6038] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.442 (6038) [ 117.391200][ T6038] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 117.437533][ T6038] BTRFS info (device loop3): enabling auto defrag [ 117.478184][ T6038] BTRFS info (device loop3): max_inline at 0 [ 117.497331][ T6038] BTRFS info (device loop3): enabling ssd optimizations [ 117.516881][ T6038] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 117.542049][ T6038] BTRFS info (device loop3): use lzo compression, level 0 [ 117.552430][ T6038] BTRFS info (device loop3): using free space tree [ 117.593263][ T6038] BTRFS info (device loop3): has skinny extents [ 117.812251][ T26] audit: type=1800 audit(1731272207.195:48): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.442" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 117.843381][ T6085] device hsr_slave_0 left promiscuous mode [ 117.884633][ T6085] device hsr_slave_1 left promiscuous mode [ 117.908937][ T26] audit: type=1804 audit(1731272207.295:49): pid=6088 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.442" name="/newroot/81/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 118.003865][ T4493] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 118.274074][ T4493] usb 2-1: Using ep0 maxpacket: 8 [ 118.394239][ T4493] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 118.415517][ T4493] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 118.427386][ T4493] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 118.438710][ T4493] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 118.459218][ T4493] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 118.487401][ T4493] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 118.504641][ T4493] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.794753][ T4493] usb 2-1: usb_control_msg returned -32 [ 118.800599][ T4493] usbtmc 2-1:16.0: can't read capabilities [ 119.494792][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 119.948714][ T23] usb 2-1: USB disconnect, device number 5 [ 120.579109][ T6147] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.464'. [ 120.609323][ T6145] netlink: 16402 bytes leftover after parsing attributes in process `syz.3.464'. [ 121.109222][ T6163] device hsr_slave_0 left promiscuous mode [ 121.142546][ T6163] device hsr_slave_1 left promiscuous mode [ 121.687126][ T6158] loop0: detected capacity change from 0 to 32768 [ 121.826184][ T6158] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.467 (6158) [ 121.852978][ T6198] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.479'. [ 121.885206][ T6196] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.479'. [ 121.900498][ T6158] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 121.921875][ T6158] BTRFS info (device loop0): enabling auto defrag [ 121.953567][ T6158] BTRFS info (device loop0): max_inline at 0 [ 121.969386][ T6158] BTRFS info (device loop0): enabling ssd optimizations [ 121.994332][ T6158] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 122.022276][ T6158] BTRFS info (device loop0): use lzo compression, level 0 [ 122.038711][ T6158] BTRFS info (device loop0): using free space tree [ 122.093157][ T6158] BTRFS info (device loop0): has skinny extents [ 122.427974][ T26] audit: type=1800 audit(1731272211.815:50): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.467" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 122.624680][ T26] audit: type=1804 audit(1731272212.005:51): pid=6158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.467" name="/newroot/107/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 123.431792][ T6263] device hsr_slave_0 left promiscuous mode [ 123.460348][ T6263] device hsr_slave_1 left promiscuous mode [ 123.569856][ T6268] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.493'. [ 123.590294][ T6267] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.493'. [ 124.653093][ T6305] device hsr_slave_0 left promiscuous mode [ 124.681331][ T6305] device hsr_slave_1 left promiscuous mode [ 124.925777][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 124.935608][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #240!!! [ 125.377545][ T6279] loop4: detected capacity change from 0 to 32768 [ 125.467449][ T6279] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.498 (6279) [ 125.576684][ T6279] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 125.618356][ T6279] BTRFS info (device loop4): enabling auto defrag [ 125.643331][ T6279] BTRFS info (device loop4): max_inline at 0 [ 125.670217][ T6279] BTRFS info (device loop4): enabling ssd optimizations [ 125.700677][ T6279] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 125.741146][ T6279] BTRFS info (device loop4): use lzo compression, level 0 [ 125.793969][ T6279] BTRFS info (device loop4): using free space tree [ 125.805920][ T6279] BTRFS info (device loop4): has skinny extents [ 126.043102][ T26] audit: type=1800 audit(1731272215.425:52): pid=6279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.498" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 126.100421][ T26] audit: type=1804 audit(1731272215.485:53): pid=6368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.498" name="/newroot/110/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 126.266389][ T6371] input: syz0 as /devices/virtual/input/input6 [ 126.489328][ T6380] program syz.2.527 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 127.196996][ T6415] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 127.653825][ T6436] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 127.891085][ T6412] loop0: detected capacity change from 0 to 32768 [ 127.990504][ T6412] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.534 (6412) [ 128.042438][ T6412] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.070744][ T6412] BTRFS info (device loop0): enabling auto defrag [ 128.091314][ T6412] BTRFS info (device loop0): max_inline at 0 [ 128.115906][ T6412] BTRFS info (device loop0): enabling ssd optimizations [ 128.137735][ T6412] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 128.138330][ T6453] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 128.183946][ T6412] BTRFS info (device loop0): use lzo compression, level 0 [ 128.201175][ T6412] BTRFS info (device loop0): using free space tree [ 128.224288][ T6412] BTRFS info (device loop0): has skinny extents [ 128.393872][ T4600] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.530455][ T26] audit: type=1800 audit(1731272217.915:54): pid=6412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.534" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 128.612936][ T26] audit: type=1804 audit(1731272217.995:55): pid=6482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.534" name="/newroot/119/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 128.675920][ T4600] usb 4-1: Using ep0 maxpacket: 16 [ 128.821403][ T4600] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 128.845530][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz.2.557'. [ 128.869832][ T4600] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 129.052473][ T4600] usb 4-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 129.061843][ T4600] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 129.070268][ T4600] usb 4-1: Product: syz [ 129.074741][ T4600] usb 4-1: Manufacturer: syz [ 129.093786][ T4600] usb 4-1: SerialNumber: syz [ 129.104153][ T4600] usb 4-1: config 0 descriptor?? [ 129.829377][ T6514] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 130.525752][ T6512] loop0: detected capacity change from 0 to 32768 [ 130.610142][ T6512] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.566 (6512) [ 130.672719][ T6512] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 130.693606][ T6512] BTRFS info (device loop0): enabling auto defrag [ 130.722174][ T6512] BTRFS info (device loop0): max_inline at 0 [ 130.730950][ T6512] BTRFS info (device loop0): enabling ssd optimizations [ 130.787107][ T6512] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 130.807899][ T6512] BTRFS info (device loop0): use lzo compression, level 0 [ 130.841459][ T6512] BTRFS info (device loop0): using free space tree [ 130.867648][ T6512] BTRFS info (device loop0): has skinny extents [ 131.105543][ T4601] usb 4-1: USB disconnect, device number 5 [ 131.140733][ T26] audit: type=1800 audit(1731272220.525:56): pid=6512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.566" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 131.224084][ T26] audit: type=1804 audit(1731272220.605:57): pid=6585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.566" name="/newroot/123/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 131.350773][ T6590] TCP: request_sock_subflow_v4: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 132.174046][ T13] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 132.433835][ T13] usb 5-1: Using ep0 maxpacket: 16 [ 132.554028][ T13] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 132.590023][ T13] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 132.656013][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.662468][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.720589][ T6638] usb usb8: usbfs: process 6638 (syz.1.601) did not claim interface 0 before use [ 132.773891][ T13] usb 5-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 132.793471][ T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.823761][ T13] usb 5-1: Product: syz [ 132.828008][ T13] usb 5-1: Manufacturer: syz [ 132.832629][ T13] usb 5-1: SerialNumber: syz [ 132.855652][ T13] usb 5-1: config 0 descriptor?? [ 133.038094][ T6624] loop3: detected capacity change from 0 to 32768 [ 133.112822][ T6624] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.594 (6624) [ 133.139251][ T6624] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 133.148319][ T6624] BTRFS info (device loop3): enabling auto defrag [ 133.155516][ T6624] BTRFS info (device loop3): max_inline at 0 [ 133.161606][ T6624] BTRFS info (device loop3): enabling ssd optimizations [ 133.168756][ T6624] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 133.179345][ T6624] BTRFS info (device loop3): use lzo compression, level 0 [ 133.188672][ T6624] BTRFS info (device loop3): using free space tree [ 133.196589][ T6624] BTRFS info (device loop3): has skinny extents [ 133.337841][ T26] audit: type=1800 audit(1731272222.725:58): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.594" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 133.382870][ T26] audit: type=1804 audit(1731272222.725:59): pid=6624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.594" name="/newroot/107/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 133.802405][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 134.778129][ T6706] binder: 6705:6706 ioctl c0306201 0 returned -14 [ 134.917798][ T4733] usb 5-1: USB disconnect, device number 6 [ 135.847205][ T6712] loop3: detected capacity change from 0 to 32768 [ 135.942842][ T6712] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.616 (6712) [ 136.003615][ T6712] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 136.085146][ T6712] BTRFS info (device loop3): enabling auto defrag [ 136.092710][ T6712] BTRFS info (device loop3): max_inline at 0 [ 136.109164][ T6712] BTRFS info (device loop3): enabling ssd optimizations [ 136.121094][ T6712] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 136.195305][ T6712] BTRFS info (device loop3): use lzo compression, level 0 [ 136.248441][ T6712] BTRFS info (device loop3): using free space tree [ 136.275474][ T6712] BTRFS info (device loop3): has skinny extents [ 136.511063][ T26] audit: type=1800 audit(1731272225.895:60): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.616" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 136.605664][ T26] audit: type=1804 audit(1731272225.945:61): pid=6712 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.616" name="/newroot/109/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 137.093835][ T4392] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 137.364007][ T4392] usb 2-1: Using ep0 maxpacket: 16 [ 137.514079][ T4392] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 137.521530][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 137.533804][ T4392] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 137.754045][ T4392] usb 2-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 137.770160][ T4392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.790604][ T4392] usb 2-1: Product: syz [ 137.798979][ T4392] usb 2-1: Manufacturer: syz [ 137.808626][ T4392] usb 2-1: SerialNumber: syz [ 137.834501][ T4392] usb 2-1: config 0 descriptor?? [ 138.231283][ T6816] loop2: detected capacity change from 0 to 32768 [ 138.289303][ T6816] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.641 (6816) [ 138.359191][ T6816] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.434883][ T6816] BTRFS info (device loop2): enabling auto defrag [ 138.472464][ T6816] BTRFS info (device loop2): max_inline at 0 [ 138.507183][ T6816] BTRFS info (device loop2): enabling ssd optimizations [ 138.538070][ T6816] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 138.591032][ T6816] BTRFS info (device loop2): use lzo compression, level 0 [ 138.618703][ T6816] BTRFS info (device loop2): using free space tree [ 138.630211][ T6816] BTRFS info (device loop2): has skinny extents [ 138.901239][ T26] audit: type=1800 audit(1731272228.285:62): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.641" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 139.040675][ T26] audit: type=1804 audit(1731272228.295:63): pid=6816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.641" name="/newroot/128/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 139.549087][ T6850] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 139.558069][ T6850] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 139.774829][ T4494] usb 2-1: USB disconnect, device number 6 [ 140.351465][ T6890] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 140.362779][ T6890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.658'. [ 140.738257][ T6867] loop2: detected capacity change from 0 to 32768 [ 140.791226][ T6867] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.659 (6867) [ 140.830209][ T6867] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 140.852556][ T6867] BTRFS info (device loop2): enabling auto defrag [ 140.869553][ T6867] BTRFS info (device loop2): max_inline at 0 [ 140.908736][ T6867] BTRFS info (device loop2): enabling ssd optimizations [ 140.943431][ T6867] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 140.990144][ T6867] BTRFS info (device loop2): use lzo compression, level 0 [ 141.023359][ T6867] BTRFS info (device loop2): using free space tree [ 141.049635][ T6867] BTRFS info (device loop2): has skinny extents [ 141.784579][ T6939] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 141.792755][ T6939] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 142.208959][ T4493] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 142.282216][ T26] audit: type=1326 audit(1731272231.665:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeccba6719 code=0x7ffc0000 [ 142.359839][ T26] audit: type=1326 audit(1731272231.705:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7fdeccba6719 code=0x7ffc0000 [ 142.448415][ T26] audit: type=1326 audit(1731272231.715:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeccba6719 code=0x7ffc0000 [ 142.472301][ T4493] usb 1-1: Using ep0 maxpacket: 16 [ 142.539357][ T26] audit: type=1326 audit(1731272231.715:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7fdeccba6719 code=0x7ffc0000 [ 142.594077][ T4493] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 142.613730][ T4493] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 142.642264][ T26] audit: type=1326 audit(1731272231.715:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6959 comm="syz.2.672" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdeccba6719 code=0x7ffc0000 [ 142.823999][ T4493] usb 1-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 142.853599][ T4493] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 142.863650][ T4493] usb 1-1: Product: syz [ 142.868208][ T4493] usb 1-1: Manufacturer: syz [ 142.872834][ T4493] usb 1-1: SerialNumber: syz [ 142.901781][ T4493] usb 1-1: config 0 descriptor?? [ 143.208703][ T6965] loop4: detected capacity change from 0 to 32768 [ 143.316585][ T6965] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.673 (6965) [ 143.389945][ T6965] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 143.409027][ T6965] BTRFS info (device loop4): enabling auto defrag [ 143.434945][ T6965] BTRFS info (device loop4): max_inline at 0 [ 143.453375][ T6965] BTRFS info (device loop4): enabling ssd optimizations [ 143.484307][ T6965] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 143.493645][ T6965] BTRFS info (device loop4): use lzo compression, level 0 [ 143.515232][ T6965] BTRFS info (device loop4): using free space tree [ 143.539904][ T6965] BTRFS info (device loop4): has skinny extents [ 144.934452][ T4392] usb 1-1: USB disconnect, device number 6 [ 145.403822][ T4492] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 145.413800][ T4930] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 145.653930][ T4930] usb 5-1: Using ep0 maxpacket: 16 [ 145.776733][ T4930] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 145.793271][ T4492] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 145.818932][ T4930] usb 5-1: config 0 interface 0 altsetting 44 has 0 endpoint descriptors, different from the interface descriptor's value: 17 [ 145.835669][ T4492] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 145.869296][ T4492] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 145.882532][ T4930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 145.892118][ T4492] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.920115][ T4492] usb 3-1: config 0 descriptor?? [ 145.954132][ T7051] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 145.976341][ T4492] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 146.021017][ T7055] loop3: detected capacity change from 0 to 32768 [ 146.044176][ T4930] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 146.062295][ T4930] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.090427][ T7055] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.690 (7055) [ 146.092821][ T4930] usb 5-1: Product: syz [ 146.140306][ T4930] usb 5-1: Manufacturer: syz [ 146.146990][ T4930] usb 5-1: SerialNumber: syz [ 146.179459][ T4930] usb 5-1: config 0 descriptor?? [ 146.231841][ T7055] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 146.258415][ T7055] BTRFS info (device loop3): enabling auto defrag [ 146.296774][ T7055] BTRFS info (device loop3): max_inline at 0 [ 146.344343][ T7055] BTRFS info (device loop3): enabling ssd optimizations [ 146.351339][ T7055] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 146.375528][ T7055] BTRFS info (device loop3): use lzo compression, level 0 [ 146.382908][ T7055] BTRFS info (device loop3): using free space tree [ 146.427367][ T7055] BTRFS info (device loop3): has skinny extents [ 146.442668][ T4492] usb 5-1: USB disconnect, device number 7 [ 146.630603][ T7106] device macsec1 entered promiscuous mode [ 146.734221][ T4930] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 146.996491][ T4930] usb 2-1: Using ep0 maxpacket: 16 [ 147.114014][ T4930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 147.137854][ T4930] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 147.304702][ T4930] usb 2-1: New USB device found, idVendor=5032, idProduct=0bb9, bcdDevice=c4.d6 [ 147.327497][ T4930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.356405][ T4930] usb 2-1: Product: syz [ 147.360614][ T4930] usb 2-1: Manufacturer: syz [ 147.403483][ T4930] usb 2-1: SerialNumber: syz [ 147.426644][ T4930] usb 2-1: config 0 descriptor?? [ 148.164674][ T4392] usb 3-1: USB disconnect, device number 5 [ 148.217969][ T4734] usb 2-1: USB disconnect, device number 7 [ 150.663937][ T4392] Bluetooth: hci3: command 0x0406 tx timeout [ 151.050448][ T4930] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 151.174554][ T7265] loop1: detected capacity change from 0 to 32768 [ 151.245157][ T7265] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.747 (7265) [ 151.272218][ T7265] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 151.292873][ T7265] BTRFS info (device loop1): enabling auto defrag [ 151.304044][ T4930] usb 1-1: Using ep0 maxpacket: 32 [ 151.309476][ T7265] BTRFS info (device loop1): max_inline at 0 [ 151.319560][ T7265] BTRFS info (device loop1): enabling ssd optimizations [ 151.343982][ T7265] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 151.375002][ T7265] BTRFS info (device loop1): use lzo compression, level 0 [ 151.382336][ T7265] BTRFS info (device loop1): using free space tree [ 151.393837][ T7265] BTRFS info (device loop1): has skinny extents [ 151.424493][ T4930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 151.455995][ T4930] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 151.500562][ T4930] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00 [ 151.532758][ T4930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.573183][ T4930] usb 1-1: config 0 descriptor?? [ 151.923977][ T4930] usbhid 1-1:0.0: can't add hid device: -71 [ 151.931650][ T4930] usbhid: probe of 1-1:0.0 failed with error -71 [ 151.982768][ T4930] usb 1-1: USB disconnect, device number 7 [ 152.724122][ T4600] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 152.984118][ T4603] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 153.055022][ T7360] udc-core: couldn't find an available UDC or it's busy [ 153.070765][ T7360] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 153.094729][ T7360] loop2: detected capacity change from 0 to 7 [ 153.110704][ T7360] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 153.138847][ T7360] loop2: p1 start 592 is beyond EOD, truncated [ 153.149877][ T7360] loop2: p2 start 16974094 is beyond EOD, truncated [ 153.160667][ T7360] loop2: p3 size 101318656 extends beyond EOD, truncated [ 153.180762][ T7360] loop2: p4 start 1635021614 is beyond EOD, truncated [ 153.210235][ T7360] loop2: p5 start 3492937728 is beyond EOD, truncated [ 153.254054][ T4603] usb 4-1: Using ep0 maxpacket: 16 [ 153.299900][ T4600] usb 1-1: unable to get BOS descriptor or descriptor too short [ 153.390155][ T4603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 153.414036][ T4603] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.444021][ T4603] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 153.462936][ T4600] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 153.480386][ T4600] usb 1-1: can't read configurations, error -71 [ 153.497238][ T4603] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 153.513791][ T4603] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 153.537203][ T4603] usb 4-1: config 0 descriptor?? [ 153.709617][ T7380] loop1: detected capacity change from 0 to 32768 [ 153.777554][ T7380] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.781 (7380) [ 153.826835][ T7380] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 153.845956][ T7380] BTRFS info (device loop1): enabling auto defrag [ 153.853209][ T7408] netlink: 4 bytes leftover after parsing attributes in process `syz.0.789'. [ 153.882320][ T7380] BTRFS info (device loop1): max_inline at 0 [ 153.893744][ T7380] BTRFS info (device loop1): enabling ssd optimizations [ 153.944314][ T7380] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 153.983958][ T7380] BTRFS info (device loop1): use lzo compression, level 0 [ 153.991146][ T7380] BTRFS info (device loop1): using free space tree [ 154.003130][ T7380] BTRFS info (device loop1): has skinny extents [ 154.037191][ T4603] koneplus 0003:1E7D:2E22.0001: item fetching failed at offset 0/2 [ 154.054614][ T4603] koneplus 0003:1E7D:2E22.0001: parse failed [ 154.071243][ T4603] koneplus: probe of 0003:1E7D:2E22.0001 failed with error -22 [ 154.241257][ T4930] usb 4-1: USB disconnect, device number 6 [ 155.023920][ T2355] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 155.325928][ T7450] udc-core: couldn't find an available UDC or it's busy [ 155.341702][ T7450] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 155.364944][ T7450] loop2: detected capacity change from 0 to 7 [ 155.385573][ T7450] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 155.416850][ T7450] loop2: p1 start 592 is beyond EOD, truncated [ 155.433369][ T7450] loop2: p2 start 16974094 is beyond EOD, truncated [ 155.452126][ T7450] loop2: p3 size 101318656 extends beyond EOD, truncated [ 155.476424][ T7450] loop2: p4 start 1635021614 is beyond EOD, truncated [ 155.493631][ T7450] loop2: p5 start 3492937728 is beyond EOD, truncated [ 155.589675][ T2355] usb 5-1: unable to get BOS descriptor or descriptor too short [ 155.700179][ T7459] loop0: detected capacity change from 0 to 32768 [ 155.733792][ T2355] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 155.751667][ T2355] usb 5-1: can't read configurations, error -71 [ 155.791085][ T7459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.803 (7459) [ 155.851266][ T7459] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 155.872685][ T7459] BTRFS info (device loop0): enabling auto defrag [ 155.903810][ T7459] BTRFS info (device loop0): max_inline at 0 [ 155.909930][ T7459] BTRFS info (device loop0): enabling ssd optimizations [ 155.934513][ T7459] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 155.963776][ T7459] BTRFS info (device loop0): use lzo compression, level 0 [ 156.002464][ T7459] BTRFS info (device loop0): using free space tree [ 156.013819][ T7459] BTRFS info (device loop0): has skinny extents [ 156.911980][ T7551] loop2: detected capacity change from 0 to 1 [ 156.957167][ T7551] Dev loop2: unable to read RDB block 1 [ 156.994803][ T7551] loop2: unable to read partition table [ 157.000640][ T7551] loop2: partition table beyond EOD, truncated [ 157.043786][ T4504] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 157.104613][ T7551] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 157.233256][ T3545] Dev loop2: unable to read RDB block 1 [ 157.254412][ T3545] loop2: unable to read partition table [ 157.260405][ T3545] loop2: partition table beyond EOD, truncated [ 157.355880][ T7546] udc-core: couldn't find an available UDC or it's busy [ 157.366765][ T7546] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 157.473858][ T4504] usb 2-1: unable to get BOS descriptor or descriptor too short [ 157.603953][ T4504] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 157.617123][ T4504] usb 2-1: can't read configurations, error -71 [ 157.771994][ T7594] netlink: 28 bytes leftover after parsing attributes in process `syz.4.845'. [ 158.071636][ T7611] program syz.1.849 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 158.417249][ T7628] capability: warning: `syz.3.855' uses deprecated v2 capabilities in a way that may be insecure [ 158.581313][ T7572] loop2: detected capacity change from 0 to 32768 [ 158.631080][ T7572] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.838 (7572) [ 158.694019][ T7572] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 158.729871][ T7572] BTRFS info (device loop2): enabling auto defrag [ 158.770156][ T7572] BTRFS info (device loop2): max_inline at 0 [ 158.786483][ T7572] BTRFS info (device loop2): enabling ssd optimizations [ 158.809237][ T7572] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8) [ 158.831564][ T7572] BTRFS info (device loop2): use lzo compression, level 0 [ 158.845395][ T7572] BTRFS info (device loop2): using free space tree [ 158.862318][ T7572] BTRFS info (device loop2): has skinny extents [ 158.965311][ T23] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 159.078361][ T26] audit: type=1800 audit(1731272248.465:69): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.838" name="bus" dev="loop2" ino=263 res=0 errno=0 [ 159.132942][ T26] audit: type=1804 audit(1731272248.465:70): pid=7572 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.838" name="/newroot/175/bus/bus" dev="loop2" ino=263 res=1 errno=0 [ 159.319685][ T7639] udc-core: couldn't find an available UDC or it's busy [ 159.340520][ T7639] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 159.457825][ T23] usb 4-1: unable to get BOS descriptor or descriptor too short [ 159.604528][ T23] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 159.619860][ T23] usb 4-1: can't read configurations, error -71 [ 159.696082][ T7683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.865'. [ 160.153832][ T4601] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 160.433818][ T4601] usb 2-1: Using ep0 maxpacket: 16 [ 160.564112][ T4601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 160.588971][ T4601] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 160.610386][ T4601] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 160.643844][ T4253] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 160.651643][ T4601] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 160.664697][ T4601] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.693624][ T4601] usb 2-1: config 0 descriptor?? [ 160.765195][ T4601] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8 [ 160.809544][ T3530] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.852923][ T3530] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.887830][ T3530] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.917295][ T7707] loop4: detected capacity change from 0 to 32768 [ 160.933976][ T4253] usb 3-1: Using ep0 maxpacket: 16 [ 160.946878][ T4189] pxrc 2-1:0.0: pxrc_open - usb_submit_urb failed, error: -90 [ 160.969287][ T4601] usb 2-1: USB disconnect, device number 10 [ 161.046655][ T7707] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.873 (7707) [ 161.150665][ T7707] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 161.193001][ T7707] BTRFS info (device loop4): enabling auto defrag [ 161.201756][ T7707] BTRFS info (device loop4): max_inline at 0 [ 161.223953][ T7707] BTRFS info (device loop4): enabling ssd optimizations [ 161.249870][ T4253] usb 3-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 161.251444][ T7707] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 161.285111][ T4253] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 161.329218][ T4253] usb 3-1: Product: syz [ 161.333438][ T4253] usb 3-1: Manufacturer: syz [ 161.339076][ T7707] BTRFS info (device loop4): use lzo compression, level 0 [ 161.349017][ T4253] usb 3-1: SerialNumber: syz [ 161.364387][ T7707] BTRFS info (device loop4): using free space tree [ 161.382859][ T4253] usb 3-1: config 0 descriptor?? [ 161.388370][ T7707] BTRFS info (device loop4): has skinny extents [ 161.668468][ T26] audit: type=1800 audit(1731272251.055:71): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.873" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 161.675294][ T4491] usb 3-1: USB disconnect, device number 6 [ 161.699267][ T26] audit: type=1804 audit(1731272251.085:72): pid=7707 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.873" name="/newroot/186/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 162.251647][ T7773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.883'. [ 162.514710][ T4501] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 162.815751][ T7772] loop0: detected capacity change from 0 to 32768 [ 162.816254][ T7778] udc-core: couldn't find an available UDC or it's busy [ 162.835606][ T7778] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 162.853883][ T7772] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.890 (7772) [ 162.866510][ T7778] loop2: detected capacity change from 0 to 7 [ 162.892806][ T7778] loop2: [POWERTEC] p1 p2 p3 p4 p5 [ 162.913569][ T7778] loop2: p1 start 592 is beyond EOD, truncated [ 162.916180][ T7772] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 162.928552][ T7778] loop2: p2 start 16974094 is beyond EOD, truncated [ 162.928583][ T7778] loop2: p3 size 101318656 extends beyond EOD, truncated [ 162.929813][ T7778] loop2: p4 start 1635021614 is beyond EOD, [ 162.944693][ T7772] BTRFS info (device loop0): enabling auto defrag [ 162.970459][ T7778] truncated [ 162.980945][ T7778] loop2: p5 start 3492937728 is beyond EOD, truncated [ 162.998337][ T7772] BTRFS info (device loop0): max_inline at 0 [ 163.055384][ T7772] BTRFS info (device loop0): enabling ssd optimizations [ 163.078882][ T7772] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 163.108824][ T7772] BTRFS info (device loop0): use lzo compression, level 0 [ 163.137996][ T4501] usb 3-1: unable to get BOS descriptor or descriptor too short [ 163.170661][ T7772] BTRFS info (device loop0): using free space tree [ 163.193534][ T7772] BTRFS info (device loop0): has skinny extents [ 163.273985][ T4501] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 163.281680][ T4501] usb 3-1: can't read configurations, error -71 [ 163.390383][ T26] audit: type=1800 audit(1731272252.775:73): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.890" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 163.444032][ T4601] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 163.447412][ T26] audit: type=1804 audit(1731272252.775:74): pid=7772 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.890" name="/newroot/182/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 163.713897][ T4601] usb 4-1: Using ep0 maxpacket: 16 [ 164.054030][ T4601] usb 4-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 164.081015][ T4601] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 164.099794][ T4601] usb 4-1: Product: syz [ 164.109376][ T4601] usb 4-1: Manufacturer: syz [ 164.121207][ T4601] usb 4-1: SerialNumber: syz [ 164.159374][ T4601] usb 4-1: config 0 descriptor?? [ 164.484007][ T4601] usb 4-1: USB disconnect, device number 9 [ 165.124513][ T7883] loop4: detected capacity change from 0 to 32768 [ 165.179671][ T7883] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.907 (7883) [ 165.214324][ T4501] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 165.260333][ T7883] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 165.303180][ T7883] BTRFS info (device loop4): enabling auto defrag [ 165.317230][ T7883] BTRFS info (device loop4): max_inline at 0 [ 165.333568][ T7883] BTRFS info (device loop4): enabling ssd optimizations [ 165.341233][ T7883] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 165.371121][ T7883] BTRFS info (device loop4): use lzo compression, level 0 [ 165.405076][ T7883] BTRFS info (device loop4): using free space tree [ 165.412177][ T7883] BTRFS info (device loop4): has skinny extents [ 165.463877][ T4501] usb 3-1: Using ep0 maxpacket: 8 [ 165.584105][ T4501] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 165.597178][ T4501] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 165.624254][ T4501] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.701815][ T26] audit: type=1800 audit(1731272255.085:75): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.907" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 165.734021][ T4501] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 165.742000][ T4501] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 165.753930][ T4501] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 165.834859][ T26] audit: type=1804 audit(1731272255.155:76): pid=7883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.907" name="/newroot/193/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 165.844036][ T4501] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 165.899115][ T4501] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 165.944083][ T4501] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 166.169905][ T4601] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 166.213994][ T4501] usb 3-1: string descriptor 0 read error: -22 [ 166.220446][ T4501] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 166.236844][ T4501] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 166.285439][ T4501] adutux 3-1:168.0: interrupt endpoints not found [ 166.423912][ T4601] usb 2-1: Using ep0 maxpacket: 16 [ 166.501131][ T6102] usb 3-1: USB disconnect, device number 9 [ 166.764057][ T4601] usb 2-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 166.793610][ T4601] usb 2-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 166.815578][ T4601] usb 2-1: Product: syz [ 166.833435][ T4601] usb 2-1: Manufacturer: syz [ 166.847837][ T4601] usb 2-1: SerialNumber: syz [ 166.868619][ T4601] usb 2-1: config 0 descriptor?? [ 167.175541][ T4501] usb 2-1: USB disconnect, device number 11 [ 167.301084][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz.2.935'. [ 167.530215][ T7979] loop3: detected capacity change from 0 to 32768 [ 167.590067][ T7979] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.934 (7979) [ 167.681001][ T7979] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 167.694465][ T4601] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 167.728181][ T7979] BTRFS info (device loop3): enabling auto defrag [ 167.793431][ T7979] BTRFS info (device loop3): max_inline at 0 [ 167.821915][ T7979] BTRFS info (device loop3): enabling ssd optimizations [ 167.861428][ T7979] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 167.934387][ T7979] BTRFS info (device loop3): use lzo compression, level 0 [ 167.966279][ T7979] BTRFS info (device loop3): using free space tree [ 167.989685][ T7979] BTRFS info (device loop3): has skinny extents [ 168.173582][ T8025] device bridge1 entered promiscuous mode [ 168.183980][ T4601] usb 5-1: not running at top speed; connect to a high speed hub [ 168.283894][ T4601] usb 5-1: config 2 has an invalid interface number: 198 but max is 0 [ 168.297142][ T4601] usb 5-1: config 2 has no interface number 0 [ 168.311220][ T4601] usb 5-1: config 2 interface 198 has no altsetting 0 [ 168.367743][ T26] audit: type=1800 audit(1731272257.755:77): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.934" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 168.398884][ T26] audit: type=1804 audit(1731272257.775:78): pid=7979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.934" name="/newroot/176/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 168.504037][ T4601] usb 5-1: New USB device found, idVendor=0582, idProduct=0120, bcdDevice=df.04 [ 168.527887][ T4601] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.546334][ T4601] usb 5-1: Product: syz [ 168.550649][ T4601] usb 5-1: Manufacturer: syz [ 168.571657][ T4601] usb 5-1: SerialNumber: syz [ 168.720140][ T26] audit: type=1326 audit(1731272258.105:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8052 comm="syz.0.947" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe3e817719 code=0x7ffc0000 [ 169.067364][ T4601] usb 5-1: USB disconnect, device number 10 [ 169.336812][ T4189] udevd[4189]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:2.198/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 169.390614][ T23] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 169.503779][ T4391] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 169.583833][ T4253] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 169.653814][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 169.771998][ T8073] loop1: detected capacity change from 0 to 32768 [ 169.778792][ T4391] usb 3-1: Using ep0 maxpacket: 16 [ 169.843916][ T4253] usb 4-1: Using ep0 maxpacket: 32 [ 169.862701][ T8073] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.956 (8073) [ 169.897169][ T8073] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 169.908194][ T8073] BTRFS info (device loop1): enabling auto defrag [ 169.921350][ T8073] BTRFS info (device loop1): max_inline at 0 [ 169.927744][ T8073] BTRFS info (device loop1): enabling ssd optimizations [ 169.934338][ T4391] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 169.944358][ T8073] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 169.952590][ T4391] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 169.960624][ T8073] BTRFS info (device loop1): use lzo compression, level 0 [ 169.971432][ T8073] BTRFS info (device loop1): using free space tree [ 169.974377][ T23] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 169.978741][ T8073] BTRFS info (device loop1): has skinny extents [ 170.000343][ T23] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 170.009368][ T4391] usb 3-1: config 0 has no interface number 0 [ 170.015915][ T23] usb 1-1: Product: syz [ 170.020395][ T4391] usb 3-1: config 0 interface 41 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 170.034363][ T4253] usb 4-1: config 0 has an invalid interface number: 12 but max is 0 [ 170.043407][ T23] usb 1-1: Manufacturer: syz [ 170.048532][ T4253] usb 4-1: config 0 has no interface number 0 [ 170.055075][ T23] usb 1-1: SerialNumber: syz [ 170.060277][ T4253] usb 4-1: config 0 interface 12 has no altsetting 0 [ 170.068225][ T4391] usb 3-1: config 0 interface 41 has no altsetting 0 [ 170.084950][ T23] usb 1-1: config 0 descriptor?? [ 170.273633][ T26] audit: type=1800 audit(1731272259.655:80): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.956" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 170.322417][ T26] audit: type=1804 audit(1731272259.665:81): pid=8073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.956" name="/newroot/183/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 170.353954][ T4391] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 170.368748][ T4253] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 170.378334][ T4391] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.387457][ T4253] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.411808][ T4391] usb 3-1: Product: syz [ 170.421646][ T4253] usb 4-1: Product: syz [ 170.428093][ T4391] usb 3-1: Manufacturer: syz [ 170.433031][ T4253] usb 4-1: Manufacturer: syz [ 170.443380][ T4391] usb 3-1: SerialNumber: syz [ 170.450118][ T4253] usb 4-1: SerialNumber: syz [ 170.477026][ T4391] usb 3-1: config 0 descriptor?? [ 170.491787][ T4253] usb 4-1: config 0 descriptor?? [ 170.572450][ T4391] CoreChips: probe of 3-1:0.41 failed with error -22 [ 170.709662][ T4501] usb 1-1: USB disconnect, device number 10 [ 170.998639][ T8069] udc-core: couldn't find an available UDC or it's busy [ 171.014275][ T8069] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 171.025180][ T23] usb 3-1: USB disconnect, device number 10 [ 171.869678][ T4253] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 171.879723][ T4253] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71 [ 171.915415][ T4253] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 171.939548][ T4253] f81534: probe of 4-1:0.12 failed with error -71 [ 171.964027][ T4253] usb 4-1: USB disconnect, device number 10 [ 172.304292][ T8156] loop4: detected capacity change from 0 to 32768 [ 172.383214][ T8156] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.971 (8156) [ 172.460635][ T8156] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 172.487145][ T8156] BTRFS info (device loop4): enabling auto defrag [ 172.549705][ T8156] BTRFS info (device loop4): max_inline at 0 [ 172.584609][ T8156] BTRFS info (device loop4): enabling ssd optimizations [ 172.591662][ T8156] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 172.641240][ T8156] BTRFS info (device loop4): use lzo compression, level 0 [ 172.703759][ T8156] BTRFS info (device loop4): using free space tree [ 172.714386][ T8156] BTRFS info (device loop4): has skinny extents [ 173.125373][ T26] audit: type=1800 audit(1731272262.515:82): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.971" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 173.208566][ T26] audit: type=1804 audit(1731272262.535:83): pid=8156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.971" name="/newroot/205/bus/bus" dev="loop4" ino=263 res=1 errno=0 [ 174.339944][ T8290] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1003'. [ 175.503539][ T8280] loop3: detected capacity change from 0 to 32768 [ 175.607632][ T8280] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.998 (8280) [ 175.662399][ T8280] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 175.703172][ T8280] BTRFS info (device loop3): enabling auto defrag [ 175.737069][ T8280] BTRFS info (device loop3): max_inline at 0 [ 175.766357][ T8280] BTRFS info (device loop3): enabling ssd optimizations [ 175.801030][ T8280] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8) [ 175.822190][ T8280] BTRFS info (device loop3): use lzo compression, level 0 [ 175.834838][ T8280] BTRFS info (device loop3): using free space tree [ 175.841581][ T8280] BTRFS info (device loop3): has skinny extents [ 176.135567][ T26] audit: type=1800 audit(1731272265.525:84): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.998" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 176.270383][ T26] audit: type=1804 audit(1731272265.575:85): pid=8280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.998" name="/newroot/184/bus/bus" dev="loop3" ino=263 res=1 errno=0 [ 179.415972][ T8447] loop1: detected capacity change from 0 to 32768 [ 179.621829][ T8447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1036 (8447) [ 179.707611][ T8447] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 179.749340][ T8447] BTRFS info (device loop1): enabling auto defrag [ 179.786363][ T8447] BTRFS info (device loop1): max_inline at 0 [ 179.792551][ T8447] BTRFS info (device loop1): enabling ssd optimizations [ 179.853846][ T8447] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_LZO (0x8) [ 179.863443][ T8447] BTRFS info (device loop1): use lzo compression, level 0 [ 179.947479][ T8447] BTRFS info (device loop1): using free space tree [ 179.979448][ T8447] BTRFS info (device loop1): has skinny extents [ 180.396478][ T26] audit: type=1800 audit(1731272269.785:86): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1036" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 180.590486][ T26] audit: type=1804 audit(1731272269.785:87): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1036" name="/newroot/191/bus/bus" dev="loop1" ino=263 res=1 errno=0 [ 182.547453][ T146] Bluetooth: Wrong link type (-71) [ 182.554231][ T146] Bluetooth: hci0: link tx timeout [ 182.560182][ T146] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 183.123371][ T8569] loop0: detected capacity change from 0 to 32768 [ 183.188121][ T8569] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.1062 (8569) [ 183.256756][ T8569] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 183.301696][ T8569] BTRFS info (device loop0): enabling auto defrag [ 183.339272][ T8569] BTRFS info (device loop0): max_inline at 0 [ 183.363770][ T8569] BTRFS info (device loop0): enabling ssd optimizations [ 183.397167][ T8569] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 183.439869][ T8569] BTRFS info (device loop0): use lzo compression, level 0 [ 183.461130][ T8569] BTRFS info (device loop0): using free space tree [ 183.482009][ T8569] BTRFS info (device loop0): has skinny extents [ 183.691310][ T26] audit: type=1800 audit(1731272273.075:88): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1062" name="bus" dev="loop0" ino=263 res=0 errno=0 [ 183.750041][ T26] audit: type=1804 audit(1731272273.125:89): pid=8569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1062" name="/newroot/227/bus/bus" dev="loop0" ino=263 res=1 errno=0 [ 183.870411][ T4186] ------------[ cut here ]------------ [ 183.878228][ T4186] WARNING: CPU: 1 PID: 4186 at net/bluetooth/hci_conn.c:443 hci_conn_timeout+0x250/0x450 [ 183.905158][ T4186] Modules linked in: [ 183.909967][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:5 Not tainted 5.15.171-syzkaller #0 [ 183.919566][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.930184][ T4186] Workqueue: hci3 hci_conn_timeout [ 183.935597][ T4186] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 183.941308][ T4186] Code: e9 8d e8 d3 d0 77 f8 48 8b 35 64 ec 96 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 48 00 f8 e8 20 f9 2d f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 183.961343][ T4186] RSP: 0018:ffffc90002fd7c28 EFLAGS: 00010293 [ 183.967623][ T4186] RAX: ffffffff89527a90 RBX: ffff88802b0c8138 RCX: ffff888076b71dc0 [ 183.976153][ T4186] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 183.984984][ T4186] RBP: 00000000ffffffff R08: ffffffff895278a1 R09: ffffed1005619003 [ 183.993270][ T4186] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 184.002424][ T4186] R13: ffff88801b9f9128 R14: ffff88802b0c8000 R15: ffff88801b9f9118 [ 184.011448][ T4186] FS: 0000000000000000(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 184.028751][ T4186] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 184.036426][ T4186] CR2: 000000110c324a3f CR3: 0000000065fdd000 CR4: 00000000003506f0 [ 184.044792][ T4186] DR0: 0000000000000003 DR1: 0000000000000004 DR2: 0000000100000000 [ 184.052832][ T4186] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 184.061003][ T4186] Call Trace: [ 184.064381][ T4186] [ 184.067335][ T4186] ? __warn+0x15b/0x300 [ 184.071536][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.076938][ T4186] ? report_bug+0x1b7/0x2e0 [ 184.081493][ T4186] ? handle_bug+0x3d/0x70 [ 184.085934][ T4186] ? exc_invalid_op+0x16/0x40 [ 184.090658][ T4186] ? asm_exc_invalid_op+0x16/0x20 [ 184.095812][ T4186] ? hci_conn_timeout+0x61/0x450 [ 184.100784][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.106071][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.111134][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.117168][ T4186] process_one_work+0x8a1/0x10c0 [ 184.122174][ T4186] ? worker_detach_from_pool+0x260/0x260 [ 184.129857][ T4186] ? _raw_spin_lock_irqsave+0x120/0x120 [ 184.143114][ T4186] ? kthread_data+0x4e/0xc0 [ 184.147760][ T4186] ? wq_worker_running+0x97/0x170 [ 184.152922][ T4186] worker_thread+0xaca/0x1280 [ 184.157797][ T4186] kthread+0x3f6/0x4f0 [ 184.161995][ T4186] ? rcu_lock_release+0x20/0x20 [ 184.167375][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 184.172011][ T4186] ret_from_fork+0x1f/0x30 [ 184.176631][ T4186] [ 184.179694][ T4186] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 184.186988][ T4186] CPU: 0 PID: 4186 Comm: kworker/u5:5 Not tainted 5.15.171-syzkaller #0 [ 184.195340][ T4186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.205677][ T4186] Workqueue: hci3 hci_conn_timeout [ 184.210915][ T4186] Call Trace: [ 184.214219][ T4186] [ 184.217174][ T4186] dump_stack_lvl+0x1e3/0x2d0 [ 184.221890][ T4186] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 184.227733][ T4186] ? panic+0x860/0x860 [ 184.231840][ T4186] ? hci_conn_timeout+0x1c0/0x450 [ 184.236914][ T4186] ? hci_conn_timeout+0x1c0/0x450 [ 184.241981][ T4186] panic+0x318/0x860 [ 184.245924][ T4186] ? __warn+0x16a/0x300 [ 184.250143][ T4186] ? fb_is_primary_device+0xd0/0xd0 [ 184.255389][ T4186] ? ret_from_fork+0x1f/0x30 [ 184.260016][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.265074][ T4186] __warn+0x2b2/0x300 [ 184.269110][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.274173][ T4186] report_bug+0x1b7/0x2e0 [ 184.278734][ T4186] handle_bug+0x3d/0x70 [ 184.283193][ T4186] exc_invalid_op+0x16/0x40 [ 184.287874][ T4186] asm_exc_invalid_op+0x16/0x20 [ 184.292767][ T4186] RIP: 0010:hci_conn_timeout+0x250/0x450 [ 184.298525][ T4186] Code: e9 8d e8 d3 d0 77 f8 48 8b 35 64 ec 96 04 bf 08 00 00 00 48 89 da 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d5 48 00 f8 e8 20 f9 2d f8 <0f> 0b e9 34 fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c dd fd ff [ 184.318370][ T4186] RSP: 0018:ffffc90002fd7c28 EFLAGS: 00010293 [ 184.324555][ T4186] RAX: ffffffff89527a90 RBX: ffff88802b0c8138 RCX: ffff888076b71dc0 [ 184.332562][ T4186] RDX: 0000000000000000 RSI: 00000000ffffffff RDI: 0000000000000000 [ 184.340658][ T4186] RBP: 00000000ffffffff R08: ffffffff895278a1 R09: ffffed1005619003 [ 184.349705][ T4186] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 184.358015][ T4186] R13: ffff88801b9f9128 R14: ffff88802b0c8000 R15: ffff88801b9f9118 [ 184.366027][ T4186] ? hci_conn_timeout+0x61/0x450 [ 184.371123][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.376328][ T4186] ? hci_conn_timeout+0x250/0x450 [ 184.381390][ T4186] process_one_work+0x8a1/0x10c0 [ 184.386380][ T4186] ? worker_detach_from_pool+0x260/0x260 [ 184.392247][ T4186] ? _raw_spin_lock_irqsave+0x120/0x120 [ 184.397927][ T4186] ? kthread_data+0x4e/0xc0 [ 184.402435][ T4186] ? wq_worker_running+0x97/0x170 [ 184.407474][ T4186] worker_thread+0xaca/0x1280 [ 184.412175][ T4186] kthread+0x3f6/0x4f0 [ 184.416246][ T4186] ? rcu_lock_release+0x20/0x20 [ 184.421096][ T4186] ? kthread_blkcg+0xd0/0xd0 [ 184.425718][ T4186] ret_from_fork+0x1f/0x30 [ 184.430148][ T4186] [ 184.433381][ T4186] Kernel Offset: disabled [ 184.438083][ T4186] Rebooting in 86400 seconds..