last executing test programs: 4m27.85756872s ago: executing program 4 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x5) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xfffffffffffffffc}) brk(0x689d80000000) 4m12.511642097s ago: executing program 32 (id=5): prlimit64(0x0, 0xe, &(0x7f0000000040)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000140)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x5) sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffd000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000240)=@abs={0x0, 0x0, 0x80}, 0x6e) sendmmsg$unix(r2, &(0x7f00000002c0), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000300), 0x4000087, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f00000000c0)={0x0, 0x0, 0x8, 0xfffffffffffffffc}) brk(0x689d80000000) 16.955214208s ago: executing program 3 (id=647): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mkdirat(0xffffffffffffff9c, 0x0, 0x1fe) mount(0x0, 0x0, 0x0, 0x4000, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = msgget$private(0x0, 0x1c0) msgctl$IPC_SET(r4, 0x1, &(0x7f0000000240)={{0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x96}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xffffffffffffffff}) msgsnd(0x0, 0x0, 0x1008, 0x0) msgsnd(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="03"], 0x3f9, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000340), 0xffffffffffffffff) msgctl$IPC_STAT(r4, 0x2, 0x0) 15.377838409s ago: executing program 3 (id=649): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005f00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$msr(r1, 0x0, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@discard_async}]}, 0x1, 0x5599, &(0x7f00000007c0)="$eJzs3X1oVecdB/BzTaKhFpPV1alY6RSqdGVTW5DNUeNLZjvfkhq0NTXGaWudrViZW9qJCwliOi2NSh2jrjhkRVtWApO+iFPXoUM2psikszLnim44ahZ1gh2Tjdx7n+u955rk1nVNXz6fknvuc3/nec5zD+eP+731OTcCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAKIoSm289OevImvqxM8fNeeA/j7y669ljk5aNPnL25/N3TCuqWv1U3fSGlrq5UzqaKxfPP3p1/aEoSqT6pfsvnHzfA4/OWTizNAxYX53alpd3ecjk4+lUo2/Oi539cv8WRVFUEhugKL2tLMpqJ+IHiFblD9it6k1X3lxWM/XtxssXJg6vHbU3/63TqbS3J9Bb0tfVmWvXUkXysU9sj0w769JL5Fyiqf7xC+4jeRMAwAcypiq5yXwcTX/EzbQb4/VYuyLWbo21wyeE1uzGjUiN27ered4er/fSPCtSUaFfl/OM1dPnP9OuivePtWNR4wPMM3fXdKQp7WqeK2P13ponAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMfJu5PmXZgy/cXLfSfV7hiy4a+z+mxcv+9UbfVLd+2sPrHujf61ddMbWurmTulorlw8/+jV9YeiqDzZL5Hqnnhj08Kn+tbNfHDzQ2srZ0w49FpRetywLc7aOfpjePLVsij6VlblTBj23IAoqsotJJvRj/MLy5JP7g8FAAAAPk2GJB/7ZNqpOFiS004k02Qi+V+QCovVm668uaxm6tuNly9MHF47au+Nj1fVxXgV1x0v0y6/9pfICsYh/sbHu1YPu67KG6d78RHjef7YtHdmnBlRf27rlfNNTWsv7h534K73tkw93/zNd/av6Hf/cyPy8n959/k/nDn5HwAAgP+F/B8fp3s95f+3ZlfOaPvDvT/6/biv/31o9cZ3m/YmVg09vmLkd+ZNPPXa869fzcv/t+ccMi//hxmH/N8nurH8DwAAAB9n/+/8X5E3Tvd6yv/PHDwxdM+ogzWN0furyv6VOLhk36nnvtZ8ec29216oPDvrsf55+X9MYfm/OHva4cXfhQkvL4uiMYWfVAAAACBH+P/u175aCHk99c1BPK+/PP7FnRdLZxYvKf7yrl3bnl5TevcdA5fWLn5l9EtDnjg8/9nVefm/orD8X/LRvF0AAACgAIs23L100D/mjd+2pH32rVePVg66Z/vRO25un7G6Zv2kFbec/kpe/q8qLP/36523AwAAAFzHsfmPLFrxt9071v16xOQxpe9PGTn7e3WX9hwe++9RNR0vjP/GW3n5v76w/H9Tepte+ZDqdCj8K4QtZVFU2vlkZarwm6h1YqYAAAAAfEhCTm/44eylDZuf2fbPizV3vtJ8y8utf374C+V3bpz2s+9vOT63adO+vPy/svv7/4c7HYT1/zn3/8tb/59VSN31b4IbAwAAAPBZlL+eP9weP/XLBV39/n6h6/8fe3r4o1u/+5Olv7itfHfitpNPfumJ5ocrfzpwYHvL6JHNRYNL8vJ/Y2H5vyh7+2H+/h8AAADcgE/a7/89lDdO93q6//+0BesOL2gf+/kDLe3Pjxn02znFDy7Y+af2m/c/Oax9/7nzLcPy8n9rYfk/bPtnv70D4fw0l0XR4M4n6bsJ7grTXR4rtJVkFVInPtZjTuiRLrT1yyokrYz1GFcWRV/sfNIYK3wuFFpjhY4B6cL2WOFIKKSvh0zh1VjhQLjStg5ITzdeeD0U0gss2sIKiv6ZJRGxHpe66tFZuG6Pk5mDAwAAfKaE8JzOsiW5zSgeZdsSPe1wU0879Olph6KediiO7RDfsavXo/rcQnj9L6dXv/f48l/WTmi4Z+7kPcOOP37f2bE/+PbaX83uv6XxxKUpTXn5f3th+T+cir6pTVfr/6Ow/j/9u4aZ9f/1oVAeK7SFQlX8jgFV4RipsLshHKO8Kt2jY3CmAAAAAJ9q4XuBol6eBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBf9u49Sq6qThTw7nd30uk0OI6AykSdJEZMdydBlICLPERUjHQYZFTGPEg65NEkIQ8kwYWBsBwUdQLBxDvDXQS4WYCixDgEERgSlcC9RHnNMAzyFLiBUSFc3nCZ3NV9aleqzulKV0wa0tzv+6NrV/3289Sja59zah8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPj/w+BDv7LgilOeuWnkC3936imNC59+bsxlB3/kiPqb5h48/PUtd8+6fcrxZ10w5eSJO1YeO+Mrd7/591tDaO8uV5EUr/j5RVOX1U6Z9KWLv3zOsZ8/auum2ly9uXgY2PWnMnfn/Njqk4NCuKEihOp0YGRjEqjJ3W+M9b2vMYQDwq5AvkTHgKREuuFwW0MI68KuQL6qGxtCaCwInHTvL2/9blfikoYQhoYQ6tJtPFyXtNGQDgyrTQID0oEF1UnglZ2JfODnlUkA9lp8M+Rf9BvaizM091yuxOuvZp917O2VHl5VTDSXzven8X3cqQK16Qfa9+ppy1RHn8i8PTZ7t/WDd1tmO6/ytBV+kcp9Q9m5K1QXKmd2zJq+tHNJfKQytLRUlaqpj57nh5//+ow9Sfeb12HsQPM+eR1W7dh+59mNn7pu9aD1r64ce+WWve3mQwWbtDDd1+pC7jXXb57HaJzPk37w9st8SxriS1cI4V9vqNv26hcuf/nTa7ZcPem8v13zzIjTW9veuO+F6yctWLXg+v/+i8z8v3n38//4co63lUW5Y6tvNCVz8/hIY0w815TMzQEAAKDf6A97Tac+NOvF4b/5xD9PvvHR7YOO/5tFqw/+de2Wdz34VOX4Z285ecT81zLz/yHlHf+Ph/wbC0e7OYRx3YmVg0M4qPvxJHBN7M6pg0P4QHeqvTgwPhXYHMLB3YkR+apSJepjiSGpwPamXGBcKrA1BtpTgfUxsCoVOD8GNqQCM2JgcyowIQbCnOJxfKQpN46yAw0xMC3ZiBviWQgvNMXWUtvqd/mqAAAA9pHc7LCm+G7BuQ57myFOLzc09JYhnoFdMkNdqob0DDY/rSpZQ3VvNVT2VkN+3Ct2P/xMzRW91Zw5DaOiOMPSb/7h/rFfXDW3euj22sNemnfczN8d8/41O1s++uPanT8cd9fahsz8v2338/+6HjpSkTn+H8Lk7r8xd2Uu0pmPT2svygAAAADshdETP/ZPl733l9fdcuLnfzv4jiOv2PjDqbVjv/XK0nt+uGLCudt+dEFm/j+uvPP/4z6RqoLMYVvcDTFvcAhtxYGk2qOygeSo98BcAAAAAPqD/PH4/LHwObnb5BTt9Hw6m799D/PHA//jesw//pC/fmzDf8z99k8nTjli7TmPzd9+1+EfrWn7m+cf/tIF86Z947JvZub/7eWd/z+g+DbpxNbYi9WDQ6gvCNwee9kV6DYkBh47pjiQG//WuAEujFXlTkzIV3VhLDEtBtpSgXWlStydL3FQcSD3ZOUbX5kfx5xciYIAAAAAvOXi7oB4XD6e/3/fgg/PPmpb3aG3rKr46V/uuKZz4vVtNc+M/VXT61/4whNff63xzMz8f9qenf/fPQ/OnN7fOTCE1uoQqtI/DNg2IFkYMAYaK3KJWwYkdVWlqzp3QAhHdw0sXdXjufX/q9NrDN7bkFQVAwd98Ornh3UlrmwIobUwcP8pl3+sK7EkFcg3/sWGEP6qa7Tpxq+vTxqvSTe+tj6EQwsC+apOrQ+hq7HadFW/rMtdxyBd1XV1IbyrIJCv6oi6EJYFAPqp+K90ZuGDi5ctnze9s7NjUR8m4j78hjBrTmdHy4wFnTPrSvRpZqrPRcsYnZsdU8nlkFLiEkWr7lk7tJx0/neCbYV9ye3Hz5w4mLsfvwvVdI9zdE3R3THpIX/4Q9kmQsE3qbdryAMKK9n1JGbqj/lrw8BQv3Rxx6KWs6YvWbJoVPK33Oyjk79xUMm2GpXeVgN66tt+8PIYXlhJ65LTF7YuXrZ85JzTp5/WcVrH/NFtYw5vO3LMqCM+3to1qrbkby9DHd5T1amh7rz8rR/qIdUFlbwVnxoSEhL9LfE/zjj95DuOnPOpE+5d+oGj1oybcPaNh89qXXPb9ZPWT3ts8I9GXZKZ/y/c/fw/furET/7c+gyljv83x8P8yeO7DvNPi4F15R7/by51ND9/YsCQVGBFDKxwmB8AAIB3hrg7Mu52jHutH6q74qrDL3329C2jJn7tzOaRv57wwXEHfvqML99x3H/+3/d/7xN//N+Z+f+K8n7/v4/W/88vXf+5Usv8j4gl2kqt/59e5j+//v+KUuv/p5f5z6//v+5tWP9/aT6Q2iQvWP8fAAB4J3jr1v/vdXn/9AUCMhl6Xd4/fYGATIZel/Ev9wIBe7z+/5PHXPv0B97/TPvPrr/j8ekXn3HOx9fUD9uxrL7l9m//+y9u/MqpgzLz/1Xlzf8t3A8AAAD7j2uPffLfjr3q+7ec3Pjsj2sWzT7/5vNuahz2WsWsjfMnDJh8zez/ysz/15U3/3/r1/8Lpc7/H1Iq0F5qYUDr/wEAANBPlVr/b/tP6i+9sHHHuk0bXv/ske9+/Tt3fOdrry34wQ8+89H3zV48adyEmzPz/w3lzf/jaReVRbljb95oSta0C+k17Z5ryv9kAAAAAPqHytDSUlNm3qKVUcf/+W3GpUB3ly504nE//WT70HffPufaKa3/cN99Ha2H3NnUsH7+zi+d8PTyp05YeWVm/r+5vPl/0e8yqnZsv/Psxk9d98bqQetfXTn2yi27jv8DAAAAfafc/RIAAAAAAAAAAAAAAMDb770Lxoy/t+Xxd1+0evn5zdddcfmbm1q3fPUfL6na/uHZf7hg7uiGzO//w+TucqV+/x+v+xd/X/AXRbljq72v/5e7f9LxP1nWvWThtqYQPlQYmHfevANC7tr8wwsDt351xHu6EuelS9z8yISnuhJT04HPjDzw5a7E0anAtLhI4sHpQLyq4suDUoG4vOJ96UDcHhvSgdpc4FuDknFUpLfVM43JtqpIb6sHG0MYXBDIb6sbGpM2KtIDvCQVyA/wjHQgDvALuUBlulc/GZj0KgYaY9HLBia9AgBgvxW/BdaEWXM6O9riV/h4e0h18W1UtGTZudlqq8psPi5NtuqetUPLSVelv4vuutZ4TajrGsKozNfVwiwV3aPcN7X0sun+osSQe1vtra82XW3pETUkI2qZsaBzZk2vAx/Te5bR1b1mGZWZ7BRmqezepGXUUkZfyhhRmdumjC7H+5WhpaUqlWtsDDaHIr29Isr9vX5Pa/6VekV0+cSXb/rD41ubPn3Ye9pPO/+eyvff+6sDr3jxQ688dN1hm/7bR9b++urM/L+5vPl/XeG4Xs5dDGBFvLLeUYNDmFbmiAAAAOCdb/b8Ry6+4FcXbX+sfdhTC1ovuvWBZT9YXt10zfnHPnjzmS+d8r2pexu/9skTfvvAb3+0cdj4WxaOGfDEWVdedtw9d92xetvxb95w2P8ZOePRzPx/SHnz/7hjLHcoONnbsTle/3/l4BC6L63fnASuicM9dXAIH+hOtccSyQX1PxdLtCWBa+IOkxGxxLT24qrqY2BDKrC9KRfYnApsjYHcXoqrQ25XzkVNIXysOzW5uMTCWKI5FTghBoakAi0x0JYKDIqBcanAHwflAu2pwJ0xEOYUb6ufDcptKwAAgD2Rm2fVFN8N6XnehureMlT0lmFAbxkqe8tQ11uGUqOI9zfGDDWFx+NzGeJDNelaG1K1ZDLEi+Hvcb8yGcLdxTnTBTNN588kaS7OGTN8+x8f/OT0lx6+YemP3hh+4rmf/PH3tm16be4Tp40cPO3VsfNGfPuPmfl/W3nz/wHFt0nrW+P8f9f1/5LA7bF7q+Op40Ni4LFjigO5HQNb42T3wnxV7bkSuUn7hbHEuBgYkgosjIFxqcC0ybnAuvcUB3Iz7XzjK/ONz8mVKAgAAADAWy7uIIi7aeL8/9K/mz353O+0dqyc9dWnps0Y+ukDL33fpcfcNOk3c9cedOCpd14zLzP/H1fe/D+2N7CwsfNjb54cFMINFbt6kw+MbEwCcT9GY/x5/PsaQzigYAdHvkTHgKREbarhcFtD8gv12nRVNzYkawzE+yfd+8tbv9uVuKQhhKEFe1/ybTxcl7TRkA4Mq00CA9KBBdVJIO75yQd+XpkEYK/l9wrGF1TuVJe85p7LlXj9vVOuCZoeXmYfaA/5evrNVV+pSz+Q26eat2dPW6Y6+kTm7bHZu60/vtuavdsKv0jlvqHs3BWqC5UzO2ZNX9q5JD5S+EvWjD56nnv6Jevu0vvgdbjiz+9t7+rSHWhLfXy09Vyu59dhRayuasf2O89u/NR1qwetf3Xl2Cu3lN2NEuIm/cuvjR/2UMHm7Wt1Ifea63efJ+0+T/rjv4EhnrYQwqbnvlF/5okn/tsB/7Rw0/cf/a/mV7/1zTs2blzW1HJz1ZpJF3722sz8v728+X916rbba3FjLh4cwocLNu62uPknDk4+BwsCyafku7KB5JD7E00lPzkBAABgX8vv7sjvL5iTu01OCE/Pk7P52/cwf9xfMa7H/OX2+4TP3/0vf7vid6u/uGX9AxW/+f3GK04YM3XhYwvvu3jiP/+v31/16I2Z+f+03c//61PddPzf8X/6iOP/Pdrfd0XXpx9YsVe7ojPV0Scc/+/R/v5uc/y/R47/O/7fE8f/e+H4f4/296ct8y1poS9dIYSnn/2XC//hgmUnPfTqu4+4+IE/PTjx7IobOv9j+kPPdLzx0Vdm3XpoZv6/sLz5v/X/el60L7/+37RS6/8tLLX+3wrr/wEAAH2qxEJz6XleZvW+TIb06n2ZDL0uENjrEoPW/9vj9f82nFz9+1/P/ffvf+6+pw+vnHr/f46eP++m4UcdM+KqNU+t+NcX2lsy8/8V5c3/48thYGHr/WX9vyGTS1S1KgYWWhgQAACA/VGpHQQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC8vcaceedL33lh+2G3Lrlt5cnj/3r1qV//7NEH/+zKnZ/YHL7x4vKX7ply/FkXTDl54o6Vx874yt1v/v3WEOZ0l6tIilf8/KKpy2qnTPrSxV8+59jPH7V1U12u3prc7XuLcsdW32gKYV3BI40x8VxT151dgZOO/8my6q7EtqYQPlQYmHfevAO6EuubQhheGLj1qyPe05U4L13i5kcmPNWVmJoOfGbkgS93JY7OBSrS3b10UNLdinR3vzsohMEFgXx35w4qrirfxnG5QGW6jasakzZioDEW/UFj0kYMdMYSc+pDaK0OoSpd1f+sS6qqSlf1i7qkqqp0VefUhXB0CKE6XdUjtUlV1emR31WbVBUDB33w6ueHdSXW1YbQWhi4/5TLP9aVOCMVyDd+Ym0If9X1kkk3vrEmabwm3fglNSEcGkKoTZd4sTopUZsu8Xh1CO8qCOQbn10dwrLAO0L88JlZ+ODiZcvnTe/s7FjUh4naXFsNYdaczo6WGQs6Z9al+lRKRUF657nZeGWZY3/4+a/P6Lpddc/aoeWkq3Plarq7PLqm6O6YfdX7ij7qfezXgMJKdj0fmfpj/towMNQvXdyxqOWs6UuWLBqV/C03++jkb1UummyrUftqW5Xrz91WwwsraV1y+sLWxcuWj5xz+vTTOk7rmD+6bczhbUeOGXXEx1u7RtWW/N0XQ708G6/q46EeUl1QyVvxASAhIdHfEpVFn25t+/u/7MwX/V0drQl13R/QmWlFYZaK7lHui0GP3318Xw46MyXJjGhUZuKQyTK69yxjMpOJXVkakizd3+syk8PCmiq7N2m8XxlaWkr+p2suvlu4+f7Uw+YtV9x05aYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+H/swIEAAAAAAJD/ayNUVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYQcOBAAAAACA/F8boaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqgo7cCwAAAAAIMzfOoyeDQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuBQAAP//CAsM0g==") r2 = open(&(0x7f0000005d80)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) fallocate(r2, 0x0, 0x80000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) 15.264418821s ago: executing program 5 (id=651): socket$nl_route(0x10, 0x3, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f00000000c0)='\x00', 0x89101) syz_usb_connect$uac1(0x3, 0xa4, &(0x7f0000000100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2406000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYBLOB="05", @ANYRES16=r0], 0x0) 12.261073968s ago: executing program 5 (id=659): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e23, 0x401, @ipv4={'\x00', '\xff\xff', @empty}}], 0x1c) sendto$inet6(r1, &(0x7f0000000180)="b0", 0x1, 0x40811, &(0x7f0000000200)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) 11.035843683s ago: executing program 5 (id=661): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x5543, 0x47, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x74}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002219"], 0x0}, 0x0) 10.716637455s ago: executing program 0 (id=663): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_connect(0x4, 0xd2, &(0x7f0000000280)=ANY=[@ANYBLOB="12010102e8efe5ff8d1a12102ee9010203010902c0000202073007090436c800ff44b1090904160602ff067b0709210400530122950709050310100208050a0905070910000803078a0c12f0c63f477bcacf71e4c890a136fd48a49b3a4de2030000000000000010e2095060b5c9f1461b3c5cd5ae21bf2b826fdd1cf2396a4d98f220f611a5bd6e6ab8470eeb0a1f8d7a792e5808080dba84d29f224e73ae681c111112c2c0c9d9d158ad5a1a0955acb71cd6bb761f79cf336c783fd6b763ca0ada6354e0a3d4d4082b01b7aee9279d9f0c"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_connect$cdc_ecm(0x6, 0x0, 0x0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x1b, &(0x7f0000000680)=@string={0x1b, 0x3, "b507102bee69cd76d7b44b92190e4a47963ea8aa26f3d34b3a"}}]}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000000080)=ANY=[]) 10.638319883s ago: executing program 3 (id=664): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x0, 0x0, 0x0, 0xa}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000800)={0x200, r1, 0x100, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x80000000, 0x46}}}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xa00}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x800}, @NL80211_ATTR_FRAME={0x1b1, 0x33, @data_frame={@msdu=@type11={{0x0, 0x2, 0x9, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @device_a, {0x0, 0xc}, @device_b, @value={0xc, 0x0, 0x2, 0x0, 0x3}, @value=@ver_80211n={0x0, 0x9, 0x2, 0x3, 0x0, 0x3}}, @random="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"}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x201}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0xf7}]}, 0x200}, 0x1, 0x0, 0x0, 0x24040000}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) 7.672100626s ago: executing program 2 (id=669): sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, 0x0, 0x8050) recvmsg(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x10000) syz_usb_connect(0x1, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0) 7.63888561s ago: executing program 5 (id=670): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000042c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_connect(0x6, 0x371, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000180)=[{&(0x7f00000001c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@ipv4_newrule={0x2c, 0x20, 0x1, 0x0, 0x0, {0x2, 0x0, 0x14, 0x8, 0x0, 0x0, 0x0, 0x0, 0x10000}, [@FRA_SRC={0x8, 0x2, @multicast2}, @FRA_FLOW={0x8}]}, 0x2c}}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$VHOST_VSOCK_SET_GUEST_CID(0xffffffffffffffff, 0x4008af60, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) mkdir(&(0x7f0000000300)='./sys\x00', 0x0) syz_open_dev$sndctrl(&(0x7f0000000340), 0x0, 0x0) getpid() r3 = syz_open_dev$usbfs(0x0, 0x80, 0x113201) read$usbfs(r3, &(0x7f0000000380)=""/234, 0xea) mount(0x0, &(0x7f0000000480)='./sys\x00', &(0x7f00000004c0)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000540)='ping', 0x4, 0x0, &(0x7f0000000580)={0xa, 0x1f90, 0x0, @loopback}, 0x1c) openat$sndtimer(0xffffff9c, 0x0, 0x20480) write(r4, &(0x7f00000005c0)='1\x00', 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x11, &(0x7f00000006c0)=ANY=[@ANYBLOB="180000008000000000000000fdffffff85000000ae000000b7080000000000007b8af8ff00000000b7080000161300007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32=0x0, @ANYBLOB="0000000000000001b705000008000000850000002d00000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x19, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000003f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20}, 0x15) r6 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r6, &(0x7f0000000880)="3100d90daaa91f198d99db922334963f621e49a6ca0b870113948d1bd6e243e5da22cf2ba7bca0e3865eaa6666cca12e329a784c6e63a08e7d57f2e2a6fa1f85d8a30f16645140e37208d917f43c0e86486bb3e9fd67f758c7f029fcbacd68c67fd996ba190681103b5cb8dbd189543ac4d64867e39469625a900852b3220d4788d9f52245fb79fec8cffbcf9a5d9764a4d5c3af2d283279ca35f820d073a1f7a0e134b89c8a9433c78e6698004ab5f3584de90135190d323bf6d75843821518979868ae7c", 0xc5) syz_usb_control_io(r0, 0x0, &(0x7f0000004300)={0x84, &(0x7f00000043c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.397831397s ago: executing program 0 (id=673): flock(0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = semget$private(0x0, 0x3, 0x266) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) semop(r4, &(0x7f00000194c0), 0x0) flock(0xffffffffffffffff, 0x1) 6.057018042s ago: executing program 1 (id=674): socket$nl_xfrm(0x10, 0x3, 0x6) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, &(0x7f0000000200)={0x2c, &(0x7f0000000240)={0x20, 0xa, 0x20, "a10124f51800000000000000000000000002a39b85d82e5cec068ce8989dea0a"}, 0x0, 0x0, 0x0, 0x0}) 5.28761889s ago: executing program 3 (id=675): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./debug\x00', &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000005f00)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/kvm/halt_successful_poll\x00', 0x0, 0x0) read$msr(r1, 0x0, 0x0) userfaultfd(0x1) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000440)=0x7) getpid() syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000540), &(0x7f0000000580)='./file0\x00', 0x4, &(0x7f00000005c0)={[{@discard_async}]}, 0x1, 0x5599, &(0x7f00000007c0)="$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") r2 = open(&(0x7f0000005d80)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x3000) fallocate(r2, 0x0, 0x80000, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)) 5.28733291s ago: executing program 1 (id=676): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x2000200, &(0x7f0000000100), 0x7, 0x504, &(0x7f0000000880)="$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") socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000340)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000380)='my_sys\x00', &(0x7f00000003c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x4, 0x1000002, 0x12, r1, 0x0) syz_io_uring_complete(0x0, 0x0) syz_clone(0x80000400, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) 4.040147587s ago: executing program 5 (id=677): r0 = openat$dm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x185042, 0x0) ioctl$DM_GET_TARGET_VERSION(r0, 0xc138fd11, &(0x7f0000001bc0)={0x4, 0x0, 0x0, 0x1b8, 0x138, 0x0, 0x0, 0x1, 0x0, 0x0, {0x0, 'snapshot\x00'}, "52d1d83ace02d1945ff9f14292bf2a539f35493fcb5cbae452dcaad0c525651a33aa25cb55fc02b4542b853b9ad715fd5a27111d22a7c961bb9558cdcbee2fbeab28953fbb0eb317441b7103555a477e076e95ae5b6a7b6a95f33fcb1042e09ce032d3e481d5dd84384798e458a6edf2d17bd6fd83638cbfa0654027"}) ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f0000000640)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fa, 0x0, 0x0, 0x1c, 0x4, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1cac3f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x2, 0x3fd]}}) r2 = dup(0xffffffffffffffff) write$UHID_INPUT(r2, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x88001, 0x0, 0x0, {0x0, {'syz', 0x0, '3\x00'}, @uuid={'LVM-syz', 0x0, '3\x00'}}}) r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x20702, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) preadv(0xffffffffffffffff, &(0x7f0000001880)=[{&(0x7f00000018c0)=""/196, 0xc4}], 0x1, 0xa3, 0x0) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000340)={0x4, 0x0, 0x0, 0x180, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r3}, [@snapshot={0x0, 0x1008, 0x0, 0x48, 'snapshot\x00', {@ram={'/dev/ram', 0x1}, 0x20, @ram={'/dev/ram', 0x0}, 0x20, 'PO', 0x20, '0'}}]}) syz_usb_connect(0x0, 0x36, &(0x7f0000001ac0)=ANY=[@ANYBLOB="120100004107f540f30c7593de1a000000010902"], 0x0) 3.980315383s ago: executing program 3 (id=678): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000001840)={0xa, 0x2, 0x200, @loopback, 0x4}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x2404c081, &(0x7f0000001880)={0xa, 0x2, 0x8000000d, @loopback, 0x9}, 0x1c) shutdown(r0, 0x1) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="4c00000014000103010000000000000002060000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000200", 0x4c) 3.858960036s ago: executing program 1 (id=679): clock_adjtime(0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000005c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000600)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000640)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000740), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000780), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000007c0)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mknodat$null(0xffffffffffffff9c, 0x0, 0xc408, 0x103) shmdt(0x0) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) 2.776869057s ago: executing program 1 (id=680): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x439, 0x1e, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x49811, 0x1d850}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) 2.718580103s ago: executing program 0 (id=681): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f000000a040)={0x0, 0x0, &(0x7f000000a080)={&(0x7f000000a0c0)=ANY=[@ANYBLOB="bc000000000105060100000000000000020000003400018014000180080001007f000001080002007f0000011c000280050001000600000006000200303900000600030006bb00003400028014000180080001007f000001080002007f0000011c00028005000100060000000600020006bb00000600030030390000080003000000000e08000700000000780d000580090001007070747000000000200004"], 0xbc}}, 0x0) 2.435975501s ago: executing program 1 (id=682): timer_create(0x3, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000045, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") r1 = open(&(0x7f0000000080)='./file1\x00', 0x64842, 0x86) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x140000}], 0x1, 0x7800, 0x0, 0x3) syz_usb_connect(0x0, 0x4a, 0x0, 0x0) 2.35383491s ago: executing program 2 (id=683): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x10) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000046c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setns(0xc9, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000004a80)={'filter\x00', 0x5, "44bf0863a3"}, &(0x7f0000004ac0)=0x2d) 2.100940026s ago: executing program 0 (id=684): bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x1a, 0x4, 0x100, 0x1, 0x0, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3475}, 0x50) 2.000042286s ago: executing program 2 (id=685): bpf$MAP_CREATE(0x0, &(0x7f0000001000)=@base={0xa, 0x4, 0x8, 0xa, 0x0, 0xffffffffffffffff, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = io_uring_setup(0x667, &(0x7f0000000040)={0x0, 0xa14a, 0x10, 0x2, 0x235}) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000200)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r2 = socket(0x1e, 0x4, 0x0) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000340)=@req={0x3fc}, 0x10) sendmmsg(r1, &(0x7f0000000380), 0x4000000000000e4, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 1.655911021s ago: executing program 2 (id=686): sched_setaffinity(0x0, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000001100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000001140)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0x25a5, 0x4) vmsplice(r2, &(0x7f00000011c0)=[{&(0x7f0000001200)='*', 0x1}], 0x1, 0xd) 1.593477887s ago: executing program 0 (id=687): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000180)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001080)=0x6) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='rdma.current\x00', 0x275a, 0x0) fallocate(r3, 0x50, 0x0, 0x20000) mmap$IORING_OFF_SQ_RING(0x0, 0x5, 0x2, 0x2172, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./myproc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000010c0)='./myproc/interrupts\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000001200)={0x2020}, 0x2020) preadv(r4, &(0x7f0000000380)=[{&(0x7f0000004380)=""/186, 0xffffffffffffff2e}, {&(0x7f0000003240)=""/4114}], 0x1, 0x10000, 0x7) 1.354352032s ago: executing program 2 (id=688): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x39000, 0xc) write$binfmt_elf64(r1, &(0x7f0000005f00)=ANY=[], 0xfffffe3e) 943.049244ms ago: executing program 5 (id=689): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(r0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) setsockopt(r1, 0x84, 0x80, &(0x7f0000000000)="1400000009000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in6={0xa, 0x4e23, 0x1, @empty}], 0x1c) sendto$inet6(r1, &(0x7f00000004c0)="b0", 0x1, 0x40811, &(0x7f0000000240)={0xa, 0x4e23, 0x1ff, @loopback, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e20, 0x5, @local}}}, 0x84) 513.640948ms ago: executing program 0 (id=690): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000200)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x101}, {0x6, 0x24, 0x1a, 0x0, 0xa}}, {{0x9, 0x5, 0x81, 0x3, 0x8, 0x36}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0x8, 0x9}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0x0, 0x8}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0x20, 0x13}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, 0x0, &(0x7f0000000100)={0x0, 0x3, 0xa, @string={0xa, 0x3, "77a49e4f6ff7b121"}}, 0x0, 0x0, 0x0}, 0x0) 474.085302ms ago: executing program 3 (id=691): flock(0xffffffffffffffff, 0x1) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYRESHEX], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0xfffffff6, &(0x7f0000000200)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000002c0), 0x0, 0x0) read$msr(r3, &(0x7f0000000300)=""/102392, 0x18ff8) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r4 = semget$private(0x0, 0x3, 0x266) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0xa) semop(r4, &(0x7f00000194c0), 0x0) flock(0xffffffffffffffff, 0x1) 21.194608ms ago: executing program 2 (id=692): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) sched_setscheduler(0x0, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000080), 0x242, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000540)='./proc/bus/pci/00/00.0\x00', 0x2, 0x0) clock_adjtime(0xffffffd3, &(0x7f00000000c0)={0x10001, 0x8, 0x0, 0x9, 0x7, 0xb, 0xfffffffffffdfffe, 0x4, 0x9654, 0x3, 0x7fffffff, 0x401, 0x1e, 0x9, 0x82, 0xcc0, 0x10048, 0x3, 0x94d6, 0xd, 0x2, 0x10000000010000c, 0xff, 0xfffffffffffffffa, 0x8, 0x2000000000000}) 0s ago: executing program 1 (id=693): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) set_mempolicy(0x3, &(0x7f0000000080)=0x7, 0x7) syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2) r0 = syz_io_uring_setup(0xf00, &(0x7f0000000340)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f00000003c0)=0x0, &(0x7f0000000400)=0x0, &(0x7f0000000440)=0x0) syz_io_uring_submit(r1, r2, r3, &(0x7f00000005c0)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) kernel console output (not intermixed with test programs): ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 91.098079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 91.106165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 91.150086][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.197918][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.225202][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.240414][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.250361][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 91.261179][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.295348][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.300080][ T4423] mmap: syz.0.7 (4423) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 91.322972][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.347188][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.359970][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.388311][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.400988][ T4283] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.411925][ T4283] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.423706][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.477038][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 91.488649][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 91.536400][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 91.692448][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.799115][ T4409] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.247995][ T4284] device veth0_macvtap entered promiscuous mode [ 92.281986][ T1173] cfg80211: failed to load regulatory.db [ 92.299955][ T4284] device veth1_macvtap entered promiscuous mode [ 92.320296][ T4283] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.356286][ T4283] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.385686][ T4283] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.404925][ T4283] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.422728][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.433924][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.442246][ T4437] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 92.456147][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.474284][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.576421][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.598089][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.629233][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.644656][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.662580][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.673413][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.693898][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.705895][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.740950][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.773029][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.793694][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.822939][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.853088][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.872637][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.903426][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.923699][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.943632][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.972521][ T4284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.996967][ T4284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.023466][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.061640][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.076732][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.190776][ T4284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.201202][ T4284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.210036][ T4284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.218900][ T4284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.247399][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.255289][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.321981][ T4381] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.392062][ T4409] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.417546][ T4409] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.447666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.522111][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.536826][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.576080][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 93.588662][ T4461] netlink: 'syz.1.20': attribute type 4 has an invalid length. [ 93.596437][ T4461] netlink: 17 bytes leftover after parsing attributes in process `syz.1.20'. [ 93.633875][ T4461] FAULT_INJECTION: forcing a failure. [ 93.633875][ T4461] name failslab, interval 1, probability 0, space 0, times 1 [ 93.657206][ T4461] CPU: 0 PID: 4461 Comm: syz.1.20 Not tainted syzkaller #0 [ 93.665399][ T4461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 93.676392][ T4461] Call Trace: [ 93.679713][ T4461] [ 93.682693][ T4461] dump_stack_lvl+0x188/0x24e [ 93.687445][ T4461] ? show_regs_print_info+0x12/0x12 [ 93.692694][ T4461] ? load_image+0x410/0x410 [ 93.697262][ T4461] ? __might_sleep+0xd0/0xd0 [ 93.701895][ T4461] ? __lock_acquire+0x7ea0/0x7ea0 [ 93.706985][ T4461] should_fail_ex+0x390/0x4c0 [ 93.711722][ T4461] should_failslab+0x5/0x20 [ 93.716287][ T4461] slab_pre_alloc_hook+0x59/0x300 [ 93.721389][ T4461] kmem_cache_alloc+0x56/0x2f0 [ 93.726557][ T4461] ? fib_insert_alias+0x300/0x1280 [ 93.731744][ T4461] fib_insert_alias+0x300/0x1280 [ 93.736740][ T4461] ? lockdep_rtnl_is_held+0x22/0x30 [ 93.742000][ T4461] ? fib_find_node+0x294/0x2f0 [ 93.746831][ T4461] fib_trie_unmerge+0x308/0xce0 [ 93.751767][ T4461] fib_unmerge+0xbc/0x350 [ 93.756157][ T4461] fib4_rule_configure+0x114/0xae0 [ 93.761328][ T4461] ? __nla_parse+0x3c/0x50 [ 93.765802][ T4461] fib_nl_newrule+0x135a/0x1e40 [ 93.770736][ T4461] ? fib_rules_seq_read+0xf0/0xf0 [ 93.775800][ T4461] ? rcu_is_watching+0x11/0xa0 [ 93.780603][ T4461] ? trace_contention_end+0x5f/0x170 [ 93.785980][ T4461] ? fib_rules_seq_read+0xf0/0xf0 [ 93.791133][ T4461] rtnetlink_rcv_msg+0x863/0xfb0 [ 93.796112][ T4461] ? rtnetlink_rcv_msg+0x220/0xfb0 [ 93.801268][ T4461] ? rtnetlink_bind+0x80/0x80 [ 93.805984][ T4461] ? __local_bh_enable_ip+0x136/0x1c0 [ 93.811376][ T4461] ? lockdep_hardirqs_on+0x94/0x140 [ 93.816620][ T4461] ? __local_bh_enable_ip+0x136/0x1c0 [ 93.822021][ T4461] ? _local_bh_enable+0xa0/0xa0 [ 93.826912][ T4461] ? __dev_queue_xmit+0x281/0x3810 [ 93.832167][ T4461] ? __dev_queue_xmit+0x281/0x3810 [ 93.837304][ T4461] ? __dev_queue_xmit+0x1d84/0x3810 [ 93.842540][ T4461] ? __dev_queue_xmit+0x281/0x3810 [ 93.847714][ T4461] ? ref_tracker_free+0x682/0x830 [ 93.852805][ T4461] ? refcount_inc+0x70/0x70 [ 93.857381][ T4461] ? memcpy+0x3c/0x60 [ 93.861405][ T4461] ? __copy_skb_header+0x3ba/0x4f0 [ 93.866553][ T4461] ? __skb_clone+0x446/0x6c0 [ 93.871199][ T4461] netlink_rcv_skb+0x1ef/0x440 [ 93.876007][ T4461] ? rtnetlink_bind+0x80/0x80 [ 93.880722][ T4461] ? netlink_ack+0x1160/0x1160 [ 93.885529][ T4461] ? netlink_deliver_tap+0x2e/0x1b0 [ 93.890949][ T4461] netlink_unicast+0x7ad/0x920 [ 93.895763][ T4461] netlink_sendmsg+0x8ad/0xbd0 [ 93.900576][ T4461] ? netlink_getsockopt+0x550/0x550 [ 93.905917][ T4461] ? apparmor_socket_sendmsg+0x8a/0x330 [ 93.911524][ T4461] ? bpf_lsm_socket_sendmsg+0x5/0x10 [ 93.916843][ T4461] ? security_socket_sendmsg+0x7c/0xa0 [ 93.922350][ T4461] ? netlink_getsockopt+0x550/0x550 [ 93.927588][ T4461] ____sys_sendmsg+0x5ed/0x9a0 [ 93.932398][ T4461] ? __sys_sendmsg_sock+0x30/0x30 [ 93.937473][ T4461] ? __import_iovec+0x306/0x510 [ 93.942392][ T4461] ? import_iovec+0x6f/0xa0 [ 93.946951][ T4461] ___sys_sendmsg+0x2a2/0x360 [ 93.951769][ T4461] ? __sys_sendmsg+0x2a0/0x2a0 [ 93.956604][ T4461] __se_sys_sendmsg+0x1c3/0x2b0 [ 93.961498][ T4461] ? __x64_sys_sendmsg+0x80/0x80 [ 93.966482][ T4461] ? lockdep_hardirqs_on+0x94/0x140 [ 93.971726][ T4461] do_syscall_64+0x4c/0xa0 [ 93.976173][ T4461] ? clear_bhb_loop+0x60/0xb0 [ 93.980893][ T4461] ? clear_bhb_loop+0x60/0xb0 [ 93.985613][ T4461] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 93.991557][ T4461] RIP: 0033:0x7f9dbaf9f559 [ 93.996017][ T4461] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.015693][ T4461] RSP: 002b:00007f9dbbf14028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 94.024136][ T4461] RAX: ffffffffffffffda RBX: 00007f9dbb225fa0 RCX: 00007f9dbaf9f559 [ 94.032137][ T4461] RDX: 0000000000004000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 94.040154][ T4461] RBP: 00007f9dbb036b20 R08: 0000000000000000 R09: 0000000000000000 [ 94.048169][ T4461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.056169][ T4461] R13: 00007f9dbb226038 R14: 00007f9dbb225fa0 R15: 00007fffe1bc0428 [ 94.064186][ T4461] [ 95.217573][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.225473][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.267501][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.560288][ T1173] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.907059][ T1173] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.944735][ T1173] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.000385][ T1173] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 97.061051][ T1173] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 97.098037][ T1173] usb 3-1: SerialNumber: syz [ 97.267829][ T4503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.371286][ T1173] usb 3-1: 0:2 : does not exist [ 97.447130][ T1173] usb 3-1: USB disconnect, device number 2 [ 97.937098][ T14] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 98.154804][ T14] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 98.304778][ T14] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.497876][ T14] usb 2-1: config 0 interface 0 has no altsetting 0 [ 98.516970][ T14] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 98.529655][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.569528][ T14] usb 2-1: config 0 descriptor?? [ 98.575680][ T4509] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 98.591909][ T4351] rxe_eth0 speed is unknown, defaulting to 1000 [ 98.651772][ T4269] udevd[4269]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 98.869542][ T4522] jffs2: notice: (4522) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 98.886924][ T0] NOHZ tick-stop error: local softirq work is pending, handler #188!!! [ 99.112316][ T14] usbhid 2-1:0.0: can't add hid device: -71 [ 99.123237][ T14] usbhid: probe of 2-1:0.0 failed with error -71 [ 99.205549][ T14] usb 2-1: USB disconnect, device number 2 [ 99.548169][ T4543] ptp ptp0: new virtual clock ptp1 [ 99.571993][ T4543] ptp ptp0: new virtual clock ptp2 [ 99.623663][ T4543] ptp ptp0: new virtual clock ptp3 [ 99.749374][ T4543] ptp ptp0: new virtual clock ptp4 [ 99.798750][ T4543] ptp ptp0: new virtual clock ptp5 [ 99.812777][ T4543] ptp ptp0: guarantee physical clock free running [ 99.956937][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.976943][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.986926][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 99.996919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 100.006917][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 100.016921][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 100.026931][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 100.036918][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 100.046919][ T0] NOHZ tick-stop error: local softirq work is pending, handler #382!!! [ 102.036850][ T4572] bond0: (slave bond_slave_0): Releasing backup interface [ 102.143879][ T4576] bond0: (slave bond_slave_1): Releasing backup interface [ 104.296233][ T4612] ptp ptp0: guarantee physical clock free running [ 105.219230][ T4623] fuse: Bad value for 'fd' [ 107.703332][ T4654] netlink: 8 bytes leftover after parsing attributes in process `syz.1.69'. [ 108.878830][ T4665] ptp ptp0: guarantee physical clock free running [ 109.204620][ T4678] fuse: Bad value for 'fd' [ 110.508686][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 110.517837][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 110.525797][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 110.534135][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 110.541890][ T50] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 110.549627][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 110.988000][ T4703] ptp ptp0: guarantee physical clock free running [ 111.321324][ T4306] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.735090][ T4697] rxe_eth0 speed is unknown, defaulting to 1000 [ 112.637125][ T50] Bluetooth: hci2: command 0x0409 tx timeout [ 112.897036][ T4306] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.110359][ T4716] ima: Unable to open file: /p (-2) [ 113.118011][ T4715] ima: policy update failed [ 113.138041][ T4306] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.148626][ T27] audit: type=1802 audit(1793144549.985:2): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.87" res=0 errno=0 [ 113.158802][ T4718] fuse: Bad value for 'fd' [ 113.342794][ T4306] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.281722][ T4734] netlink: 228 bytes leftover after parsing attributes in process `syz.0.93'. [ 114.752488][ T50] Bluetooth: hci2: command 0x041b tx timeout [ 114.769874][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 114.781577][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 114.792926][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 114.803551][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 114.811025][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 114.820581][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 114.828080][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 114.837084][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 114.846287][ T4733] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 114.854427][ T4734] netlink: 16 bytes leftover after parsing attributes in process `syz.0.93'. [ 115.440187][ T4697] chnl_net:caif_netlink_parms(): no params data found [ 115.606596][ T4744] ptp ptp0: guarantee physical clock free running [ 116.503816][ T4697] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.544592][ T4697] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.573041][ T4697] device bridge_slave_0 entered promiscuous mode [ 116.799741][ T50] Bluetooth: hci2: command 0x040f tx timeout [ 117.066035][ T4697] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.095845][ T4697] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.242947][ T4697] device bridge_slave_1 entered promiscuous mode [ 117.800176][ T4697] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 117.844132][ T4697] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.044414][ T4697] team0: Port device team_slave_0 added [ 118.061255][ T4697] team0: Port device team_slave_1 added [ 118.187697][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.197350][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.294542][ T4697] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.424694][ T4797] ptp ptp0: guarantee physical clock free running [ 118.447712][ T4697] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.454724][ T4697] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.573204][ T4697] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 118.733931][ T4804] jffs2: notice: (4804) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 118.829536][ T4697] device hsr_slave_0 entered promiscuous mode [ 118.850143][ T4697] device hsr_slave_1 entered promiscuous mode [ 118.860364][ T4697] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 118.875415][ T4697] Cannot create hsr debugfs directory [ 118.881632][ T50] Bluetooth: hci2: command 0x0419 tx timeout [ 122.229026][ T4826] netlink: 6 bytes leftover after parsing attributes in process `syz.1.116'. [ 122.323897][ T4826] netlink: 6 bytes leftover after parsing attributes in process `syz.1.116'. [ 122.417353][ T4828] netlink: 14 bytes leftover after parsing attributes in process `syz.3.114'. [ 122.531793][ T4837] ptp ptp0: guarantee physical clock free running [ 123.067234][ T4306] device hsr_slave_0 left promiscuous mode [ 123.235142][ T4306] device hsr_slave_1 left promiscuous mode [ 123.334811][ T7] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 123.377887][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.447166][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.537164][ T7] usb 3-1: Using ep0 maxpacket: 8 [ 123.551871][ T7] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 123.604276][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 123.645570][ T7] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 123.674750][ T7] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 123.687851][ T4306] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.687914][ T4306] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 123.705109][ T4306] device bridge_slave_1 left promiscuous mode [ 123.725564][ T4306] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.741169][ T4306] device bridge_slave_0 left promiscuous mode [ 123.747947][ T4306] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.153550][ T4306] device veth1_macvtap left promiscuous mode [ 124.206233][ T4306] device veth0_macvtap left promiscuous mode [ 124.302693][ T4306] device veth1_vlan left promiscuous mode [ 124.396047][ T4306] device veth0_vlan left promiscuous mode [ 124.576772][ T7] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 124.586962][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.888741][ T7] usb 3-1: usb_control_msg returned -71 [ 124.894688][ T7] usbtmc 3-1:16.0: can't read capabilities [ 125.150216][ T7] usb 3-1: USB disconnect, device number 3 [ 125.784334][ T4865] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 127.037334][ T4714] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 129.050915][ T4714] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 129.066646][ T4714] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 129.092500][ T4714] usb 1-1: config 0 interface 0 has no altsetting 0 [ 129.104464][ T4714] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 129.120218][ T4714] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.140592][ T4714] usb 1-1: config 0 descriptor?? [ 129.147587][ T4876] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.254836][ T4306] team0 (unregistering): Port device team_slave_1 removed [ 129.357033][ T4306] team0 (unregistering): Port device team_slave_0 removed [ 129.458342][ T4306] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 129.549180][ T4306] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 129.588691][ T4714] belkin 0003:1020:0006.0001: ignoring exceeding usage max [ 129.633667][ T4714] belkin 0003:1020:0006.0001: No inputs registered, leaving [ 129.663386][ T4714] belkin 0003:1020:0006.0001: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.0-1/input0 [ 129.785901][ T4353] usb 1-1: USB disconnect, device number 2 [ 130.092118][ T4306] bond0 (unregistering): Released all slaves [ 130.390960][ T4697] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 130.457963][ T4697] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 130.537488][ T4697] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 130.607515][ T4697] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 130.893589][ T4899] fido_id[4899]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 131.036400][ T4697] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.105346][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.153308][ T4644] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.186594][ T4697] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.208905][ T4914] device syzkaller1 entered promiscuous mode [ 131.301429][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.313852][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.324270][ T27] audit: type=1326 audit(1793144568.165:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.326477][ T4605] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.355252][ T4605] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.386487][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.418804][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.421080][ T27] audit: type=1326 audit(1793144568.195:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.452282][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.461121][ T4714] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.500115][ T4605] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.507379][ T4605] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.522329][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 131.561043][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 131.597241][ T27] audit: type=1326 audit(1793144568.215:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.628231][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 131.662572][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 131.680712][ T27] audit: type=1326 audit(1793144568.225:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.687720][ T4714] usb 2-1: Using ep0 maxpacket: 8 [ 131.721329][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 131.751978][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 131.769249][ T4714] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 131.777840][ T27] audit: type=1326 audit(1793144568.225:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.777884][ T27] audit: type=1326 audit(1793144568.225:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.777922][ T27] audit: type=1326 audit(1793144568.225:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.777960][ T27] audit: type=1326 audit(1793144568.245:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.777996][ T27] audit: type=1326 audit(1793144568.265:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.778033][ T27] audit: type=1326 audit(1793144568.265:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4920 comm="syz.2.141" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6e4b79f559 code=0x7ffc0000 [ 131.933346][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 131.952427][ T4697] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 131.991647][ T4697] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 132.034983][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 132.059778][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 132.097895][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 132.128308][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 132.194632][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 132.327067][ T4714] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 132.357339][ T4714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 132.376034][ T4714] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.510233][ T4714] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.802939][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.812510][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.883542][ T4714] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.167956][ T4714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.510923][ T4714] usb 2-1: GET_CAPABILITIES returned 0 [ 133.517366][ T4714] usbtmc 2-1:16.0: can't read capabilities [ 133.701054][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 133.768377][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 133.789885][ C1] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.821883][ T4958] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 133.838309][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.847750][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.857080][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.866261][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.960853][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.970010][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.979151][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.988299][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 133.997442][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.006531][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.078946][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.088143][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.097251][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.106367][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.115488][ C0] usbtmc 2-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 134.161009][ T4353] usb 2-1: USB disconnect, device number 3 [ 134.261414][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 134.279785][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 134.302733][ T4697] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 134.933697][ T4970] infiniband syz1: set down [ 134.970518][ T4970] infiniband syz1: added ipvlan1 [ 135.052873][ T4970] RDS/IB: syz1: added [ 135.103448][ T4970] smc: adding ib device syz1 with port count 1 [ 135.150357][ T4970] smc: ib device syz1 port 1 has pnetid [ 135.421280][ T4994] loop1: detected capacity change from 0 to 16 [ 135.476645][ T4994] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.527712][ T4353] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 135.728880][ T4353] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 135.757244][ T4353] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 135.891810][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 135.902632][ T4353] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 135.932375][ T4353] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 135.947788][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 135.975920][ T4353] usb 1-1: SerialNumber: syz [ 136.062875][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 136.072171][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 136.101919][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 136.141645][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 136.164616][ T4697] device veth0_vlan entered promiscuous mode [ 136.205047][ T4353] usb 1-1: 0:2 : does not exist [ 136.215726][ T4697] device veth1_vlan entered promiscuous mode [ 136.267908][ T4353] usb 1-1: USB disconnect, device number 3 [ 136.427051][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 136.455278][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 136.480055][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 136.522784][ T4306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 136.549832][ T4697] device veth0_macvtap entered promiscuous mode [ 136.588315][ T4697] device veth1_macvtap entered promiscuous mode [ 136.674062][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.717031][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.727543][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.738431][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.757064][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.776944][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.826952][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.850249][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.873492][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.891767][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 136.914611][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 136.953981][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 136.996481][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 137.036439][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.059477][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.074007][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.084960][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.104496][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.116554][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.132142][ T4697] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.153299][ T4697] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.185557][ T4697] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 137.213510][ T4697] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.234982][ T4697] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.255689][ T4697] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.264857][ T4697] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.296675][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 137.326134][ T4403] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 137.514219][ T4605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.529464][ T4605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.562250][ T4513] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 137.589884][ T4644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.611490][ T4644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.629671][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 137.778583][ T4346] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 137.986997][ T4346] usb 1-1: Using ep0 maxpacket: 8 [ 137.993804][ T4346] usb 1-1: config index 0 descriptor too short (expected 30, got 18) [ 138.066247][ T4346] usb 1-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 139.547002][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.598005][ T4346] usb 1-1: Product: syz [ 139.602700][ T4346] usb 1-1: Manufacturer: syz [ 139.626927][ T4346] usb 1-1: SerialNumber: syz [ 139.655055][ T4346] usb 1-1: config 0 descriptor?? [ 139.696797][ T4346] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 139.715624][ T4346] usb 1-1: setting power ON [ 139.725777][ T4346] dvb-usb: bulk message failed: -22 (2/0) [ 140.278756][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 140.297541][ T5026] dvb-usb: bulk message failed: -22 (3/0) [ 140.675142][ T4346] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 140.690718][ T4346] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 140.699976][ T4346] usb 1-1: media controller created [ 140.756404][ T4346] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 140.942304][ T5059] jffs2: notice: (5059) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 140.994105][ T4346] usb 1-1: selecting invalid altsetting 6 [ 141.038407][ T4346] usb 1-1: digital interface selection failed (-22) [ 141.065431][ T4346] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 141.100866][ T4346] usb 1-1: setting power OFF [ 141.121273][ T4346] dvb-usb: bulk message failed: -22 (2/0) [ 141.161601][ T4346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 141.206259][ T4346] (NULL device *): no alternate interface [ 141.293796][ T4346] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 141.367044][ T4346] usb 1-1: USB disconnect, device number 4 [ 143.517394][ T4265] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 145.104504][ T5091] ptp ptp0: guarantee physical clock free running [ 145.368080][ T4265] usb 6-1: device not accepting address 2, error -71 [ 145.850911][ T26] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 146.045288][ T26] usb 2-1: config 0 has no interfaces? [ 146.053888][ T26] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 146.102076][ T26] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.155954][ T26] usb 2-1: config 0 descriptor?? [ 146.433783][ T4714] usb 2-1: USB disconnect, device number 4 [ 148.362052][ T5145] jffs2: notice: (5145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 150.330742][ T5155] ptp ptp0: guarantee physical clock free running [ 151.994911][ T4372] smpboot: CPU 1 is now offline [ 152.857620][ T4306] ACPI: \_SB_.C001: Eject incomplete - status 0xf [ 154.775545][ T5195] jffs2: notice: (5195) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 155.257104][ T4354] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 155.479111][ T4354] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 155.559821][ T4354] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 155.644255][ T4354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 155.684143][ T4354] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 155.732200][ T4354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 155.792049][ T4354] usb 6-1: config 0 descriptor?? [ 155.827783][ T5199] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 156.024938][ T5211] tipc: Started in network mode [ 156.038242][ T5212] ptp ptp0: guarantee physical clock free running [ 156.064758][ T5211] tipc: Node identity ac1414aa, cluster identity 4711 [ 156.117040][ T5211] tipc: New replicast peer: 172.20.20.187 [ 156.180604][ T5211] tipc: Enabled bearer , priority 10 [ 156.290305][ T4354] belkin 0003:1020:0006.0002: ignoring exceeding usage max [ 156.379777][ T4354] belkin 0003:1020:0006.0002: No inputs registered, leaving [ 156.453108][ T4354] belkin 0003:1020:0006.0002: hidraw0: USB HID v0.11 Joystick [HID 1020:0006] on usb-dummy_hcd.5-1/input0 [ 156.583275][ T4354] usb 6-1: USB disconnect, device number 4 [ 156.931878][ T5225] fido_id[5225]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 158.184548][ T4354] tipc: Node number set to 2886997162 [ 158.222659][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 158.231730][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 158.239373][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 158.246651][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 158.254223][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 158.261826][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 158.269405][ T5239] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 158.278478][ T5239] netlink: 228 bytes leftover after parsing attributes in process `syz.0.219'. [ 158.287607][ T5239] netlink: 16 bytes leftover after parsing attributes in process `syz.0.219'. [ 159.936592][ T5256] Bluetooth: MGMT ver 1.22 [ 160.271112][ T5260] netlink: 4 bytes leftover after parsing attributes in process `syz.1.226'. [ 160.344197][ T5260] device bridge_slave_1 left promiscuous mode [ 160.410088][ T5260] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.522243][ T5260] device bridge_slave_0 left promiscuous mode [ 160.565000][ T5260] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.901870][ T5284] fuse: Bad value for 'fd' [ 162.073329][ T5291] jffs2: notice: (5291) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 163.123638][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 163.133283][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 163.143858][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 163.153028][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 163.160544][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 163.169995][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 163.177656][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 163.187061][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 163.196223][ T5295] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 163.207185][ T5295] netlink: 228 bytes leftover after parsing attributes in process `syz.3.232'. [ 163.217028][ T5295] netlink: 16 bytes leftover after parsing attributes in process `syz.3.232'. [ 165.556170][ T5325] netlink: 4 bytes leftover after parsing attributes in process `syz.5.241'. [ 165.632020][ T5325] device bridge_slave_1 left promiscuous mode [ 165.693309][ T5325] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.778085][ T5325] device bridge_slave_0 left promiscuous mode [ 165.844086][ T5325] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.459449][ T5350] jffs2: notice: (5350) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 167.657036][ T4354] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 167.872663][ T4354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 167.921743][ T4354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 167.992711][ T4354] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 168.065395][ T4354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 168.147031][ T4354] usb 1-1: SerialNumber: syz [ 168.402512][ T4354] usb 1-1: 0:2 : does not exist [ 169.922516][ T4354] usb 1-1: unit 5 not found! [ 170.573416][ T4354] usb 1-1: USB disconnect, device number 5 [ 170.888834][ T5314] udevd[5314]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 172.421113][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 172.432086][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 172.442679][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 172.451780][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.459282][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 172.468765][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 172.476394][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 172.485544][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 172.494613][ T5394] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 172.505100][ T5394] netlink: 228 bytes leftover after parsing attributes in process `syz.1.245'. [ 172.514123][ T5394] netlink: 16 bytes leftover after parsing attributes in process `syz.1.245'. [ 173.150630][ T5403] jffs2: notice: (5403) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 174.471179][ T5416] netlink: 4 bytes leftover after parsing attributes in process `syz.5.259'. [ 175.442622][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 175.453465][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 175.460864][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 175.470932][ T50] Workqueue: hci4 hci_rx_work [ 175.475653][ T50] Call Trace: [ 175.478947][ T50] [ 175.481885][ T50] dump_stack_lvl+0x188/0x24e [ 175.486585][ T50] ? show_regs_print_info+0x12/0x12 [ 175.491788][ T50] ? load_image+0x410/0x410 [ 175.496307][ T50] sysfs_create_dir_ns+0x26a/0x290 [ 175.501518][ T50] ? __lock_acquire+0x7ea0/0x7ea0 [ 175.506559][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 175.511265][ T50] ? do_raw_spin_unlock+0x11d/0x230 [ 175.516483][ T50] kobject_add_internal+0x617/0xca0 [ 175.521798][ T50] kobject_add+0x160/0x230 [ 175.526230][ T50] ? kobject_init+0x1c0/0x1c0 [ 175.530926][ T50] ? __raw_spin_lock_init+0x41/0x100 [ 175.536222][ T50] ? klist_children_get+0x50/0x50 [ 175.541256][ T50] ? get_device_parent+0x121/0x3e0 [ 175.546382][ T50] device_add+0x470/0x1050 [ 175.550826][ T50] hci_conn_add_sysfs+0xd1/0x1e0 [ 175.555780][ T50] le_conn_complete_evt+0xf93/0x15c0 [ 175.561088][ T50] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 175.567343][ T50] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 175.572992][ T50] ? mutex_unlock+0x10/0x10 [ 175.577507][ T50] ? skb_pull_data+0xec/0x1f0 [ 175.582199][ T50] hci_le_enh_conn_complete_evt+0x185/0x460 [ 175.588205][ T50] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 175.594632][ T50] ? hci_remote_host_features_evt+0x230/0x230 [ 175.600705][ T50] hci_event_packet+0x7b3/0x1290 [ 175.605656][ T50] ? lock_chain_count+0x20/0x20 [ 175.610523][ T50] ? bis_list+0x280/0x280 [ 175.614869][ T50] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 175.620782][ T50] ? kcov_remote_start+0x50f/0x810 [ 175.625908][ T50] ? lockdep_hardirqs_on+0x94/0x140 [ 175.631128][ T50] ? hci_send_to_monitor+0x9c/0x4a0 [ 175.636342][ T50] hci_rx_work+0x3eb/0xd40 [ 175.640773][ T50] ? _raw_spin_unlock+0x40/0x40 [ 175.645646][ T50] ? process_one_work+0x7b4/0x1160 [ 175.650764][ T50] process_one_work+0x8ab/0x1160 [ 175.655734][ T50] ? worker_detach_from_pool+0x240/0x240 [ 175.661379][ T50] ? _raw_spin_lock_irq+0xb7/0xf0 [ 175.666424][ T50] ? _raw_spin_lock_irqsave+0x100/0x100 [ 175.672012][ T50] ? wq_worker_running+0x97/0x190 [ 175.677069][ T50] worker_thread+0xaf5/0x12a0 [ 175.681800][ T50] kthread+0x29d/0x330 [ 175.685894][ T50] ? worker_clr_flags+0x1a0/0x1a0 [ 175.690960][ T50] ? kthread_blkcg+0xd0/0xd0 [ 175.695575][ T50] ret_from_fork+0x1f/0x30 [ 175.700022][ T50] [ 175.716923][ T50] kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 175.730405][ T50] Bluetooth: hci4: failed to register connection device [ 177.133856][ T5440] netlink: 228 bytes leftover after parsing attributes in process `syz.0.268'. [ 177.142897][ T5440] netlink: 16 bytes leftover after parsing attributes in process `syz.0.268'. [ 177.327069][ T4372] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 178.527057][ T50] Bluetooth: hci4: command 0x2016 tx timeout [ 178.562097][ T4372] usb 6-1: Using ep0 maxpacket: 8 [ 178.590424][ T4372] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 178.648097][ T4372] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 178.716637][ T4372] usb 6-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 178.809767][ T4372] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 178.891125][ T4372] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 178.941421][ T4372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.005520][ T4372] usbtmc 6-1:16.0: bulk endpoints not found [ 179.115762][ T4372] usb 6-1: USB disconnect, device number 5 [ 183.980790][ T5487] ptp ptp0: guarantee physical clock free running [ 184.668156][ T50] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 184.678880][ T50] CPU: 0 PID: 50 Comm: kworker/u5:0 Not tainted syzkaller #0 [ 184.686291][ T50] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 184.696366][ T50] Workqueue: hci3 hci_rx_work [ 184.701069][ T50] Call Trace: [ 184.704355][ T50] [ 184.707311][ T50] dump_stack_lvl+0x188/0x24e [ 184.712004][ T50] ? show_regs_print_info+0x12/0x12 [ 184.717216][ T50] ? load_image+0x410/0x410 [ 184.721757][ T50] sysfs_create_dir_ns+0x26a/0x290 [ 184.726891][ T50] ? __lock_acquire+0x7ea0/0x7ea0 [ 184.731938][ T50] ? sysfs_warn_dup+0xa0/0xa0 [ 184.736631][ T50] ? do_raw_spin_unlock+0x11d/0x230 [ 184.741889][ T50] kobject_add_internal+0x617/0xca0 [ 184.747121][ T50] kobject_add+0x160/0x230 [ 184.751564][ T50] ? kobject_init+0x1c0/0x1c0 [ 184.756254][ T50] ? __raw_spin_lock_init+0x41/0x100 [ 184.761549][ T50] ? klist_children_get+0x50/0x50 [ 184.766607][ T50] ? get_device_parent+0x121/0x3e0 [ 184.771748][ T50] device_add+0x470/0x1050 [ 184.776204][ T50] hci_conn_add_sysfs+0xd1/0x1e0 [ 184.781180][ T50] le_conn_complete_evt+0xf93/0x15c0 [ 184.786494][ T50] ? hci_le_big_info_adv_report_evt+0x300/0x300 [ 184.792846][ T50] ? __mutex_unlock_slowpath+0x1b0/0x6c0 [ 184.798497][ T50] ? mutex_unlock+0x10/0x10 [ 184.803015][ T50] ? skb_pull_data+0xec/0x1f0 [ 184.807711][ T50] hci_le_enh_conn_complete_evt+0x185/0x460 [ 184.813622][ T50] ? hci_le_remote_conn_param_req_evt+0xcb0/0xcb0 [ 184.820051][ T50] ? hci_remote_host_features_evt+0x230/0x230 [ 184.826158][ T50] hci_event_packet+0x7b3/0x1290 [ 184.831127][ T50] ? lock_chain_count+0x20/0x20 [ 184.836030][ T50] ? bis_list+0x280/0x280 [ 184.840381][ T50] ? _raw_spin_unlock_irqrestore+0xc1/0x120 [ 184.846480][ T50] ? kcov_remote_start+0x50f/0x810 [ 184.851624][ T50] ? lockdep_hardirqs_on+0x94/0x140 [ 184.856847][ T50] ? hci_send_to_monitor+0x9c/0x4a0 [ 184.862064][ T50] hci_rx_work+0x3eb/0xd40 [ 184.866496][ T50] ? _raw_spin_unlock+0x40/0x40 [ 184.871375][ T50] ? process_one_work+0x7b4/0x1160 [ 184.876514][ T50] process_one_work+0x8ab/0x1160 [ 184.881505][ T50] ? worker_detach_from_pool+0x240/0x240 [ 184.887164][ T50] ? _raw_spin_lock_irq+0xb7/0xf0 [ 184.892203][ T50] ? _raw_spin_lock_irqsave+0x100/0x100 [ 184.897766][ T50] ? wq_worker_running+0x97/0x190 [ 184.902800][ T50] worker_thread+0xaf5/0x12a0 [ 184.907512][ T50] kthread+0x29d/0x330 [ 184.911600][ T50] ? worker_clr_flags+0x1a0/0x1a0 [ 184.916637][ T50] ? kthread_blkcg+0xd0/0xd0 [ 184.921232][ T50] ret_from_fork+0x1f/0x30 [ 184.925675][ T50] [ 184.932953][ T50] kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 184.946368][ T50] Bluetooth: hci3: failed to register connection device [ 186.056846][ C0] sched: RT throttling activated [ 187.091659][ T50] Bluetooth: hci3: command 0x2016 tx timeout [ 187.287058][ T4346] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 189.064949][ T4346] usb 2-1: Using ep0 maxpacket: 8 [ 189.094684][ T4346] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 190.166009][ T4346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 190.246278][ T4346] usb 2-1: config 16 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 192.487903][ T4346] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 192.637137][ T4346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 192.756121][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.877079][ T4346] usb 2-1: can't set config #16, error -71 [ 192.968469][ T4346] usb 2-1: USB disconnect, device number 5 [ 193.916581][ T50] Bluetooth: hci2: link tx timeout [ 193.922258][ T50] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.015422][ T5548] netlink: 4 bytes leftover after parsing attributes in process `syz.5.277'. [ 194.130996][ T5550] ptp ptp0: guarantee physical clock free running [ 194.241866][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.249696][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.000669][ T50] Bluetooth: hci2: command 0x0406 tx timeout [ 196.866895][ T4346] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 198.907461][ T4346] usb 2-1: Using ep0 maxpacket: 8 [ 198.926204][ T4346] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 199.008355][ T4346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 199.076429][ T4346] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 200.226969][ T4346] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 200.341211][ T4346] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 200.485789][ T4346] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 200.543341][ T4346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.587947][ T4346] usb 2-1: can't set config #16, error -71 [ 201.647310][ T4346] usb 2-1: USB disconnect, device number 6 [ 203.434121][ T4346] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 204.448348][ T4346] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 204.511891][ T4346] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 204.578082][ T4346] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.652629][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.726867][ T4346] usb 4-1: SerialNumber: syz [ 204.986130][ T4346] usb 4-1: 0:2 : does not exist [ 205.066586][ T4346] usb 4-1: USB disconnect, device number 2 [ 205.307029][ T4354] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 205.366677][ T5605] udevd[5605]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 205.517392][ T4354] usb 1-1: Using ep0 maxpacket: 8 [ 205.539403][ T4354] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 205.635838][ T5655] ptp ptp0: guarantee physical clock free running [ 205.642725][ T4354] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 205.703711][ T4354] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 205.802654][ T4354] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 205.878965][ T4354] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.970302][ T4354] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 206.033168][ T4354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.557039][ T4287] Bluetooth: hci4: command 0x0406 tx timeout [ 206.563171][ T4287] Bluetooth: hci1: command 0x0406 tx timeout [ 208.268179][ T4354] usb 1-1: can't set config #16, error -71 [ 208.327711][ T4354] usb 1-1: USB disconnect, device number 6 [ 212.177156][ T7] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 212.399091][ T7] usb 2-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 213.400614][ T7] usb 2-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 213.450919][ T5720] Zero length message leads to an empty skb [ 213.457196][ T5720] netlink: 228 bytes leftover after parsing attributes in process `syz.3.329'. [ 213.466163][ T5720] netlink: 16 bytes leftover after parsing attributes in process `syz.3.329'. [ 213.516126][ T7] usb 2-1: config 0 interface 0 has no altsetting 0 [ 213.561541][ T7] usb 2-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 213.631514][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.689554][ T7] usb 2-1: config 0 descriptor?? [ 213.737732][ T5703] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 214.309628][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 214.315639][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 214.406332][ T7] usb 2-1: USB disconnect, device number 7 [ 214.421820][ T5708] loop2: detected capacity change from 0 to 32768 [ 219.917071][ T7] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 220.126916][ T7] usb 6-1: Using ep0 maxpacket: 16 [ 220.158120][ T7] usb 6-1: config index 0 descriptor too short (expected 51443, got 18) [ 220.228919][ T7] usb 6-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 220.310661][ T7] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.360656][ T7] usb 6-1: Product: syz [ 220.365264][ T7] usb 6-1: Manufacturer: syz [ 220.426130][ T7] usb 6-1: SerialNumber: syz [ 220.462804][ T7] r8152-cfgselector 6-1: config 0 descriptor?? [ 221.587102][ T4346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 221.611559][ T7] r8152-cfgselector 6-1: Unknown version 0x0000 [ 221.643725][ T7] r8152-cfgselector 6-1: USB disconnect, device number 6 [ 222.746017][ T5786] netlink: 228 bytes leftover after parsing attributes in process `syz.0.341'. [ 222.755182][ T5786] netlink: 16 bytes leftover after parsing attributes in process `syz.0.341'. [ 222.830929][ T4346] usb 4-1: Using ep0 maxpacket: 8 [ 222.858517][ T4346] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 222.940852][ T4346] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 223.001983][ T4346] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 223.099570][ T4346] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 223.163455][ T4346] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 223.248553][ T4346] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 223.340389][ T4346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.787929][ T4346] usb 4-1: can't set config #16, error -71 [ 223.841304][ T4346] usb 4-1: USB disconnect, device number 3 [ 226.394723][ T5820] netlink: 228 bytes leftover after parsing attributes in process `syz.5.352'. [ 226.404231][ T5820] netlink: 16 bytes leftover after parsing attributes in process `syz.5.352'. [ 226.927053][ T4346] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 227.187065][ T4346] usb 3-1: Using ep0 maxpacket: 8 [ 227.216367][ T4346] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 227.298645][ T4346] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 227.369819][ T4346] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 227.801250][ T4346] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 227.936913][ T4346] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 227.986942][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.028162][ T5842] fuse: Bad value for 'group_id' [ 230.803545][ T5828] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 230.832207][ T4346] usb 3-1: GET_CAPABILITIES returned 0 [ 230.838484][ T5849] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 230.867098][ T4346] usbtmc 3-1:16.0: can't read capabilities [ 231.116745][ T4346] usb 3-1: USB disconnect, device number 4 [ 233.214346][ T5868] loop2: detected capacity change from 0 to 16 [ 233.285884][ T5868] erofs: (device loop2): mounted with root inode @ nid 36. [ 234.577644][ T5875] netlink: 228 bytes leftover after parsing attributes in process `syz.1.364'. [ 234.587485][ T5875] netlink: 16 bytes leftover after parsing attributes in process `syz.1.364'. [ 234.842978][ T5880] ptp ptp0: guarantee physical clock free running [ 242.510721][ T5915] netlink: 228 bytes leftover after parsing attributes in process `syz.0.377'. [ 242.519836][ T5915] netlink: 16 bytes leftover after parsing attributes in process `syz.0.377'. [ 242.758701][ T5917] loop2: detected capacity change from 0 to 64 [ 243.203120][ T5923] fuse: Bad value for 'group_id' [ 243.236491][ T5925] ptp ptp0: guarantee physical clock free running [ 243.531895][ T5927] ptp ptp0: guarantee physical clock free running [ 243.550695][ T5929] netlink: 8 bytes leftover after parsing attributes in process `syz.2.381'. [ 245.012890][ T4287] Bluetooth: hci2: link tx timeout [ 245.029720][ T4287] Bluetooth: hci2: killing stalled connection 10:aa:aa:aa:aa:aa [ 245.040247][ T4287] Bluetooth: hci2: link tx timeout [ 245.045618][ T4287] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa [ 245.426995][ T5945] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 245.443952][ T5943] block device autoloading is deprecated and will be removed. [ 246.972065][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 246.981460][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 246.988942][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 246.996211][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 247.004023][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 247.011795][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 247.019409][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 247.028911][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 247.038824][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 247.046416][ T5959] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 247.093106][ T5960] netlink: 228 bytes leftover after parsing attributes in process `syz.1.389'. [ 247.102249][ T5960] netlink: 16 bytes leftover after parsing attributes in process `syz.1.389'. [ 247.118924][ T4287] Bluetooth: hci2: command 0x0406 tx timeout [ 247.384889][ T5962] capability: warning: `syz.5.390' uses deprecated v2 capabilities in a way that may be insecure [ 247.506386][ T5966] ptp ptp0: guarantee physical clock free running [ 247.820334][ T4714] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 247.870695][ T5974] loop0: detected capacity change from 0 to 128 [ 247.878044][ T5974] ======================================================= [ 247.878044][ T5974] WARNING: The mand mount option has been deprecated and [ 247.878044][ T5974] and is ignored by this kernel. Remove the mand [ 247.878044][ T5974] option from the mount to silence this warning. [ 247.878044][ T5974] ======================================================= [ 248.028206][ T4714] usb 3-1: Using ep0 maxpacket: 8 [ 248.050177][ T4714] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 248.107617][ T4714] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 248.166202][ T4714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 248.223357][ T4714] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 248.282311][ T4714] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 248.340832][ T4714] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 248.376106][ T4714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.339140][ T4714] usb 3-1: usb_control_msg returned -32 [ 249.344846][ T4714] usbtmc 3-1:16.0: can't read capabilities [ 252.047606][ T4714] usb 3-1: USB disconnect, device number 5 [ 253.451523][ T6004] No source specified [ 254.462787][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 254.472733][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 254.480526][ T6005] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 254.511303][ T6005] netlink: 228 bytes leftover after parsing attributes in process `syz.2.402'. [ 254.520560][ T6005] netlink: 16 bytes leftover after parsing attributes in process `syz.2.402'. [ 254.743493][ T6008] fuse: Bad value for 'group_id' [ 255.090455][ T6013] ptp ptp0: guarantee physical clock free running [ 255.216585][ T6016] ptp ptp0: delete virtual clock ptp5 [ 255.302067][ T6016] ptp ptp0: guarantee physical clock free running [ 255.757188][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.763525][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.117070][ T4372] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 256.337390][ T4372] usb 2-1: Using ep0 maxpacket: 8 [ 256.354408][ T4372] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 256.412934][ T4372] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 256.810099][ T4372] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 256.848406][ T4372] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 256.901224][ T4372] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 256.946982][ T4372] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.038845][ T6027] netlink: 'syz.0.403': attribute type 10 has an invalid length. [ 257.085822][ T6027] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.093274][ T6027] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.837288][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 258.056970][ T4354] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 260.001428][ T6027] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.008698][ T6027] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.016129][ T6027] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.023443][ T6027] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.184771][ T4372] usb 2-1: usb_control_msg returned -71 [ 260.964432][ T4354] usb 3-1: device not accepting address 6, error -71 [ 260.996901][ T4372] usbtmc 2-1:16.0: can't read capabilities [ 261.076170][ T4372] usb 2-1: USB disconnect, device number 8 [ 261.113337][ T6027] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.284967][ T6055] loop1: detected capacity change from 0 to 256 [ 261.459697][ T6055] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d) [ 261.914643][ T6065] ptp ptp0: new virtual clock ptp5 [ 261.950876][ T6065] ptp ptp0: guarantee physical clock free running [ 263.106908][ T128] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 263.186907][ T4354] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 263.277808][ T128] usb 1-1: device descriptor read/64, error -71 [ 263.387669][ T4354] usb 2-1: Using ep0 maxpacket: 8 [ 263.626862][ T128] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.446451][ T6091] netlink: 'syz.2.427': attribute type 10 has an invalid length. [ 264.466044][ T4354] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 265.592194][ T4354] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 265.696619][ T4354] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.707138][ T128] usb 1-1: device descriptor read/64, error -71 [ 265.787061][ T4354] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.854636][ T4354] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.866127][ T128] usb usb1-port1: attempt power cycle [ 265.911905][ T4354] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.969271][ T4354] usb 2-1: can't set config #16, error -71 [ 266.010375][ T4354] usb 2-1: USB disconnect, device number 9 [ 266.050431][ T6091] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.057891][ T6091] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.229855][ T6091] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.237091][ T6091] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.244621][ T6091] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.251797][ T6091] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.450526][ T6091] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 266.596932][ T128] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 266.614601][ T6126] ptp ptp0: guarantee physical clock free running [ 266.751078][ T4354] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 267.047770][ T128] usb 1-1: unable to get BOS descriptor or descriptor too short [ 267.072909][ T128] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 267.099836][ T128] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 267.122188][ T128] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 267.295166][ T4354] usb 6-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 267.308387][ T128] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 267.324428][ T4354] usb 6-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 267.684353][ T128] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 267.708642][ T4354] usb 6-1: config 0 interface 0 has no altsetting 0 [ 267.721569][ T128] usb 1-1: config 1 interface 1 has no altsetting 0 [ 267.732328][ T4354] usb 6-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 267.752855][ T128] usb 1-1: string descriptor 0 read error: -22 [ 267.770858][ T4354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.785488][ T128] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 267.815080][ T4354] usb 6-1: config 0 descriptor?? [ 267.827870][ T128] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 267.848492][ T6118] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 268.508771][ T4354] usbhid 6-1:0.0: can't add hid device: -71 [ 268.535890][ T4354] usbhid: probe of 6-1:0.0 failed with error -71 [ 268.575863][ T4354] usb 6-1: USB disconnect, device number 7 [ 268.647014][ T4353] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 268.840873][ T4353] usb 4-1: Using ep0 maxpacket: 8 [ 268.865149][ T4353] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 268.887790][ T4372] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 268.958245][ T128] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 270.966894][ T4372] usb 2-1: device descriptor read/64, error -71 [ 271.068410][ T128] usb 1-1: Warning! Unlikely big volume range (=29347), cval->res is probably wrong. [ 271.081605][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 271.132576][ T128] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/29347/1 [ 271.153351][ T4353] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 271.214512][ T4353] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 271.282841][ T128] usb 1-1: USB disconnect, device number 9 [ 271.328372][ T4353] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 271.376911][ T4372] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 271.419710][ T4353] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.509225][ T4353] usb 4-1: can't set config #16, error -71 [ 271.556885][ T4372] usb 2-1: device descriptor read/64, error -71 [ 271.567636][ T4353] usb 4-1: USB disconnect, device number 4 [ 271.697406][ T4372] usb usb2-port1: attempt power cycle [ 271.717028][ T6165] ptp ptp0: guarantee physical clock free running [ 274.064647][ T4372] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 274.117460][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 274.125798][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 274.133353][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 274.140668][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 274.148192][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 274.155658][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 274.163836][ T6195] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 274.375885][ T4372] usb 3-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 274.437332][ T4372] usb 3-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 274.510669][ T4372] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.523254][ T6171] loop1: detected capacity change from 0 to 32768 [ 275.778141][ T4372] usb 3-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 276.722799][ T4372] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.793887][ T4372] usb 3-1: config 0 descriptor?? [ 276.844230][ T4372] usb 3-1: can't set config #0, error -71 [ 276.894799][ T4372] usb 3-1: USB disconnect, device number 8 [ 278.540731][ T6205] ptp ptp0: guarantee physical clock free running [ 278.707016][ T128] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 278.814772][ T6099] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 scanned by udevd (6099) [ 279.004430][ T6215] FAULT_INJECTION: forcing a failure. [ 279.004430][ T6215] name failslab, interval 1, probability 0, space 0, times 0 [ 279.150451][ T6215] CPU: 0 PID: 6215 Comm: syz.0.464 Not tainted syzkaller #0 [ 279.157797][ T6215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 279.167972][ T6215] Call Trace: [ 279.171266][ T6215] [ 279.174205][ T6215] dump_stack_lvl+0x188/0x24e [ 279.178915][ T6215] ? show_regs_print_info+0x12/0x12 [ 279.184148][ T6215] ? load_image+0x410/0x410 [ 279.188679][ T6215] ? __lock_acquire+0x7ea0/0x7ea0 [ 279.193734][ T6215] should_fail_ex+0x390/0x4c0 [ 279.198434][ T6215] should_failslab+0x5/0x20 [ 279.203039][ T6215] slab_pre_alloc_hook+0x59/0x300 [ 279.208088][ T6215] kmem_cache_alloc+0x56/0x2f0 [ 279.212860][ T6215] ? jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 279.218973][ T6215] jffs2_prealloc_raw_node_refs+0xf4/0x7f0 [ 279.224817][ T6215] jffs2_scan_medium+0x1859/0x6f20 [ 279.229981][ T6215] ? jffs2_do_link+0x910/0x910 [ 279.234779][ T6215] ? jffs2_sum_init+0xb3/0x210 [ 279.239594][ T6215] ? rcu_is_watching+0x11/0xa0 [ 279.244389][ T6215] ? jffs2_sum_init+0xb3/0x210 [ 279.249183][ T6215] ? __kmalloc+0xe4/0x240 [ 279.253522][ T6215] ? jffs2_sum_init+0x10e/0x210 [ 279.258388][ T6215] jffs2_do_mount_fs+0x76c/0x22b0 [ 279.263427][ T6215] ? __raw_spin_lock_init+0x41/0x100 [ 279.268739][ T6215] jffs2_do_fill_super+0x551/0xc50 [ 279.273866][ T6215] ? jffs2_reconfigure+0x310/0x310 [ 279.278994][ T6215] mtd_get_sb+0xcb/0x2b0 [ 279.283245][ T6215] ? mtd_get_sb_by_nr+0x7c/0xa0 [ 279.288116][ T6215] get_tree_mtd+0x5e2/0x760 [ 279.292637][ T6215] ? jffs2_reconfigure+0x310/0x310 [ 279.297757][ T6215] ? mtd_proc_show+0x270/0x270 [ 279.302531][ T6215] ? apparmor_capable+0x12c/0x190 [ 279.307571][ T6215] ? bpf_lsm_capable+0x5/0x10 [ 279.312260][ T6215] ? security_capable+0x85/0xb0 [ 279.317126][ T6215] vfs_get_tree+0x88/0x270 [ 279.321553][ T6215] do_new_mount+0x247/0xa40 [ 279.326074][ T6215] __se_sys_mount+0x2e3/0x3d0 [ 279.330767][ T6215] ? __x64_sys_mount+0xc0/0xc0 [ 279.335545][ T6215] ? lockdep_hardirqs_on+0x94/0x140 [ 279.340764][ T6215] ? __x64_sys_mount+0x1c/0xc0 [ 279.345543][ T6215] do_syscall_64+0x4c/0xa0 [ 279.349991][ T6215] ? clear_bhb_loop+0x60/0xb0 [ 279.354810][ T6215] ? clear_bhb_loop+0x60/0xb0 [ 279.359507][ T6215] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 279.365431][ T6215] RIP: 0033:0x7f8ad0b9f559 [ 279.369874][ T6215] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 279.389514][ T6215] RSP: 002b:00007f8ad1af5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 279.397959][ T6215] RAX: ffffffffffffffda RBX: 00007f8ad0e25fa0 RCX: 00007f8ad0b9f559 [ 279.405957][ T6215] RDX: 0000200000000280 RSI: 0000200000000200 RDI: 00002000000001c0 [ 279.414029][ T6215] RBP: 00007f8ad0c36b20 R08: 0000000000000000 R09: 0000000000000000 [ 279.422006][ T6215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.430019][ T6215] R13: 00007f8ad0e26038 R14: 00007f8ad0e25fa0 R15: 00007ffd5a2f37a8 [ 279.438023][ T6215] [ 281.131776][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 281.140192][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 281.147662][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 281.154920][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 281.162503][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 281.170030][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 281.178481][ T6233] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 281.800211][ T6238] device-mapper: table: 248:1: striped: Invalid chunk_size (-EINVAL) [ 281.850228][ T6238] device-mapper: ioctl: error adding target to table [ 283.552227][ T6247] md: could not open device unknown-block(1,1). [ 283.781451][ T128] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 285.986849][ T4372] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 288.022257][ T4372] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 289.113029][ T4372] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 289.157245][ T4372] usb 6-1: string descriptor 0 read error: -71 [ 289.164523][ T4372] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 289.273832][ T4372] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 289.353371][ T4372] usb 6-1: can't set config #1, error -71 [ 289.407215][ T4372] usb 6-1: USB disconnect, device number 9 [ 290.469122][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 290.478680][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 290.489284][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 290.500396][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 290.507944][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 290.517362][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 290.524850][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 290.533714][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 290.542728][ T6265] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 291.859015][ T6271] netlink: 14 bytes leftover after parsing attributes in process `syz.2.478'. [ 292.809795][ T6283] loop1: detected capacity change from 0 to 256 [ 294.364736][ T6299] netlink: 6 bytes leftover after parsing attributes in process `syz.5.491'. [ 295.379003][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 295.387432][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 295.394857][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 295.402194][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 295.410719][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 295.418267][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 295.425836][ T6303] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 295.514429][ T6299] netlink: 6 bytes leftover after parsing attributes in process `syz.5.491'. [ 299.646928][ T4372] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 299.876874][ T4372] usb 6-1: Using ep0 maxpacket: 8 [ 299.900313][ T4372] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 299.958770][ T4372] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 300.040405][ T4372] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 300.102637][ T4372] usb 6-1: Product: syz [ 300.142527][ T4372] usb 6-1: Manufacturer: syz [ 300.166920][ T4372] usb 6-1: SerialNumber: syz [ 300.226020][ T4372] usb 6-1: config 0 descriptor?? [ 300.274083][ T4372] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 300.334066][ T4372] usb 6-1: setting power ON [ 300.379774][ T4372] dvb-usb: bulk message failed: -22 (2/0) [ 300.446590][ T4372] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 300.535418][ T4372] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 300.584631][ T4372] usb 6-1: media controller created [ 300.684540][ T4372] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 300.833754][ T4372] usb 6-1: selecting invalid altsetting 6 [ 300.886503][ T4372] usb 6-1: digital interface selection failed (-22) [ 301.181209][ T4372] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 301.238827][ T4372] usb 6-1: setting power OFF [ 301.297572][ T4372] dvb-usb: bulk message failed: -22 (2/0) [ 301.303345][ T4372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 301.402089][ T4372] (NULL device *): no alternate interface [ 302.419171][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 302.433286][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 302.440769][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 302.448103][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 302.455588][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 302.463116][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 302.470756][ T6356] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 302.490247][ T6351] fuse: Unknown parameter 'grou00000000000000000000' [ 302.532696][ T4372] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 302.623237][ T4372] usb 6-1: USB disconnect, device number 10 [ 303.163455][ T6366] netlink: 6 bytes leftover after parsing attributes in process `syz.2.510'. [ 305.221790][ T6366] netlink: 6 bytes leftover after parsing attributes in process `syz.2.510'. [ 306.247464][ T4354] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 306.327737][ T128] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 306.447586][ T4354] usb 6-1: Using ep0 maxpacket: 8 [ 306.464862][ T4354] usb 6-1: config index 0 descriptor too short (expected 30, got 18) [ 306.521870][ T4354] usb 6-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 306.532783][ T128] usb 1-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 306.574469][ T128] usb 1-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 306.590774][ T4354] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.675600][ T4354] usb 6-1: Product: syz [ 306.698946][ T128] usb 1-1: config 0 interface 0 has no altsetting 0 [ 306.708583][ T4354] usb 6-1: Manufacturer: syz [ 306.713205][ T4354] usb 6-1: SerialNumber: syz [ 306.748509][ T128] usb 1-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 306.770351][ T4354] usb 6-1: config 0 descriptor?? [ 306.799367][ T128] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.811122][ T4354] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 306.850826][ T128] usb 1-1: config 0 descriptor?? [ 306.855935][ T4354] usb 6-1: setting power ON [ 306.873655][ T6389] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 306.897078][ T4354] dvb-usb: bulk message failed: -22 (2/0) [ 306.935685][ T4354] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 307.015076][ T4354] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 307.094455][ T4354] usb 6-1: media controller created [ 307.162648][ T4354] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 307.240021][ T4354] usb 6-1: selecting invalid altsetting 6 [ 307.268791][ T4354] usb 6-1: digital interface selection failed (-22) [ 307.276053][ T4354] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 307.331642][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.354049][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.365318][ T4354] usb 6-1: setting power OFF [ 307.381411][ T6409] loop1: detected capacity change from 0 to 128 [ 307.398153][ T4354] dvb-usb: bulk message failed: -22 (2/0) [ 307.404006][ T4354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 307.416558][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.442333][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.490193][ T4354] (NULL device *): no alternate interface [ 307.493197][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.603716][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.628812][ T4354] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 307.656960][ T128] belkin 0003:1020:0006.0003: unknown main item tag 0x0 [ 307.690329][ T4354] usb 6-1: USB disconnect, device number 11 [ 307.713245][ T128] belkin 0003:1020:0006.0003: unbalanced collection at end of report description [ 307.750822][ T128] belkin 0003:1020:0006.0003: parse failed [ 307.777094][ T128] belkin: probe of 0003:1020:0006.0003 failed with error -22 [ 307.831466][ T128] usb 1-1: USB disconnect, device number 10 [ 309.028594][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 309.038208][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 309.048719][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 309.057710][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 309.066967][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 309.075690][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 309.084662][ T6422] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 309.384245][ T6423] loop5: detected capacity change from 0 to 1024 [ 309.752921][ T6423] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 310.001391][ T6423] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 310.143863][ T6433] netlink: 6 bytes leftover after parsing attributes in process `syz.0.529'. [ 310.201146][ T6433] netlink: 6 bytes leftover after parsing attributes in process `syz.0.529'. [ 310.259482][ T4697] EXT4-fs (loop5): unmounting filesystem. [ 310.327174][ T4714] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 310.556976][ T4714] usb 2-1: Using ep0 maxpacket: 32 [ 310.576230][ T4714] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 310.625155][ T4714] usb 2-1: config 0 has no interface number 0 [ 310.645348][ T4714] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 310.690628][ T4714] usb 2-1: config 0 interface 85 has no altsetting 0 [ 310.725509][ T4714] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 310.775349][ T4714] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 310.815815][ T4714] usb 2-1: Product: syz [ 310.847585][ T4714] usb 2-1: Manufacturer: syz [ 310.852246][ T4714] usb 2-1: SerialNumber: syz [ 310.888098][ T4714] usb 2-1: config 0 descriptor?? [ 311.115633][ T4714] appletouch 2-1:0.85: Failed to read mode from device. [ 311.150975][ T4714] appletouch: probe of 2-1:0.85 failed with error -5 [ 311.212386][ T6454] loop2: detected capacity change from 0 to 128 [ 311.225313][ T4714] usb 2-1: USB disconnect, device number 13 [ 311.947231][ T4714] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 312.024993][ T6467] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 312.160760][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 312.185561][ T4714] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 312.289912][ T4714] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 312.335009][ T4714] usb 2-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 312.354779][ T4714] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.383991][ T4714] usb 2-1: config 0 descriptor?? [ 312.461548][ T6474] loop2: detected capacity change from 0 to 4096 [ 312.504742][ T6474] ntfs3: loop2: Different NTFS' sector size (4096) and media sector size (512) [ 312.546869][ T4354] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 313.405686][ T6480] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 313.428592][ T4354] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 313.623702][ T6478] loop3: detected capacity change from 0 to 32768 [ 313.647125][ T4714] usb 2-1: string descriptor 0 read error: -71 [ 313.663157][ T6478] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.546 (6478) [ 313.691742][ T4354] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 313.707468][ T4714] uclogic 0003:5543:0047.0004: failed retrieving string descriptor #200: -71 [ 313.750607][ T4354] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 313.771572][ T4714] uclogic 0003:5543:0047.0004: failed retrieving pen parameters: -71 [ 313.827906][ T4354] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 313.836059][ T4714] uclogic 0003:5543:0047.0004: failed probing pen v2 parameters: -71 [ 313.875916][ T4354] usb 6-1: SerialNumber: syz [ 313.886228][ T4714] uclogic 0003:5543:0047.0004: failed probing parameters: -71 [ 313.926469][ T4714] uclogic: probe of 0003:5543:0047.0004 failed with error -71 [ 313.965167][ T4714] usb 2-1: USB disconnect, device number 14 [ 314.053221][ T6478] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 314.063748][ T6478] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 314.073327][ T6478] BTRFS info (device loop3): turning on async discard [ 314.080187][ T6478] BTRFS info (device loop3): using free space tree [ 314.096453][ T9] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 314.121950][ T4354] usb 6-1: 0:2 : does not exist [ 314.154072][ T4284] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 314.182240][ T4284] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 314.213304][ T4354] usb 6-1: USB disconnect, device number 12 [ 314.254675][ T4284] ntfs3: loop2: ntfs_set_state r=3 failed, -22. [ 314.311305][ T6478] BTRFS info (device loop3): enabling ssd optimizations [ 314.351406][ T4381] ntfs3: loop2: ntfs3_write_inode r=3 failed, -22. [ 314.416331][ T4284] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 314.456326][ T4284] ntfs3: loop2: ntfs_evict_inode r=3 failed, -22. [ 314.960745][ T6512] ip_tables: iptables: counters copy to user failed while replacing table [ 315.054020][ T6512] netlink: 28 bytes leftover after parsing attributes in process `syz.5.551'. [ 315.323218][ T6518] EXT4-fs warning (device sda1): verify_group_input:180: Cannot read last block (266218) [ 315.367121][ T4285] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 315.419152][ T6523] FAULT_INJECTION: forcing a failure. [ 315.419152][ T6523] name failslab, interval 1, probability 0, space 0, times 0 [ 315.499997][ T6523] CPU: 0 PID: 6523 Comm: syz.2.556 Not tainted syzkaller #0 [ 315.507456][ T6523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 315.517529][ T6523] Call Trace: [ 315.520939][ T6523] [ 315.523911][ T6523] dump_stack_lvl+0x188/0x24e [ 315.528895][ T6523] ? show_regs_print_info+0x12/0x12 [ 315.534910][ T6523] ? load_image+0x410/0x410 [ 315.539446][ T6523] ? __might_sleep+0xd0/0xd0 [ 315.544059][ T6523] ? __lock_acquire+0x7ea0/0x7ea0 [ 315.549115][ T6523] should_fail_ex+0x390/0x4c0 [ 315.553824][ T6523] should_failslab+0x5/0x20 [ 315.558345][ T6523] slab_pre_alloc_hook+0x59/0x300 [ 315.563405][ T6523] ? __mutex_lock+0x1ab/0xae0 [ 315.568188][ T6523] ? __rb_allocate_pages+0x197/0x6b0 [ 315.573577][ T6523] __kmem_cache_alloc_node+0x4f/0x270 [ 315.578966][ T6523] ? __rb_allocate_pages+0x197/0x6b0 [ 315.584270][ T6523] __kmalloc_node+0xa2/0x240 [ 315.588937][ T6523] __rb_allocate_pages+0x197/0x6b0 [ 315.594103][ T6523] ring_buffer_resize+0x519/0x10f0 [ 315.599234][ T6523] ? lock_acquire+0x226/0x4a0 [ 315.603936][ T6523] __tracing_resize_ring_buffer+0x7b/0x310 [ 315.609766][ T6523] tracing_update_buffers+0x43/0x60 [ 315.615013][ T6523] ftrace_event_write+0xf8/0x2a0 [ 315.619979][ T6523] ? f_show+0x550/0x550 [ 315.624173][ T6523] ? end_current_label_crit_section+0x14b/0x170 [ 315.630452][ T6523] ? common_file_perm+0x171/0x1c0 [ 315.635517][ T6523] ? f_show+0x550/0x550 [ 315.639690][ T6523] vfs_write+0x2dc/0x9a0 [ 315.643965][ T6523] ? file_end_write+0x250/0x250 [ 315.648863][ T6523] ? __fget_files+0x28/0x460 [ 315.653496][ T6523] ? __fget_files+0x3fc/0x460 [ 315.658203][ T6523] ? __fdget_pos+0x2ae/0x360 [ 315.662833][ T6523] ? ksys_write+0x70/0x260 [ 315.667274][ T6523] ksys_write+0x14d/0x260 [ 315.671641][ T6523] ? __ia32_sys_read+0x80/0x80 [ 315.676447][ T6523] ? lockdep_hardirqs_on+0x94/0x140 [ 315.681691][ T6523] do_syscall_64+0x4c/0xa0 [ 315.686135][ T6523] ? clear_bhb_loop+0x60/0xb0 [ 315.690819][ T6523] ? clear_bhb_loop+0x60/0xb0 [ 315.695507][ T6523] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 315.701458][ T6523] RIP: 0033:0x7f6e4b79f559 [ 315.705890][ T6523] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 315.725598][ T6523] RSP: 002b:00007f6e4c5be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 315.734051][ T6523] RAX: ffffffffffffffda RBX: 00007f6e4ba25fa0 RCX: 00007f6e4b79f559 [ 315.742030][ T6523] RDX: 0000000000000048 RSI: 00002000000003c0 RDI: 0000000000000003 [ 315.750010][ T6523] RBP: 00007f6e4b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 315.757996][ T6523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 315.765978][ T6523] R13: 00007f6e4ba26038 R14: 00007f6e4ba25fa0 R15: 00007ffcaab1a7e8 [ 315.773972][ T6523] [ 316.666838][ T6534] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 318.019688][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.036713][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.216669][ T6534] usb 6-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 318.267917][ T6534] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 65535, setting to 1024 [ 318.347337][ T6534] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 1024 [ 318.401836][ T6534] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 318.481468][ T6534] usb 6-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 318.526947][ T6534] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.567283][ T6534] usb 6-1: Product: syz [ 318.571513][ T6534] usb 6-1: Manufacturer: syz [ 318.626852][ T6534] usb 6-1: SerialNumber: syz [ 318.647202][ T6526] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 318.684331][ T6534] usbserial_generic 6-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 318.746920][ T6534] usbserial_generic 6-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 318.809370][ T6534] usbserial_generic 6-1:1.0: generic converter detected [ 318.862712][ T6534] usb 6-1: generic converter now attached to ttyUSB0 [ 319.197323][ T6534] usb 6-1: USB disconnect, device number 13 [ 319.241001][ T6534] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 319.283925][ T6534] usbserial_generic 6-1:1.0: device disconnected [ 320.095614][ T6563] fuse: Unknown parameter 'group_id00000000000000000000' [ 322.087051][ T6527] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 323.286912][ T6527] usb 3-1: Using ep0 maxpacket: 8 [ 323.327977][ T6527] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 323.371430][ T6527] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 323.403692][ T6527] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 323.434203][ T6527] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 323.464017][ T6527] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 323.490556][ T6527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.831649][ T6593] ubi0: attaching mtd0 [ 324.026851][ T6534] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 324.319286][ T6593] ubi0: scanning is finished [ 324.324050][ T6593] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 324.348958][ T6572] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 324.410300][ T6527] usb 3-1: GET_CAPABILITIES returned 0 [ 324.415890][ T6527] usbtmc 3-1:16.0: can't read capabilities [ 324.453475][ T6572] pci 0000:00:05.0: [1ae0:a002] type 00 class 0x030000 [ 324.491105][ T6534] usb 4-1: config 0 interface 0 altsetting 12 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 324.575894][ T6534] usb 4-1: config 0 interface 0 altsetting 12 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 324.644014][ T6572] pci 0000:00:05.0: BAR 0 [mem 0xfe000000-0xfe7fffff] [ 324.656866][ T6534] usb 4-1: config 0 interface 0 has no altsetting 0 [ 324.663608][ T6534] usb 4-1: New USB device found, idVendor=1020, idProduct=0006, bcdDevice= 0.00 [ 324.733070][ T6534] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.800915][ T6534] usb 4-1: config 0 descriptor?? [ 324.843686][ T6592] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 324.854707][ T6593] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 325.285658][ T6572] pci 0000:00:05.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 325.298763][ T6534] belkin 0003:1020:0006.0005: ignoring exceeding usage max [ 325.322825][ T6534] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 325.340605][ T6572] pci 0000:00:05.0: pci_fixup_video+0x0/0x310 took 53854 usecs [ 325.358404][ T6534] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 325.391295][ T6572] pci 0000:00:05.0: vgaarb: setting as boot VGA device [ 325.398386][ T6572] pci 0000:00:05.0: vgaarb: bridge control possible [ 325.404985][ T6572] pci 0000:00:05.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 325.421465][ T6534] belkin 0003:1020:0006.0005: unknown main item tag 0x0 [ 325.445723][ T6534] belkin 0003:1020:0006.0005: unbalanced collection at end of report description [ 325.465887][ T6534] belkin 0003:1020:0006.0005: parse failed [ 325.490164][ T6534] belkin: probe of 0003:1020:0006.0005 failed with error -22 [ 325.523366][ T6572] pci 0000:00:05.0: BAR 0 [mem 0xc0000000-0xc07fffff]: assigned [ 325.552451][ T6534] usb 4-1: USB disconnect, device number 6 [ 325.654630][ T6527] usb 3-1: USB disconnect, device number 9 [ 329.158058][ T6527] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 329.418706][ T6527] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 329.481074][ T6527] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.562111][ T6527] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.650744][ T6655] FAULT_INJECTION: forcing a failure. [ 329.650744][ T6655] name failslab, interval 1, probability 0, space 0, times 0 [ 329.671105][ T6527] usb 1-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 329.717050][ T6527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.740269][ T6655] CPU: 0 PID: 6655 Comm: syz.5.602 Not tainted syzkaller #0 [ 329.747617][ T6655] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 329.757702][ T6655] Call Trace: [ 329.760989][ T6655] [ 329.763928][ T6655] dump_stack_lvl+0x188/0x24e [ 329.768648][ T6655] ? show_regs_print_info+0x12/0x12 [ 329.773872][ T6655] ? load_image+0x410/0x410 [ 329.778408][ T6655] ? __might_sleep+0xd0/0xd0 [ 329.783021][ T6655] ? __lock_acquire+0x7ea0/0x7ea0 [ 329.788074][ T6655] ? __key_instantiate_and_link+0x40d/0x4c0 [ 329.794426][ T6655] should_fail_ex+0x390/0x4c0 [ 329.799139][ T6655] should_failslab+0x5/0x20 [ 329.803665][ T6655] slab_pre_alloc_hook+0x59/0x300 [ 329.808722][ T6655] ? x509_cert_parse+0x57/0x7a0 [ 329.813589][ T6655] __kmem_cache_alloc_node+0x4f/0x270 [ 329.818985][ T6655] ? x509_cert_parse+0x57/0x7a0 [ 329.823849][ T6655] kmalloc_trace+0x26/0xe0 [ 329.828280][ T6655] x509_cert_parse+0x57/0x7a0 [ 329.832975][ T6655] x509_key_preparse+0x60/0x660 [ 329.837855][ T6655] ? down_read+0x1a8/0x2d0 [ 329.842294][ T6655] asymmetric_key_preparse+0xa5/0x140 [ 329.847698][ T6655] key_create_or_update+0x432/0xa40 [ 329.852930][ T6655] ? security_key_permission+0x7c/0xa0 [ 329.858401][ T6655] ? key_type_put+0x20/0x20 [ 329.862918][ T6655] ? lookup_user_key_possessed+0x40/0x40 [ 329.868576][ T6655] ? __might_fault+0xc2/0x120 [ 329.873359][ T6655] ? __might_fault+0xa6/0x120 [ 329.878122][ T6655] __se_sys_add_key+0x34b/0x410 [ 329.883017][ T6655] ? __x64_sys_add_key+0xc0/0xc0 [ 329.887985][ T6655] ? lockdep_hardirqs_on+0x94/0x140 [ 329.893210][ T6655] ? __x64_sys_add_key+0x1c/0xc0 [ 329.898174][ T6655] do_syscall_64+0x4c/0xa0 [ 329.902622][ T6655] ? clear_bhb_loop+0x60/0xb0 [ 329.907314][ T6655] ? clear_bhb_loop+0x60/0xb0 [ 329.912037][ T6655] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 329.917995][ T6655] RIP: 0033:0x7f21b499f559 [ 329.922428][ T6655] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 329.942058][ T6655] RSP: 002b:00007f21b592c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 329.950494][ T6655] RAX: ffffffffffffffda RBX: 00007f21b4c25fa0 RCX: 00007f21b499f559 [ 329.958517][ T6655] RDX: 0000200000000600 RSI: 0000000000000000 RDI: 00002000000005c0 [ 329.966508][ T6655] RBP: 00007f21b4a36b20 R08: fffffffffffffffe R09: 0000000000000000 [ 329.974489][ T6655] R10: 0000000000000114 R11: 0000000000000246 R12: 0000000000000000 [ 329.982511][ T6655] R13: 00007f21b4c26038 R14: 00007f21b4c25fa0 R15: 00007ffe83223fc8 [ 329.990534][ T6655] [ 330.042865][ T6527] usb 1-1: config 0 descriptor?? [ 330.701614][ T6527] usbhid 1-1:0.0: can't add hid device: -71 [ 330.726597][ T6527] usbhid: probe of 1-1:0.0 failed with error -71 [ 330.776340][ T6527] usb 1-1: USB disconnect, device number 11 [ 330.983695][ T6672] device-mapper: table: 248:2: snapshot: Cannot get origin device (-EBUSY) [ 331.006070][ T6672] device-mapper: ioctl: error adding target to table [ 331.326499][ T6685] FAULT_INJECTION: forcing a failure. [ 331.326499][ T6685] name failslab, interval 1, probability 0, space 0, times 0 [ 331.359771][ T6527] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 331.370839][ T6685] CPU: 0 PID: 6685 Comm: syz.0.608 Not tainted syzkaller #0 [ 331.378170][ T6685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 331.388237][ T6685] Call Trace: [ 331.391547][ T6685] [ 331.394569][ T6685] dump_stack_lvl+0x188/0x24e [ 331.399260][ T6685] ? show_regs_print_info+0x12/0x12 [ 331.404480][ T6685] ? load_image+0x410/0x410 [ 331.409019][ T6685] ? __might_sleep+0xd0/0xd0 [ 331.413624][ T6685] ? __lock_acquire+0x7ea0/0x7ea0 [ 331.418684][ T6685] should_fail_ex+0x390/0x4c0 [ 331.423387][ T6685] should_failslab+0x5/0x20 [ 331.427917][ T6685] slab_pre_alloc_hook+0x59/0x300 [ 331.432964][ T6685] ? do_sys_poll+0x32b/0x1270 [ 331.437692][ T6685] __kmem_cache_alloc_node+0x4f/0x270 [ 331.443091][ T6685] ? do_sys_poll+0x32b/0x1270 [ 331.447789][ T6685] __kmalloc+0xa3/0x240 [ 331.452042][ T6685] ? _copy_from_user+0x10b/0x170 [ 331.457025][ T6685] do_sys_poll+0x32b/0x1270 [ 331.461567][ T6685] ? read_lock_is_recursive+0x10/0x10 [ 331.466971][ T6685] ? lock_chain_count+0x20/0x20 [ 331.471865][ T6685] ? finish_task_switch+0x262/0x8e0 [ 331.477098][ T6685] ? finish_task_switch+0x262/0x8e0 [ 331.482329][ T6685] ? poll_select_finish+0x5d0/0x5d0 [ 331.487555][ T6685] ? __schedule+0x1087/0x4030 [ 331.492304][ T6685] ? set_user_sigmask+0xca/0x1c0 [ 331.497270][ T6685] ? sigprocmask+0x190/0x190 [ 331.501869][ T6685] ? bpf_link_show_fdinfo+0x380/0x380 [ 331.507275][ T6685] __se_sys_ppoll+0x206/0x2a0 [ 331.511976][ T6685] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 331.517969][ T6685] ? __x64_sys_ppoll+0xc0/0xc0 [ 331.522756][ T6685] ? lockdep_hardirqs_on+0x94/0x140 [ 331.527983][ T6685] ? __x64_sys_ppoll+0x1c/0xc0 [ 331.532774][ T6685] do_syscall_64+0x4c/0xa0 [ 331.537198][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 331.541889][ T6685] ? clear_bhb_loop+0x60/0xb0 [ 331.546600][ T6685] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 331.552530][ T6685] RIP: 0033:0x7f8ad0b9f559 [ 331.557070][ T6685] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 331.576781][ T6685] RSP: 002b:00007f8ad1af5028 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 331.585216][ T6685] RAX: ffffffffffffffda RBX: 00007f8ad0e25fa0 RCX: 00007f8ad0b9f559 [ 331.593210][ T6685] RDX: 0000000000000000 RSI: 20000000000000dc RDI: 0000200000000640 [ 331.601200][ T6685] RBP: 00007f8ad0c36b20 R08: 0000000000000030 R09: 0000000000000000 [ 331.609181][ T6685] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 331.617158][ T6685] R13: 00007f8ad0e26038 R14: 00007f8ad0e25fa0 R15: 00007ffd5a2f37a8 [ 331.625161][ T6685] [ 331.821647][ T6527] usb 3-1: config 0 has no interfaces? [ 331.840539][ T6527] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 331.889815][ T6691] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 331.902100][ T6527] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 331.942987][ T6527] usb 3-1: config 0 descriptor?? [ 332.196076][ T6534] usb 3-1: USB disconnect, device number 10 [ 332.223877][ T6698] fuse: Bad value for 'fd' [ 332.245289][ T6700] loop5: detected capacity change from 0 to 256 [ 333.864016][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.873061][ T6704] FAT-fs (loop5): Filesystem has been set read-only [ 333.880562][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.889304][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.898017][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.906794][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.915531][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.924304][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.933082][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.941826][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.950578][ T6704] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 333.991152][ T27] kauditd_printk_skb: 53 callbacks suppressed [ 333.991163][ T27] audit: type=1800 audit(1793144771.822:66): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.612" name="file1" dev="loop5" ino=1048645 res=0 errno=0 [ 334.018782][ T6704] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 334.097210][ T6704] syz.5.612 (6704) used greatest stack depth: 20672 bytes left [ 334.298967][ T6709] ip_tables: iptables: counters copy to user failed while replacing table [ 337.271917][ T6729] loop5: detected capacity change from 0 to 32768 [ 337.315014][ T6729] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop5 scanned by syz.5.621 (6729) [ 337.358650][ T6729] BTRFS info (device loop5): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 337.368908][ T6729] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 337.378504][ T6729] BTRFS info (device loop5): turning on async discard [ 337.385287][ T6729] BTRFS info (device loop5): using free space tree [ 337.651851][ T6729] BTRFS info (device loop5): enabling ssd optimizations [ 337.667600][ T6752] tipc: Enabled bearer , priority 0 [ 339.387559][ T4697] BTRFS info (device loop5): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 339.757189][ T14] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 339.957045][ T14] usb 4-1: device descriptor read/64, error -71 [ 340.226855][ T14] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 340.627943][ T14] usb 4-1: device descriptor read/64, error -71 [ 340.747211][ T14] usb usb4-port1: attempt power cycle [ 340.973642][ T6774] overlayfs: failed to clone upperpath [ 341.537684][ T14] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 341.667031][ T14] usb 4-1: device descriptor read/8, error -71 [ 341.936993][ T14] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 342.655228][ T14] usb 4-1: device descriptor read/8, error -71 [ 342.845345][ T6787] loop2: detected capacity change from 0 to 32768 [ 342.865634][ T6787] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 scanned by syz.2.622 (6787) [ 342.946095][ T6787] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 342.956387][ T6787] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 342.965944][ T6787] BTRFS info (device loop2): turning on async discard [ 342.972856][ T6787] BTRFS info (device loop2): using free space tree [ 343.037136][ T14] usb usb4-port1: unable to enumerate USB device [ 343.140240][ T6787] BTRFS info (device loop2): enabling ssd optimizations [ 343.397091][ T4284] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 344.114454][ T6831] ip_tables: iptables: counters copy to user failed while replacing table [ 344.508998][ T6840] loop5: detected capacity change from 0 to 128 [ 346.251465][ T6846] overlayfs: failed to clone upperpath [ 346.646835][ T6533] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 346.858553][ T6533] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 346.903819][ T6533] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 346.967723][ T6533] usb 6-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 347.014996][ T6533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 347.054114][ T6533] usb 6-1: SerialNumber: syz [ 347.346640][ T6533] usb 6-1: 0:2 : does not exist [ 348.690519][ T6533] usb 6-1: USB disconnect, device number 14 [ 348.719631][ T6867] netlink: 28 bytes leftover after parsing attributes in process `syz.1.656'. [ 348.728888][ T6527] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 348.849080][ T6403] udevd[6403]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 349.017020][ T6527] usb 1-1: Using ep0 maxpacket: 8 [ 349.034738][ T6527] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 349.111170][ T6527] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 349.160327][ T6527] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 349.215592][ T6527] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.275795][ T6527] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 350.138794][ T6875] loop3: detected capacity change from 0 to 32768 [ 350.171397][ T6875] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.649 (6875) [ 350.194405][ T6527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.284567][ T6527] usb 1-1: can't set config #16, error -71 [ 350.341256][ T6527] usb 1-1: USB disconnect, device number 12 [ 350.408681][ T6875] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 350.419442][ T6875] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 350.428946][ T6875] BTRFS info (device loop3): turning on async discard [ 350.435808][ T6875] BTRFS info (device loop3): using free space tree [ 350.610307][ T6875] BTRFS info (device loop3): enabling ssd optimizations [ 350.797037][ T6533] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 350.890812][ T4285] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 351.041650][ T6533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.091765][ T6533] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.135575][ T6533] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 351.169105][ T6527] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 351.188537][ T6869] loop2: detected capacity change from 0 to 40427 [ 351.205273][ T6533] usb 6-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 351.230896][ T6869] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 351.255452][ T6533] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.285793][ T6869] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 351.312240][ T6533] usb 6-1: config 0 descriptor?? [ 351.366918][ T6527] usb 1-1: Using ep0 maxpacket: 16 [ 351.388787][ T6527] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 351.432307][ T6869] F2FS-fs (loop2): Found nat_bits in checkpoint [ 351.459366][ T6527] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 351.521186][ T6527] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 351.587017][ T6527] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 351.646846][ T6527] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.700678][ T6869] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 351.733324][ T6869] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 351.757254][ T6533] usbhid 6-1:0.0: can't add hid device: -71 [ 351.764215][ T6527] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 351.783654][ T6533] usbhid: probe of 6-1:0.0 failed with error -71 [ 351.813953][ T6527] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 351.838348][ T6533] usb 6-1: USB disconnect, device number 15 [ 351.873749][ T6527] usb 1-1: Manufacturer: syz [ 351.920325][ T6527] usb 1-1: config 0 descriptor?? [ 353.707947][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.708002][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.762121][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.810293][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.840423][ T6527] rc_core: IR keymap rc-hauppauge not found [ 353.870651][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.870671][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.886952][ T6527] Registered IR keymap rc-empty [ 353.924376][ T4284] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix. [ 353.946716][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.039702][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.090888][ T6527] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 354.163920][ T6527] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input15 [ 354.283477][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.367855][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.410072][ T7] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 354.418937][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.916612][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 354.976956][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.017202][ T7] usb 6-1: Using ep0 maxpacket: 8 [ 355.035899][ T7] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 355.047682][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.104950][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 355.116120][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.167333][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.184100][ T7] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 355.234994][ T7] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 355.249442][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.396933][ T6527] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 355.405724][ T7] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 355.436218][ T6527] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 355.475963][ T7] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.487966][ T6527] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 355.560473][ T6527] usb 1-1: USB disconnect, device number 13 [ 355.783250][ T6922] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 355.806632][ T7] usb 6-1: GET_CAPABILITIES returned 0 [ 355.825609][ T7] usbtmc 6-1:16.0: can't read capabilities [ 356.009613][ T7] usb 6-1: USB disconnect, device number 16 [ 356.995263][ T6939] loop3: detected capacity change from 0 to 32768 [ 357.027261][ T6939] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 scanned by syz.3.675 (6939) [ 357.067368][ T6939] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 357.077853][ T6939] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm [ 357.087352][ T6939] BTRFS info (device loop3): turning on async discard [ 357.094124][ T6939] BTRFS info (device loop3): using free space tree [ 357.236983][ T6939] BTRFS info (device loop3): enabling ssd optimizations [ 357.426923][ T4346] usb 3-1: new low-speed USB device number 11 using dummy_hcd [ 357.468803][ T4285] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 357.568988][ T6967] device-mapper: table: 248:3: snapshot: Cannot get origin device (-ENODEV) [ 357.662771][ T6967] device-mapper: ioctl: error adding target to table [ 357.679092][ T4346] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 357.730675][ T4346] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 357.777093][ T4346] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.335503][ T4346] usb 3-1: string descriptor 0 read error: -71 [ 358.365956][ T4346] hub 3-1:32.0: bad descriptor, ignoring hub [ 358.393235][ T4346] hub: probe of 3-1:32.0 failed with error -5 [ 358.497733][ T4346] usb 3-1: USB disconnect, device number 11 [ 358.916873][ T6918] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 358.960239][ T6980] netlink: 28 bytes leftover after parsing attributes in process `syz.0.681'. [ 359.054150][ T6403] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 10 /dev/loop3 scanned by udevd (6403) [ 359.130378][ T6918] usb 6-1: config 0 has no interfaces? [ 359.170102][ T6918] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 359.229915][ T6918] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.295618][ T6918] usb 6-1: config 0 descriptor?? [ 359.544398][ T6918] usb 6-1: USB disconnect, device number 17 [ 361.207888][ T4346] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 361.409374][ T4346] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 54, changing to 9 [ 361.481604][ T4346] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 361.530156][ T7014] [ 361.532530][ T7014] ====================================================== [ 361.539541][ T7014] WARNING: possible circular locking dependency detected [ 361.546575][ T7014] syzkaller #0 Not tainted [ 361.551000][ T7014] ------------------------------------------------------ [ 361.558032][ T7014] syz.2.692/7014 is trying to acquire lock: [ 361.563926][ T7014] ffff88802f5298f0 (&ptp->n_vclocks_mux){+.+.}-{3:3}, at: ptp_clock_adjtime+0x12f/0x870 [ 361.573682][ T7014] [ 361.573682][ T7014] but task is already holding lock: [ 361.581055][ T7014] ffff88802f528130 (&clk->rwsem){++++}-{3:3}, at: pc_clock_adjtime+0xde/0x260 [ 361.589937][ T7014] [ 361.589937][ T7014] which lock already depends on the new lock. [ 361.589937][ T7014] [ 361.600414][ T7014] [ 361.600414][ T7014] the existing dependency chain (in reverse order) is: [ 361.609707][ T7014] [ 361.609707][ T7014] -> #1 (&clk->rwsem){++++}-{3:3}: [ 361.617017][ T7014] down_write+0x36/0x60 [ 361.621715][ T7014] posix_clock_unregister+0x5b/0xc0 [ 361.627469][ T7014] ptp_clock_unregister+0x18a/0x200 [ 361.633197][ T7014] ptp_vclock_unregister+0x110/0x140 [ 361.639012][ T7014] unregister_vclock+0xca/0x130 [ 361.644399][ T7014] device_for_each_child_reverse+0x112/0x1b0 [ 361.650922][ T7014] n_vclocks_store+0x226/0x750 [ 361.656233][ T7014] kernfs_fop_write_iter+0x3a0/0x520 [ 361.662067][ T7014] vfs_write+0x482/0x9a0 [ 361.666973][ T7014] ksys_write+0x14d/0x260 [ 361.671843][ T7014] do_syscall_64+0x4c/0xa0 [ 361.676804][ T7014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.683252][ T7014] [ 361.683252][ T7014] -> #0 (&ptp->n_vclocks_mux){+.+.}-{3:3}: [ 361.691253][ T7014] __lock_acquire+0x3a03/0x7ea0 [ 361.696645][ T7014] lock_acquire+0x1bc/0x4a0 [ 361.701678][ T7014] __mutex_lock+0x12d/0xae0 [ 361.706718][ T7014] ptp_clock_adjtime+0x12f/0x870 [ 361.712190][ T7014] pc_clock_adjtime+0x1d4/0x260 [ 361.717574][ T7014] __x64_sys_clock_adjtime+0x240/0x320 [ 361.723564][ T7014] do_syscall_64+0x4c/0xa0 [ 361.728513][ T7014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 361.734948][ T7014] [ 361.734948][ T7014] other info that might help us debug this: [ 361.734948][ T7014] [ 361.745177][ T7014] Possible unsafe locking scenario: [ 361.745177][ T7014] [ 361.752623][ T7014] CPU0 CPU1 [ 361.757982][ T7014] ---- ---- [ 361.763346][ T7014] rlock(&clk->rwsem); [ 361.767507][ T7014] lock(&ptp->n_vclocks_mux); [ 361.774800][ T7014] lock(&clk->rwsem); [ 361.781394][ T7014] lock(&ptp->n_vclocks_mux); [ 361.786164][ T7014] [ 361.786164][ T7014] *** DEADLOCK *** [ 361.786164][ T7014] [ 361.794332][ T7014] 1 lock held by syz.2.692/7014: [ 361.799273][ T7014] #0: ffff88802f528130 (&clk->rwsem){++++}-{3:3}, at: pc_clock_adjtime+0xde/0x260 [ 361.808603][ T7014] [ 361.808603][ T7014] stack backtrace: [ 361.814491][ T7014] CPU: 0 PID: 7014 Comm: syz.2.692 Not tainted syzkaller #0 [ 361.821782][ T7014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 361.831856][ T7014] Call Trace: [ 361.835148][ T7014] [ 361.838087][ T7014] dump_stack_lvl+0x188/0x24e [ 361.842773][ T7014] ? load_image+0x410/0x410 [ 361.847411][ T7014] ? show_regs_print_info+0x12/0x12 [ 361.852612][ T7014] ? print_circular_bug+0x12b/0x1a0 [ 361.857826][ T7014] check_noncircular+0x2f8/0x400 [ 361.862794][ T7014] ? print_deadlock_bug+0x5d0/0x5d0 [ 361.868007][ T7014] ? lockdep_lock+0xf1/0x1f0 [ 361.872631][ T7014] ? _find_first_zero_bit+0xd2/0x100 [ 361.877939][ T7014] __lock_acquire+0x3a03/0x7ea0 [ 361.882812][ T7014] ? lockdep_hardirqs_on_prepare+0x448/0x7c0 [ 361.888811][ T7014] ? read_lock_is_recursive+0x10/0x10 [ 361.894200][ T7014] ? verify_lock_unused+0x140/0x140 [ 361.899436][ T7014] ? mark_lock+0x94/0x320 [ 361.903799][ T7014] ? mark_lock+0x94/0x320 [ 361.908149][ T7014] lock_acquire+0x1bc/0x4a0 [ 361.912679][ T7014] ? ptp_clock_adjtime+0x12f/0x870 [ 361.917812][ T7014] ? __might_sleep+0xd0/0xd0 [ 361.922500][ T7014] ? read_lock_is_recursive+0x10/0x10 [ 361.927919][ T7014] ? release_firmware_map_entry+0x187/0x187 [ 361.933841][ T7014] ? verify_lock_unused+0x140/0x140 [ 361.939066][ T7014] __mutex_lock+0x12d/0xae0 [ 361.943589][ T7014] ? ptp_clock_adjtime+0x12f/0x870 [ 361.948712][ T7014] ? futex_wait_queue+0x134/0x1b0 [ 361.953756][ T7014] ? ptp_clock_adjtime+0x12f/0x870 [ 361.958873][ T7014] ? mutex_lock_nested+0x10/0x10 [ 361.963853][ T7014] ptp_clock_adjtime+0x12f/0x870 [ 361.968806][ T7014] ? ptp_cancel_worker_sync+0x20/0x20 [ 361.974196][ T7014] ? __fget_files+0x3fc/0x460 [ 361.978897][ T7014] ? down_read+0x1a8/0x2d0 [ 361.983428][ T7014] ? ptp_cancel_worker_sync+0x20/0x20 [ 361.988831][ T7014] pc_clock_adjtime+0x1d4/0x260 [ 361.993697][ T7014] __x64_sys_clock_adjtime+0x240/0x320 [ 361.999168][ T7014] ? do_clock_adjtime+0x120/0x120 [ 362.004289][ T7014] ? blkcg_maybe_throttle_current+0x1a0/0xa80 [ 362.010387][ T7014] ? lock_chain_count+0x20/0x20 [ 362.015279][ T7014] ? lockdep_hardirqs_on+0x94/0x140 [ 362.020507][ T7014] do_syscall_64+0x4c/0xa0 [ 362.024932][ T7014] ? clear_bhb_loop+0x60/0xb0 [ 362.029641][ T7014] ? clear_bhb_loop+0x60/0xb0 [ 362.034341][ T7014] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 362.040249][ T7014] RIP: 0033:0x7f6e4b79f559 [ 362.044675][ T7014] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 362.064284][ T7014] RSP: 002b:00007f6e4c5be028 EFLAGS: 00000246 ORIG_RAX: 0000000000000131 [ 362.072699][ T7014] RAX: ffffffffffffffda RBX: 00007f6e4ba25fa0 RCX: 00007f6e4b79f559 [ 362.080676][ T7014] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 00000000ffffffd3 [ 362.088647][ T7014] RBP: 00007f6e4b836b20 R08: 0000000000000000 R09: 0000000000000000 [ 362.096619][ T7014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 362.104589][ T7014] R13: 00007f6e4ba26038 R14: 00007f6e4ba25fa0 R15: 00007ffcaab1a7e8 [ 362.112579][ T7014] [ 362.140157][ T4346] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 362.176932][ T4346] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 362.200239][ T4346] usb 1-1: Product: syz [ 362.210388][ T4346] usb 1-1: Manufacturer: syz [ 362.219435][ T4346] usb 1-1: SerialNumber: syz [ 362.444717][ T7006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 362.950505][ T7014] ptp: physical clock is free running [ 363.072962][ T7006] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 363.288140][ T4346] cdc_ncm 1-1:1.0: failed to get mac address [ 363.496838][ T4346] cdc_ncm 1-1:1.0: bind() failure [ 363.513213][ T4346] cdc_ncm: probe of 1-1:1.1 failed with error -71 [ 363.520532][ T4346] cdc_mbim: probe of 1-1:1.1 failed with error -71 [ 363.529831][ T4346] usbtest: probe of 1-1:1.1 failed with error -71 [ 363.545702][ T4346] usb 1-1: USB disconnect, device number 14