last executing test programs: 5m59.259850778s ago: executing program 0 (id=1): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) connect$can_bcm(r1, &(0x7f0000000140)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4004844) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x100003, {0x0, 0x0, 0x0, r4, {0xb, 0xfff3}, {0x3, 0xfff9}, {0xffe0}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) close(r1) 5m57.584644691s ago: executing program 0 (id=9): syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x8010, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x2, 0x18a, &(0x7f00000001c0)="$eJzs271u2mAUxvHHxnwU+kFLP6SqQ6eqSzFQibZbeykIXIRiEhSygCIluY8s2XJVuYIwZMsUIoztBIeJYJuE/2/hHB+9+DC8vEcIC8DW+quvMmQoN0u+FMpHFSPtlgAkZOq/3kx9pSmArZG5TrsDAOmY/JMGki6vDtvK5IKx4FMQzOqFIDHzD+aHyYmpz5a/3ijoRXS+OJO+Be9vFJesl4phveRdsyL17yrP6+ZLvdJrvVFZb/VOFb/eCdd/fNwwBADAljBUjeYLF0z977lOLcyzXl5X0T+kc17eCOvz/GeY57282t5zOzF+CgCrMFU9v59H938msv8tf/8DePqGo/FOy3Wd/YSC4PeBRG+6nkDHG9HGWoKsNqINgiWBpYRverG0lPIXE4DY2Qf9gT0cjX/0+q2u03V2m41m80/t96+67Q3+9uL4D+AZuTv00+4EAAAAAAAAAAAAAACs6r0+pN0CAAAAgITE9lyRIelU/LMYAAAAAAAAAAAAAAAAAIAY3AYAAP//XTAW7A==") mkdir(&(0x7f0000005900)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000300)={0x0, {}, 0x0, {}, 0x40005, 0xffffffffffffffff, 0xe, 0x29, "22536a030000000000000043a52dbc3a9ae8b04fcca15548328cb3e74d938981061383375e1d61471a2d2dfe0000000000000000000000040000000000821700", "04106d0c31ef6c1f02a4aa6d0c5aa9263626c0240010f9db74161ccff2c5cf5e", [0x5, 0xff]}) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 5m56.667103031s ago: executing program 0 (id=11): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r0) syz_80211_inject_frame(&(0x7f00000074c0), &(0x7f0000007500)=ANY=[@ANYBLOB="38100800ffffffffffff080213000001505050505050"], 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) recvmsg$unix(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000002780)=""/4081, 0xff1}, {&(0x7f0000000440)=""/164, 0xa4}, {&(0x7f0000000500)=""/91, 0x5b}], 0x3}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002740)={0x0, 0x0, &(0x7f0000002700)={&(0x7f0000002640)=ANY=[@ANYBLOB="14000000027f0e"], 0x14}}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010300007541ef7100001100000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 5m55.652756483s ago: executing program 0 (id=13): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 5m55.016935094s ago: executing program 32 (id=13): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005a00)=ANY=[@ANYBLOB="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"], 0x1, 0x5505, &(0x7f0000000340)="$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") mknod(&(0x7f0000000340)='./bus\x00', 0x2, 0x40) mount(0x0, &(0x7f00000001c0)='./file1\x00', 0x0, 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) getdents64(r0, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800053, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) symlink(&(0x7f0000001640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/../file0\x00', &(0x7f0000000240)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x42042, 0x138) 4.080833749s ago: executing program 3 (id=1795): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1fb50d4138a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.007559262s ago: executing program 3 (id=1797): r0 = socket$inet_udp(0x2, 0x2, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x2000000000032, 0xffffffffffffffff, 0xffffa000) setsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000040)={@remote, @rand_addr=0x64010101}, 0xc) 3.977603963s ago: executing program 1 (id=1799): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc9", 0xa5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 3.818121188s ago: executing program 1 (id=1802): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 3.792809148s ago: executing program 3 (id=1803): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f00000003c0)='wg0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg1\x00'}) setsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, 0x0) 3.681862692s ago: executing program 3 (id=1805): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1fb50d4138a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.516949267s ago: executing program 3 (id=1807): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="7105010601490a0000"], 0xf) 3.496870478s ago: executing program 1 (id=1808): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.41935773s ago: executing program 1 (id=1809): r0 = socket(0x1, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, 0x0) setreuid(0x0, r1) r2 = socket$netlink(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x14, r3, 0x1, 0x0, 0x25dfdbff, {0x25}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x24004804) 2.121379942s ago: executing program 4 (id=1815): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa408000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="00000000000000005704000008"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="c1dfb061cdee7a1fb50d4138a773", 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.984808986s ago: executing program 4 (id=1816): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa080045000028006700000a06"], 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0xf, 0xb}, {0xffff, 0x2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000240)="800000800000210ee7decd7a000340008100", 0x36, 0x40, &(0x7f00000001c0)={0x11, 0x8100, r3, 0x1, 0xd8, 0x6, @broadcast}, 0x14) 1.956526107s ago: executing program 2 (id=1817): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000140)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x6, 0xc, 0x80000000, 0x1, 0xffffffffffffffff, 0x3}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x48, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.87831608s ago: executing program 2 (id=1818): mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) gettimeofday(&(0x7f00000002c0), 0x0) 1.715818155s ago: executing program 2 (id=1819): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000080002000100000008000880040007802c0004"], 0x58}}, 0x0) 1.714942415s ago: executing program 4 (id=1820): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="140000"], 0x18, 0xc011}, 0x400c0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x4c, &(0x7f000002eff0)={0x1, &(0x7f0000000180)=[{0x5, 0x8, 0x3, 0x800fffd}]}, 0x10) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=""/73, 0x49}, 0x5}], 0x1, 0x0, 0x0) 1.663340277s ago: executing program 4 (id=1821): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0xb0000) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000002000)={0x0, 0x6, 0x0, 0x5}) 1.581929009s ago: executing program 4 (id=1822): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000050900010073797a310000000040000000050a01020000000000000000010020000c00024000000000000000010900010073797a31000000000c000480085e0140"], 0xc8}}, 0x0) 1.435601334s ago: executing program 4 (id=1823): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_connect$uac3(0x1, 0x80, &(0x7f0000000340)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1235, 0x8203, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x6, 0x80, 0x5, {0x8, 0xb, 0x0, 0x2, 0x1, 0x1, 0x30, 0x52}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0xa, 0x5}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x8, 0xc, 0x0, 0x6, {0xa, 0x25, 0x25, 0x3, 0x1, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x3ff, 0x2, 0x7, 0xe, {0xa, 0x25, 0x25, 0x800, 0xa, 0x32a4}}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x20, 0x1, 0x2, {0x2, 0xf}}, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 451.335486ms ago: executing program 1 (id=1824): bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x15, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800df00b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000208500000004"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, @sk_reuseport=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000001800000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x9, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000001000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000d0df00850000001b"], 0x0, 0x8, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 449.016506ms ago: executing program 2 (id=1825): ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x3) 385.938028ms ago: executing program 3 (id=1826): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r3) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, 0x0, 0x20040084) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=@newqdisc={0x838, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r6, {0x10}, {}, {0xa, 0x3}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x80c, 0x2, [@TCA_TBF_RTAB={0x404, 0x2, [0x0, 0x1, 0x9, 0x8000, 0x3, 0x5, 0x5, 0xb762, 0x4, 0x40007, 0x8, 0xf, 0x2, 0x80000001, 0x400, 0x1007fc, 0xffff8000, 0x6, 0x403, 0x9, 0x8, 0xffffe4f5, 0xd6, 0x4, 0xfffb, 0x7, 0x0, 0xfffff4f0, 0x9, 0x1, 0xfffffffc, 0x4, 0x1, 0x6f2151b1, 0x9, 0xc, 0x20001000, 0x4, 0x2, 0x7, 0x4, 0x99, 0x9, 0x5, 0x6, 0x7, 0xfffffff7, 0x6d, 0x2, 0x9, 0xd05, 0x1000044, 0x8, 0x8, 0x1, 0x4, 0x7ff, 0x8, 0x7, 0x7fbffffe, 0x400, 0x8, 0xfffffa72, 0xcd, 0x4, 0x80000000, 0xc, 0x4, 0x65, 0x91, 0x659, 0x9, 0xf, 0x9, 0xc28, 0x9, 0x7, 0x3, 0x401, 0x3, 0x2, 0xfffffffa, 0x1, 0x10001, 0x3, 0x1, 0x4, 0x8, 0x8, 0x7, 0x1, 0x1, 0x1, 0x7, 0x40, 0x7, 0x12, 0x8000, 0x1, 0x4dc, 0x80, 0x3, 0x7fffffff, 0xff, 0x9, 0xa7, 0xf, 0x1, 0xffffffff, 0x3, 0x1001, 0x4, 0x401, 0x7, 0x80000000, 0xffff, 0x6, 0x5, 0x4f, 0xffffffff, 0x80000000, 0x1966f9ad, 0x200, 0x20200, 0xed5, 0xfffffc00, 0x6, 0x4, 0x8, 0x485e, 0xa85, 0x80000040, 0x2, 0x7, 0x7, 0x102, 0x2d5421e8, 0x7, 0xfffd, 0x2, 0x6, 0x3ff, 0xf04, 0x0, 0x2, 0x5, 0xfffffc00, 0x5, 0x8d, 0x4, 0x401, 0x6, 0x9, 0x3, 0xfffffffb, 0x1, 0x0, 0x3, 0x2, 0x5, 0x8, 0x3, 0x0, 0x800, 0xf06, 0x8, 0x7ff, 0x0, 0x9, 0x6, 0x5, 0x400001, 0x4d15, 0x1ff, 0x7, 0x3, 0x469, 0x3, 0x0, 0x200, 0x10000005, 0x7, 0x2, 0x8, 0x42ba, 0x4, 0x9, 0x3, 0x8, 0x8, 0x53, 0x6, 0x4, 0x400, 0x8000, 0x0, 0x2c310b18, 0xfff, 0x0, 0x3, 0xcd34, 0x9, 0x81, 0xdf3, 0x2, 0x7, 0x8, 0x40fff, 0x1ff, 0x8000, 0x3, 0x200, 0x80, 0x6, 0x9a6, 0xe4cb, 0x402, 0x1, 0x1ff, 0x5, 0x9b4, 0x1, 0x8, 0x0, 0x8, 0x0, 0x9, 0x0, 0x4, 0x10, 0x901, 0x5, 0x2, 0x7b, 0xfffffeff, 0x6, 0x6, 0xc, 0x1000, 0x9, 0x9, 0xe6, 0xab, 0x400, 0x7fffffff, 0xed, 0x7ff, 0xd83, 0x68, 0x80000001, 0x6, 0x9fd, 0x10000006, 0x200, 0x2]}, @TCA_TBF_PTAB={0x404, 0x3, [0x4, 0x80000000, 0x1, 0x0, 0x7, 0x196, 0x2, 0x6, 0x4, 0xc, 0x8, 0xc9cd, 0x2, 0x9, 0x0, 0x200, 0x3, 0x9, 0xd, 0x2, 0x7, 0x4, 0x6, 0x9, 0x8000000a, 0xc4, 0x60, 0x8000, 0x7, 0x2000db3a, 0x800, 0x3, 0x9, 0x3, 0x9, 0x0, 0x401, 0x3, 0x6, 0x33, 0x6, 0x8, 0x8001, 0x4, 0x6, 0x4, 0x5, 0xd, 0x2, 0x7, 0x1, 0x0, 0x3, 0x81, 0x3, 0x1ff, 0xfffffff5, 0xc9, 0x5, 0x65e1, 0x10001, 0xc, 0x8001, 0xffffb5ca, 0xe, 0x3, 0x97, 0x7, 0xb, 0xffff6f3c, 0x1, 0x7ff, 0xb4, 0xf, 0x1, 0x3, 0xff, 0xfff, 0x0, 0xee3, 0x43, 0x9, 0x1, 0x3, 0x1, 0x3796, 0x8, 0x6, 0xbe, 0x3, 0x45, 0xdd1, 0x5, 0x7, 0x7de, 0x0, 0x3, 0x345, 0x4, 0x9da, 0x2, 0x6, 0xea6, 0x3, 0x5, 0x10, 0x3, 0xffffffff, 0x3ff, 0x96, 0x7, 0x2, 0x6, 0x9, 0x5, 0x5, 0x3, 0xd7da, 0x82, 0x7f, 0x9, 0x4, 0xb8, 0x6, 0x4, 0x6, 0x3f0a, 0x4, 0x9, 0x5, 0x1ff, 0x4, 0x4, 0x1, 0x7, 0x7ff, 0xfffffffe, 0x0, 0xb, 0xfffffff7, 0x8, 0x101, 0xc57, 0x5, 0x2, 0x5, 0x8, 0xfffffffc, 0xf, 0x1982, 0x1, 0x80000000, 0x1, 0x9, 0x6, 0x7ffc, 0x2, 0x1, 0x2, 0x2, 0x9, 0x5, 0xffffff1c, 0x5, 0x5, 0x7, 0x692, 0x92, 0x4, 0x0, 0x2, 0x9, 0x1b8f, 0x14, 0x65, 0xc00, 0x9, 0x9, 0x3, 0x8, 0x10004, 0x295, 0x6, 0xcb1, 0x1, 0xb7e, 0x10001, 0x8000002, 0xa, 0x6, 0x1, 0x2, 0x3ff, 0xfb5, 0x8, 0xa, 0x0, 0x9, 0xc, 0xc3d4, 0x2, 0x8000, 0xec, 0xd, 0x5, 0x84d3, 0xfffffeff, 0x2, 0x7ff, 0x7fffffff, 0x80, 0x2, 0x90, 0x2, 0x6, 0x3, 0x70, 0x0, 0x0, 0x400, 0x8, 0x10000, 0x9, 0x101, 0xefba, 0x7, 0x3, 0xfffffffe, 0xa4a, 0x7, 0x400, 0xc, 0xfffffff9, 0x8001, 0xd, 0x1, 0x9, 0xfff, 0x421, 0x3ff, 0x2, 0xd, 0xfb6, 0xc, 0xfffffffd, 0xac, 0x0, 0xa, 0x0, 0x6, 0x7f, 0x2dd, 0x7, 0x4, 0x7, 0x1]}]}}]}, 0x838}, 0x1, 0x0, 0x0, 0x40098}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="80", 0x1}], 0x1}, 0x4) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) 304.68822ms ago: executing program 1 (id=1827): epoll_create1(0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) r4 = socket(0x1e, 0x4, 0x0) write$nci(r0, &(0x7f0000000140)=ANY=[@ANYBLOB='P', @ANYRES8=r1, @ANYRES16=r4], 0x14) 84.481627ms ago: executing program 2 (id=1828): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmmsg(r0, &(0x7f000000e7c0)=[{{&(0x7f0000000540)=@nfc={0x27, 0x0, 0x0, 0x7}, 0x80, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x11f8}}, {{0x0, 0x0, &(0x7f0000008940)}}], 0x3, 0x0) 0s ago: executing program 2 (id=1829): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x129000, 0x0) close(r3) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000c00)=@newtfilter={0x44, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xc, 0x8}, {}, {0x8, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x18, 0x2, [@TCA_U32_SEL={0x14, 0x5, {0x6, 0x6, 0x0, 0xfffd, 0x14, 0x9, 0x4, 0x8}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000010}, 0x20000000) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r8, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000440)="27030200590214000600002fb96dbcf706e1050344ee21144add66a44a6b1324890200a012eb", 0x26}], 0x1}, 0x20000000) kernel console output (not intermixed with test programs): 725315][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.733247][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.743636][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.754641][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.765980][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.776351][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.795659][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.804060][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.818424][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.839743][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.855545][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.874358][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.894343][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.912565][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.922110][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.951872][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 120.965956][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 120.975420][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 120.995276][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 121.015781][ T5821] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 121.028524][ T5821] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 121.045861][ T5821] usb 3-1: Product: syz [ 121.054621][ T5821] usb 3-1: Manufacturer: syz [ 121.059277][ T5821] usb 3-1: SerialNumber: syz [ 121.064155][ T6640] rdma_rxe: rxe_newlink: failed to add syzkaller0 [ 121.106915][ T5821] usb 3-1: config 0 descriptor?? [ 121.129374][ T5821] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 121.405842][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 121.511206][ T6678] loop4: detected capacity change from 0 to 32768 [ 121.547464][ T6678] JBD2: Ignoring recovery information on journal [ 121.582155][ T6678] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 121.780064][ C1] vxcan1: j1939_tp_rxtimer: 0xffff88805bd60c00: rx timeout, send abort [ 121.790825][ C1] vxcan1: j1939_xtp_rx_abort_one: 0xffff88805bd60c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 121.815320][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 122.185905][ T6693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 122.219925][ T6690] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.237291][ T6693] netlink: 32 bytes leftover after parsing attributes in process `syz.3.192'. [ 122.598330][ T6701] syzkaller0: entered promiscuous mode [ 122.603959][ T6701] syzkaller0: entered allmulticast mode [ 122.880973][ T6703] syzkaller0: entered promiscuous mode [ 122.888397][ T6703] syzkaller0: entered allmulticast mode [ 122.903800][ T6703] simple: basic_1 [ 122.907834][ T6703] simple: basic_2 [ 122.911621][ T6703] simple: basic_3 [ 122.915331][ T6703] simple: basic_4 [ 122.918990][ T6703] simple: basic_5 [ 122.922654][ T6703] simple: basic_6 [ 122.926357][ T6703] simple: basic_7 [ 122.930013][ T6703] simple: basic_8 [ 122.933654][ T6703] simple: basic_9 [ 122.937364][ T6703] simple: basic_10 [ 122.941100][ T6703] simple: basic_11 [ 122.944906][ T6703] simple: basic_12 [ 122.948651][ T6703] simple: basic_13 [ 122.952387][ T6703] simple: basic_14 [ 122.956185][ T6703] simple: basic_15 [ 122.959916][ T6703] simple: basic_16 [ 122.963666][ T6703] simple: basic_17 [ 122.967435][ T6703] 0: reclassify loop, rule prio 0, protocol 800 [ 123.028932][ T6654] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 123.198506][ T5821] usb 3-1: USB disconnect, device number 3 [ 123.219890][ T5821] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 123.375244][ T2941] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xa [ 123.852522][ T6740] syzkaller0: entered promiscuous mode [ 123.878810][ T6740] syzkaller0: entered allmulticast mode [ 124.014526][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 124.235909][ T23] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 124.263069][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.295049][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.331055][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.348208][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.369465][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.398201][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.415754][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.442380][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.479046][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.518090][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.543611][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.583853][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.623928][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.653341][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.686324][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.726957][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.754652][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.786950][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.814506][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.833673][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.856331][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.868785][ T23] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 124.879131][ T23] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 124.912395][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 124.949269][ T23] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 124.961918][ T23] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 124.972284][ T23] usb 3-1: Product: syz [ 124.976906][ T23] usb 3-1: Manufacturer: syz [ 124.981542][ T23] usb 3-1: SerialNumber: syz [ 124.993893][ T23] usb 3-1: config 0 descriptor?? [ 125.014144][ T23] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 125.293116][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 125.907311][ T6816] syz.4.224 uses obsolete (PF_INET,SOCK_PACKET) [ 126.002495][ T6819] loop1: detected capacity change from 0 to 4096 [ 126.075318][ T6826] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 126.766649][ T6822] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 126.789256][ T5821] usb 3-1: USB disconnect, device number 4 [ 126.824645][ T5821] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 126.974493][ T5786] Bluetooth: hci0: command tx timeout [ 127.064069][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz.4.230'. [ 127.544548][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.234'. [ 127.993166][ T6779] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 128.256109][ T5818] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 128.268806][ T6902] loop3: detected capacity change from 0 to 4096 [ 128.325667][ T6906] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 128.465294][ T5818] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 128.504372][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.513371][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.585457][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.593641][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.624363][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.691985][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.724048][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.759027][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.807424][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.854820][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.874374][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.920213][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 128.946633][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 128.955714][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 128.992022][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.022966][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.044868][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 129.045031][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.074809][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.084547][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.085574][ T6900] loop4: detected capacity change from 0 to 32768 [ 129.093595][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.170861][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.199789][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 129.215856][ T6900] JBD2: Ignoring recovery information on journal [ 129.216130][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.234060][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.238216][ T5818] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 129.305027][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 129.330478][ T5818] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 129.348701][ T6900] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 129.362537][ T5818] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 129.389900][ T5818] usb 3-1: Product: syz [ 129.403395][ T5818] usb 3-1: Manufacturer: syz [ 129.418443][ T5818] usb 3-1: SerialNumber: syz [ 129.431280][ T5818] usb 3-1: config 0 descriptor?? [ 129.466784][ T5818] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 129.598768][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 129.695352][ T6919] bridge_slave_0: left allmulticast mode [ 129.701110][ T6919] bridge_slave_0: left promiscuous mode [ 129.716695][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.768786][ C1] usb 3-1: yurex_control_callback - control failed: -2 [ 129.779051][ T6919] bridge_slave_1: left allmulticast mode [ 129.786652][ T6919] bridge_slave_1: left promiscuous mode [ 129.792539][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.857717][ T6919] bond0: (slave bond_slave_0): Releasing backup interface [ 130.167059][ T6919] bond0: (slave bond_slave_1): Releasing backup interface [ 130.246502][ T6919] team0: Port device team_slave_0 removed [ 130.296803][ T6919] team0: Port device team_slave_1 removed [ 130.316435][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 130.341178][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 130.375135][ T6919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.405641][ T6919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 130.734869][ T6919] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.743840][ T6919] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.753416][ T6919] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.762536][ T6919] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.869411][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.3.246'. [ 130.985104][ T5841] usb 3-1: USB disconnect, device number 5 [ 130.998660][ T5841] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 131.166170][ T6943] syzkaller0: entered promiscuous mode [ 131.171714][ T6943] syzkaller0: entered allmulticast mode [ 131.731684][ T6973] xt_hashlimit: size too large, truncated to 1048576 [ 131.893517][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.3.260'. [ 132.970182][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.979283][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.083620][ T7009] loop1: detected capacity change from 0 to 32768 [ 133.129606][ T7009] JBD2: Ignoring recovery information on journal [ 133.187093][ T7009] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 133.295607][ T6934] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 133.405793][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 133.541383][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.4.270'. [ 133.798778][ T7023] netlink: 28 bytes leftover after parsing attributes in process `syz.1.268'. [ 133.829272][ T7023] netlink: 'syz.1.268': attribute type 7 has an invalid length. [ 133.848192][ T7023] netlink: 16 bytes leftover after parsing attributes in process `syz.1.268'. [ 134.156020][ T7031] syzkaller0: entered promiscuous mode [ 134.161555][ T7031] syzkaller0: entered allmulticast mode [ 134.270683][ T7037] syzkaller0: entered promiscuous mode [ 134.284475][ T7037] syzkaller0: entered allmulticast mode [ 134.581025][ T7035] loop4: detected capacity change from 0 to 32768 [ 134.631893][ T7035] JBD2: Ignoring recovery information on journal [ 134.636930][ T7050] netlink: 4 bytes leftover after parsing attributes in process `syz.1.280'. [ 134.754773][ T7035] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 134.999039][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 135.809428][ T7076] loop4: detected capacity change from 0 to 32768 [ 135.900654][ T7076] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 136.076825][ T7076] XFS (loop4): Ending clean mount [ 136.123206][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.1.290'. [ 136.160048][ T7076] XFS (loop4): Quotacheck needed: Please wait. [ 136.238361][ T7076] XFS (loop4): Quotacheck: Done. [ 136.319974][ T27] audit: type=1800 audit(1781931776.280:10): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.283" name="bus" dev="loop4" ino=9291 res=0 errno=0 [ 136.386897][ T7112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.291'. [ 136.399865][ T27] audit: type=1800 audit(1781931776.320:11): pid=7076 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.283" name="file1" dev="loop4" ino=9286 res=0 errno=0 [ 136.403003][ T7112] netlink: 32 bytes leftover after parsing attributes in process `syz.3.291'. [ 136.508544][ T5922] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 137.250577][ T7039] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 137.510083][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 138.094756][ T7158] 8021q: adding VLAN 0 to HW filter on device bond2 [ 138.125811][ T7158] bridge0: port 3(bond2) entered blocking state [ 138.149939][ T7158] bridge0: port 3(bond2) entered disabled state [ 138.174739][ T7158] bond2: entered allmulticast mode [ 138.207167][ T7158] bond2: entered promiscuous mode [ 138.221462][ T7158] bridge0: port 3(bond2) entered blocking state [ 138.228753][ T7158] bridge0: port 3(bond2) entered forwarding state [ 138.314080][ T7138] loop2: detected capacity change from 0 to 32768 [ 138.368361][ T7138] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 138.509276][ T2941] bridge0: port 3(bond2) entered disabled state [ 138.577624][ T7138] XFS (loop2): Ending clean mount [ 138.610341][ T7138] XFS (loop2): Quotacheck needed: Please wait. [ 138.726678][ T7138] XFS (loop2): Quotacheck: Done. [ 138.839974][ T27] audit: type=1800 audit(1781931778.790:12): pid=7138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.301" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 138.962752][ T7199] netlink: 32 bytes leftover after parsing attributes in process `syz.1.310'. [ 139.022511][ T5772] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 139.677043][ T7225] netlink: 4 bytes leftover after parsing attributes in process `syz.2.313'. [ 142.548731][ T7230] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 143.057896][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'. [ 143.067285][ T7319] netlink: 32 bytes leftover after parsing attributes in process `syz.2.326'. [ 143.366518][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz.1.328'. [ 143.627547][ T7329] tipc: Started in network mode [ 143.632512][ T7329] tipc: Node identity 6e85160c1557, cluster identity 4711 [ 143.658301][ T7329] tipc: Enabled bearer , priority 0 [ 143.867095][ T7329] syzkaller0: entered promiscuous mode [ 143.872623][ T7329] syzkaller0: entered allmulticast mode [ 143.916655][ T7329] tipc: Resetting bearer [ 144.166240][ T1143] tipc: Resetting bearer [ 144.180868][ T7328] tipc: Resetting bearer [ 144.503855][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 144.531340][ T7364] netlink: 32 bytes leftover after parsing attributes in process `syz.3.337'. [ 146.185999][ T7328] tipc: Disabling bearer [ 146.208609][ T5762] tipc: Node number set to 2077365772 [ 146.701585][ T7398] netlink: 32 bytes leftover after parsing attributes in process `syz.1.346'. [ 147.073387][ T7412] syzkaller0: entered promiscuous mode [ 147.079641][ T7412] syzkaller0: entered allmulticast mode [ 147.571614][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'. [ 147.624586][ T7429] netlink: 32 bytes leftover after parsing attributes in process `syz.2.356'. [ 148.363299][ T7470] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.388124][ T7471] Bluetooth: MGMT ver 1.22 [ 148.388246][ T7470] tipc: Enabled bearer , priority 0 [ 148.543984][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.370'. [ 148.558527][ T7467] tipc: Disabling bearer [ 148.906538][ T7493] netlink: 32 bytes leftover after parsing attributes in process `syz.4.377'. [ 148.950541][ T7457] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 149.137561][ T7513] netlink: 4 bytes leftover after parsing attributes in process `syz.4.379'. [ 149.210204][ T7509] syzkaller0: entered promiscuous mode [ 149.247574][ T7509] syzkaller0: entered allmulticast mode [ 149.667461][ T7528] netlink: 32 bytes leftover after parsing attributes in process `syz.1.386'. [ 149.974687][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.2.393'. [ 150.100227][ T7547] syzkaller0: entered promiscuous mode [ 150.110293][ T7547] syzkaller0: entered allmulticast mode [ 150.165209][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 150.176032][ T7551] random: crng reseeded on system resumption [ 150.431307][ T7553] netlink: 32 bytes leftover after parsing attributes in process `syz.4.398'. [ 151.285692][ T7569] block nbd0: not configured, cannot reconfigure [ 152.224274][ C0] sched: RT throttling activated [ 152.328370][ T7583] loop4: detected capacity change from 0 to 32768 [ 152.349247][ T7583] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.405 (7583) [ 152.415610][ T7583] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 152.429978][ T7583] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 152.449263][ T7583] BTRFS info (device loop4): turning on flush-on-commit [ 152.458091][ T7583] BTRFS info (device loop4): setting nodatacow, compression disabled [ 152.467324][ T7583] BTRFS info (device loop4): allowing degraded mounts [ 152.474727][ T7583] BTRFS info (device loop4): force zlib compression, level 3 [ 152.508671][ T7583] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 152.544546][ T7583] BTRFS info (device loop4): trying to use backup root at mount time [ 152.565983][ T7583] BTRFS info (device loop4): using free space tree [ 152.675497][ T7602] syzkaller0: entered promiscuous mode [ 152.675513][ T7583] BTRFS info (device loop4): enabling ssd optimizations [ 152.675532][ T7583] BTRFS info (device loop4): auto enabling async discard [ 152.697013][ T7602] syzkaller0: entered allmulticast mode [ 152.730506][ T27] audit: type=1800 audit(1781931792.690:13): pid=7583 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 152.858324][ T7608] netlink: 32 bytes leftover after parsing attributes in process `syz.1.409'. [ 152.912384][ T27] audit: type=1800 audit(1781931792.870:14): pid=7612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.405" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 153.649518][ T7629] random: crng reseeded on system resumption [ 153.683105][ T5922] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 155.551892][ T7652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'. [ 155.611889][ T7652] netlink: 32 bytes leftover after parsing attributes in process `syz.2.421'. [ 156.315774][ T7668] syzkaller0: entered promiscuous mode [ 156.321468][ T7668] syzkaller0: entered allmulticast mode [ 158.301814][ T7682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.432'. [ 158.495420][ T7695] syzkaller0: entered promiscuous mode [ 158.500964][ T7695] syzkaller0: entered allmulticast mode [ 158.999663][ T7710] syzkaller0: entered promiscuous mode [ 159.015822][ T7710] syzkaller0: entered allmulticast mode [ 159.035508][ T7717] netlink: 4 bytes leftover after parsing attributes in process `syz.3.443'. [ 159.229530][ T7726] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.756652][ T7772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 161.966588][ T7782] netlink: 'syz.1.459': attribute type 4 has an invalid length. [ 162.129003][ T7787] syzkaller0: entered promiscuous mode [ 162.137664][ T7787] syzkaller0: entered allmulticast mode [ 162.426021][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz.3.467'. [ 163.051731][ T7825] loop4: detected capacity change from 0 to 32768 [ 163.070506][ T7825] JBD2: Ignoring recovery information on journal [ 163.118356][ T7825] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 163.196393][ T7833] syzkaller0: entered promiscuous mode [ 163.201955][ T7833] syzkaller0: entered allmulticast mode [ 163.219943][ T7825] (syz.4.473,7825,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -14 [ 163.227116][ T7825] (syz.4.473,7825,1):ocfs2_dio_end_io:2443 ERROR: Direct IO failed, bytes = -14 [ 163.375863][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 163.958711][ T7853] syzkaller0: entered promiscuous mode [ 163.964766][ T7853] syzkaller0: entered allmulticast mode [ 165.327709][ T7795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 165.913815][ T7879] syzkaller0: entered promiscuous mode [ 165.929801][ T7879] syzkaller0: entered allmulticast mode [ 167.037991][ T7928] syzkaller1: entered promiscuous mode [ 167.044808][ T7928] syzkaller1: entered allmulticast mode [ 167.785615][ T7954] 8021q: adding VLAN 0 to HW filter on device bond3 [ 168.008345][ T7943] loop2: detected capacity change from 0 to 32768 [ 168.038109][ T7943] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.522 (7943) [ 168.099463][ T7943] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.128929][ T7943] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 168.186707][ T7943] BTRFS info (device loop2): turning on flush-on-commit [ 168.198826][ T7943] BTRFS info (device loop2): setting nodatacow, compression disabled [ 168.211595][ T7943] BTRFS info (device loop2): allowing degraded mounts [ 168.219261][ T7943] BTRFS info (device loop2): force zlib compression, level 3 [ 168.254396][ T7943] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 168.274663][ T7943] BTRFS info (device loop2): trying to use backup root at mount time [ 168.282865][ T7943] BTRFS info (device loop2): using free space tree [ 168.400819][ T7943] BTRFS info (device loop2): enabling ssd optimizations [ 168.421641][ T7943] BTRFS info (device loop2): auto enabling async discard [ 168.506112][ T27] audit: type=1800 audit(1781931808.470:15): pid=7943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.522" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 168.791774][ T27] audit: type=1800 audit(1781931808.750:16): pid=8007 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.522" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 169.140344][ T8017] syzkaller0: entered promiscuous mode [ 169.147133][ T8017] syzkaller0: entered allmulticast mode [ 169.261960][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.362043][ T8021] syzkaller0: entered promiscuous mode [ 169.381391][ T8021] syzkaller0: entered allmulticast mode [ 170.199801][ T8045] syzkaller0: entered promiscuous mode [ 170.212548][ T8045] syzkaller0: entered allmulticast mode [ 170.262172][ T8045] tipc: Started in network mode [ 170.267321][ T8045] tipc: Node identity f67cfd3a8748, cluster identity 4711 [ 170.278950][ T8045] tipc: Enabled bearer , priority 0 [ 170.301919][ T8044] tipc: Resetting bearer [ 170.326618][ T8044] tipc: Disabling bearer [ 170.520676][ T8061] syzkaller0: entered promiscuous mode [ 170.529565][ T8061] syzkaller0: entered allmulticast mode [ 170.538727][ T8059] syzkaller0: entered promiscuous mode [ 170.548086][ T8059] syzkaller0: entered allmulticast mode [ 170.870317][ T8074] syzkaller0: entered promiscuous mode [ 170.875941][ T8074] syzkaller0: entered allmulticast mode [ 171.649331][ T8113] syzkaller0: entered promiscuous mode [ 171.655050][ T8113] syzkaller0: entered allmulticast mode [ 171.756143][ T8115] syzkaller0: entered promiscuous mode [ 171.761674][ T8115] syzkaller0: entered allmulticast mode [ 172.223273][ T8136] syzkaller0: entered promiscuous mode [ 172.229852][ T8136] syzkaller0: entered allmulticast mode [ 172.832549][ T8159] syzkaller0: entered promiscuous mode [ 172.841523][ T8159] syzkaller0: entered allmulticast mode [ 173.118773][ T8149] loop4: detected capacity change from 0 to 32768 [ 173.160263][ T8149] JBD2: Ignoring recovery information on journal [ 173.249019][ T8149] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 173.576164][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 173.616234][ T8188] syz_tun: entered promiscuous mode [ 173.637551][ T8188] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 174.008874][ T8207] geneve2: entered promiscuous mode [ 174.014487][ T8207] geneve2: entered allmulticast mode [ 174.219681][ T8214] xt_hashlimit: size too large, truncated to 1048576 [ 174.599546][ T8229] netlink: 8 bytes leftover after parsing attributes in process `syz.4.624'. [ 174.993435][ T8241] netlink: 'syz.4.628': attribute type 10 has an invalid length. [ 175.041101][ T8241] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 175.602186][ T8258] syzkaller0: entered promiscuous mode [ 175.617295][ T8258] syzkaller0: entered allmulticast mode [ 178.596093][ T8316] netlink: 'syz.1.646': attribute type 83 has an invalid length. [ 178.817799][ T8327] syzkaller0: entered promiscuous mode [ 178.823338][ T8327] syzkaller0: entered allmulticast mode [ 180.054479][ T786] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 180.266251][ T786] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 180.275956][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.285282][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.296391][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.304842][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.314395][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.343446][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.351697][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.366303][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.377408][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.388746][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.400007][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.412240][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.435245][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.455838][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.469074][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.477087][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.488955][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.499951][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.507922][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.517159][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.529463][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.537524][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 180.549563][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 180.560666][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 180.572170][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 180.597353][ T786] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 180.608791][ T786] usb 2-1: Product: syz [ 180.613009][ T786] usb 2-1: Manufacturer: syz [ 180.617685][ T786] usb 2-1: SerialNumber: syz [ 180.626061][ T786] usb 2-1: config 0 descriptor?? [ 180.643640][ T786] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 182.221469][ T8388] syzkaller0: entered promiscuous mode [ 182.229030][ T8388] syzkaller0: entered allmulticast mode [ 182.742226][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 182.781729][ T786] usb 2-1: USB disconnect, device number 3 [ 182.820343][ T786] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 184.980439][ T8442] netlink: 32 bytes leftover after parsing attributes in process `syz.4.689'. [ 185.194337][ T786] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 185.406066][ T786] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 185.415774][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.425092][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.437249][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.445831][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.455852][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.467430][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.476067][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.486246][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.497857][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.506132][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.515770][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.526993][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.535364][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.544696][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.556022][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.564432][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.573537][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.585819][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.594182][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.603441][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.614711][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.623077][ T786] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 185.640195][ T786] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 185.651386][ T786] usb 2-1: config 0 interface 0 has no altsetting 0 [ 185.663521][ T786] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 185.672950][ T786] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 185.681417][ T786] usb 2-1: Product: syz [ 185.685823][ T786] usb 2-1: Manufacturer: syz [ 185.690453][ T786] usb 2-1: SerialNumber: syz [ 185.698374][ T786] usb 2-1: config 0 descriptor?? [ 185.725115][ T786] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 187.927156][ C0] usb 2-1: yurex_control_callback - control failed: -2 [ 187.959603][ T9] usb 2-1: USB disconnect, device number 4 [ 187.972287][ T9] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 189.672152][ T8466] tipc: Enabling of bearer rejected, failed to enable media [ 189.844943][ T8482] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'. [ 190.108987][ T8496] syzkaller0: entered promiscuous mode [ 190.116065][ T8496] syzkaller0: entered allmulticast mode [ 192.016887][ T8511] tipc: Enabled bearer , priority 0 [ 192.055108][ T8510] tipc: Disabling bearer [ 192.117358][ T8513] syzkaller0: entered promiscuous mode [ 192.129476][ T8513] syzkaller0: entered allmulticast mode [ 192.340053][ T8525] netlink: 32 bytes leftover after parsing attributes in process `syz.2.713'. [ 194.413684][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.612169][ T8562] tipc: Enabling of bearer rejected, failed to enable media [ 194.868677][ T8574] netlink: 32 bytes leftover after parsing attributes in process `syz.1.726'. [ 195.100896][ T5786] Bluetooth: hci0: link tx timeout [ 195.108007][ T5786] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 197.134526][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 197.353905][ T8622] tipc: Enabled bearer , priority 0 [ 197.367012][ T8620] tipc: Disabling bearer [ 197.860557][ T8641] syzkaller0: entered promiscuous mode [ 197.866721][ T8641] syzkaller0: entered allmulticast mode [ 199.016966][ T8688] syzkaller0: entered promiscuous mode [ 199.044529][ T8688] syzkaller0: entered allmulticast mode [ 199.340108][ T8686] loop4: detected capacity change from 0 to 32768 [ 199.430875][ T8686] JBD2: Ignoring recovery information on journal [ 199.552544][ T8686] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 199.873669][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 200.052003][ T8727] syzkaller0: entered promiscuous mode [ 200.057797][ T8727] syzkaller0: entered allmulticast mode [ 200.285958][ T8735] syzkaller0: entered promiscuous mode [ 200.291977][ T8735] syzkaller0: entered allmulticast mode [ 200.386288][ T8738] tipc: Enabling of bearer rejected, failed to enable media [ 200.906665][ T8758] syzkaller0: entered promiscuous mode [ 200.924406][ T8758] syzkaller0: entered allmulticast mode [ 201.001559][ T8747] loop3: detected capacity change from 0 to 32768 [ 201.018930][ T8747] JBD2: Ignoring recovery information on journal [ 201.077285][ T8747] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 201.272576][ T8768] syzkaller0: entered promiscuous mode [ 201.281395][ T8768] syzkaller0: entered allmulticast mode [ 201.361316][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 201.395526][ T8772] tipc: Enabling of bearer rejected, failed to enable media [ 201.605187][ T5780] Bluetooth: hci1: command 0x0406 tx timeout [ 201.615539][ T5088] Bluetooth: hci3: command 0x0406 tx timeout [ 201.616443][ T5784] Bluetooth: hci2: command 0x0406 tx timeout [ 201.768586][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.796'. [ 201.988768][ T8795] syzkaller0: entered promiscuous mode [ 201.994476][ T8795] syzkaller0: entered allmulticast mode [ 202.098509][ T8795] tipc: Started in network mode [ 202.144696][ T8795] tipc: Node identity 36ea3d9afca9, cluster identity 4711 [ 202.152477][ T8795] tipc: Enabled bearer , priority 0 [ 202.212551][ T8794] tipc: Resetting bearer [ 202.307707][ T8794] tipc: Disabling bearer [ 202.356045][ T8806] syzkaller0: entered promiscuous mode [ 202.361580][ T8806] syzkaller0: entered allmulticast mode [ 202.756071][ T8802] loop4: detected capacity change from 0 to 32768 [ 202.770718][ T8804] loop3: detected capacity change from 0 to 32768 [ 202.817835][ T8804] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 202.830148][ T8802] JBD2: Ignoring recovery information on journal [ 202.855470][ T8804] JBD2: Ignoring recovery information on journal [ 202.983185][ T8802] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 203.045687][ T8804] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 203.331678][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 203.365626][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 203.517879][ T8830] syzkaller0: entered promiscuous mode [ 203.523422][ T8830] syzkaller0: entered allmulticast mode [ 203.643616][ T8830] tipc: Enabled bearer , priority 0 [ 203.669773][ T8828] tipc: Resetting bearer [ 203.751188][ T8828] tipc: Disabling bearer [ 204.539949][ T8857] loop2: detected capacity change from 0 to 32768 [ 204.575891][ T8857] JBD2: Ignoring recovery information on journal [ 204.667634][ T8857] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 204.702607][ T8859] loop3: detected capacity change from 0 to 32768 [ 204.769013][ T8859] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 204.863073][ T8859] JBD2: Ignoring recovery information on journal [ 204.974304][ T8859] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 205.030753][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 205.244658][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 205.576316][ T8886] syzkaller0: entered promiscuous mode [ 205.581861][ T8886] syzkaller0: entered allmulticast mode [ 205.730592][ T8886] tipc: Enabled bearer , priority 0 [ 205.767911][ T8885] tipc: Resetting bearer [ 205.845862][ T8885] tipc: Disabling bearer [ 206.306043][ T8899] loop2: detected capacity change from 0 to 32768 [ 206.363913][ T8899] JBD2: Ignoring recovery information on journal [ 206.496829][ T8899] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 206.549902][ T8905] loop3: detected capacity change from 0 to 32768 [ 206.585563][ T8905] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 206.601787][ T8905] JBD2: Ignoring recovery information on journal [ 206.676380][ T8905] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 206.749559][ T8917] syzkaller0: entered promiscuous mode [ 206.763162][ T8917] syzkaller0: entered allmulticast mode [ 206.797136][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 206.839676][ T8917] tipc: Enabled bearer , priority 0 [ 206.873438][ T8916] tipc: Resetting bearer [ 206.945906][ T8916] tipc: Disabling bearer [ 207.016647][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 207.256464][ T8925] syzkaller0: entered promiscuous mode [ 207.262006][ T8925] syzkaller0: entered allmulticast mode [ 208.078066][ T8947] loop1: detected capacity change from 0 to 32768 [ 208.150494][ T8945] loop3: detected capacity change from 0 to 32768 [ 208.154593][ T8947] JBD2: Ignoring recovery information on journal [ 208.185423][ T8945] debugfs: Directory 'B1DE653C5FFC4D88B33B244AAB9EB3E9' with parent 'ocfs2' already present! [ 208.231654][ T8945] JBD2: Ignoring recovery information on journal [ 208.285985][ T8947] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 208.325090][ T8945] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 208.494885][ T8961] random: crng reseeded on system resumption [ 208.613330][ T5774] ocfs2: Unmounting device (7,1) on (node local) [ 208.646544][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 210.453703][ T8988] netlink: 8 bytes leftover after parsing attributes in process `syz.4.861'. [ 211.254666][ T9017] syzkaller0: entered promiscuous mode [ 211.260495][ T9017] syzkaller0: entered allmulticast mode [ 211.416737][ T9001] loop2: detected capacity change from 0 to 32768 [ 211.468772][ T9001] JBD2: Ignoring recovery information on journal [ 211.610177][ T9001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 211.628833][ T9029] random: crng reseeded on system resumption [ 211.886386][ T5772] ocfs2: Unmounting device (7,2) on (node local) [ 214.361656][ T9056] syzkaller0: entered promiscuous mode [ 214.367365][ T9056] syzkaller0: entered allmulticast mode [ 215.013369][ T9086] random: crng reseeded on system resumption [ 217.359660][ T9124] netlink: 'syz.1.906': attribute type 10 has an invalid length. [ 217.411619][ T9124] team0: Port device veth0_to_bond added [ 217.658241][ T9136] netlink: 36 bytes leftover after parsing attributes in process `syz.2.910'. [ 218.039612][ T9151] random: crng reseeded on system resumption [ 218.621166][ T9153] loop3: detected capacity change from 0 to 32768 [ 218.663193][ T9153] JBD2: Ignoring recovery information on journal [ 218.725166][ T9153] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 219.118970][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 221.868350][ T9194] syzkaller0: entered promiscuous mode [ 221.873941][ T9194] syzkaller0: entered allmulticast mode [ 225.453186][ T9219] random: crng reseeded on system resumption [ 225.525667][ T9225] netlink: 8 bytes leftover after parsing attributes in process `syz.4.936'. [ 226.147104][ T9242] syzkaller0: entered promiscuous mode [ 226.152615][ T9242] syzkaller0: entered allmulticast mode [ 229.585375][ T9279] loop2: detected capacity change from 0 to 32768 [ 229.604411][ T9279] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.949 (9279) [ 229.665058][ T9279] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 229.677635][ T9279] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 229.690948][ T9279] BTRFS info (device loop2): turning on flush-on-commit [ 229.698477][ T9279] BTRFS info (device loop2): setting nodatacow, compression disabled [ 229.710466][ T9279] BTRFS info (device loop2): allowing degraded mounts [ 229.717551][ T9279] BTRFS info (device loop2): force zlib compression, level 3 [ 229.728302][ T9279] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 229.740944][ T9279] BTRFS info (device loop2): trying to use backup root at mount time [ 229.752652][ T9279] BTRFS info (device loop2): using free space tree [ 229.880718][ T9279] BTRFS info (device loop2): enabling ssd optimizations [ 229.902778][ T9279] BTRFS info (device loop2): auto enabling async discard [ 229.955425][ T27] audit: type=1800 audit(1781931869.920:17): pid=9279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 230.094179][ T27] audit: type=1800 audit(1781931870.050:18): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.949" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 230.490218][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 230.954113][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.2.951'. [ 232.043937][ T9321] random: crng reseeded on system resumption [ 232.069626][ T9327] netem: unknown loss type 0 [ 232.077382][ T9327] netem: change failed [ 232.655898][ T9348] syzkaller0: entered promiscuous mode [ 232.664412][ T9348] syzkaller0: entered allmulticast mode [ 233.006516][ T9358] netlink: 8 bytes leftover after parsing attributes in process `syz.3.962'. [ 235.269578][ T9359] syzkaller0: entered promiscuous mode [ 235.275301][ T9359] syzkaller0: entered allmulticast mode [ 235.405831][ T9365] netlink: 32 bytes leftover after parsing attributes in process `syz.4.965'. [ 237.231243][ T9379] tipc: Enabling of bearer rejected, failed to enable media [ 237.457810][ T9387] syzkaller0: entered promiscuous mode [ 237.474286][ T9387] syzkaller0: entered allmulticast mode [ 237.573229][ T9396] random: crng reseeded on system resumption [ 240.407071][ T9417] syzkaller0: entered promiscuous mode [ 240.428138][ T9417] syzkaller0: entered allmulticast mode [ 241.360793][ T9438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.980'. [ 242.195103][ T9428] syzkaller0: entered promiscuous mode [ 242.200780][ T9428] syzkaller0: entered allmulticast mode [ 242.351092][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.1.981'. [ 242.754474][ T5818] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 242.914420][ T5818] usb 2-1: device descriptor read/64, error -71 [ 243.194386][ T5818] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 243.354410][ T5818] usb 2-1: device descriptor read/64, error -71 [ 243.477428][ T5818] usb usb2-port1: attempt power cycle [ 243.916016][ T5818] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 243.970034][ T5818] usb 2-1: device descriptor read/8, error -71 [ 244.005502][ T9432] tipc: Enabled bearer , priority 0 [ 244.021223][ T9425] tipc: Resetting bearer [ 244.044083][ T9425] tipc: Disabling bearer [ 244.140840][ T9449] random: crng reseeded on system resumption [ 244.265880][ T5818] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 244.342011][ T5818] usb 2-1: device descriptor read/8, error -71 [ 244.394311][ T5786] Bluetooth: hci0: link tx timeout [ 244.399498][ T5786] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa [ 244.474595][ T5818] usb usb2-port1: unable to enumerate USB device [ 246.490255][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 248.039474][ T9499] tipc: Enabling of bearer rejected, failed to enable media [ 248.175186][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.997'. [ 248.463502][ T9523] syzkaller0: entered promiscuous mode [ 248.469201][ T9523] syzkaller0: entered allmulticast mode [ 248.527718][ T9529] random: crng reseeded on system resumption [ 248.671633][ T5821] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 248.843635][ T5821] usb 4-1: device descriptor read/64, error -71 [ 249.122234][ T5821] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 249.284680][ T5821] usb 4-1: device descriptor read/64, error -71 [ 249.420406][ T5821] usb usb4-port1: attempt power cycle [ 249.864332][ T5821] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 249.904952][ T5821] usb 4-1: device descriptor read/8, error -71 [ 250.194456][ T5821] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 250.244628][ T5821] usb 4-1: device descriptor read/8, error -71 [ 250.392397][ T5821] usb usb4-port1: unable to enumerate USB device [ 250.416417][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 253.466310][ T9548] syzkaller0: entered promiscuous mode [ 253.471913][ T9548] syzkaller0: entered allmulticast mode [ 253.482056][ T9556] tipc: Enabled bearer , priority 0 [ 253.489325][ T9558] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 253.501326][ T9544] tipc: Resetting bearer [ 253.631151][ T9544] tipc: Disabling bearer [ 253.809796][ T9575] syzkaller0: entered promiscuous mode [ 253.815885][ T9575] syzkaller0: entered allmulticast mode [ 253.912008][ T9577] syzkaller0: entered promiscuous mode [ 253.917635][ T9577] syzkaller0: entered allmulticast mode [ 254.024519][ T5821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 254.185413][ T5821] usb 4-1: device descriptor read/64, error -71 [ 254.466439][ T5821] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 254.664406][ T5821] usb 4-1: device descriptor read/64, error -71 [ 254.794644][ T5821] usb usb4-port1: attempt power cycle [ 255.239048][ T5821] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 255.288135][ T5821] usb 4-1: device descriptor read/8, error -71 [ 255.585377][ T5821] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 255.635376][ T5821] usb 4-1: device descriptor read/8, error -71 [ 255.763739][ T5821] usb usb4-port1: unable to enumerate USB device [ 255.850518][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.239939][ T9613] loop3: detected capacity change from 0 to 32768 [ 257.332457][ T9613] JBD2: Ignoring recovery information on journal [ 257.430450][ T9613] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 257.878595][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 258.660622][ T9606] syzkaller0: entered promiscuous mode [ 258.666321][ T9606] syzkaller0: entered allmulticast mode [ 258.673556][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1020'. [ 258.694765][ T9609] tipc: Enabled bearer , priority 0 [ 258.701691][ T9599] tipc: Resetting bearer [ 258.780310][ T9599] tipc: Disabling bearer [ 258.802279][ T9621] syzkaller0: entered promiscuous mode [ 258.809176][ T9621] syzkaller0: entered allmulticast mode [ 258.991257][ T9635] syzkaller0: entered promiscuous mode [ 259.004976][ T9635] syzkaller0: entered allmulticast mode [ 259.703208][ T9650] loop3: detected capacity change from 0 to 32768 [ 259.770844][ T9650] JBD2: Ignoring recovery information on journal [ 259.840606][ T9650] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 260.208736][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 263.361744][ T9658] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1034'. [ 263.407774][ T9675] tipc: Enabling of bearer rejected, failed to enable media [ 263.539564][ T9680] syzkaller0: entered promiscuous mode [ 263.565070][ T9680] syzkaller0: entered allmulticast mode [ 264.062975][ T9701] syzkaller0: entered promiscuous mode [ 264.086127][ T9701] syzkaller0: entered allmulticast mode [ 264.314812][ T9694] loop4: detected capacity change from 0 to 32768 [ 264.375551][ T9694] JBD2: Ignoring recovery information on journal [ 264.458177][ T9694] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 264.953395][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 266.498827][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1046'. [ 266.631260][ T9733] syzkaller0: entered promiscuous mode [ 266.641132][ T9733] syzkaller0: entered allmulticast mode [ 266.655697][ T9733] tipc: Enabled bearer , priority 0 [ 266.696140][ T9732] tipc: Resetting bearer [ 266.753843][ T9732] tipc: Disabling bearer [ 266.797954][ T9743] syzkaller0: entered promiscuous mode [ 266.803575][ T9743] syzkaller0: entered allmulticast mode [ 267.332573][ T9770] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1058'. [ 267.617971][ T9761] loop4: detected capacity change from 0 to 32768 [ 267.653513][ T9761] JBD2: Ignoring recovery information on journal [ 267.698514][ T9761] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 267.781642][ T9777] syzkaller0: entered promiscuous mode [ 267.801704][ T9777] syzkaller0: entered allmulticast mode [ 267.966990][ T5922] ocfs2: Unmounting device (7,4) on (node local) [ 270.373176][ T9818] netlink: 'syz.4.1069': attribute type 29 has an invalid length. [ 270.388073][ T9818] netlink: 'syz.4.1069': attribute type 29 has an invalid length. [ 270.408318][ T9818] netlink: 'syz.4.1069': attribute type 29 has an invalid length. [ 270.419604][ T9818] netlink: 'syz.4.1069': attribute type 29 has an invalid length. [ 270.470945][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1067'. [ 270.949728][ T9829] loop3: detected capacity change from 0 to 32768 [ 270.988087][ T9829] JBD2: Ignoring recovery information on journal [ 271.022405][ T9829] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 271.387355][ T5775] ocfs2: Unmounting device (7,3) on (node local) [ 271.477534][ T9856] syzkaller0: entered promiscuous mode [ 271.503684][ T9856] syzkaller0: entered allmulticast mode [ 271.522509][ T9858] syzkaller0: entered promiscuous mode [ 271.533309][ T9858] syzkaller0: entered allmulticast mode [ 273.491732][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1082'. [ 274.248572][ T9911] syzkaller0: entered promiscuous mode [ 274.254604][ T9911] syzkaller0: entered allmulticast mode [ 276.323174][ T9913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1093'. [ 276.578177][ T9947] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1100'. [ 276.862079][ T9966] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1103'. [ 277.383490][ T9973] pim6reg: entered allmulticast mode [ 277.451887][ T9975] pim6reg: left allmulticast mode [ 277.530675][ T9978] sctp: [Deprecated]: syz.3.1104 (pid 9978) Use of int in max_burst socket option. [ 277.530675][ T9978] Use struct sctp_assoc_value instead [ 277.815442][ T9973] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 277.834412][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1105'. [ 280.041143][ T9996] syzkaller0: entered promiscuous mode [ 280.047136][ T9996] syzkaller0: entered allmulticast mode [ 280.059810][T10002] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1111'. [ 280.216812][T10016] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1113'. [ 282.265303][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1117'. [ 282.458681][T10050] syzkaller0: entered promiscuous mode [ 282.485617][T10050] syzkaller0: entered allmulticast mode [ 282.606974][T10050] tipc: Enabled bearer , priority 0 [ 282.703465][T10048] tipc: Resetting bearer [ 283.028843][T10048] tipc: Disabling bearer [ 283.154601][T10064] sctp: [Deprecated]: syz.1.1118 (pid 10064) Use of int in max_burst socket option. [ 283.154601][T10064] Use struct sctp_assoc_value instead [ 283.271449][T10053] pim6reg: entered allmulticast mode [ 283.277828][T10061] pim6reg: left allmulticast mode [ 283.613009][T10066] syzkaller0: entered promiscuous mode [ 283.620491][T10066] syzkaller0: entered allmulticast mode [ 283.884857][T10078] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1126'. [ 283.926222][T10079] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1127'. [ 284.348693][T10102] syzkaller0: entered promiscuous mode [ 284.358822][T10102] syzkaller0: entered allmulticast mode [ 284.437716][T10102] tipc: Enabled bearer , priority 0 [ 284.452021][T10101] tipc: Resetting bearer [ 284.499087][T10101] tipc: Disabling bearer [ 285.220852][T10117] sctp: [Deprecated]: syz.2.1134 (pid 10117) Use of int in max_burst socket option. [ 285.220852][T10117] Use struct sctp_assoc_value instead [ 285.395621][T10110] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 287.263111][T10112] pim6reg: entered allmulticast mode [ 287.278186][T10115] pim6reg: left allmulticast mode [ 287.299186][T10120] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1135'. [ 287.423053][T10133] netlink: 'syz.3.1138': attribute type 27 has an invalid length. [ 287.625147][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1139'. [ 287.665498][T10144] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1140'. [ 287.807599][T10154] tipc: Enabled bearer , priority 0 [ 287.890455][T10151] tipc: Disabling bearer [ 288.365964][T10177] syzkaller0: entered promiscuous mode [ 288.371510][T10177] syzkaller0: entered allmulticast mode [ 288.568628][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1152'. [ 288.697974][T10191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1154'. [ 289.167244][T10213] syzkaller0: entered promiscuous mode [ 289.172775][T10213] syzkaller0: entered allmulticast mode [ 289.328063][T10223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'. [ 289.419929][T10227] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1164'. [ 289.617099][T10234] syzkaller0: entered promiscuous mode [ 289.622600][T10234] syzkaller0: entered allmulticast mode [ 289.788827][ T5818] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 290.001040][ T5818] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 290.018363][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.028608][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.037926][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.046941][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.060174][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.069183][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.077108][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.087691][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.096783][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.119671][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.130061][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.139091][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.148089][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.158296][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.167408][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.175626][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.185822][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.194834][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.203314][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.213857][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.222876][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.231092][ T5818] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 290.241359][ T5818] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 290.261383][ T5818] usb 2-1: config 0 interface 0 has no altsetting 0 [ 290.302468][ T5818] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 290.325845][ T5818] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 290.342113][ T5818] usb 2-1: Product: syz [ 290.346437][ T5818] usb 2-1: Manufacturer: syz [ 290.351065][ T5818] usb 2-1: SerialNumber: syz [ 290.367178][ T5818] usb 2-1: config 0 descriptor?? [ 290.375553][ T5818] yurex 2-1:0.0: Could not find endpoints [ 290.889210][ T5787] Bluetooth: hci0: command 0x080f tx timeout [ 291.799461][T10241] netlink: 128 bytes leftover after parsing attributes in process `syz.3.1169'. [ 291.832016][T10241] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 292.038998][T10249] warning: `syz.3.1173' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 292.051830][T10248] syzkaller0: entered promiscuous mode [ 292.059350][T10248] syzkaller0: entered allmulticast mode [ 292.224139][T10256] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1175'. [ 292.483843][T10263] syzkaller0: entered promiscuous mode [ 292.490059][T10263] syzkaller0: entered allmulticast mode [ 292.535298][ T5818] usb 2-1: USB disconnect, device number 9 [ 292.699692][T10271] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1181'. [ 294.329596][ T5787] Bluetooth: hci0: command 0x080f tx timeout [ 294.457629][T10272] tipc: Enabled bearer , priority 0 [ 294.495757][T10264] tipc: Disabling bearer [ 294.686677][T10291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1185'. [ 294.843512][T10299] syzkaller0: entered promiscuous mode [ 294.850342][T10299] syzkaller0: entered allmulticast mode [ 295.174271][T10311] syzkaller0: entered promiscuous mode [ 295.180815][T10311] syzkaller0: entered allmulticast mode [ 296.109817][T10320] loop4: detected capacity change from 0 to 32768 [ 296.144610][T10320] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1195 (10320) [ 296.173943][T10320] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 296.184584][T10320] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 296.193337][T10320] BTRFS info (device loop4): turning on flush-on-commit [ 296.201861][T10320] BTRFS info (device loop4): setting nodatacow, compression disabled [ 296.211150][T10320] BTRFS info (device loop4): allowing degraded mounts [ 296.218286][T10320] BTRFS info (device loop4): force zlib compression, level 3 [ 296.231008][T10320] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 296.252196][T10320] BTRFS info (device loop4): trying to use backup root at mount time [ 296.260770][T10320] BTRFS info (device loop4): using free space tree [ 296.402362][T10320] BTRFS info (device loop4): enabling ssd optimizations [ 296.414285][T10320] BTRFS info (device loop4): auto enabling async discard [ 296.480712][ T27] audit: type=1800 audit(1781931936.440:19): pid=10320 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1195" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 296.613100][ T27] audit: type=1800 audit(1781931936.580:20): pid=10343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1195" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 296.977570][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 297.150332][ T5922] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 297.941979][T10318] tipc: Enabled bearer , priority 0 [ 297.962086][T10314] tipc: Disabling bearer [ 297.981092][T10350] syzkaller0: entered promiscuous mode [ 297.987166][T10350] syzkaller0: entered allmulticast mode [ 298.196260][T10362] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1200'. [ 298.659664][T10380] syzkaller0: entered promiscuous mode [ 298.665389][T10380] syzkaller0: entered allmulticast mode [ 300.406212][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 300.749016][T10388] tipc: Enabling of bearer rejected, failed to enable media [ 300.872715][T10413] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1213'. [ 301.318517][T10432] syzkaller0: entered promiscuous mode [ 301.324169][T10432] syzkaller0: entered allmulticast mode [ 303.207433][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 303.288617][T10443] tipc: Enabling of bearer rejected, failed to enable media [ 303.493199][T10466] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1227'. [ 303.656902][T10473] syzkaller0: entered promiscuous mode [ 303.662549][T10473] syzkaller0: entered allmulticast mode [ 303.989449][ T5818] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 304.202846][ T5818] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 304.228364][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.238608][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.248262][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.261434][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.269416][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.279783][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.293791][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.313113][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.332653][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.343503][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.353646][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.366694][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.374828][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.389868][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.417027][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.430503][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.443861][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.454093][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.464243][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.477649][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.485766][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.495991][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.505958][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.519116][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.527185][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.537753][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.547476][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.560461][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.568408][ T5818] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.581906][ T5818] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 304.591283][ T5818] usb 3-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 304.607292][ T5818] usb 3-1: config 0 interface 0 has no altsetting 0 [ 304.616694][ T5818] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 304.629010][ T5818] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 304.637485][ T5818] usb 3-1: Product: syz [ 304.641687][ T5818] usb 3-1: Manufacturer: syz [ 304.646370][ T5818] usb 3-1: SerialNumber: syz [ 304.654971][ T5818] usb 3-1: config 0 descriptor?? [ 304.677302][ T5818] yurex 3-1:0.0: Could not find endpoints [ 306.061342][T10500] tipc: Enabled bearer , priority 0 [ 306.106018][T10497] tipc: Disabling bearer [ 306.127973][T10502] syzkaller0: entered promiscuous mode [ 306.133476][T10502] syzkaller0: entered allmulticast mode [ 306.141212][T10504] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1240'. [ 306.461201][T10516] syzkaller0: entered promiscuous mode [ 306.467129][T10516] syzkaller0: entered allmulticast mode [ 306.507400][T10514] syzkaller0: entered promiscuous mode [ 306.513008][T10514] syzkaller0: entered allmulticast mode [ 306.740680][ T5762] usb 3-1: USB disconnect, device number 6 [ 310.460859][T10532] tipc: Enabling of bearer rejected, failed to enable media [ 310.680897][T10559] syzkaller0: entered promiscuous mode [ 310.697679][T10559] syzkaller0: entered allmulticast mode [ 310.963944][T10571] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1259'. [ 310.964963][ T5762] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 311.179420][T10578] syzkaller0: entered promiscuous mode [ 311.194318][T10578] syzkaller0: entered allmulticast mode [ 311.206291][ T5762] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 311.235945][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.256798][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.274596][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.314406][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.322615][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.344281][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.353239][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.382047][T10569] loop1: detected capacity change from 0 to 32768 [ 311.388810][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.398156][T10569] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1258 (10569) [ 311.412374][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.423183][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.438211][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.453713][T10569] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 311.467898][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.474732][T10569] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 311.483526][T10569] BTRFS info (device loop1): turning on flush-on-commit [ 311.490968][T10569] BTRFS info (device loop1): setting nodatacow, compression disabled [ 311.499751][T10569] BTRFS info (device loop1): allowing degraded mounts [ 311.507203][T10569] BTRFS info (device loop1): force zlib compression, level 3 [ 311.514872][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.526406][T10569] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 311.537206][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.546159][T10569] BTRFS info (device loop1): trying to use backup root at mount time [ 311.554552][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.567581][T10569] BTRFS info (device loop1): using free space tree [ 311.574259][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.590013][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.603698][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.613778][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.630266][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.640408][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.664782][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.673909][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.695168][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.704008][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.715856][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.726840][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.740301][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.748955][ T5762] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 311.766892][ T5762] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 311.776265][ T5762] usb 5-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 311.789478][T10569] BTRFS info (device loop1): enabling ssd optimizations [ 311.796689][T10569] BTRFS info (device loop1): auto enabling async discard [ 311.806273][ T5762] usb 5-1: config 0 interface 0 has no altsetting 0 [ 311.854138][ T5762] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 311.854602][ T27] audit: type=1800 audit(1781931951.810:21): pid=10569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1258" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 311.892337][ T5762] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 311.915922][ T5762] usb 5-1: Product: syz [ 311.921003][ T5762] usb 5-1: Manufacturer: syz [ 311.931569][ T5762] usb 5-1: SerialNumber: syz [ 311.951910][ T5762] usb 5-1: config 0 descriptor?? [ 311.968706][ T5762] yurex 5-1:0.0: Could not find endpoints [ 312.271384][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 313.730564][ T5762] usb 5-1: USB disconnect, device number 3 [ 314.120642][T10615] tipc: Started in network mode [ 314.144619][T10615] tipc: Node identity 7e9128e41011, cluster identity 4711 [ 314.156648][T10615] tipc: Enabled bearer , priority 0 [ 314.185379][T10624] netlink: 'syz.2.1265': attribute type 3 has an invalid length. [ 314.240477][T10614] tipc: Disabling bearer [ 314.447936][T10635] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1269'. [ 314.619052][T10642] syzkaller0: entered promiscuous mode [ 314.627030][T10642] syzkaller0: entered allmulticast mode [ 314.867045][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 314.904980][T10652] syzkaller0: entered promiscuous mode [ 314.910616][T10652] syzkaller0: entered allmulticast mode [ 315.057046][ T9] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 315.073816][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.082880][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.092991][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.101143][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.110315][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.120176][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.129229][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.138343][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.148166][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.156331][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.167685][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.177844][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.189573][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.198869][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.208783][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.216990][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.226063][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.235884][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.243814][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.252905][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.262995][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.276097][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 315.285319][ T9] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 315.297880][ T9] usb 5-1: config 0 interface 0 has no altsetting 0 [ 315.307481][ T9] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 315.319699][ T9] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 315.328210][ T9] usb 5-1: Product: syz [ 315.332401][ T9] usb 5-1: Manufacturer: syz [ 315.337331][ T9] usb 5-1: SerialNumber: syz [ 315.353196][ T9] usb 5-1: config 0 descriptor?? [ 315.362650][ T9] yurex 5-1:0.0: Could not find endpoints [ 316.895043][T10667] sch_tbf: burst 0 is lower than device wg1 mtu (1420) ! [ 316.977802][T10670] tipc: Enabled bearer , priority 0 [ 317.037184][T10669] tipc: Disabling bearer [ 317.061287][T10674] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1281'. [ 317.288412][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.513666][T10695] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1288'. [ 317.665157][ T5821] usb 5-1: USB disconnect, device number 4 [ 317.871321][T10703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1292'. [ 317.931756][T10705] tipc: Enabled bearer , priority 0 [ 318.022104][T10692] loop2: detected capacity change from 0 to 32768 [ 318.032851][T10692] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.1287 (10692) [ 318.051637][T10692] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 318.053751][T10704] tipc: Disabling bearer [ 318.071279][T10692] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 318.090627][T10692] BTRFS info (device loop2): turning on flush-on-commit [ 318.110924][T10692] BTRFS info (device loop2): setting nodatacow, compression disabled [ 318.131225][T10692] BTRFS info (device loop2): allowing degraded mounts [ 318.174509][T10692] BTRFS info (device loop2): force zlib compression, level 3 [ 318.185507][T10692] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 318.235885][T10692] BTRFS info (device loop2): trying to use backup root at mount time [ 318.244028][T10692] BTRFS info (device loop2): using free space tree [ 318.335081][T10726] netlink: 'syz.1.1298': attribute type 29 has an invalid length. [ 318.343495][T10726] netlink: 'syz.1.1298': attribute type 29 has an invalid length. [ 318.354888][T10726] netlink: 'syz.1.1298': attribute type 29 has an invalid length. [ 318.363830][T10726] netlink: 'syz.1.1298': attribute type 29 has an invalid length. [ 318.397312][T10692] BTRFS info (device loop2): enabling ssd optimizations [ 318.430100][T10692] BTRFS info (device loop2): auto enabling async discard [ 318.555557][ T27] audit: type=1800 audit(1781931958.510:22): pid=10692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1287" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 318.885444][ T5821] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 319.091168][T10759] random: crng reseeded on system resumption [ 319.112697][ T5821] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 319.133372][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.151295][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.182063][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.195825][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.215965][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.262815][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.271720][ T5772] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 319.326517][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.392764][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.437673][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.481615][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.511649][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.578541][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.629358][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.675808][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.727725][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.760355][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.807724][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 319.857772][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 319.910655][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 319.977382][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 320.034301][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.102265][ T5821] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 320.141505][ T5821] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid wMaxPacketSize 0 [ 320.217985][ T5821] usb 2-1: config 0 interface 0 has no altsetting 0 [ 320.267601][ T5821] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 320.301476][ T5821] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 320.396577][ T5821] usb 2-1: Product: syz [ 320.416005][ T5821] usb 2-1: Manufacturer: syz [ 320.433426][ T5821] usb 2-1: SerialNumber: syz [ 320.475547][ T5821] usb 2-1: config 0 descriptor?? [ 320.508271][ T5821] yurex 2-1:0.0: Could not find endpoints [ 321.150916][T10785] syzkaller0: entered promiscuous mode [ 321.156977][T10785] syzkaller0: entered allmulticast mode [ 321.594645][T10792] loop4: detected capacity change from 0 to 32768 [ 321.613202][T10792] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1313 (10792) [ 321.645650][T10792] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 321.677930][T10792] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 321.703650][T10792] BTRFS info (device loop4): turning on flush-on-commit [ 321.719662][T10792] BTRFS info (device loop4): setting nodatacow, compression disabled [ 321.736643][T10792] BTRFS info (device loop4): allowing degraded mounts [ 321.754287][T10792] BTRFS info (device loop4): force zlib compression, level 3 [ 321.761749][T10792] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 321.809231][ T8] usb 2-1: USB disconnect, device number 10 [ 321.823008][T10792] BTRFS info (device loop4): trying to use backup root at mount time [ 321.850683][T10792] BTRFS info (device loop4): using free space tree [ 322.030805][T10792] BTRFS info (device loop4): enabling ssd optimizations [ 322.038355][T10792] BTRFS info (device loop4): auto enabling async discard [ 322.095876][ T27] audit: type=1800 audit(1781931962.060:23): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1313" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 322.198222][ T27] audit: type=1800 audit(1781931962.160:24): pid=10792 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1313" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 322.612920][ T5922] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 322.983025][T10839] random: crng reseeded on system resumption [ 325.331529][T10847] syzkaller0: entered promiscuous mode [ 325.349908][T10847] syzkaller0: entered allmulticast mode [ 325.913169][T10865] loop4: detected capacity change from 0 to 32768 [ 325.931243][T10865] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1326 (10865) [ 325.976641][T10865] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 325.987397][T10865] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 325.997607][T10865] BTRFS info (device loop4): turning on flush-on-commit [ 326.005351][T10865] BTRFS info (device loop4): setting nodatacow, compression disabled [ 326.013519][T10865] BTRFS info (device loop4): allowing degraded mounts [ 326.020746][T10865] BTRFS info (device loop4): force zlib compression, level 3 [ 326.031376][T10865] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 326.042846][T10865] BTRFS info (device loop4): trying to use backup root at mount time [ 326.054514][T10865] BTRFS info (device loop4): using free space tree [ 326.294692][T10865] BTRFS info (device loop4): enabling ssd optimizations [ 326.302858][T10865] BTRFS info (device loop4): auto enabling async discard [ 326.349806][ T27] audit: type=1800 audit(1781931966.310:25): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 326.451704][ T27] audit: type=1800 audit(1781931966.410:26): pid=10865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1326" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 326.915563][ T5922] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 328.705239][T10913] syzkaller0: entered promiscuous mode [ 328.720760][T10913] syzkaller0: entered allmulticast mode [ 331.109163][T10950] syzkaller0: entered promiscuous mode [ 331.115932][T10950] syzkaller0: entered allmulticast mode [ 331.177130][T10952] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1341'. [ 333.441389][T10980] syzkaller0: entered promiscuous mode [ 333.447706][T10980] syzkaller0: entered allmulticast mode [ 333.469749][T10990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1354'. [ 336.062011][T10987] syzkaller0: entered promiscuous mode [ 336.067582][T10987] syzkaller0: entered allmulticast mode [ 338.811948][T11047] tipc: Enabling of bearer rejected, failed to enable media [ 339.080822][T11052] syzkaller0: entered promiscuous mode [ 339.096759][T11052] syzkaller0: entered allmulticast mode [ 344.309421][T11105] tipc: Enabling of bearer rejected, failed to enable media [ 344.618199][T11136] syzkaller0: entered promiscuous mode [ 344.635260][T11136] syzkaller0: entered allmulticast mode [ 344.686099][T11141] syzkaller0: entered promiscuous mode [ 344.691636][T11141] syzkaller0: entered allmulticast mode [ 344.937178][T11158] netlink: 'syz.4.1388': attribute type 29 has an invalid length. [ 346.670995][T11158] netlink: 'syz.4.1388': attribute type 29 has an invalid length. [ 349.340796][T11173] tipc: Enabling of bearer rejected, failed to enable media [ 349.549538][T11215] syzkaller0: entered promiscuous mode [ 349.565454][T11215] syzkaller0: entered allmulticast mode [ 350.146793][T11217] syzkaller0: entered promiscuous mode [ 350.201090][T11217] syzkaller0: entered allmulticast mode [ 350.408707][T11224] pim6reg: entered allmulticast mode [ 350.414854][T11227] pim6reg: left allmulticast mode [ 350.573331][T11231] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1404'. [ 354.135433][T11304] sctp: [Deprecated]: syz.2.1418 (pid 11304) Use of int in max_burst socket option. [ 354.135433][T11304] Use struct sctp_assoc_value instead [ 356.210347][T11298] pim6reg: entered allmulticast mode [ 356.216339][T11302] pim6reg: left allmulticast mode [ 356.331896][T11313] syzkaller0: entered promiscuous mode [ 356.347472][T11313] syzkaller0: entered allmulticast mode [ 358.841046][T11362] syzkaller0: entered promiscuous mode [ 358.851403][T11362] syzkaller0: entered allmulticast mode [ 359.354281][T11370] syzkaller0: entered promiscuous mode [ 359.376525][T11370] syzkaller0: entered allmulticast mode [ 359.440122][T11372] pim6reg: entered allmulticast mode [ 359.476022][T11372] pim6reg: left allmulticast mode [ 359.528153][T11377] sctp: [Deprecated]: syz.4.1431 (pid 11377) Use of int in max_burst socket option. [ 359.528153][T11377] Use struct sctp_assoc_value instead [ 360.143559][T11393] syzkaller0: entered promiscuous mode [ 360.150324][T11393] syzkaller0: entered allmulticast mode [ 363.219434][T11428] pim6reg: entered allmulticast mode [ 363.287928][T11430] pim6reg: left allmulticast mode [ 363.376353][T11431] sctp: [Deprecated]: syz.2.1444 (pid 11431) Use of int in max_burst socket option. [ 363.376353][T11431] Use struct sctp_assoc_value instead [ 363.667064][T11428] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 363.883484][T11437] syzkaller0: entered promiscuous mode [ 363.906076][T11448] process 'syz.4.1450' launched './file2' with NULL argv: empty string added [ 363.916346][T11437] syzkaller0: entered allmulticast mode [ 364.220213][T11454] syzkaller0: entered promiscuous mode [ 364.240696][T11454] syzkaller0: entered allmulticast mode [ 368.776354][T11519] syzkaller0: entered promiscuous mode [ 368.801186][T11519] syzkaller0: entered allmulticast mode [ 370.847469][T11538] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1477'. [ 371.035333][T11547] fuse: blksize only supported for fuseblk [ 371.675300][ T5841] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 371.897301][ T5841] usb 5-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 371.908055][ T5841] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.937608][ T5841] usb 5-1: config 0 descriptor?? [ 371.951870][ T5841] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 372.775821][ T5841] gspca_sunplus: reg_w_riv err -71 [ 372.781206][ T5841] sunplus: probe of 5-1:0.0 failed with error -71 [ 372.790821][ T5841] usb 5-1: USB disconnect, device number 5 [ 373.865531][T11591] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 373.881937][T11586] syzkaller0: entered promiscuous mode [ 373.892292][T11586] syzkaller0: entered allmulticast mode [ 373.899313][T11593] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1490'. [ 374.294490][ T5762] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 374.522427][ T5762] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 374.555443][ T5762] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 374.595949][ T5762] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 374.605320][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.613351][ T5762] usb 4-1: Product: syz [ 374.617899][ T5762] usb 4-1: Manufacturer: syz [ 374.622593][ T5762] usb 4-1: SerialNumber: syz [ 374.868905][ T5762] usb 4-1: USB disconnect, device number 10 [ 376.814266][T11641] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1502'. [ 378.740318][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.698675][T11684] syzkaller0: entered promiscuous mode [ 379.704406][T11684] syzkaller0: entered allmulticast mode [ 379.904373][ T5841] usb 2-1: new low-speed USB device number 11 using dummy_hcd [ 380.105735][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 380.127931][ T5841] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.138014][ T5841] usb 2-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 380.151544][ T5841] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.174394][ T5841] usb 2-1: config 0 descriptor?? [ 380.695402][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.722149][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.731092][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.739733][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.748288][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.758951][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.767180][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: unknown main item tag 0x0 [ 380.887989][ T5841] aquacomputer_d5next 0003:0C70:F0B6.0002: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.1-1/input0 [ 381.079855][ T5841] usb 2-1: USB disconnect, device number 11 [ 382.319030][T11697] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1515'. [ 382.742397][T11691] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 382.957071][T11726] syzkaller0: entered promiscuous mode [ 382.972582][T11726] syzkaller0: entered allmulticast mode [ 383.239786][T11739] syzkaller0: entered promiscuous mode [ 383.245655][T11739] syzkaller0: entered allmulticast mode [ 385.045764][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 385.735800][T11772] syzkaller0: entered promiscuous mode [ 385.741292][T11772] syzkaller0: entered allmulticast mode [ 385.973154][T11782] syzkaller0: entered promiscuous mode [ 385.979075][T11782] syzkaller0: entered allmulticast mode [ 386.182048][T11790] syzkaller0: entered promiscuous mode [ 386.188621][T11790] syzkaller0: entered allmulticast mode [ 386.449710][T11753] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 388.605310][T11820] syzkaller0: entered promiscuous mode [ 388.610828][T11820] syzkaller0: entered allmulticast mode [ 388.778403][T11831] syzkaller0: entered promiscuous mode [ 388.811506][T11831] syzkaller0: entered allmulticast mode [ 388.927917][T11834] syzkaller0: entered promiscuous mode [ 388.933454][T11834] syzkaller0: entered allmulticast mode [ 389.012429][T11836] syzkaller0: entered promiscuous mode [ 389.018828][T11836] syzkaller0: entered allmulticast mode [ 389.175342][T11850] "syz.1.1564" (11850) uses obsolete ecb(arc4) skcipher [ 393.119906][T11846] netlink: 'syz.1.1564': attribute type 3 has an invalid length. [ 393.127846][T11846] netlink: 666 bytes leftover after parsing attributes in process `syz.1.1564'. [ 393.338391][T11870] syzkaller0: entered promiscuous mode [ 393.348618][T11872] loop8: detected capacity change from 0 to 7 [ 393.352656][T11870] syzkaller0: entered allmulticast mode [ 393.375169][T11868] syzkaller0: entered promiscuous mode [ 393.381144][T11868] syzkaller0: entered allmulticast mode [ 393.381647][T11872] Dev loop8: unable to read RDB block 7 [ 393.397566][T11872] loop8: unable to read partition table [ 393.404382][T11872] loop8: partition table beyond EOD, truncated [ 393.416146][T11872] loop_reread_partitions: partition scan of loop8 (þ被xü^>Ñà– ) failed (rc=-5) [ 393.604938][T11874] syzkaller0: entered promiscuous mode [ 393.626035][T11874] syzkaller0: entered allmulticast mode [ 396.068780][T11919] syzkaller0: entered promiscuous mode [ 396.076477][T11919] syzkaller0: entered allmulticast mode [ 396.319924][T11929] IPVS: length: 123 != 24 [ 396.564327][ T5818] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 396.630266][T11939] syzkaller0: entered promiscuous mode [ 396.638341][T11939] syzkaller0: entered allmulticast mode [ 396.782949][ T5818] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 396.800600][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.809513][ T5818] usb 4-1: Product: syz [ 396.813740][ T5818] usb 4-1: Manufacturer: syz [ 396.818848][ T5818] usb 4-1: SerialNumber: syz [ 397.264315][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 398.119315][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -71 [ 398.154833][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 398.166240][ T5818] lan78xx 4-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 398.188578][ T5818] lan78xx: probe of 4-1:1.0 failed with error -71 [ 398.201733][ T5818] usb 4-1: USB disconnect, device number 11 [ 399.317265][T11968] syzkaller0: entered promiscuous mode [ 399.322825][T11968] syzkaller0: entered allmulticast mode [ 399.848889][T12005] sg_write: data in/out 484352/136 bytes for SCSI command 0x0-- guessing data in; [ 399.848889][T12005] program syz.4.1607 not setting count and/or reply_len properly [ 401.847219][T12014] syzkaller0: entered promiscuous mode [ 401.856823][T12014] syzkaller0: entered allmulticast mode [ 401.882780][T12018] syzkaller0: entered promiscuous mode [ 401.891811][T12018] syzkaller0: entered allmulticast mode [ 403.237843][T12037] sg_write: data in/out 353280/136 bytes for SCSI command 0x0-- guessing data in; [ 403.237843][T12037] program syz.2.1616 not setting count and/or reply_len properly [ 404.342472][T12051] syzkaller0: entered promiscuous mode [ 404.365208][T12051] syzkaller0: entered allmulticast mode [ 404.390886][T12053] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1621'. [ 404.429239][T12055] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 404.436130][T12055] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 404.467715][T12055] vhci_hcd vhci_hcd.0: Device attached [ 404.735374][ T5762] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 404.777337][ T5818] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 404.824323][ T1200] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 404.977237][ T5818] usb 3-1: not running at top speed; connect to a high speed hub [ 404.996898][ T5818] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 182, changing to 4 [ 405.016040][ T1200] usb 4-1: Using ep0 maxpacket: 8 [ 405.025676][ T5818] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 405.035364][ T5818] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.043510][ T5818] usb 3-1: Product: syz [ 405.054317][ T1200] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 405.074280][ T5818] usb 3-1: Manufacturer: syz [ 405.078932][ T5818] usb 3-1: SerialNumber: syz [ 405.084249][ T1200] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 405.092315][ T1200] usb 4-1: Product: syz [ 405.103669][ T1200] usb 4-1: Manufacturer: syz [ 405.112041][T12072] loop1: detected capacity change from 0 to 32768 [ 405.118891][ T1200] usb 4-1: SerialNumber: syz [ 405.169969][T12072] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1628 (12072) [ 405.218214][T12072] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 405.255846][T12072] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 405.272562][T12072] BTRFS info (device loop1): turning on flush-on-commit [ 405.290003][T12072] BTRFS info (device loop1): setting nodatacow, compression disabled [ 405.310170][T12072] BTRFS info (device loop1): allowing degraded mounts [ 405.320312][T12072] BTRFS info (device loop1): force zlib compression, level 3 [ 405.332502][T12072] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 405.350586][T12072] BTRFS info (device loop1): trying to use backup root at mount time [ 405.362553][T12056] vhci_hcd: connection closed [ 405.373021][ T41] vhci_hcd: stop threads [ 405.382626][ T5818] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 405.398248][T12072] BTRFS info (device loop1): using free space tree [ 405.403866][ T41] vhci_hcd: release socket [ 405.411782][ T5818] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 405.421213][ T41] vhci_hcd: disconnect device [ 405.465188][ T5762] usb 37-1: device descriptor read/64, error -71 [ 405.510466][T12072] BTRFS info (device loop1): enabling ssd optimizations [ 405.539907][T12072] BTRFS info (device loop1): auto enabling async discard [ 405.539997][ T5818] usb 3-1: USB disconnect, device number 7 [ 405.605019][T12092] syzkaller0: entered promiscuous mode [ 405.610580][T12092] syzkaller0: entered allmulticast mode [ 405.631978][ T27] audit: type=1800 audit(1781932045.590:27): pid=12072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 405.717723][ T5762] vhci_hcd: vhci_device speed not set [ 405.727824][ T27] audit: type=1800 audit(1781932045.690:28): pid=12102 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1628" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 405.970194][ T1200] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 405.989200][ T1200] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 406.015633][ T1200] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 406.044290][ T1200] usb 4-1: clock source 0 is not valid, cannot use [ 406.059164][ T1200] usb 4-1: 2:1: cannot get freq (v2/v3): err -71 [ 406.068796][ T1200] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 406.212858][ T1200] usb 4-1: USB disconnect, device number 12 [ 406.352341][T12114] udevd[12114]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 406.548362][T12122] syzkaller0: entered promiscuous mode [ 406.563551][T12122] syzkaller0: entered allmulticast mode [ 406.567580][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 406.851710][T12131] syzkaller0: entered promiscuous mode [ 406.874317][T12131] syzkaller0: entered allmulticast mode [ 407.184305][ T5821] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 407.375685][T12152] syzkaller0: entered promiscuous mode [ 407.382877][T12152] syzkaller0: entered allmulticast mode [ 407.387228][ T5821] usb 3-1: too many configurations: 9, using maximum allowed: 8 [ 407.406919][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.424665][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.454248][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.482217][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.491852][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.503087][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.511095][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.521227][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.558306][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.588994][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.601268][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.612977][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.628096][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.645554][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.666642][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.684837][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.700741][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.711896][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.718491][T12160] syzkaller0: entered promiscuous mode [ 407.720733][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.725121][T12160] syzkaller0: entered allmulticast mode [ 407.734688][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.752326][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.760422][ T5821] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 407.770464][ T5821] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 407.782290][ T5821] usb 3-1: config 0 interface 0 has no altsetting 0 [ 407.793138][ T5821] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 407.802415][ T5821] usb 3-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 407.810893][ T5821] usb 3-1: Product: syz [ 407.815359][ T5821] usb 3-1: Manufacturer: syz [ 407.819976][ T5821] usb 3-1: SerialNumber: syz [ 407.827572][ T5821] usb 3-1: config 0 descriptor?? [ 407.837940][ T5821] yurex 3-1:0.0: USB YUREX device now attached to Yurex #0 [ 407.954260][ T1200] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 408.012367][T12164] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1658'. [ 408.023013][T12164] gretap0: entered promiscuous mode [ 408.112780][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 408.173449][ T1200] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 408.195083][ T1200] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 408.204037][ T1200] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 408.215813][ T1200] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 408.225267][ T1200] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.238481][T12162] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 408.250114][ T1200] hub 5-1:1.0: bad descriptor, ignoring hub [ 408.273392][ T1200] hub: probe of 5-1:1.0 failed with error -5 [ 408.282694][ T1200] cdc_wdm 5-1:1.0: skipping garbage [ 408.288447][ T1200] cdc_wdm 5-1:1.0: skipping garbage [ 408.293697][ T1200] cdc_wdm 5-1:1.0: skipping garbage [ 408.324037][ T1200] cdc_wdm 5-1:1.0: cdc-wdm1: USB WDM device [ 408.333608][ T1200] cdc_wdm 5-1:1.0: Unknown control protocol [ 408.479887][T12175] syzkaller0: entered promiscuous mode [ 408.492653][T12175] syzkaller0: entered allmulticast mode [ 408.524393][ T5818] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 408.574834][ T1200] usb 5-1: USB disconnect, device number 6 [ 408.706583][ T5818] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0xCE, skipping [ 408.720127][ T5818] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 408.732440][ T5818] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.740536][ T5818] usb 4-1: Product: syz [ 408.747588][ T5818] usb 4-1: Manufacturer: syz [ 408.752246][ T5818] usb 4-1: SerialNumber: syz [ 408.990451][ T5818] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 408.997725][ T5818] usb 4-1: MIDIStreaming interface descriptor not found [ 409.062314][ T5818] usb 4-1: USB disconnect, device number 13 [ 409.135516][T12181] tmpfs: Bad value for 'gid' [ 409.234015][T12183] syzkaller0: entered promiscuous mode [ 409.244924][T12183] syzkaller0: entered allmulticast mode [ 409.286787][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 409.959961][ T1200] usb 3-1: USB disconnect, device number 8 [ 409.977522][ T1200] yurex 3-1:0.0: USB YUREX #0 now disconnected [ 409.997012][T12204] syzkaller0: entered promiscuous mode [ 410.011513][T12204] syzkaller0: entered allmulticast mode [ 410.696332][T12233] syzkaller0: entered promiscuous mode [ 410.702179][T12233] syzkaller0: entered allmulticast mode [ 410.744564][ T1200] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 410.956755][ T1200] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 410.981505][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.007486][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.023829][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.032509][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.041875][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.053220][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.061880][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.071379][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.082972][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.091602][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.131373][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.164272][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.188352][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.202155][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.233088][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.245213][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.255368][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.274295][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.281795][T12249] random: crng reseeded on system resumption [ 411.290274][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.329582][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.341052][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.349596][ T1200] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 411.553770][ T1200] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 411.566901][ T1200] usb 4-1: config 0 interface 0 has no altsetting 0 [ 411.576870][ T1200] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 411.586072][ T1200] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 411.595108][ T1200] usb 4-1: Product: syz [ 411.599405][ T1200] usb 4-1: Manufacturer: syz [ 411.612232][ T1200] usb 4-1: SerialNumber: syz [ 411.796063][ T1200] usb 4-1: config 0 descriptor?? [ 412.295940][ T1200] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 413.106006][T12267] syzkaller0: entered promiscuous mode [ 413.121990][T12267] syzkaller0: entered allmulticast mode [ 413.204373][ T5787] Bluetooth: hci0: command 0x080f tx timeout [ 413.472290][ T5821] usb 4-1: USB disconnect, device number 14 [ 413.481339][ T5821] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 413.744775][T12275] syzkaller0: entered promiscuous mode [ 413.750578][T12275] syzkaller0: entered allmulticast mode [ 415.777280][ T5787] Bluetooth: hci0: command 0x080f tx timeout [ 416.259523][T12295] syzkaller0: entered promiscuous mode [ 416.265236][T12295] syzkaller0: entered allmulticast mode [ 416.368685][T12322] sch_fq: defrate 1025 ignored. [ 416.430946][T12324] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1710'. [ 416.554426][T12327] binder: 12326:12327 ioctl c0306201 0 returned -14 [ 416.580866][T12328] usb usb9: usbfs: interface 0 claimed by hub while 'syz.2.1711' sets config #0 [ 416.583203][T12327] binder: 12326:12327 ioctl 4018620d 0 returned -22 [ 416.869373][T12341] syzkaller0: entered promiscuous mode [ 416.874959][T12341] syzkaller0: entered allmulticast mode [ 417.622797][ T5786] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 417.633297][ T5786] Bluetooth: hci3: Injecting HCI hardware error event [ 417.646478][ T5787] Bluetooth: hci3: hardware error 0x00 [ 418.734444][ T5786] Bluetooth: hci0: command 0x080f tx timeout [ 419.327815][T12350] syzkaller0: entered promiscuous mode [ 419.333332][T12350] syzkaller0: entered allmulticast mode [ 419.438032][T12367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1722'. [ 419.684733][ T5787] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 419.894556][T12385] syzkaller0: entered promiscuous mode [ 419.900075][T12385] syzkaller0: entered allmulticast mode [ 419.912591][T12387] syzkaller0: entered promiscuous mode [ 419.918295][T12387] syzkaller0: entered allmulticast mode [ 421.136862][ T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 421.325015][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 421.333918][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.348374][ T9] usb 2-1: config 0 has no interfaces? [ 421.356009][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 421.366569][ T9] usb 2-1: config 0 has no interfaces? [ 421.374720][ T9] usb 2-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=aa.6a [ 421.394264][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.405515][ T9] usb 2-1: Product: syz [ 421.409749][ T9] usb 2-1: Manufacturer: syz [ 421.415737][ T9] usb 2-1: SerialNumber: syz [ 421.429541][ T9] usb 2-1: config 0 descriptor?? [ 421.604688][ T5787] Bluetooth: hci0: command 0x080f tx timeout [ 421.660623][ T1200] usb 2-1: USB disconnect, device number 12 [ 422.356728][T12423] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1738'. [ 423.334682][T12431] loop1: detected capacity change from 0 to 32768 [ 423.360188][T12431] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1742 (12431) [ 423.392481][T12431] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 423.410176][T12452] syzkaller0: entered promiscuous mode [ 423.416040][T12431] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 423.425313][T12431] BTRFS info (device loop1): turning on flush-on-commit [ 423.434793][T12452] syzkaller0: entered allmulticast mode [ 423.442039][T12431] BTRFS info (device loop1): setting nodatacow, compression disabled [ 423.463077][T12431] BTRFS info (device loop1): allowing degraded mounts [ 423.470860][T12457] syzkaller0: entered promiscuous mode [ 423.478467][T12457] syzkaller0: entered allmulticast mode [ 423.486524][T12431] BTRFS info (device loop1): force zlib compression, level 3 [ 423.505868][T12431] BTRFS warning (device loop1): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 423.524524][T12431] BTRFS info (device loop1): trying to use backup root at mount time [ 423.550875][T12431] BTRFS info (device loop1): using free space tree [ 423.713845][T12431] BTRFS info (device loop1): enabling ssd optimizations [ 423.728896][T12431] BTRFS info (device loop1): auto enabling async discard [ 423.786855][ T27] audit: type=1800 audit(1781932063.740:29): pid=12431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1742" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 423.903456][ T27] audit: type=1800 audit(1781932063.860:30): pid=12431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1742" name="file1" dev="loop1" ino=260 res=0 errno=0 [ 424.357711][ T5774] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 425.084765][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1756'. [ 426.449080][T12474] tipc: Enabled bearer , priority 0 [ 428.917766][T12456] tipc: Resetting bearer [ 428.941693][T12456] tipc: Disabling bearer [ 428.964833][ T9] tipc: Node number set to 1899298106 [ 429.317318][T12520] syzkaller0: entered promiscuous mode [ 429.323918][T12520] syzkaller0: entered allmulticast mode [ 429.457187][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 429.668146][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 429.688379][ T23] usb 3-1: config 127 has an invalid interface number: 124 but max is 0 [ 429.698284][ T23] usb 3-1: config 127 has no interface number 0 [ 429.717836][ T23] usb 3-1: config 127 interface 124 has no altsetting 0 [ 429.748056][ T23] usb 3-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 429.757429][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.765925][ T23] usb 3-1: Product: syz [ 429.770133][ T23] usb 3-1: Manufacturer: syz [ 429.779393][ T23] usb 3-1: SerialNumber: syz [ 430.769628][ T23] usb 3-1: reset high-speed USB device number 9 using dummy_hcd [ 431.058648][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 431.101259][ T23] usb 3-1: device firmware changed [ 431.139836][ T23] usb 3-1: USB disconnect, device number 9 [ 431.678473][T12553] netlink: 'syz.2.1773': attribute type 16 has an invalid length. [ 431.686744][T12553] netlink: 64130 bytes leftover after parsing attributes in process `syz.2.1773'. [ 431.725754][T12534] syzkaller0: entered promiscuous mode [ 431.731284][T12534] syzkaller0: entered allmulticast mode [ 431.916414][T12556] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1774'. [ 434.175899][T12567] tipc: Enabling of bearer rejected, failed to enable media [ 434.774488][T12582] syzkaller0: entered promiscuous mode [ 434.798054][T12582] syzkaller0: entered allmulticast mode [ 434.874128][T12590] syzkaller0: entered promiscuous mode [ 434.880968][T12590] syzkaller0: entered allmulticast mode [ 437.725784][T12638] syzkaller0: entered promiscuous mode [ 437.731436][T12638] syzkaller0: entered allmulticast mode [ 437.939402][T12645] syzkaller0: entered promiscuous mode [ 437.945095][T12645] syzkaller0: entered allmulticast mode [ 438.097618][T12649] capability: warning: `syz.4.1793' uses 32-bit capabilities (legacy support in use) [ 438.109076][T12649] program syz.4.1793 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 438.158334][T12598] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 438.572396][T12668] syzkaller0: entered promiscuous mode [ 438.594446][T12668] syzkaller0: entered allmulticast mode [ 438.994279][ T1200] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 439.199199][ T1200] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 439.212169][ T1200] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.221102][ T1200] usb 3-1: Product: syz [ 439.225802][ T1200] usb 3-1: Manufacturer: syz [ 439.230554][ T1200] usb 3-1: SerialNumber: syz [ 439.260594][ T1200] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 439.337875][ T5762] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 439.755212][ T9] usb 3-1: USB disconnect, device number 10 [ 440.094802][ T5787] Bluetooth: hci0: unexpected event for opcode 0x1004 [ 440.177525][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.287739][T12705] syzkaller0: entered promiscuous mode [ 440.293532][T12705] syzkaller0: entered allmulticast mode [ 440.409264][ T5762] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 440.438625][ T5762] ath9k_htc: Failed to initialize the device [ 440.460809][ T9] usb 3-1: ath9k_htc: USB layer deinitialized [ 440.767743][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 440.794208][T12718] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1822'. [ 441.144402][ T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 441.325936][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 441.337048][ T9] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 441.346167][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 441.356640][ T9] usb 5-1: config 0 descriptor?? [ 441.572252][ T9] usbhid 5-1:0.0: can't add hid device: -71 [ 441.578528][ T9] usbhid: probe of 5-1:0.0 failed with error -71 [ 441.587399][ T9] usb 5-1: USB disconnect, device number 7 [ 441.747897][T12678] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 442.041594][T12726] syzkaller0: entered promiscuous mode [ 442.063036][T12726] syzkaller0: entered allmulticast mode [ 442.070507][ T2969] nci: nci_rsp_packet: unknown rsp opcode 0x6 [ 442.194275][ T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 442.397168][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.413177][ T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 442.423599][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.443878][ T9] usb 5-1: config 0 descriptor?? [ 443.084596][T12720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 443.102231][T12720] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 443.323088][ T9] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 443.372456][ T9] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 443.432969][ C0] ================================================================================ [ 443.442338][ C0] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 443.451096][ C0] index 1407 is out of range for type 'const int[34]' [ 443.457884][ C0] CPU: 0 PID: 5128 Comm: acpid Not tainted syzkaller #0 [ 443.464817][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.474920][ C0] Call Trace: [ 443.478198][ C0] [ 443.481189][ C0] dump_stack_lvl+0x18c/0x250 [ 443.486013][ C0] ? show_regs_print_info+0x20/0x20 [ 443.491318][ C0] ? load_image+0x420/0x420 [ 443.495859][ C0] ubsan_epilogue+0xa/0x30 [ 443.500307][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 443.506131][ C0] aiptek_irq+0x1eb8/0x2920 [ 443.510729][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 443.515844][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 443.521601][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 443.526977][ C0] dummy_timer+0xa40/0x3420 [ 443.531587][ C0] ? dummy_free_streams+0x520/0x520 [ 443.536783][ C0] ? dummy_free_streams+0x520/0x520 [ 443.542000][ C0] __hrtimer_run_queues+0x525/0xc10 [ 443.547317][ C0] ? hrtimer_interrupt+0x980/0x980 [ 443.552444][ C0] ? read_tsc+0x9/0x20 [ 443.556607][ C0] hrtimer_run_softirq+0x177/0x290 [ 443.561773][ C0] handle_softirqs+0x27d/0x820 [ 443.566585][ C0] ? read_tsc+0x9/0x20 [ 443.570647][ C0] ? ktime_get+0x24b/0x280 [ 443.575057][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 443.579822][ C0] ? do_softirq+0x1a0/0x1a0 [ 443.584321][ C0] __irq_exit_rcu+0xd3/0x190 [ 443.588902][ C0] ? irq_exit_rcu+0x20/0x20 [ 443.593398][ C0] irq_exit_rcu+0x9/0x20 [ 443.597641][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 443.603275][ C0] [ 443.606287][ C0] [ 443.609298][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 443.615389][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 443.620683][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 443.640347][ C0] RSP: 0018:ffffc90003047980 EFLAGS: 00000206 [ 443.646489][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 9314c38697734700 [ 443.654897][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1c7be0 [ 443.662866][ C0] RBP: ffffc90003047a90 R08: dffffc0000000000 R09: 1ffffffff22378a0 [ 443.670835][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: 1ffff92000608f3c [ 443.678821][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 443.686816][ C0] ? read_lock_is_recursive+0x20/0x20 [ 443.692197][ C0] prepend_path+0x6b/0x950 [ 443.696708][ C0] ? prepend_path+0x4a/0x950 [ 443.701293][ C0] ? prepend_path+0x4a/0x950 [ 443.705908][ C0] d_absolute_path+0xa2/0x140 [ 443.710620][ C0] tomoyo_realpath_from_path+0x2c4/0x5c0 [ 443.716358][ C0] ? tomoyo_domain+0xd6/0x120 [ 443.721036][ C0] tomoyo_path_number_perm+0x248/0x5e0 [ 443.726492][ C0] ? tomoyo_path_number_perm+0x217/0x5e0 [ 443.732137][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 443.737596][ C0] ? lock_chain_count+0x20/0x20 [ 443.742461][ C0] ? __bpf_trace_rseq_ip_fixup+0x240/0x240 [ 443.748371][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 443.754361][ C0] security_file_ioctl+0x70/0xa0 [ 443.759385][ C0] __se_sys_ioctl+0x48/0x170 [ 443.764039][ C0] do_syscall_64+0x55/0xb0 [ 443.768457][ C0] ? clear_bhb_loop+0x40/0x90 [ 443.773127][ C0] ? clear_bhb_loop+0x40/0x90 [ 443.777803][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 443.783699][ C0] RIP: 0033:0x7f1f9f1d5378 [ 443.788123][ C0] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 443.807756][ C0] RSP: 002b:00007ffdecb123c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 443.816182][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f1f9f1d5378 [ 443.824174][ C0] RDX: 00007ffdecb123d0 RSI: 0000000080604520 RDI: 000000000000000a [ 443.832160][ C0] RBP: 00007ffdecb123d0 R08: 0000000000000000 R09: 0000000000000000 [ 443.840136][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 443.848121][ C0] R13: 0000000000000000 R14: 0000560e077112a0 R15: 00007ffdecb13240 [ 443.856139][ C0] [ 443.859164][ C0] ================================================================================ [ 443.868645][ C0] Kernel panic - not syncing: UBSAN: panic_on_warn set ... [ 443.875919][ C0] CPU: 0 PID: 5128 Comm: acpid Not tainted syzkaller #0 [ 443.882850][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 443.892893][ C0] Call Trace: [ 443.896165][ C0] [ 443.899000][ C0] dump_stack_lvl+0x18c/0x250 [ 443.903690][ C0] ? show_regs_print_info+0x20/0x20 [ 443.908902][ C0] ? load_image+0x420/0x420 [ 443.913411][ C0] panic+0x2ca/0x720 [ 443.917378][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 443.921884][ C0] check_panic_on_warn+0x84/0xa0 [ 443.927005][ C0] __ubsan_handle_out_of_bounds+0xe3/0xf0 [ 443.932735][ C0] aiptek_irq+0x1eb8/0x2920 [ 443.937259][ C0] ? kcov_remote_start+0x8a/0x7e0 [ 443.942278][ C0] ? usb_anchor_suspend_wakeups+0x36/0x40 [ 443.948003][ C0] __usb_hcd_giveback_urb+0x35d/0x520 [ 443.953375][ C0] dummy_timer+0xa40/0x3420 [ 443.957893][ C0] ? dummy_free_streams+0x520/0x520 [ 443.963082][ C0] ? dummy_free_streams+0x520/0x520 [ 443.968274][ C0] __hrtimer_run_queues+0x525/0xc10 [ 443.973486][ C0] ? hrtimer_interrupt+0x980/0x980 [ 443.978590][ C0] ? read_tsc+0x9/0x20 [ 443.982678][ C0] hrtimer_run_softirq+0x177/0x290 [ 443.987784][ C0] handle_softirqs+0x27d/0x820 [ 443.992544][ C0] ? read_tsc+0x9/0x20 [ 443.996605][ C0] ? ktime_get+0x24b/0x280 [ 444.001015][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 444.005796][ C0] ? do_softirq+0x1a0/0x1a0 [ 444.010295][ C0] __irq_exit_rcu+0xd3/0x190 [ 444.014875][ C0] ? irq_exit_rcu+0x20/0x20 [ 444.019370][ C0] irq_exit_rcu+0x9/0x20 [ 444.023599][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 444.029232][ C0] [ 444.032152][ C0] [ 444.035087][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 444.041116][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 444.046428][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 444.066056][ C0] RSP: 0018:ffffc90003047980 EFLAGS: 00000206 [ 444.072136][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 9314c38697734700 [ 444.080122][ C0] RDX: 0000000000000000 RSI: ffffffff8acadce0 RDI: ffffffff8b1c7be0 [ 444.088088][ C0] RBP: ffffc90003047a90 R08: dffffc0000000000 R09: 1ffffffff22378a0 [ 444.096053][ C0] R10: dffffc0000000000 R11: fffffbfff22378a1 R12: 1ffff92000608f3c [ 444.104046][ C0] R13: ffffffff8d131da0 R14: 0000000000000246 R15: dffffc0000000000 [ 444.112026][ C0] ? read_lock_is_recursive+0x20/0x20 [ 444.117401][ C0] prepend_path+0x6b/0x950 [ 444.121807][ C0] ? prepend_path+0x4a/0x950 [ 444.126385][ C0] ? prepend_path+0x4a/0x950 [ 444.130970][ C0] d_absolute_path+0xa2/0x140 [ 444.135644][ C0] tomoyo_realpath_from_path+0x2c4/0x5c0 [ 444.141275][ C0] ? tomoyo_domain+0xd6/0x120 [ 444.145981][ C0] tomoyo_path_number_perm+0x248/0x5e0 [ 444.151459][ C0] ? tomoyo_path_number_perm+0x217/0x5e0 [ 444.157085][ C0] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 444.162535][ C0] ? lock_chain_count+0x20/0x20 [ 444.167394][ C0] ? __bpf_trace_rseq_ip_fixup+0x240/0x240 [ 444.173215][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 444.179278][ C0] security_file_ioctl+0x70/0xa0 [ 444.184221][ C0] __se_sys_ioctl+0x48/0x170 [ 444.188808][ C0] do_syscall_64+0x55/0xb0 [ 444.193211][ C0] ? clear_bhb_loop+0x40/0x90 [ 444.197873][ C0] ? clear_bhb_loop+0x40/0x90 [ 444.202564][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 444.208463][ C0] RIP: 0033:0x7f1f9f1d5378 [ 444.212883][ C0] Code: 00 00 48 8d 44 24 08 48 89 54 24 e0 48 89 44 24 c0 48 8d 44 24 d0 48 89 44 24 c8 b8 10 00 00 00 c7 44 24 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 07 89 d0 c3 0f 1f 40 00 48 8b 15 49 3a 0d [ 444.232487][ C0] RSP: 002b:00007ffdecb123c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 444.240896][ C0] RAX: ffffffffffffffda RBX: 000000000000000a RCX: 00007f1f9f1d5378 [ 444.248866][ C0] RDX: 00007ffdecb123d0 RSI: 0000000080604520 RDI: 000000000000000a [ 444.256837][ C0] RBP: 00007ffdecb123d0 R08: 0000000000000000 R09: 0000000000000000 [ 444.264828][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000040 [ 444.272826][ C0] R13: 0000000000000000 R14: 0000560e077112a0 R15: 00007ffdecb13240 [ 444.280811][ C0] [ 444.284104][ C0] Kernel Offset: disabled [ 444.288422][ C0] Rebooting in 86400 seconds..