last executing test programs: 10.856146802s ago: executing program 0 (id=2613): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r1, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r2, @ANYBLOB="a800028038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004"], 0xc4}, 0x1, 0x0, 0x0, 0x44090}, 0x2404c080) 10.685454487s ago: executing program 0 (id=2614): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_io_uring_setup(0x205e, &(0x7f0000000200)={0x0, 0xd6af, 0x10, 0x0, 0x2e4}, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, &(0x7f0000000000)) 7.722412282s ago: executing program 0 (id=2621): r0 = epoll_create(0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0xe, 0x0, 0x0, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x1e1b, &(0x7f0000000200)={0x0, 0xdda4, 0x10100}, &(0x7f00000002c0)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000000)) syz_io_uring_submit(r1, r2, 0x0, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x6, 0x4000000007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000300)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@compress_force}, {@compress_force}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) write$binfmt_aout(r3, &(0x7f0000000180)=ANY=[], 0x29f) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f00000000c0)={{r3}, 0x0, 0x0, 0x100000}) 6.366260566s ago: executing program 1 (id=2625): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x2, 0x3ff) sendmsg$inet(r1, &(0x7f00000000c0)={&(0x7f0000000040)={0x2, 0xfffd, @loopback}, 0x10, &(0x7f000000c540), 0x0, &(0x7f000000b440)=ANY=[@ANYBLOB="1c000000000000000000000002"], 0x20}, 0x20000890) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000104000702000000000200000000", @ANYRES32=0x0, @ANYBLOB="0382000000000000140012800c0001006d616376746170000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) 6.188811872s ago: executing program 3 (id=2626): r0 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c", 0x3}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 6.097258154s ago: executing program 0 (id=2627): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x3, 0x4f}, 0x0, &(0x7f0000004200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_ethernet(0x64, &(0x7f0000005280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa001c66cc83cb9ef8dfb4a14a9f6b7f9a4133ea7224803a3c9b1939624a375e0fee1d012b94fa72323a35b78c31304b425652f7c7516a5c0ed3d44056f6833ffd7b44b9f59386975ba5cc2c30f818c7ec09d14d227687f51a341b7bcd1705c23d24f2b31657ec512d95e5022d667bacf2d7922f7dd6fd5dcbe8cd8ae596e08d75ac52af808ff54c2afd2ef6e90aedc502c85a6c1ab8a613c324f89e8566832ec43b5f28de59c01c745bb4639e2085d8b9751c77256c3d22d8131958e0adbf12b5f71a5b7bd409aca5449ad86ac4a41f4680d0673b70f0ca77566636b0a5e6244b3f38ea"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000002140)={0x20, 0x0, r8, {0x403, 0x4, 0x8, 0xfff}}, 0x20) chown(0x0, r5, r9) inotify_init() unshare(0x2a020400) openat$rtc(0xffffffffffffff9c, &(0x7f00000053c0), 0x280, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000008380)=@ethtool_regs={0x4, 0x95e, 0x1075, "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"}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r10 = syz_io_uring_setup(0xa9f, &(0x7f00000001c0)={0x0, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, &(0x7f0000000280), 0x26) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f0000000280)={r0, &(0x7f0000000040)='\x00', 0x32f182, &(0x7f0000000140)={@align=0x8, {0x9, 0x1, 0x4, 0xffffffffffffff5e}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x5}) 6.009894407s ago: executing program 1 (id=2628): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000300)={0x2, 0x4e24, @multicast2}, 0x10) 5.824187324s ago: executing program 3 (id=2630): socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) syz_usb_connect$uac1(0x2, 0x97, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0xb05, 0x1743, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x85, 0x3, 0x1, 0x9, 0x40, 0x3f, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xd2, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@as_header={0x7, 0x24, 0x1, 0x8, 0x8, 0x5}, @format_type_ii_discrete={0xf, 0x24, 0x2, 0x2, 0x200, 0xfff, 0x0, "f441a4440fb2"}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0x78, 0x8, 0xba, {0x7, 0x25, 0x1, 0x8, 0x4, 0x3}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0xfc, 0x3, 0x8, 0x1}, @as_header={0x7, 0x24, 0x1, 0x8, 0x5, 0x1002}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x3, 0x2, 0x1, {0x7, 0x25, 0x1, 0x0, 0xe, 0x3}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r0, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) syz_io_uring_setup(0x205e, &(0x7f0000000200)={0x0, 0xd6af, 0x10, 0x0, 0x2e4}, &(0x7f0000000280), &(0x7f00000002c0)=0x0, &(0x7f0000000000)) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1) ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f00000005c0)=0xfffffffd) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r1, 0x0, &(0x7f0000000000)) 5.793718884s ago: executing program 1 (id=2631): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) 5.635743079s ago: executing program 2 (id=2632): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@uuid_off}]}) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000180)='./file0/file1\x00', &(0x7f0000000500)=ANY=[], 0x0, 0x1200) 5.376126637s ago: executing program 2 (id=2633): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x6, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 4.201767635s ago: executing program 2 (id=2634): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f00000001c0)='W', 0x1}], 0x2, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80100000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff020d40f799000000000000000000011400040020010000000000000000000000000001080007400000000010000d800c000380060002004e210000080007400000000da800068004000380080002006401010124000380060001004e230000060001004e230000060001004e210000060002004e24000008000200e000000234000380060002004e230000060002004e240000060001004e200000060002004e200000060002004e230000060001004e200000140004000000000000000000000000000000000008000200ac1414aa140005000000000000000000000000000000000008000100e000000284000e801400018008000100ac141409080002000a0101010600034000000000060003400001000006000340000300000c000280050001009f0000000c00028005000100000000002c000180140003"], 0x1e8}, 0x1, 0x0, 0x0, 0x40040814}, 0x0) syz_emit_ethernet(0x6e, 0x0, 0x0) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x6) ftruncate(r2, 0x2000000) syz_open_procfs(0x0, &(0x7f00000004c0)='net/rt_acct\x00') socket(0x28, 0x800, 0xfffeffff) syz_io_uring_setup(0x1630, &(0x7f0000000500)={0x0, 0x6040, 0x10100, 0x0, 0x83}, &(0x7f00000000c0), &(0x7f0000000400), &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) 4.021360701s ago: executing program 1 (id=2635): sendmsg$inet(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x2, 0x4e20, @broadcast}, 0x10, 0x0}, 0x20040000) r0 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDCTL_SEQ_TESTMIDI(0xffffffffffffffff, 0x40045108, &(0x7f0000000200)) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) ioctl$SNDCTL_SEQ_RESET(r2, 0x5100) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0x187080, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r3, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r3, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r3, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r3, 0x5501) 3.559655816s ago: executing program 1 (id=2636): syz_open_dev$vim2m(0x0, 0x6, 0x2) socket(0x10, 0x3, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) creat(&(0x7f0000000e00)='./file0\x00', 0xc) 3.218491407s ago: executing program 2 (id=2637): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x804810, &(0x7f0000000040)={[{}, {@noblock_validity}, {@jqfmt_vfsold}]}, 0x26, 0x759, &(0x7f0000000d40)="$eJzs3M1rHPUbAPBnptmmL/n9NoLgy0GEFloo3STNpT01XrwVCgWvNSSTEDLJhuymdmPB1rNQm4uCIOrZo1eh1D/AmxQUvAuiNR7Ey8psNimJ2e22SbqSfj4w2ec7b8/zZIdvdiCzAbyw3ix+JBFDEXE1Isrt9WlEHG1FxyJub+y3/ujWVLEk0Wxe+y0pDov1ZnnrXEn79WS0DolXI+JBKeLch//OW2uszk/mebbcHo/UF5ZGao3V83MLk7PZbLY4Nn5p9OL4+MXR8Sf28EqPvZ5+59Lxe9+/vbb2wzf1u28MnE9iotV3tHvr8TRPZeN3UoqJHesXDyJZHyXbRs1ms9m3UgAA6KL4nH8kIgZan1LLcaQVAQAAAIdJc7AJAAAAHHpJ9LsCAAAA4GBt/h/A5rO9B/UcbCe/vhURw7vlH2g9QxxxLEoRcWI92fZkQrJxGOzJ7TsRcX9i5/X3VXGF3d7juUd3jLc/I310j2dnP9wv5p+J3eafdGv+iV3mn4HN707Yo87z3+P8RzrMf1d7zPHt56+VOua/E/H6wG75k638SYf87/aY/+7aR/c6bWt+GXFm178/ybZcXb4fYmJmLk+65X/w99mH3fo/0Sl/0r3/pR77f3/9j/lOc0mR/+yp7u//bvmLa+Ljdh1pRNxrvxbjtR05Ti38+F23/qcjms/y/n/RY/8/fz14s8ddAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCWNiKFI0spWnKaVSsTJiHg5TqR5tVY/N1NdWZwutkUMRymdmcuz0Ygob4yTYjzWih+PL+wYj0fESz8d30g6l2eVqWo+3e/mAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2HIyIoYiSSsRkUbEn+U0rVQiBno4dvA51AcAAADsk+F+FwAAAAAcOPf/AAAAcPg96/1/ss91AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIfa1StXiqW5/ujWVDGevtFYma/eOD+d1eYrCytTlanq8lJltlqdzbPKVHXhSefLq9WlsUuxcnOkntXqI7XG6vWF6spi/frcwuRsdj0rPZeuAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeFpDrSVJKxGRtuI0rVQi/hcRw1FKZubybDQi/h8RD8ulwWI81u+iAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA2He1xur8ZJ5nywKB4LkFH0TEf6CMLkG/ZyYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPqh1lidn8zzbLnW70oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADor/SXJCKK5Uz59NDOrUeTv8qt14h477Nrn9ycrNeXx4r1v2+tr3/aXn+hH/UDAADAC+Hy0+y8eZ++eR8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQq1pjdX4yz7PlvQWXo7HaTDrs0+8eAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZ/NPAAAA//+Alss0") chdir(&(0x7f0000000240)='./file0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) truncate(0x0, 0x40200) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000a80)={0x1, 0x2, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$FS_IOC_READ_VERITY_METADATA(r0, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x200001e6, &(0x7f0000000100)=""/230}) 2.895466637s ago: executing program 0 (id=2638): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x0, 0xfe, 0x0, 0x0, 0xfffffff8, 0x3e, 0x0, 0x0, 0x0, 0x0, 0xff, 0x40, 0x0, 0x0, 0x480000, 0x0, 0x2, 0x7}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000500)={"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"}) 2.735953002s ago: executing program 3 (id=2639): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x9, 0x6, "9eebf9", 0x14, 0x6, 0xff, @dev={0xfe, 0x80, '\x00', 0x39}, @local, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0xc2, 0x1, 0x0, 0xffd}}}}}}}, 0x0) 2.718356353s ago: executing program 2 (id=2640): sched_setscheduler(0x0, 0x2, 0x0) getpid() r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x4100) ioctl$KVM_RUN(r2, 0xae80, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) 2.47998398s ago: executing program 3 (id=2641): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) mlockall(0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.183943512s ago: executing program 3 (id=2642): r0 = syz_io_uring_setup(0x18d7, &(0x7f0000000040)={0x0, 0x0, 0x2, 0x0, 0x17b}, &(0x7f0000ffe000), &(0x7f0000ffe000), &(0x7f0000000000)) mbind(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8000, 0x0, 0x6, 0x4) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x2, &(0x7f0000000180), 0xfe) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffcb9}]}) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 1.154445303s ago: executing program 0 (id=2643): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x7ffffffb, 0x0, 0xa, 0x6, 0xfffffe0000000001, 0x0, 0xffffffff}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SCSI_IOCTL_GET_PCI(r3, 0x5393, &(0x7f0000000000)) prctl$PR_CAP_AMBIENT(0x2f, 0x1, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) r4 = socket$kcm(0x29, 0x5, 0x0) write$cgroup_pressure(r4, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x7) sendmsg$kcm(r4, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818) r5 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r6, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$smc(&(0x7f0000000180), r5) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) 1.141773313s ago: executing program 1 (id=2644): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x1) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x11) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000100)={{0x100}, 'syz1\x00', 0x19}) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0x4) ioctl$UI_DEV_CREATE(r0, 0x5501) 612.578051ms ago: executing program 2 (id=2645): syz_mount_image$hpfs(&(0x7f0000000080), &(0x7f0000009ec0)='./file1\x00', 0x3a00041, &(0x7f0000000040)={[{@check_none}]}, 0x3, 0x9e3e, &(0x7f0000009f00)="$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") 0s ago: executing program 3 (id=2646): syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_io_uring_setup(0xd2, &(0x7f00000000c0)={0x0, 0xdffd, 0x10800, 0x3, 0x4f}, 0x0, &(0x7f0000004200)=0x0, &(0x7f0000000000)) syz_io_uring_submit(0x0, r2, 0x0, &(0x7f0000000000)) io_uring_enter(r1, 0x47ba, 0x0, 0x0, 0x0, 0x0) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) syz_emit_ethernet(0x64, &(0x7f0000005280)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa001c66cc83cb9ef8dfb4a14a9f6b7f9a4133ea7224803a3c9b1939624a375e0fee1d012b94fa72323a35b78c31304b425652f7c7516a5c0ed3d44056f6833ffd7b44b9f59386975ba5cc2c30f818c7ec09d14d227687f51a341b7bcd1705c23d24f2b31657ec512d95e5022d667bacf2d7922f7dd6fd5dcbe8cd8ae596e08d75ac52af808ff54c2afd2ef6e90aedc502c85a6c1ab8a613c324f89e8566832ec43b5f28de59c01c745bb4639e2085d8b9751c77256c3d22d8131958e0adbf12b5f71a5b7bd409aca5449ad86ac4a41f4680d0673b70f0ca77566636b0a5e6244b3f38ea"], 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) r6 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_STOP(r6, 0x6f2a) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a340)="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", 0x2000, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000002300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r7, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) write$FUSE_INIT(r7, &(0x7f0000002180)={0x50, 0x0, 0x0, {0x7, 0x27, 0x5, 0x1dd880, 0xffff, 0x81, 0x0, 0x4, 0x0, 0x0, 0x80, 0x2404}}, 0x50) read$FUSE(r7, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r7, &(0x7f0000002140)={0x20, 0x0, r8, {0x403, 0x4, 0x8, 0xfff}}, 0x20) chown(0x0, r5, r9) inotify_init() unshare(0x2a020400) openat$rtc(0xffffffffffffff9c, &(0x7f00000053c0), 0x280, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'tunl0\x00', &(0x7f0000008380)=@ethtool_regs={0x4, 0x95e, 0x1096, "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"}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, 0x0, 0x0}, 0x20) r10 = syz_io_uring_setup(0xa9f, &(0x7f00000001c0)={0x0, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000240), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_PROBE(r10, 0x8, &(0x7f0000000280), 0x26) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc01c586a, &(0x7f0000000280)={r0, &(0x7f0000000040)='\x00', 0x32f182, &(0x7f0000000140)={@align=0x8, {0x9, 0x1, 0x4, 0xffffffffffffff5e}}, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x5}) kernel console output (not intermixed with test programs): usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 697.130047][ T8830] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 697.171918][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 697.198703][ T8830] usb 1-1: config 0 descriptor?? [ 697.214949][ T8830] ldusb 1-1:0.55: Interrupt in endpoint not found [ 698.059536][ T8830] usb 1-1: USB disconnect, device number 86 [ 698.746074][T13720] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 699.280699][ T8821] usb 4-1: new low-speed USB device number 122 using dummy_hcd [ 699.309365][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2348'. [ 699.319664][T13768] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2348'. [ 699.335519][T13768] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2348'. [ 699.543417][ T8821] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.559198][ T8821] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.612460][ T8821] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 699.630523][ T8821] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.639393][ T8821] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.651067][ T8821] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 699.694355][ T8821] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 699.723828][ T8821] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 699.735140][ T8821] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 699.749959][ T8821] usb 4-1: string descriptor 0 read error: -22 [ 699.756455][ T8821] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 699.766099][ T8821] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 699.787304][ T8821] adutux 4-1:168.0: interrupt endpoints not found [ 700.023717][ T8823] usb 4-1: USB disconnect, device number 122 [ 700.071022][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2351'. [ 700.680809][ T8823] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 700.890771][ T8823] usb 3-1: Using ep0 maxpacket: 8 [ 700.897794][ T8823] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 700.913293][ T8823] usb 3-1: config 0 has no interface number 0 [ 700.950539][ T8823] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 700.976043][ T8823] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 700.987449][ T8823] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 701.030703][ T8823] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 701.063812][ T8823] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.079230][ T8823] usb 3-1: config 0 descriptor?? [ 701.100943][ T8823] ldusb 3-1:0.55: Interrupt in endpoint not found [ 701.509480][T13786] loop0: detected capacity change from 0 to 40427 [ 701.519618][T13786] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 701.533302][T13786] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 701.546220][T13786] F2FS-fs (loop0): invalid crc value [ 701.561261][T13786] F2FS-fs (loop0): Found nat_bits in checkpoint [ 701.648651][T13786] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 701.656275][T13786] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 701.682475][ T28] audit: type=1800 audit(1774933933.616:1847): pid=13786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2354" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 701.890023][ T8830] usb 3-1: USB disconnect, device number 108 [ 702.038756][ T5984] kworker/u4:12: attempt to access beyond end of device [ 702.038756][ T5984] loop0: rw=1, sector=77824, nr_sectors = 3752 limit=40427 [ 702.844730][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2361'. [ 702.860267][T13820] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2361'. [ 702.871406][T13820] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2361'. [ 703.895750][T13788] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 704.420979][ T8830] usb 3-1: new low-speed USB device number 109 using dummy_hcd [ 706.077304][T13840] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2364'. [ 706.115474][ T8830] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 706.125942][ T8830] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 706.143987][ T8830] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 706.200334][ T8830] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 706.208323][ T8830] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 706.222164][ T8830] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 706.245675][ T8830] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 706.256852][ T8830] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 706.270121][ T8830] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 706.274848][ T8821] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 706.312578][ T8830] usb 3-1: string descriptor 0 read error: -22 [ 706.325728][ T8830] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 706.348424][ T8830] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 706.393578][ T8830] adutux 3-1:168.0: interrupt endpoints not found [ 706.480730][ T8821] usb 1-1: Using ep0 maxpacket: 8 [ 706.496412][ T8821] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 706.506444][ T8821] usb 1-1: config 0 has no interface number 0 [ 706.513400][ T8821] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 706.524706][ T8821] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 706.540796][ T8821] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 706.554856][ T8821] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 706.564212][ T8821] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 706.583935][ T8821] usb 1-1: config 0 descriptor?? [ 706.596050][ T8821] ldusb 1-1:0.55: Interrupt in endpoint not found [ 706.613530][ T8830] usb 3-1: USB disconnect, device number 109 [ 706.740994][T12790] usb 2-1: new high-speed USB device number 105 using dummy_hcd [ 706.946744][T12790] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 706.967081][T12790] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 706.981731][T12790] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 707.004418][T12790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 707.015965][T12790] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 707.029812][T12790] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 707.039115][T12790] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 707.047905][T12790] usb 2-1: Product: syz [ 707.052186][T12790] usb 2-1: Manufacturer: syz [ 707.065803][T12790] cdc_wdm 2-1:1.0: skipping garbage [ 707.078877][T12790] cdc_wdm 2-1:1.0: skipping garbage [ 707.086508][T12790] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 707.093834][T12790] cdc_wdm 2-1:1.0: Unknown control protocol [ 707.284426][ T8830] usb 2-1: USB disconnect, device number 105 [ 707.397499][ T8832] usb 1-1: USB disconnect, device number 87 [ 707.506433][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 707.546822][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 707.620212][T13860] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2371'. [ 707.997872][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2373'. [ 708.028984][T13873] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2373'. [ 708.046309][T13873] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2373'. [ 712.021671][T12790] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 712.075615][T13895] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2376'. [ 712.222461][T12790] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 712.244359][T12790] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 712.310684][T12790] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 712.345033][T12790] usb 1-1: Product: syz [ 712.349422][T12790] usb 1-1: Manufacturer: syz [ 712.356968][T12790] usb 1-1: SerialNumber: syz [ 712.599639][T12790] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 88 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 712.718125][T12790] usb 1-1: USB disconnect, device number 88 [ 712.841101][T12790] usblp0: removed [ 713.275045][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 713.340991][ T8829] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 713.435116][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 713.551244][ T8829] usb 4-1: Using ep0 maxpacket: 8 [ 713.568923][ T8829] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 713.582238][ T8829] usb 4-1: config 0 has no interface number 0 [ 713.594371][ T8829] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 713.610461][T13905] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2380'. [ 713.615296][ T8829] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 713.634820][ T8829] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 713.649034][ T8829] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 713.658769][ T8829] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.669999][ T8829] usb 4-1: config 0 descriptor?? [ 713.687568][ T8829] ldusb 4-1:0.55: Interrupt in endpoint not found [ 713.800759][ T8830] usb 3-1: new high-speed USB device number 110 using dummy_hcd [ 714.015224][ T8830] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 714.025331][ T8830] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 714.036014][ T8830] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 714.045080][ T8830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 714.056244][ T8830] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 714.069032][ T8830] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 714.078470][ T8830] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 714.086727][ T8830] usb 3-1: Product: syz [ 714.091887][ T8830] usb 3-1: Manufacturer: syz [ 714.102571][ T8830] cdc_wdm 3-1:1.0: skipping garbage [ 714.107839][ T8830] cdc_wdm 3-1:1.0: skipping garbage [ 714.115545][ T8830] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 714.122531][ T8830] cdc_wdm 3-1:1.0: Unknown control protocol [ 714.313666][T12790] usb 3-1: USB disconnect, device number 110 [ 714.477293][ T8830] usb 4-1: USB disconnect, device number 123 [ 714.962398][T13921] loop3: detected capacity change from 0 to 40427 [ 714.992502][T13921] F2FS-fs (loop3): invalid crc value [ 715.055936][T13921] F2FS-fs (loop3): Found nat_bits in checkpoint [ 715.086388][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'. [ 715.109600][T13931] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2386'. [ 715.127754][T13931] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2386'. [ 715.288645][T13921] F2FS-fs (loop3): Start checkpoint disabled! [ 715.356867][T13921] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 716.027464][ T5994] kworker/u4:17: attempt to access beyond end of device [ 716.027464][ T5994] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 716.080719][ T5994] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 716.120763][ T5994] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 716.150761][ T5994] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 716.834344][T13943] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2389'. [ 717.034716][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 717.278180][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 717.625708][T13949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2390'. [ 718.301789][ T8832] usb 2-1: new high-speed USB device number 106 using dummy_hcd [ 718.310845][T12790] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 718.501014][T12790] usb 4-1: Using ep0 maxpacket: 8 [ 718.507889][T12790] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 718.519818][T12790] usb 4-1: config 0 has no interface number 0 [ 718.523549][ T8832] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 718.526481][T12790] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 718.547735][ T8832] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 718.549851][T12790] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 718.570210][T12790] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 718.570792][ T8832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 718.591706][ T8839] usb 3-1: new high-speed USB device number 111 using dummy_hcd [ 718.591891][T12790] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 718.603217][ T8832] usb 2-1: Product: syz [ 718.613700][ T8832] usb 2-1: Manufacturer: syz [ 718.618431][ T8832] usb 2-1: SerialNumber: syz [ 718.623464][T12790] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 718.642729][T12790] usb 4-1: config 0 descriptor?? [ 718.652220][T12790] ldusb 4-1:0.55: Interrupt in endpoint not found [ 718.808748][ T8839] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 718.818509][ T8839] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 718.833334][ T8839] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 718.844100][ T8839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 718.845914][ T8832] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 106 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 718.859105][ T8839] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 718.873178][ T8832] usb 2-1: USB disconnect, device number 106 [ 718.888100][ T8839] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 718.921900][ T8839] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 718.936996][ T8839] usb 3-1: Product: syz [ 718.945132][ T8839] usb 3-1: Manufacturer: syz [ 718.964220][ T8839] cdc_wdm 3-1:1.0: skipping garbage [ 718.969689][ T8839] cdc_wdm 3-1:1.0: skipping garbage [ 718.986890][ T8839] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 719.015004][ T8839] cdc_wdm 3-1:1.0: Unknown control protocol [ 719.233558][ T8830] usb 3-1: USB disconnect, device number 111 [ 719.572549][T13959] usblp0: removed [ 719.579592][ T8839] usb 4-1: USB disconnect, device number 124 [ 719.906087][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'. [ 719.915636][T13976] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2397'. [ 719.929614][T13976] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2397'. [ 720.040892][ T8839] usb 4-1: new low-speed USB device number 125 using dummy_hcd [ 720.272858][ T8839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 720.281878][ T8839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 720.293695][ T8839] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 720.315916][ T8839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 720.324263][ T8839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 720.335735][ T8839] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 720.360028][ T8839] usb 4-1: config 168 descriptor has 1 excess byte, ignoring [ 720.390780][ T8839] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 720.446349][ T8839] usb 4-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 720.474953][ T8839] usb 4-1: string descriptor 0 read error: -22 [ 720.483388][ T8839] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 720.492923][ T8839] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 720.532803][ T8839] adutux 4-1:168.0: interrupt endpoints not found [ 720.790694][ T8839] usb 4-1: USB disconnect, device number 125 [ 721.929754][T13997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2402'. [ 722.630716][ T8830] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 722.820705][ T8830] usb 1-1: Using ep0 maxpacket: 8 [ 722.842470][ T8830] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 722.853433][ T8830] usb 1-1: config 0 has no interface number 0 [ 722.869978][ T8830] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 722.894799][ T8830] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 722.926081][ T8830] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 722.963908][ T8830] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 722.984368][ T8830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 723.035106][ T8830] usb 1-1: config 0 descriptor?? [ 723.046998][ T8830] ldusb 1-1:0.55: Interrupt in endpoint not found [ 723.810740][ T8821] usb 3-1: new high-speed USB device number 112 using dummy_hcd [ 723.908731][ T8839] usb 1-1: USB disconnect, device number 89 [ 724.003098][ T8821] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 724.012357][ T8821] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 724.027453][ T8821] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 724.036639][ T8821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 724.049334][ T8821] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 725.363786][ T8821] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 725.393576][ T8821] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 725.416544][ T8821] usb 3-1: Product: syz [ 725.480352][ T8821] usb 3-1: Manufacturer: syz [ 725.574834][ T8821] cdc_wdm 3-1:1.0: skipping garbage [ 725.619343][ T8821] cdc_wdm 3-1:1.0: skipping garbage [ 725.636766][ T8821] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 725.661626][ T8821] cdc_wdm 3-1:1.0: Unknown control protocol [ 725.807886][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2409'. [ 725.844054][ T8821] usb 3-1: USB disconnect, device number 112 [ 725.930024][T14027] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2409'. [ 725.960588][ C1] sched: RT throttling activated [ 725.975908][T14027] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2409'. [ 727.426907][T14042] loop2: detected capacity change from 0 to 40427 [ 727.460077][T14042] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 727.501080][T14042] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 727.565827][T14042] F2FS-fs (loop2): invalid crc value [ 727.589353][T14042] F2FS-fs (loop2): Found nat_bits in checkpoint [ 727.678038][T14048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2414'. [ 727.798684][T14042] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 727.853385][T14042] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 727.986006][ T28] audit: type=1800 audit(1774933959.916:1848): pid=14042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2413" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 728.458226][T13170] kworker/u4:3: attempt to access beyond end of device [ 728.458226][T13170] loop2: rw=1, sector=77824, nr_sectors = 2072 limit=40427 [ 728.497212][T13170] kworker/u4:3: attempt to access beyond end of device [ 728.497212][T13170] loop2: rw=1, sector=79896, nr_sectors = 1624 limit=40427 [ 728.680678][ T8821] usb 2-1: new high-speed USB device number 107 using dummy_hcd [ 728.870723][ T8821] usb 2-1: Using ep0 maxpacket: 8 [ 728.892371][ T8821] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 728.963218][ T8821] usb 2-1: config 0 has no interface number 0 [ 729.030875][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 729.043350][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 729.054317][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 729.079168][ T8821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 729.120871][ T8821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 729.133711][ T8821] usb 2-1: config 0 descriptor?? [ 729.159976][ T8821] ldusb 2-1:0.55: Interrupt in endpoint not found [ 729.978129][ T8829] usb 2-1: USB disconnect, device number 107 [ 730.290823][ T8830] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 730.436341][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2423'. [ 730.469670][T14084] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2423'. [ 730.493954][ T8830] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 730.514995][ T8830] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 730.546799][T14084] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2423'. [ 730.553843][ T8830] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 730.581042][ T8830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 730.610701][ T8830] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 730.652692][ T8830] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 730.673173][ T8830] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 730.682557][ T8830] usb 1-1: Product: syz [ 730.686865][ T8830] usb 1-1: Manufacturer: syz [ 730.705731][ T8830] cdc_wdm 1-1:1.0: skipping garbage [ 730.719180][ T8830] cdc_wdm 1-1:1.0: skipping garbage [ 730.730205][ T8830] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 730.738509][ T8830] cdc_wdm 1-1:1.0: Unknown control protocol [ 730.913261][ T8830] usb 1-1: USB disconnect, device number 90 [ 731.021785][ T28] audit: type=1326 audit(1774933962.956:1849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14092 comm="syz.3.2425" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffaa4b9c819 code=0x0 [ 731.736349][T14100] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2426'. [ 732.640981][ T8830] usb 4-1: new high-speed USB device number 126 using dummy_hcd [ 732.850761][ T8830] usb 4-1: Using ep0 maxpacket: 8 [ 732.878701][ T8830] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 732.900794][ T8830] usb 4-1: config 0 has no interface number 0 [ 732.911443][ T8830] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 732.950628][ T8830] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 732.970632][ T8830] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 733.014807][ T8830] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 733.045219][ T8830] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 733.076381][ T8830] usb 4-1: config 0 descriptor?? [ 733.093945][ T8830] ldusb 4-1:0.55: Interrupt in endpoint not found [ 733.947442][T14115] loop0: detected capacity change from 0 to 40427 [ 734.024788][T14115] F2FS-fs (loop0): invalid crc value [ 734.073939][ T8829] usb 4-1: USB disconnect, device number 126 [ 734.106726][T14115] F2FS-fs (loop0): Found nat_bits in checkpoint [ 734.256890][T14115] F2FS-fs (loop0): Start checkpoint disabled! [ 734.296600][T14115] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 734.608635][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2435'. [ 734.628206][ T28] audit: type=1326 audit(1774933966.546:1850): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14134 comm="syz.2.2436" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7efea399c819 code=0x0 [ 734.650992][T14133] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2435'. [ 734.651052][T14133] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2435'. [ 734.670713][ T8829] usb 4-1: new high-speed USB device number 127 using dummy_hcd [ 734.818301][T10653] kworker/u4:0: attempt to access beyond end of device [ 734.818301][T10653] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 734.835731][T10653] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 734.843791][T10653] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 734.863460][ T8829] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 734.875854][ T8829] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 734.900503][ T8829] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 734.922178][ T8829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 734.948315][ T8829] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 734.982655][ T8829] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 734.995447][ T8829] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 735.013170][ T8829] usb 4-1: Product: syz [ 735.023183][ T8829] usb 4-1: Manufacturer: syz [ 735.047364][ T8829] cdc_wdm 4-1:1.0: skipping garbage [ 735.054335][ T8829] cdc_wdm 4-1:1.0: skipping garbage [ 735.072082][ T8829] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 735.084886][ T8829] cdc_wdm 4-1:1.0: Unknown control protocol [ 735.266456][ T8830] usb 4-1: USB disconnect, device number 127 [ 736.032056][T14156] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2439'. [ 736.590788][ T8821] usb 3-1: new high-speed USB device number 113 using dummy_hcd [ 736.860724][ T8821] usb 3-1: Using ep0 maxpacket: 8 [ 736.905625][ T8821] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 736.917291][ T8821] usb 3-1: config 0 has no interface number 0 [ 736.955842][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 736.980628][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 737.015850][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 737.060640][ T8821] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 737.086880][ T8821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 737.121689][ T8821] usb 3-1: config 0 descriptor?? [ 737.130709][ T8829] usb 1-1: new full-speed USB device number 91 using dummy_hcd [ 737.141218][ T8821] ldusb 3-1:0.55: Interrupt in endpoint not found [ 737.353496][ T8829] usb 1-1: unable to get BOS descriptor or descriptor too short [ 737.382445][ T8829] usb 1-1: not running at top speed; connect to a high speed hub [ 737.433908][ T8829] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 737.470192][ T8829] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 737.480516][ T8829] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 737.498976][ T8829] usb 1-1: Product: syz [ 737.509536][ T8829] usb 1-1: Manufacturer: syz [ 737.522641][ T8829] usb 1-1: SerialNumber: syz [ 738.002575][T14169] loop3: detected capacity change from 0 to 40427 [ 738.063319][T14169] F2FS-fs (loop3): invalid crc value [ 738.070904][T14169] F2FS-fs (loop3): Found nat_bits in checkpoint [ 738.101902][T14169] F2FS-fs (loop3): Start checkpoint disabled! [ 738.112714][T14169] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 738.151355][ T8821] usb 3-1: USB disconnect, device number 113 [ 740.465003][ T8829] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 740.487387][ T8829] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 740.495573][ T8829] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 740.503223][ T8829] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 740.579309][ T8829] usb 1-1: USB disconnect, device number 91 [ 741.130837][ T42] kworker/u4:2: attempt to access beyond end of device [ 741.130837][ T42] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 741.313906][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 741.396724][ T42] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 741.611933][T14185] udevd[14185]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 741.865259][T14192] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2450'. [ 741.880765][ T8821] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 742.079806][ T8821] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 742.088826][ T8821] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 742.110984][ T8821] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 742.120126][ T8821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 742.150673][ T8821] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 742.160818][ T8832] usb 3-1: new high-speed USB device number 114 using dummy_hcd [ 742.183215][ T8821] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 742.200649][ T8821] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 742.232015][ T8821] usb 1-1: Product: syz [ 742.236384][ T8821] usb 1-1: Manufacturer: syz [ 742.263077][ T8821] cdc_wdm 1-1:1.0: skipping garbage [ 742.268381][ T8821] cdc_wdm 1-1:1.0: skipping garbage [ 742.291924][ T8821] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 742.299065][ T8821] cdc_wdm 1-1:1.0: Unknown control protocol [ 742.351353][ T8832] usb 3-1: Using ep0 maxpacket: 32 [ 742.358724][ T8832] usb 3-1: config 0 has no interfaces? [ 742.367067][ T8832] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 742.379090][ T8832] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.395552][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2447'. [ 742.404845][ T8832] usb 3-1: Product: syz [ 742.410034][ T8832] usb 3-1: Manufacturer: syz [ 742.414930][T14199] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2447'. [ 742.414952][T14199] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2447'. [ 742.454423][ T8832] usb 3-1: SerialNumber: syz [ 742.512903][ T8830] usb 1-1: USB disconnect, device number 92 [ 742.554684][ T8832] usb 3-1: config 0 descriptor?? [ 742.774388][ T8832] usb 3-1: USB disconnect, device number 114 [ 743.299619][T14207] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2452'. [ 743.550715][ T8821] usb 2-1: new high-speed USB device number 108 using dummy_hcd [ 743.645305][T14213] loop2: detected capacity change from 0 to 40427 [ 743.662551][T14213] F2FS-fs (loop2): invalid crc value [ 743.697509][T14213] F2FS-fs (loop2): Found nat_bits in checkpoint [ 743.730827][T14213] F2FS-fs (loop2): Start checkpoint disabled! [ 743.747149][T14213] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 743.870804][ T8821] usb 2-1: Using ep0 maxpacket: 8 [ 744.564994][ T8821] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 744.610127][ T8821] usb 2-1: config 0 has no interface number 0 [ 744.638861][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 744.817242][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 744.889053][ T8821] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 744.941244][ T8821] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 744.981320][ T8821] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 745.010674][ T1088] kworker/u4:7: attempt to access beyond end of device [ 745.010674][ T1088] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 745.041612][ T8821] usb 2-1: config 0 descriptor?? [ 745.073916][ T8821] ldusb 2-1:0.55: Interrupt in endpoint not found [ 745.091683][ T1088] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 745.720713][ T8821] usb 1-1: new full-speed USB device number 93 using dummy_hcd [ 745.923111][ T8821] usb 1-1: unable to get BOS descriptor or descriptor too short [ 745.936727][T14224] loop3: detected capacity change from 0 to 4096 [ 745.936745][ T8821] usb 1-1: not running at top speed; connect to a high speed hub [ 745.938110][ T8821] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 745.989633][ T8821] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 745.999493][ T8821] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 746.009297][ T8830] usb 2-1: USB disconnect, device number 108 [ 746.014141][ T8821] usb 1-1: Product: syz [ 746.023930][ T8821] usb 1-1: Manufacturer: syz [ 746.028679][ T8821] usb 1-1: SerialNumber: syz [ 746.433698][ T8821] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 746.454293][ T8821] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 746.469227][ T8821] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 746.482211][ T8821] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 746.550704][ T8821] usb 1-1: USB disconnect, device number 93 [ 746.622455][T14188] udevd[14188]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 746.663862][T12789] usb 2-1: new high-speed USB device number 109 using dummy_hcd [ 746.709330][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 746.739844][T14237] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2461'. [ 746.750450][T14237] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2461'. [ 746.872845][T12789] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 746.892923][T12789] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 746.916898][T12789] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 746.934538][T12789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 746.945714][T12789] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 746.965861][T12789] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 746.979114][T12789] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 746.988220][T12789] usb 2-1: Product: syz [ 746.993872][T12789] usb 2-1: Manufacturer: syz [ 747.006896][T12789] cdc_wdm 2-1:1.0: skipping garbage [ 747.014653][T12789] cdc_wdm 2-1:1.0: skipping garbage [ 747.026209][T12789] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 747.035319][T12789] cdc_wdm 2-1:1.0: Unknown control protocol [ 747.246234][T14244] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2463'. [ 747.338784][ T8821] usb 2-1: USB disconnect, device number 109 [ 747.544892][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.551642][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.563031][T12789] usb 1-1: new high-speed USB device number 94 using dummy_hcd [ 747.790694][T12789] usb 1-1: Using ep0 maxpacket: 32 [ 747.802711][T12789] usb 1-1: config 0 has no interfaces? [ 747.814528][T12789] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 747.840801][T12789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 747.863561][T12789] usb 1-1: Product: syz [ 747.883856][T12789] usb 1-1: Manufacturer: syz [ 747.888622][T12789] usb 1-1: SerialNumber: syz [ 747.901990][T14254] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 747.932195][T12789] usb 1-1: config 0 descriptor?? [ 748.157861][T12789] usb 1-1: USB disconnect, device number 94 [ 748.660793][T12790] usb 3-1: new high-speed USB device number 115 using dummy_hcd [ 748.860689][T12790] usb 3-1: Using ep0 maxpacket: 8 [ 748.876997][T12790] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 748.908977][T12790] usb 3-1: config 0 has no interface number 0 [ 748.930455][T12790] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 748.961115][T12790] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 748.999219][T12790] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 749.040665][T12790] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 749.049922][T12790] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 749.132133][T12790] usb 3-1: config 0 descriptor?? [ 749.142422][T12790] ldusb 3-1:0.55: Interrupt in endpoint not found [ 749.620931][ T51] Bluetooth: hci4: command 0x0406 tx timeout [ 749.695733][T14280] loop3: detected capacity change from 0 to 2048 [ 749.735843][T14280] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.754704][T14280] ext4 filesystem being mounted at /599/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 749.760855][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2472'. [ 749.780938][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2472'. [ 749.800743][T14283] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2472'. [ 749.871905][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.015989][ T8829] usb 3-1: USB disconnect, device number 115 [ 750.542558][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 750.564172][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 750.573461][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 750.609405][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 750.623151][ T51] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 750.632025][ T51] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 750.839248][T14293] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2476'. [ 751.106181][ T1077] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.181311][ T8832] usb 2-1: new high-speed USB device number 110 using dummy_hcd [ 751.243229][ T1077] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.278572][T14289] chnl_net:caif_netlink_parms(): no params data found [ 751.344867][ T1077] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.380836][ T8832] usb 2-1: Using ep0 maxpacket: 32 [ 751.388110][ T8832] usb 2-1: config 0 has no interfaces? [ 751.403518][ T8832] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 751.438591][ T8832] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.446871][ T8832] usb 2-1: Product: syz [ 751.451221][ T8832] usb 2-1: Manufacturer: syz [ 751.455873][ T8832] usb 2-1: SerialNumber: syz [ 751.463553][ T8832] usb 2-1: config 0 descriptor?? [ 751.493569][ T1077] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 751.614930][T14289] bridge0: port 1(bridge_slave_0) entered blocking state [ 751.634475][T14289] bridge0: port 1(bridge_slave_0) entered disabled state [ 751.642143][T14289] bridge_slave_0: entered allmulticast mode [ 751.649452][T14289] bridge_slave_0: entered promiscuous mode [ 751.662180][T14289] bridge0: port 2(bridge_slave_1) entered blocking state [ 751.669437][T14289] bridge0: port 2(bridge_slave_1) entered disabled state [ 751.677671][T14289] bridge_slave_1: entered allmulticast mode [ 751.685385][T14289] bridge_slave_1: entered promiscuous mode [ 751.725208][ T8832] usb 2-1: USB disconnect, device number 110 [ 751.727534][T14289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 751.773788][T14289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 751.833480][T14289] team0: Port device team_slave_0 added [ 751.872764][T14289] team0: Port device team_slave_1 added [ 751.927325][T14289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 751.935122][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 751.962687][T14289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.028408][T14289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.035711][T14289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.062665][T14289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.083854][T14265] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 752.460516][T14289] hsr_slave_0: entered promiscuous mode [ 752.497069][T14289] hsr_slave_1: entered promiscuous mode [ 752.671315][ T5783] Bluetooth: hci2: command tx timeout [ 752.739756][T14313] loop2: detected capacity change from 0 to 40427 [ 752.754310][T14309] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2477'. [ 752.771352][T14289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.779074][T14289] Cannot create hsr debugfs directory [ 752.812686][T14313] F2FS-fs (loop2): invalid crc value [ 752.835455][T14313] F2FS-fs (loop2): Found nat_bits in checkpoint [ 752.873379][T14313] F2FS-fs (loop2): Start checkpoint disabled! [ 752.927138][T14313] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 754.331151][ T42] kworker/u4:2: attempt to access beyond end of device [ 754.331151][ T42] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 754.384194][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 754.410808][ T42] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 754.722917][ T1077] erspan0 (unregistering): left promiscuous mode [ 754.740760][ T5783] Bluetooth: hci2: command tx timeout [ 755.010627][ T1077] gretap0 (unregistering): left promiscuous mode [ 756.023935][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2483'. [ 756.037712][T14346] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2483'. [ 756.064641][T14346] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2483'. [ 756.111178][ T8832] usb 2-1: new high-speed USB device number 111 using dummy_hcd [ 756.135043][ T1077] hsr_slave_0: left promiscuous mode [ 756.147897][ T1077] hsr_slave_1: left promiscuous mode [ 756.179957][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 756.199267][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 756.211798][ T1077] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 756.228985][ T1077] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 756.238971][ T1077] bridge_slave_1: left allmulticast mode [ 756.249161][ T1077] bridge_slave_1: left promiscuous mode [ 756.258473][ T1077] bridge0: port 2(bridge_slave_1) entered disabled state [ 756.276079][ T1077] bridge_slave_0: left allmulticast mode [ 756.286959][ T1077] bridge_slave_0: left promiscuous mode [ 756.297421][ T1077] bridge0: port 1(bridge_slave_0) entered disabled state [ 756.320799][ T8832] usb 2-1: Using ep0 maxpacket: 8 [ 756.332662][ T8832] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 756.364130][ T8832] usb 2-1: config 0 has no interface number 0 [ 756.378084][ T1077] bridge0: left promiscuous mode [ 756.395296][ T1077] veth1_macvtap: left promiscuous mode [ 756.401758][ T1077] veth0_macvtap: left promiscuous mode [ 756.422752][ T8832] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 756.544032][ T8832] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 756.577142][ T8832] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 756.596732][ T8832] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 756.609663][ T8832] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 756.650347][ T8832] usb 2-1: config 0 descriptor?? [ 756.699823][ T8832] ldusb 2-1:0.55: Interrupt in endpoint not found [ 756.830761][ T5783] Bluetooth: hci2: command tx timeout [ 757.587433][ T8839] usb 2-1: USB disconnect, device number 111 [ 757.769423][ T1077] team0 (unregistering): Port device team_slave_1 removed [ 757.785291][T12789] usb 3-1: new full-speed USB device number 116 using dummy_hcd [ 757.900943][ T1077] team0 (unregistering): Port device team_slave_0 removed [ 758.006855][T12789] usb 3-1: unable to get BOS descriptor or descriptor too short [ 758.039589][T12789] usb 3-1: not running at top speed; connect to a high speed hub [ 758.053055][T12789] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 758.067848][T12789] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 758.078604][ T1077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 758.087746][T12789] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.100819][T12789] usb 3-1: Product: syz [ 758.105036][T12789] usb 3-1: Manufacturer: syz [ 758.130080][T12789] usb 3-1: SerialNumber: syz [ 758.190725][ T1077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 758.322458][ T8839] usb 2-1: new high-speed USB device number 112 using dummy_hcd [ 758.538245][ T8839] usb 2-1: Using ep0 maxpacket: 32 [ 758.562412][T12789] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 758.571455][T12789] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 758.580616][ T8839] usb 2-1: config 0 has no interfaces? [ 758.588118][T12789] usb 3-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 758.610188][ T8839] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 758.620216][ T8839] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 758.628599][T12789] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 758.640617][ T8839] usb 2-1: Product: syz [ 758.644918][ T8839] usb 2-1: Manufacturer: syz [ 758.682329][ T8839] usb 2-1: SerialNumber: syz [ 758.697275][ T8839] usb 2-1: config 0 descriptor?? [ 758.726938][T12789] usb 3-1: USB disconnect, device number 116 [ 758.839513][T14188] udevd[14188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 758.903502][ T5783] Bluetooth: hci2: command tx timeout [ 759.043206][ T1077] bond0 (unregistering): Released all slaves [ 759.206092][T14366] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2485'. [ 759.255510][ T8832] usb 2-1: USB disconnect, device number 112 [ 759.576078][T14289] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 759.601952][T14289] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 759.616252][T14289] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 759.647084][T14289] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 759.661040][ T8829] usb 3-1: new high-speed USB device number 117 using dummy_hcd [ 759.873254][ T8829] usb 3-1: Using ep0 maxpacket: 16 [ 759.907671][ T8829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 759.945472][ T8829] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 759.966513][T14289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 760.001101][ T8829] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.024414][ T8829] usb 3-1: New USB device found, idVendor=11ff, idProduct=3331, bcdDevice= 0.00 [ 760.050383][ T8829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.066372][T14289] 8021q: adding VLAN 0 to HW filter on device team0 [ 760.088591][ T8829] usb 3-1: config 0 descriptor?? [ 760.112511][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 760.119920][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 760.152878][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 760.160143][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 760.273033][T14395] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2488'. [ 760.532475][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.555821][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.593130][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.640933][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.665712][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.674243][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.683880][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.693163][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.704811][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.735609][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.765749][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.788768][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.809122][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.837640][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.854729][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.886438][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.940763][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 760.994745][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.011005][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.033073][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.055860][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.066120][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.074822][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.082205][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.089371][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.114737][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.145978][T14289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 761.152287][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.204856][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.230635][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.247841][ T1077] IPVS: stop unused estimator thread 0... [ 761.268853][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.294574][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.341458][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.366401][T14289] veth0_vlan: entered promiscuous mode [ 761.400768][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.407914][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.425348][T14289] veth1_vlan: entered promiscuous mode [ 761.471414][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.478567][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.526067][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.570241][ T8829] gembird 0003:11FF:3331.0013: unknown main item tag 0x0 [ 761.614730][ T8829] gembird 0003:11FF:3331.0013: hidraw0: USB HID v1.00 Device [HID 11ff:3331] on usb-dummy_hcd.2-1/input0 [ 761.653638][T14289] veth0_macvtap: entered promiscuous mode [ 761.685696][ T8829] usb 3-1: USB disconnect, device number 117 [ 761.765036][T14289] veth1_macvtap: entered promiscuous mode [ 761.809188][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.852622][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.891568][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 761.938729][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 761.977262][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 762.022329][T14420] fido_id[14420]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 762.079507][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.121983][T14289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 762.174900][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.222294][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.244402][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.269074][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.299783][T14289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 762.370807][T14289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 762.394649][T14289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 762.458928][T14289] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.492731][T14289] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.519656][T14289] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.596919][T14289] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 762.986498][T10653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.030828][T10653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.144634][ T1077] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 763.173484][ T1077] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 763.350768][ T8823] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 763.570991][ T8823] usb 1-1: Using ep0 maxpacket: 8 [ 763.578857][ T8823] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 763.590225][ T8823] usb 1-1: config 0 has no interface number 0 [ 763.612410][ T8823] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 763.635552][ T8823] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 763.680793][ T8832] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 763.703658][ T8823] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 763.750397][ T8823] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 763.792001][ T8823] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.823501][ T8823] usb 1-1: config 0 descriptor?? [ 763.854619][ T8823] ldusb 1-1:0.55: Interrupt in endpoint not found [ 763.902895][ T8832] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 763.976895][ T8832] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 764.010894][ T8832] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 764.020109][ T8832] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 764.083179][ T8832] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 764.134851][ T8832] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 764.149534][ T8832] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 764.169873][ T8832] usb 4-1: Product: syz [ 764.186051][ T8832] usb 4-1: Manufacturer: syz [ 764.221958][ T8832] cdc_wdm 4-1:1.0: skipping garbage [ 764.255933][ T8832] cdc_wdm 4-1:1.0: skipping garbage [ 764.274573][ T8832] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 764.292886][ T8832] cdc_wdm 4-1:1.0: Unknown control protocol [ 764.450279][ T8823] usb 4-1: USB disconnect, device number 2 [ 764.778566][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 764.786200][ T8823] usb 1-1: USB disconnect, device number 95 [ 764.794824][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 764.805212][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 764.832442][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 764.843419][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 764.851250][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 765.149552][ T5984] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.298821][ T5984] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.352374][ T8839] usb 1-1: new full-speed USB device number 96 using dummy_hcd [ 765.484418][ T5984] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 765.563364][ T8839] usb 1-1: unable to get BOS descriptor or descriptor too short [ 765.577358][ T8839] usb 1-1: not running at top speed; connect to a high speed hub [ 765.582033][T14475] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2497'. [ 765.595767][ T8839] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 765.613015][ T8839] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 765.640645][ T8839] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 765.648718][ T8839] usb 1-1: Product: syz [ 765.653067][ T8839] usb 1-1: Manufacturer: syz [ 765.659140][ T8839] usb 1-1: SerialNumber: syz [ 765.710257][ T5984] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 766.008176][T14457] chnl_net:caif_netlink_parms(): no params data found [ 766.809657][T14465] loop3: detected capacity change from 0 to 40427 [ 766.822667][ T8839] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 766.850243][T14457] bridge0: port 1(bridge_slave_0) entered blocking state [ 766.878247][ T8839] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 766.895757][T14465] F2FS-fs (loop3): invalid crc value [ 766.902484][ T51] Bluetooth: hci0: command tx timeout [ 766.902764][T14457] bridge0: port 1(bridge_slave_0) entered disabled state [ 766.915043][ T8839] usb 1-1: 1:1 : invalid UAC_FORMAT_TYPE desc [ 766.926093][ T8839] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 766.936770][T14457] bridge_slave_0: entered allmulticast mode [ 766.956780][T14457] bridge_slave_0: entered promiscuous mode [ 766.970053][T14465] F2FS-fs (loop3): Found nat_bits in checkpoint [ 766.976672][T14457] bridge0: port 2(bridge_slave_1) entered blocking state [ 766.976780][T14457] bridge0: port 2(bridge_slave_1) entered disabled state [ 766.976945][T14457] bridge_slave_1: entered allmulticast mode [ 767.006859][ T8839] usb 1-1: USB disconnect, device number 96 [ 767.054928][T14188] udevd[14188]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 767.090774][T14457] bridge_slave_1: entered promiscuous mode [ 767.290863][T14465] F2FS-fs (loop3): Start checkpoint disabled! [ 767.304133][T14465] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 767.411958][T14457] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 767.509558][T14457] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 767.939924][ T1077] kworker/u4:6: attempt to access beyond end of device [ 767.939924][ T1077] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 767.976700][T14457] team0: Port device team_slave_0 added [ 767.979843][ T1077] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 767.999138][ T1077] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 768.009195][ T1077] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 768.018021][T14457] team0: Port device team_slave_1 added [ 768.325958][T14457] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 768.352681][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.434116][T14457] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 768.529094][T14457] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 768.562948][T14457] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 768.647055][T14457] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 768.865266][T14457] hsr_slave_0: entered promiscuous mode [ 768.961202][T14457] hsr_slave_1: entered promiscuous mode [ 768.980760][ T51] Bluetooth: hci0: command tx timeout [ 768.987813][T14457] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.100700][T14457] Cannot create hsr debugfs directory [ 769.513489][ T5984] hsr_slave_0: left promiscuous mode [ 769.612136][ T5984] hsr_slave_1: left promiscuous mode [ 769.640866][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 769.668663][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 769.738748][ T5984] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 769.760766][ T5984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 769.789406][ T5984] bridge_slave_1: left allmulticast mode [ 769.798701][ T5984] bridge_slave_1: left promiscuous mode [ 769.830886][ T5984] bridge0: port 2(bridge_slave_1) entered disabled state [ 769.911264][ T5984] bridge_slave_0: left allmulticast mode [ 769.929443][ T5984] bridge_slave_0: left promiscuous mode [ 769.935905][ T5984] bridge0: port 1(bridge_slave_0) entered disabled state [ 770.000889][ T5984] veth1_macvtap: left promiscuous mode [ 770.040245][ T5984] veth0_macvtap: left promiscuous mode [ 770.120789][ T8823] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 770.351065][ T8823] usb 4-1: Using ep0 maxpacket: 8 [ 770.358687][ T8823] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 770.382937][ T8823] usb 4-1: config 0 has no interface number 0 [ 770.389108][ T8823] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 770.419875][ T8823] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 770.448635][ T8823] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 770.473985][ T8823] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 770.490893][ T8823] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.547656][ T8823] usb 4-1: config 0 descriptor?? [ 770.607227][ T8823] ldusb 4-1:0.55: Interrupt in endpoint not found [ 770.797349][T14532] loop0: detected capacity change from 0 to 40427 [ 770.814004][T14532] F2FS-fs (loop0): invalid crc value [ 770.830276][T14532] F2FS-fs (loop0): Found nat_bits in checkpoint [ 770.882262][ T8821] usb 2-1: new high-speed USB device number 113 using dummy_hcd [ 770.918965][T14532] F2FS-fs (loop0): Start checkpoint disabled! [ 770.950073][T14532] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 771.080776][ T51] Bluetooth: hci0: command tx timeout [ 771.082864][ T8821] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 771.291963][ T8821] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 771.302547][ T8821] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 771.311740][ T8821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 771.323136][ T8821] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 771.336819][ T8821] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 771.354684][ T8821] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 771.375985][ T8821] usb 2-1: Product: syz [ 771.390515][ T8821] usb 2-1: Manufacturer: syz [ 771.417222][ T8821] cdc_wdm 2-1:1.0: skipping garbage [ 771.430681][ T8821] cdc_wdm 2-1:1.0: skipping garbage [ 771.455440][ T8821] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 771.461677][ T8821] cdc_wdm 2-1:1.0: Unknown control protocol [ 771.468561][ T8830] usb 4-1: USB disconnect, device number 3 [ 771.502314][ T42] kworker/u4:2: attempt to access beyond end of device [ 771.502314][ T42] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 771.516721][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 771.524446][ T42] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 771.660253][ T8821] usb 2-1: USB disconnect, device number 113 [ 771.741860][T14538] loop3: detected capacity change from 0 to 512 [ 771.815518][T13886] blk_print_req_error: 23 callbacks suppressed [ 771.815537][T13886] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 771.934466][ T5984] team0 (unregistering): Port device team_slave_1 removed [ 772.083722][ T5984] team0 (unregistering): Port device team_slave_0 removed [ 772.223518][ T5984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 772.373891][T14544] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2505'. [ 772.405836][ T5984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 772.873640][T14540] loop3: detected capacity change from 0 to 40427 [ 772.922756][T14540] F2FS-fs (loop3): invalid crc value [ 772.978061][T14540] F2FS-fs (loop3): Found nat_bits in checkpoint [ 773.141742][ T51] Bluetooth: hci0: command tx timeout [ 773.281400][T14540] F2FS-fs (loop3): Start checkpoint disabled! [ 773.317091][T14540] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 773.971241][ T5988] kworker/u4:14: attempt to access beyond end of device [ 773.971241][ T5988] loop3: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 774.002832][ T5988] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 774.024014][ T5988] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 774.051802][ T5988] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 774.161059][ T5984] bond0 (unregistering): Released all slaves [ 774.843126][T14558] loop0: detected capacity change from 0 to 40427 [ 774.864717][T14558] F2FS-fs (loop0): invalid crc value [ 774.889167][T14558] F2FS-fs (loop0): Found nat_bits in checkpoint [ 774.976390][T14558] F2FS-fs (loop0): Start checkpoint disabled! [ 774.994238][T14558] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 775.657695][ T1077] kworker/u4:6: attempt to access beyond end of device [ 775.657695][ T1077] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 775.672888][ T1077] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 775.681667][ T1077] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 775.691153][ T1077] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 776.485970][T14457] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 776.516864][T14457] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 776.558570][T14457] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 776.629411][T14457] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 776.936526][T14457] 8021q: adding VLAN 0 to HW filter on device bond0 [ 776.999514][T14457] 8021q: adding VLAN 0 to HW filter on device team0 [ 777.054914][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 777.062089][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 777.080810][T12789] usb 1-1: new high-speed USB device number 97 using dummy_hcd [ 777.113958][ T5984] bridge0: port 2(bridge_slave_1) entered blocking state [ 777.121206][ T5984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 777.320803][T12789] usb 1-1: Using ep0 maxpacket: 8 [ 777.332891][T12789] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 777.351459][T12789] usb 1-1: config 0 has no interface number 0 [ 777.371199][T12789] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 777.411287][T12789] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 777.431009][T12789] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 777.445163][T12789] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 777.455808][T12789] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.510139][T12789] usb 1-1: config 0 descriptor?? [ 777.538916][T12789] ldusb 1-1:0.55: Interrupt in endpoint not found [ 777.799266][T14598] pic_ioport_write: 8 callbacks suppressed [ 777.799284][T14598] kvm: pic: single mode not supported [ 777.827236][T14598] kvm: pic: single mode not supported [ 777.837544][T14598] kvm: pic: single mode not supported [ 777.867463][T14598] kvm: pic: single mode not supported [ 777.901416][T14598] kvm: pic: single mode not supported [ 777.923697][T14598] kvm: pic: single mode not supported [ 777.930254][T14606] loop3: detected capacity change from 0 to 512 [ 777.976513][T14457] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 777.995275][T14606] EXT4-fs: Ignoring removed nobh option [ 778.034954][T14598] kvm: pic: single mode not supported [ 778.035146][T14598] kvm: pic: single mode not supported [ 778.064285][T14606] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 778.076484][T14598] kvm: pic: single mode not supported [ 778.085452][T14598] kvm: pic: single mode not supported [ 778.123199][T14598] kvm: pic: level sensitive irq not supported [ 778.150315][T14457] veth0_vlan: entered promiscuous mode [ 778.169245][T14598] kvm: pic: level sensitive irq not supported [ 778.169729][T14598] kvm: pic: level sensitive irq not supported [ 778.193247][T14598] kvm: pic: non byte write [ 778.213433][T14457] veth1_vlan: entered promiscuous mode [ 778.245527][T14598] kvm: pic: non byte write [ 778.246064][T14606] EXT4-fs warning (device loop3): ext4_multi_mount_protect:292: Invalid MMP block in superblock [ 778.315458][T14457] veth0_macvtap: entered promiscuous mode [ 778.378060][T14457] veth1_macvtap: entered promiscuous mode [ 778.420109][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.438867][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.478157][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.490233][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.506344][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 778.517728][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.537059][T14457] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 778.537505][T12789] usb 1-1: USB disconnect, device number 97 [ 778.588728][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.620764][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.644694][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.665056][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.706516][T14457] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 778.732224][T14457] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 778.773693][T14457] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 778.795869][T14457] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.805033][T14457] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.826341][T14457] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.835796][T14457] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 778.958493][T10653] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 778.970745][ T8823] usb 2-1: new high-speed USB device number 114 using dummy_hcd [ 778.988977][T10653] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.015787][T10653] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 779.024593][T10653] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 779.051536][ T8830] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 779.170698][T12789] usb 1-1: new high-speed USB device number 98 using dummy_hcd [ 779.173130][ T8823] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 779.192594][ T8823] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 779.207110][ T8823] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 779.226044][ T8823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 779.239441][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2493'. [ 779.243846][ T8823] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 779.268745][ T8830] usb 4-1: Using ep0 maxpacket: 16 [ 779.275186][T14629] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2493'. [ 779.276416][ T8830] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 779.295379][T14629] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2493'. [ 779.318297][ T8823] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 779.333705][ T8823] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 779.343938][ T8830] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 779.354648][ T8830] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 779.364422][ T8823] usb 2-1: Product: syz [ 779.368730][ T8823] usb 2-1: Manufacturer: syz [ 779.372595][T12789] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 779.401277][ T8830] usb 4-1: Product: syz [ 779.411515][ T8830] usb 4-1: Manufacturer: syz [ 779.416560][ T8823] cdc_wdm 2-1:1.0: skipping garbage [ 779.422696][ T8830] usb 4-1: SerialNumber: syz [ 779.427448][ T8823] cdc_wdm 2-1:1.0: skipping garbage [ 779.445897][ T8830] usb 4-1: config 0 descriptor?? [ 779.446760][T12789] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 779.454725][ T8823] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 779.477492][T12789] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 779.477719][ T8823] cdc_wdm 2-1:1.0: Unknown control protocol [ 779.495099][ T8830] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 779.506581][ T8830] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 779.517471][T12789] usb 1-1: Product: syz [ 779.529237][T12789] usb 1-1: Manufacturer: syz [ 779.540499][T12789] usb 1-1: SerialNumber: syz [ 779.650226][ T8823] usb 2-1: USB disconnect, device number 114 [ 779.797239][T12789] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 98 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 780.098164][ T8830] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 780.523867][ T8830] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 780.554236][ T8830] em28xx 4-1:0.0: board has no eeprom [ 780.856268][T13857] usb 1-1: USB disconnect, device number 98 [ 780.869971][T13857] usblp0: removed [ 780.940703][ T8830] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 780.948660][ T8830] em28xx 4-1:0.0: dvb set to bulk mode. [ 780.956230][ T8823] em28xx 4-1:0.0: Binding DVB extension [ 782.102407][T14618] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 782.162474][T13857] usb 4-1: USB disconnect, device number 4 [ 782.193623][T13857] em28xx 4-1:0.0: Disconnecting em28xx [ 782.309645][ T8823] em28xx 4-1:0.0: Registering input extension [ 782.330969][T13857] em28xx 4-1:0.0: Closing input extension [ 782.380025][T13857] em28xx 4-1:0.0: Freeing device [ 783.013155][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 783.024439][ T5783] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 783.033368][ T5783] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 783.044752][ T5783] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 783.054981][ T5783] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 783.063020][ T5783] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 783.966176][ T5988] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.062797][T14663] chnl_net:caif_netlink_parms(): no params data found [ 784.111527][T12789] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 784.216107][ T5988] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.332286][T12789] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 784.372361][T12789] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 784.411638][T12789] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 784.460689][T12789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 784.482544][T12789] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 784.512188][T12789] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 784.530882][T12789] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 784.539136][T12789] usb 4-1: Product: syz [ 784.543880][T12789] usb 4-1: Manufacturer: syz [ 784.571124][T12789] cdc_wdm 4-1:1.0: skipping garbage [ 784.577003][T12789] cdc_wdm 4-1:1.0: skipping garbage [ 784.580246][ T5988] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 784.594106][T12789] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 784.600067][T12789] cdc_wdm 4-1:1.0: Unknown control protocol [ 784.773913][T13857] usb 4-1: USB disconnect, device number 5 [ 784.938569][ T5988] team0: Port device netdevsim0 removed [ 784.957483][ T5988] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 785.108703][T14663] bridge0: port 1(bridge_slave_0) entered blocking state [ 785.136098][T14663] bridge0: port 1(bridge_slave_0) entered disabled state [ 785.143860][ T5783] Bluetooth: hci1: command tx timeout [ 785.167011][T14663] bridge_slave_0: entered allmulticast mode [ 785.177432][T14663] bridge_slave_0: entered promiscuous mode [ 785.188184][T14663] bridge0: port 2(bridge_slave_1) entered blocking state [ 785.195661][T14663] bridge0: port 2(bridge_slave_1) entered disabled state [ 785.203400][T14663] bridge_slave_1: entered allmulticast mode [ 785.211308][T14663] bridge_slave_1: entered promiscuous mode [ 785.383384][T14663] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 785.484432][T14663] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 785.570971][T13857] usb 3-1: new high-speed USB device number 118 using dummy_hcd [ 785.588945][T14663] team0: Port device team_slave_0 added [ 785.667751][T14663] team0: Port device team_slave_1 added [ 785.766218][T14663] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 785.781003][T13857] usb 3-1: Using ep0 maxpacket: 16 [ 785.793838][T13857] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 785.819278][T13857] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 785.832605][T13857] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.841382][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 785.870289][T13857] usb 3-1: Product: syz [ 785.880627][T13857] usb 3-1: Manufacturer: syz [ 785.891229][T13857] usb 3-1: SerialNumber: syz [ 785.920128][T13857] usb 3-1: config 0 descriptor?? [ 785.930428][T14663] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 785.959743][T13857] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 785.969568][T13857] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 786.179318][T14663] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 786.206769][T14663] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 786.252109][T14663] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 786.512175][T14663] hsr_slave_0: entered promiscuous mode [ 786.527420][T14663] hsr_slave_1: entered promiscuous mode [ 786.603449][T13857] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 787.042594][T13857] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 787.072912][T13857] em28xx 3-1:0.0: board has no eeprom [ 787.221280][ T5783] Bluetooth: hci1: command tx timeout [ 787.480684][T13857] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 787.554558][T14728] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 787.561160][T14728] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 787.569467][T14728] vhci_hcd vhci_hcd.0: Device attached [ 787.900886][T12789] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 788.895403][T13857] em28xx 3-1:0.0: dvb set to bulk mode. [ 788.905161][T14729] vhci_hcd: connection closed [ 788.906611][T13857] em28xx 3-1:0.0: Binding DVB extension [ 788.922228][T14695] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 788.959746][ T5994] vhci_hcd: stop threads [ 788.975580][T13857] em28xx 3-1:0.0: Registering input extension [ 788.990291][ T5994] vhci_hcd: release socket [ 789.010833][ T5994] vhci_hcd: disconnect device [ 789.034961][T12790] usb 3-1: USB disconnect, device number 118 [ 789.078327][T12790] em28xx 3-1:0.0: Disconnecting em28xx [ 789.140615][T12790] em28xx 3-1:0.0: Closing input extension [ 789.195033][T12790] em28xx 3-1:0.0: Freeing device [ 789.300987][ T5783] Bluetooth: hci1: command tx timeout [ 790.056780][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2541'. [ 790.084133][T14752] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2541'. [ 790.160764][ T8828] usb 3-1: new high-speed USB device number 119 using dummy_hcd [ 790.216519][ T5988] hsr_slave_0: left promiscuous mode [ 790.237732][ T5988] hsr_slave_1: left promiscuous mode [ 790.266725][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 790.280715][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 790.302884][ T5988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 790.315332][ T5988] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 790.333284][ T5988] bridge_slave_1: left allmulticast mode [ 790.347012][ T5988] bridge_slave_1: left promiscuous mode [ 790.372820][ T5988] bridge0: port 2(bridge_slave_1) entered disabled state [ 790.373040][ T8828] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 790.403200][ T5988] bridge_slave_0: left allmulticast mode [ 790.409368][ T8828] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 790.419423][ T5988] bridge_slave_0: left promiscuous mode [ 790.441128][ T8828] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 790.451584][ T5988] bridge0: port 1(bridge_slave_0) entered disabled state [ 790.469257][ T8828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 790.508773][ T8828] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 790.543583][ T8828] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 790.565410][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 790.582298][ T5988] veth1_macvtap: left promiscuous mode [ 790.583839][ T8828] usb 3-1: Product: syz [ 790.590864][ T5988] veth0_macvtap: left promiscuous mode [ 790.596504][ T8828] usb 3-1: Manufacturer: syz [ 790.601435][ T5988] veth1_vlan: left promiscuous mode [ 790.608097][ T5988] veth0_vlan: left promiscuous mode [ 790.619939][ T8828] cdc_wdm 3-1:1.0: skipping garbage [ 790.628475][ T8828] cdc_wdm 3-1:1.0: skipping garbage [ 790.666462][ T8828] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 790.677452][ T8828] cdc_wdm 3-1:1.0: Unknown control protocol [ 790.871158][ T8828] usb 3-1: USB disconnect, device number 119 [ 791.389386][ T5783] Bluetooth: hci1: command tx timeout [ 791.520832][ T8823] usb 2-1: new high-speed USB device number 115 using dummy_hcd [ 791.710639][ T8823] usb 2-1: Using ep0 maxpacket: 16 [ 791.742358][ T8823] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 791.757178][ T8823] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 791.792916][ T8823] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.810775][ T8823] usb 2-1: Product: syz [ 791.832620][ T8823] usb 2-1: Manufacturer: syz [ 791.837428][ T8823] usb 2-1: SerialNumber: syz [ 791.859109][ T8823] usb 2-1: config 0 descriptor?? [ 791.868409][ T8823] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 791.911978][ T8823] em28xx 2-1:0.0: DVB interface 0 found: bulk [ 792.471051][ T8823] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 792.851090][ T5988] team0 (unregistering): Port device team_slave_1 removed [ 792.893951][ T8823] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 792.909867][ T8823] em28xx 2-1:0.0: board has no eeprom [ 792.968271][ T5988] team0 (unregistering): Port device team_slave_0 removed [ 793.075921][ T5988] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 793.180895][ T8821] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 793.228499][ T5988] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 793.290868][ T8823] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 793.304747][ T8823] em28xx 2-1:0.0: dvb set to bulk mode. [ 793.310519][T13857] em28xx 2-1:0.0: Binding DVB extension [ 793.390948][ T8821] usb 4-1: Using ep0 maxpacket: 16 [ 793.482016][ T8821] usb 4-1: config 0 has no interfaces? [ 793.498279][ T8821] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 793.508619][ T8821] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 793.530405][ T8821] usb 4-1: Manufacturer: syz [ 793.562699][ T8821] usb 4-1: config 0 descriptor?? [ 793.865596][T14786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2548'. [ 794.020719][T12789] vhci_hcd: vhci_device speed not set [ 794.259159][ T5988] bond0 (unregistering): Released all slaves [ 794.458643][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 794.467845][T14789] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2549'. [ 794.506291][T14776] em28xx 2-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 794.524415][ T8823] usb 2-1: USB disconnect, device number 115 [ 794.531879][ T8823] em28xx 2-1:0.0: Disconnecting em28xx [ 794.718430][T13857] em28xx 2-1:0.0: Registering input extension [ 794.773929][ T8823] em28xx 2-1:0.0: Closing input extension [ 794.868757][ T8823] em28xx 2-1:0.0: Freeing device [ 794.941816][T14663] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 794.990913][T12790] usb 3-1: new full-speed USB device number 120 using dummy_hcd [ 795.033271][T14663] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 795.071750][T14663] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 795.166032][T14663] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 795.193472][T12790] usb 3-1: unable to get BOS descriptor or descriptor too short [ 795.202151][T12790] usb 3-1: not running at top speed; connect to a high speed hub [ 795.243415][T12790] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 795.274726][T12790] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 795.298832][ T5988] IPVS: stop unused estimator thread 0... [ 795.317465][T12790] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.354787][T12790] usb 3-1: Product: syz [ 795.378146][T12790] usb 3-1: Manufacturer: syz [ 795.439454][T12790] usb 3-1: SerialNumber: syz [ 795.587994][T14663] 8021q: adding VLAN 0 to HW filter on device bond0 [ 795.738823][T14663] 8021q: adding VLAN 0 to HW filter on device team0 [ 795.849769][ T1077] bridge0: port 1(bridge_slave_0) entered blocking state [ 795.857055][ T1077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 796.007437][T12790] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 796.034158][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 796.041409][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 796.049857][T12790] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 796.064552][T12790] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 796.097086][T12790] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 796.155926][T12790] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 796.251061][T12790] usb 3-1: USB disconnect, device number 120 [ 796.354113][T14184] udevd[14184]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 796.644739][T12790] usb 4-1: USB disconnect, device number 6 [ 796.884267][T14663] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 797.694389][T14663] veth0_vlan: entered promiscuous mode [ 798.250043][T14663] veth1_vlan: entered promiscuous mode [ 798.378143][T14663] veth0_macvtap: entered promiscuous mode [ 798.434773][T14663] veth1_macvtap: entered promiscuous mode [ 798.505528][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.530672][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.542146][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.571170][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.596134][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 798.615477][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.635022][T14663] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 798.680672][T13857] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 798.683703][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.760965][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.816336][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.845742][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.859191][T14663] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 798.871047][T14663] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 798.893811][T14663] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 798.901620][T13857] usb 4-1: Using ep0 maxpacket: 16 [ 798.915959][T13857] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 798.952948][T14663] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 798.976449][T13857] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 798.993895][T14663] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.011430][T13857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 799.034209][T14663] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.047273][T13857] usb 4-1: Product: syz [ 799.052801][T14663] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 799.063033][T13857] usb 4-1: Manufacturer: syz [ 799.068035][T13857] usb 4-1: SerialNumber: syz [ 799.095930][T13857] usb 4-1: config 0 descriptor?? [ 799.124037][T13857] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 799.152365][T13857] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 799.236267][ T1077] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.251221][ T1077] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.399760][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 799.410375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 799.760807][T13857] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 799.941734][ T8828] usb 1-1: new high-speed USB device number 99 using dummy_hcd [ 800.140813][ T8829] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 800.153593][ T8828] usb 1-1: Using ep0 maxpacket: 8 [ 800.187873][ T8828] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 800.213399][ T8828] usb 1-1: config 0 has no interface number 0 [ 800.236265][T13857] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 800.246997][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 800.258921][T13857] em28xx 4-1:0.0: board has no eeprom [ 800.266121][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 800.283458][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 800.303471][ T8828] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 800.318319][T14877] Bluetooth: MGMT ver 1.22 [ 800.323688][ T8828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 800.332928][T14877] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 800.360613][ T8828] usb 1-1: config 0 descriptor?? [ 800.370782][ T8829] usb 2-1: Using ep0 maxpacket: 16 [ 800.397499][ T8828] ldusb 1-1:0.55: Interrupt in endpoint not found [ 800.414476][ T8829] usb 2-1: config 0 has no interfaces? [ 800.449127][ T8829] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 800.459138][ T8829] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 800.500986][ T8829] usb 2-1: Manufacturer: syz [ 800.561228][ T8829] usb 2-1: config 0 descriptor?? [ 800.640777][T13857] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 800.716814][T13857] em28xx 4-1:0.0: dvb set to bulk mode. [ 800.753526][ T8829] em28xx 4-1:0.0: Binding DVB extension [ 800.897840][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2560'. [ 801.375634][T14886] loop2: detected capacity change from 0 to 40427 [ 801.376335][T12789] usb 1-1: USB disconnect, device number 99 [ 801.459859][T14886] F2FS-fs (loop2): invalid crc value [ 801.505826][T14886] F2FS-fs (loop2): Found nat_bits in checkpoint [ 801.542677][T14845] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 801.644793][ T8821] usb 4-1: USB disconnect, device number 7 [ 801.667260][T14886] F2FS-fs (loop2): Start checkpoint disabled! [ 801.682404][ T8821] em28xx 4-1:0.0: Disconnecting em28xx [ 801.700364][T14886] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 801.811431][ T8829] em28xx 4-1:0.0: Registering input extension [ 801.817877][ T8821] em28xx 4-1:0.0: Closing input extension [ 802.018778][ T8821] em28xx 4-1:0.0: Freeing device [ 802.157002][ T5984] kworker/u4:12: attempt to access beyond end of device [ 802.157002][ T5984] loop2: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 802.180718][ T5984] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 802.231478][ T5984] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 802.254807][ T5984] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 804.060495][T12789] usb 2-1: USB disconnect, device number 116 [ 804.671034][ T8823] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 805.170496][T14920] loop2: detected capacity change from 0 to 32768 [ 805.186176][T13857] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 805.194697][T14920] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.2576 (14920) [ 805.236206][T14920] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 805.247188][T14920] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 805.256202][T14920] BTRFS info (device loop2): turning on sync discard [ 805.264804][T14920] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 805.274905][T14920] BTRFS info (device loop2): use zstd compression, level 3 [ 805.282435][T14920] BTRFS info (device loop2): turning on async discard [ 805.289596][T14920] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 805.300578][T14920] BTRFS info (device loop2): trying to use backup root at mount time [ 805.308707][T14920] BTRFS info (device loop2): force zlib compression, level 3 [ 805.316546][T14920] BTRFS info (device loop2): using free space tree [ 805.327837][ T8823] usb 2-1: Using ep0 maxpacket: 8 [ 805.336253][T14918] loop0: detected capacity change from 0 to 40427 [ 805.336702][ T8823] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 805.354482][ T8823] usb 2-1: config 0 has no interface number 0 [ 805.361943][ T8823] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 805.373802][ T8823] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 805.384911][ T8823] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 805.399156][ T8823] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 805.412790][ T8823] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.415039][T14918] F2FS-fs (loop0): invalid crc value [ 805.428472][ T8823] usb 2-1: config 0 descriptor?? [ 805.438564][T13857] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 805.465962][T14918] F2FS-fs (loop0): Found nat_bits in checkpoint [ 805.468169][ T8823] ldusb 2-1:0.55: Interrupt in endpoint not found [ 805.489975][ T5994] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 805.503937][T13857] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 805.517612][T13857] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 805.527418][T14920] BTRFS error (device loop2): failed to load root extent [ 805.534652][T14920] BTRFS warning (device loop2): try to load backup roots slot 1 [ 805.543663][T13857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 805.544679][ T42] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 805.572832][T14917] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 805.601603][T13857] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 805.613819][T14920] BTRFS warning (device loop2): couldn't read tree root [ 805.622045][T14920] BTRFS warning (device loop2): try to load backup roots slot 2 [ 805.630126][ T5994] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 805.656125][T14920] BTRFS warning (device loop2): couldn't read tree root [ 805.663420][T14920] BTRFS warning (device loop2): try to load backup roots slot 3 [ 805.692645][T14918] F2FS-fs (loop0): Start checkpoint disabled! [ 805.717266][T14920] BTRFS info (device loop2): enabling ssd optimizations [ 805.727615][T14920] BTRFS info (device loop2): rebuilding free space tree [ 805.784761][T14918] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 805.807727][T14920] BTRFS info (device loop2): checking UUID tree [ 805.970778][T13857] usb 4-1: USB disconnect, device number 8 [ 806.392325][T12790] usb 2-1: USB disconnect, device number 117 [ 806.617492][T14457] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 806.686251][ T5984] kworker/u4:12: attempt to access beyond end of device [ 806.686251][ T5984] loop0: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 806.703006][ T5984] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 806.705747][T14946] input: syz1 as /devices/virtual/input/input55 [ 806.730643][ T5984] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 806.739291][ T5984] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 807.270699][T12789] usb 2-1: new high-speed USB device number 118 using dummy_hcd [ 807.392034][T14954] ipvlan2: entered promiscuous mode [ 807.397407][T14954] ipvlan2: entered allmulticast mode [ 807.415604][T14954] gretap0: entered allmulticast mode [ 807.480694][T12789] usb 2-1: Using ep0 maxpacket: 16 [ 807.510454][T12789] usb 2-1: config 0 has no interfaces? [ 807.521108][T12789] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 807.541013][T12789] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 807.551155][T12789] usb 2-1: Manufacturer: syz [ 807.558555][T12789] usb 2-1: config 0 descriptor?? [ 807.605746][T14959] ip6gretap0: entered promiscuous mode [ 807.613759][T14959] macvtap1: entered allmulticast mode [ 807.619373][T14959] ip6gretap0: entered allmulticast mode [ 807.631217][ T8828] usb 3-1: new high-speed USB device number 121 using dummy_hcd [ 807.640472][T14959] ip6gretap0: left allmulticast mode [ 807.648790][T14959] ip6gretap0: left promiscuous mode [ 807.830675][ T8828] usb 3-1: Using ep0 maxpacket: 16 [ 807.866440][ T8828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 807.926719][ T8828] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 807.980159][ T8828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 808.018948][ T8828] usb 3-1: Product: syz [ 808.059860][ T8828] usb 3-1: Manufacturer: syz [ 808.100040][ T8828] usb 3-1: SerialNumber: syz [ 808.118119][ T8828] usb 3-1: config 0 descriptor?? [ 808.134886][ T8828] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 808.146833][ T8828] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 808.570677][T13857] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 808.736219][ T8828] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 808.750692][T13857] usb 4-1: Using ep0 maxpacket: 8 [ 808.762776][T13857] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 808.777487][T13857] usb 4-1: config 0 has no interface number 0 [ 808.791787][T13857] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 808.818578][T13857] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 808.839965][T13857] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 808.860340][T13857] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 808.873168][T13857] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 808.884686][T13857] usb 4-1: config 0 descriptor?? [ 808.895503][T13857] ldusb 4-1:0.55: Interrupt in endpoint not found [ 808.987221][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.993658][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.169026][ T8828] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 809.193664][ T8828] em28xx 3-1:0.0: board has no eeprom [ 809.585730][ T8828] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 809.599433][ T8828] em28xx 3-1:0.0: dvb set to bulk mode. [ 809.617260][T13857] em28xx 3-1:0.0: Binding DVB extension [ 809.748434][ T8823] usb 4-1: USB disconnect, device number 9 [ 809.950104][ T8832] usb 2-1: USB disconnect, device number 118 [ 810.122323][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2591'. [ 810.138005][T14985] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2591'. [ 810.516832][T14956] em28xx 3-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 810.655115][ T8823] usb 3-1: USB disconnect, device number 121 [ 810.667987][T13857] em28xx 3-1:0.0: Registering input extension [ 810.681999][ T8823] em28xx 3-1:0.0: Disconnecting em28xx [ 810.706632][ T8823] em28xx 3-1:0.0: Closing input extension [ 810.740791][ T8823] em28xx 3-1:0.0: Freeing device [ 810.960907][ T8821] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 811.097844][T13857] usb 1-1: new high-speed USB device number 100 using dummy_hcd [ 811.172796][ T8821] usb 4-1: config index 0 descriptor too short (expected 28277, got 36) [ 811.182446][ T8821] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 811.210688][ T8821] usb 4-1: config 0 has no interfaces? [ 811.222885][ T8821] usb 4-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 811.243484][ T8821] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.272387][ T8821] usb 4-1: config 0 descriptor?? [ 811.292677][T13857] usb 1-1: Using ep0 maxpacket: 8 [ 811.294895][T13857] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 811.294926][T13857] usb 1-1: config 0 has no interface number 0 [ 811.294968][T13857] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 811.294995][T13857] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 811.295019][T13857] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 811.295064][T13857] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 811.295089][T13857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.297773][T13857] usb 1-1: config 0 descriptor?? [ 811.318086][T13857] ldusb 1-1:0.55: Interrupt in endpoint not found [ 811.710673][ T8821] usb 2-1: new high-speed USB device number 119 using dummy_hcd [ 811.951095][ T8821] usb 2-1: Using ep0 maxpacket: 16 [ 811.963591][ T8821] usb 2-1: config 0 has no interfaces? [ 811.974504][ T8821] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 811.984252][ T8821] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 812.000761][ T8821] usb 2-1: Manufacturer: syz [ 812.009839][ T8821] usb 2-1: config 0 descriptor?? [ 812.090792][ T8823] usb 3-1: new full-speed USB device number 122 using dummy_hcd [ 812.282848][ T8823] usb 3-1: unable to get BOS descriptor or descriptor too short [ 812.306817][ T8823] usb 3-1: not running at top speed; connect to a high speed hub [ 812.330350][ T8832] usb 1-1: USB disconnect, device number 100 [ 812.350828][ T8823] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 812.383769][ T8823] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 812.429328][ T8823] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.457452][ T8823] usb 3-1: Product: syz [ 812.468225][ T8823] usb 3-1: Manufacturer: syz [ 812.477637][ T8823] usb 3-1: SerialNumber: syz [ 812.657029][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2602'. [ 812.668525][T15017] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2602'. [ 812.896657][ T8823] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 812.988672][ T8823] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 813.008827][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.019964][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.029838][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.040806][ T8823] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 813.052360][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.063212][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.070748][ T8823] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 813.079075][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.088124][ T8823] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 813.092499][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.096842][ T8823] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 813.114231][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.122451][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.130199][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.142057][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.155637][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.173259][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.182197][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.189955][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.200125][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.209970][ T8821] hid-generic 0006:0004:0009.0014: unknown main item tag 0x0 [ 813.227421][ T8821] hid-generic 0006:0004:0009.0014: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0 [ 813.329043][ T8823] usb 3-1: USB disconnect, device number 122 [ 813.405550][T14188] udevd[14188]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 813.476190][T15026] fido_id[15026]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 813.629614][ T8821] usb 4-1: USB disconnect, device number 10 [ 813.760133][T15032] loop2: detected capacity change from 0 to 1024 [ 814.977972][T13857] usb 2-1: USB disconnect, device number 119 [ 814.987912][ T12] hfsplus: b-tree write err: -5, ino 3 [ 815.172938][ T8832] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 815.461308][ T8821] usb 3-1: new high-speed USB device number 123 using dummy_hcd [ 815.520745][ T8832] usb 4-1: Using ep0 maxpacket: 16 [ 815.528124][ T8832] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 815.541356][ T8832] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 815.551452][ T8832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.559691][ T8832] usb 4-1: Product: syz [ 815.564732][ T8832] usb 4-1: Manufacturer: syz [ 815.569416][ T8832] usb 4-1: SerialNumber: syz [ 815.834871][ T8832] usb 4-1: config 0 descriptor?? [ 816.360953][ T8832] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 816.391282][ T8832] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 816.528079][T15054] loop1: detected capacity change from 0 to 128 [ 816.551541][ T8821] usb 3-1: Using ep0 maxpacket: 8 [ 816.562374][ T8821] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 816.579777][ T8821] usb 3-1: config 0 has no interface number 0 [ 816.589726][T15054] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 816.601373][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 816.616024][T15054] ext4 filesystem being mounted at /123/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 816.622279][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 816.650642][ T8821] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 816.666366][ T8821] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 816.677206][ T8821] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.700892][ T8821] usb 3-1: config 0 descriptor?? [ 816.711687][ T8821] ldusb 3-1:0.55: Interrupt in endpoint not found [ 816.720737][ T8828] usb 1-1: new full-speed USB device number 101 using dummy_hcd [ 816.767075][T12856] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 816.806405][ T8832] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 816.923666][ T8828] usb 1-1: unable to get BOS descriptor or descriptor too short [ 816.945391][ T8828] usb 1-1: not running at top speed; connect to a high speed hub [ 816.956033][ T8828] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 816.976539][ T8828] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 816.986101][ T8828] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 817.003742][ T8828] usb 1-1: Product: syz [ 817.008219][ T8828] usb 1-1: Manufacturer: syz [ 817.013156][ T8828] usb 1-1: SerialNumber: syz [ 817.026344][T15060] input: syz1 as /devices/virtual/input/input57 [ 817.146138][T15060] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 817.155517][T15060] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3089888063 (3089888063 ns) > initial count (2126324423 ns). Using initial count to start timer. [ 817.236468][ T8832] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 817.258169][ T8832] em28xx 4-1:0.0: board has no eeprom [ 817.374289][ T8828] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 817.386385][ T8828] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 817.395219][ T8828] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 817.405788][ T8828] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 817.426640][ T8828] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 817.435837][ T8828] usb 1-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 817.830811][ T8832] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 817.980298][ T8832] em28xx 4-1:0.0: dvb set to bulk mode. [ 818.156949][ T8829] em28xx 4-1:0.0: Binding DVB extension [ 818.211049][T12789] usb 3-1: USB disconnect, device number 123 [ 818.310679][ T8828] usb 1-1: USB disconnect, device number 101 [ 818.455431][T14018] udevd[14018]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 818.880079][T15080] loop0: detected capacity change from 0 to 32768 [ 818.895288][T15035] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 818.908087][T15080] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.2621 (15080) [ 818.932115][T15080] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 818.942364][T15080] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 818.951176][T15080] BTRFS info (device loop0): turning on sync discard [ 818.957852][T15080] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 818.967474][T15080] BTRFS info (device loop0): use zstd compression, level 3 [ 818.974761][T15080] BTRFS info (device loop0): turning on async discard [ 818.982493][T15080] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 818.993410][T15080] BTRFS info (device loop0): trying to use backup root at mount time [ 819.001542][T15080] BTRFS info (device loop0): force zlib compression, level 3 [ 819.009377][T15080] BTRFS info (device loop0): using free space tree [ 819.594776][ T8828] usb 4-1: USB disconnect, device number 11 [ 819.630244][ T8828] em28xx 4-1:0.0: Disconnecting em28xx [ 819.659755][ T1077] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 819.697916][ T8829] em28xx 4-1:0.0: Registering input extension [ 819.713920][ T8828] em28xx 4-1:0.0: Closing input extension [ 819.742733][T15080] BTRFS error (device loop0): failed to load root extent [ 819.749971][T15080] BTRFS warning (device loop0): try to load backup roots slot 1 [ 819.759861][ T42] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 819.799918][T15080] BTRFS warning (device loop0): couldn't read tree root [ 819.809924][T15080] BTRFS warning (device loop0): try to load backup roots slot 2 [ 819.819868][ T12] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 819.826182][ T8828] em28xx 4-1:0.0: Freeing device [ 819.853336][T15080] BTRFS warning (device loop0): couldn't read tree root [ 819.860373][T15080] BTRFS warning (device loop0): try to load backup roots slot 3 [ 819.893332][T15080] BTRFS info (device loop0): enabling ssd optimizations [ 819.909497][T15080] BTRFS info (device loop0): rebuilding free space tree [ 819.941832][T15080] BTRFS info (device loop0): checking UUID tree [ 820.259736][T14663] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 820.832373][ T8832] usb 4-1: new full-speed USB device number 12 using dummy_hcd [ 821.010065][ T8828] usb 1-1: new high-speed USB device number 102 using dummy_hcd [ 821.941000][ T8832] usb 4-1: unable to get BOS descriptor or descriptor too short [ 821.965874][ T8832] usb 4-1: not running at top speed; connect to a high speed hub [ 822.001145][ T8832] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 822.114849][ T8832] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 822.145146][ T8832] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.154815][ T8828] usb 1-1: Using ep0 maxpacket: 8 [ 822.171100][ T8828] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 822.179419][ T8828] usb 1-1: config 0 has no interface number 0 [ 822.219478][ T8832] usb 4-1: Product: syz [ 822.224213][ T8832] usb 4-1: Manufacturer: syz [ 822.228854][ T8832] usb 4-1: SerialNumber: syz [ 822.233729][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 822.259047][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2634'. [ 822.280999][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 822.292066][T15129] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2634'. [ 822.306966][ T8828] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 822.323174][ T8828] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 822.326795][T15129] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2634'. [ 822.368333][ T8828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.391482][ T8828] usb 1-1: config 0 descriptor?? [ 822.403303][ T8828] ldusb 1-1:0.55: Interrupt in endpoint not found [ 822.433932][T15131] input: syz1 as /devices/virtual/input/input59 [ 822.728704][ T8832] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 822.749822][ T8832] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 822.766557][ T8832] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 822.788490][ T8832] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 822.806680][ T8832] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 822.816140][ T8832] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 822.862969][ T8832] usb 4-1: USB disconnect, device number 12 [ 822.913146][T14188] udevd[14188]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 823.127212][T15142] loop2: detected capacity change from 0 to 2048 [ 823.192460][T15142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 823.239839][ T8828] usb 1-1: USB disconnect, device number 102 [ 823.265359][T15142] ext4 filesystem being mounted at /28/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 823.352908][T15140] loop1: detected capacity change from 0 to 40427 [ 823.372336][T15140] F2FS-fs (loop1): invalid crc value [ 823.380372][T15140] F2FS-fs (loop1): Found nat_bits in checkpoint [ 823.544528][T14457] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 823.553121][T15140] F2FS-fs (loop1): Start checkpoint disabled! [ 823.580831][T15140] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 825.930874][ T1077] kworker/u4:6: attempt to access beyond end of device [ 825.930874][ T1077] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 826.116855][ T1077] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 826.164983][ T1077] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 826.244830][T15174] loop2: detected capacity change from 0 to 128 [ 826.311894][T15174] hpfs: filesystem error: improperly stopped; already mounted read-only [ 826.345731][T15174] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 826.368170][T15174] hpfs: You really don't want any checks? You are crazy... [ 826.400437][T15174] hpfs: hpfs_map_sector(): read error [ 826.420982][T15174] hpfs: code page support is disabled [ 826.428475][T15174] ================================================================== [ 826.436718][T15174] BUG: KASAN: use-after-free in strcmp+0x6b/0xb0 [ 826.443191][T15174] Read of size 1 at addr ffff88805b865406 by task syz.2.2645/15174 [ 826.451121][T15174] [ 826.453478][T15174] CPU: 1 PID: 15174 Comm: syz.2.2645 Not tainted syzkaller #0 [ 826.461053][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 826.471148][T15174] Call Trace: [ 826.474459][T15174] [ 826.477455][T15174] dump_stack_lvl+0x18c/0x250 [ 826.482233][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 826.487468][T15174] ? show_regs_print_info+0x20/0x20 [ 826.493230][T15174] ? load_image+0x400/0x400 [ 826.497862][T15174] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 826.503454][T15174] ? __virt_addr_valid+0x18c/0x540 [ 826.508605][T15174] ? __virt_addr_valid+0x469/0x540 [ 826.513758][T15174] print_report+0xa8/0x210 [ 826.518222][T15174] ? strcmp+0x6b/0xb0 [ 826.522240][T15174] kasan_report+0x117/0x150 [ 826.526956][T15174] ? strcmp+0x6b/0xb0 [ 826.530886][ T8839] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 826.531053][T15174] strcmp+0x6b/0xb0 [ 826.542561][T15174] hpfs_get_ea+0x135/0xed0 [ 826.547033][T15174] ? hpfs_read_ea+0xc20/0xc20 [ 826.551965][T15174] ? __getblk_gfp+0x54/0x660 [ 826.556623][T15174] ? __bread_gfp+0x64/0x330 [ 826.561179][T15174] ? hpfs_map_sector+0x14f/0x370 [ 826.566270][T15174] ? hpfs_map_fnode+0x27e/0x690 [ 826.571265][T15174] hpfs_read_inode+0x1a7/0x1050 [ 826.576165][T15174] ? iget_locked+0x733/0x840 [ 826.580878][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 826.586058][T15174] ? hpfs_init_inode+0x2d0/0x2d0 [ 826.591318][T15174] ? security_inode_alloc+0xc1/0x110 [ 826.596746][T15174] ? do_raw_spin_unlock+0x121/0x230 [ 826.602191][T15174] ? hpfs_init_inode+0x1d0/0x2d0 [ 826.607348][T15174] hpfs_fill_super+0x135e/0x1fe0 [ 826.612452][T15174] ? hpfs_mount+0x40/0x40 [ 826.617166][T15174] ? vscnprintf+0x80/0x80 [ 826.621562][T15174] ? down_read_killable+0x340/0x340 [ 826.627168][T15174] ? setup_bdev_super+0x56b/0x660 [ 826.632372][T15174] mount_bdev+0x221/0x2d0 [ 826.636751][T15174] ? hpfs_mount+0x40/0x40 [ 826.641209][T15174] ? get_tree_bdev+0x520/0x520 [ 826.646098][T15174] ? vfs_parse_fs_param+0x420/0x420 [ 826.651342][T15174] legacy_get_tree+0xea/0x180 [ 826.656064][T15174] ? hpfs_ioctl+0x270/0x270 [ 826.660630][T15174] vfs_get_tree+0x8c/0x280 [ 826.665108][T15174] do_new_mount+0x24b/0xa40 [ 826.669744][T15174] __se_sys_mount+0x2e7/0x3d0 [ 826.674563][T15174] ? __x64_sys_mount+0xc0/0xc0 [ 826.675797][T15176] input: syz1 as /devices/virtual/input/input60 [ 826.679455][T15174] ? lockdep_hardirqs_on+0x98/0x150 [ 826.679490][T15174] ? __x64_sys_mount+0x20/0xc0 [ 826.679512][T15174] do_syscall_64+0x55/0xa0 [ 826.700774][T15174] ? clear_bhb_loop+0x40/0x90 [ 826.705773][T15174] ? clear_bhb_loop+0x40/0x90 [ 826.710599][T15174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.716631][T15174] RIP: 0033:0x7efd40f9da8a [ 826.721175][T15174] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 826.741198][T15174] RSP: 002b:00007efd41f02e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 826.749668][T15174] RAX: ffffffffffffffda RBX: 00007efd41f02ee0 RCX: 00007efd40f9da8a [ 826.757851][T15174] RDX: 0000200000000080 RSI: 0000200000009ec0 RDI: 00007efd41f02ea0 [ 826.765918][T15174] RBP: 0000200000000080 R08: 00007efd41f02ee0 R09: 0000000003a00041 [ 826.773909][T15174] R10: 0000000003a00041 R11: 0000000000000246 R12: 0000200000009ec0 [ 826.782100][T15174] R13: 00007efd41f02ea0 R14: 0000000000009e3e R15: 0000200000000040 [ 826.782265][ T8839] usb 4-1: Using ep0 maxpacket: 8 [ 826.790269][T15174] [ 826.790282][T15174] [ 826.790287][T15174] The buggy address belongs to the physical page: [ 826.790297][T15174] page:ffffea00016e1940 refcount:2 mapcount:1 mapping:ffff88802642b2d8 index:0x97e pfn:0x5b865 [ 826.790320][T15174] memcg:ffff88801db4c000 [ 826.790330][T15174] aops:shmem_aops ino:9e dentry name(?):"dev/zero" [ 826.790356][T15174] flags: 0xfff8000008002c(referenced|uptodate|lru|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 826.790374][T15174] page_type: 0x0() [ 826.790393][T15174] raw: 00fff8000008002c ffffea00016e1908 ffffea00013a9288 ffff88802642b2d8 [ 826.790409][T15174] raw: 000000000000097e 0000000000000000 0000000200000000 ffff88801db4c000 [ 826.790419][T15174] page dumped because: kasan: bad access detected [ 826.790429][T15174] page_owner tracks the page as allocated [ 826.790437][T15174] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 15166, tgid 15165 (syz.0.2643), ts 826441218817, free_ts 824296614884 [ 826.790471][T15174] post_alloc_hook+0x1c1/0x200 [ 826.810619][ T8839] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 826.818658][T15174] get_page_from_freelist+0x1951/0x19e0 [ 826.818697][T15174] __alloc_pages+0x1f0/0x460 [ 826.818714][T15174] __folio_alloc+0x10/0x20 [ 826.818729][T15174] vma_alloc_folio+0x47a/0x8f0 [ 826.818747][T15174] shmem_alloc_folio+0x1a9/0x2a0 [ 826.818763][T15174] shmem_alloc_and_acct_folio+0x1e6/0x6d0 [ 826.836874][ T8839] usb 4-1: config 0 has no interface number 0 [ 826.840041][T15174] shmem_get_folio_gfp+0xcde/0x2aa0 [ 826.840076][T15174] shmem_fault+0x1b8/0x810 [ 826.840095][T15174] __do_fault+0x13b/0x4d0 [ 826.840112][T15174] handle_mm_fault+0x2299/0x4c00 [ 826.840128][T15174] __get_user_pages+0x5d0/0x1380 [ 826.840147][T15174] populate_vma_page_range+0x2c1/0x380 [ 826.840166][T15174] __mm_populate+0x260/0x390 [ 826.840185][T15174] vm_mmap_pgoff+0x2da/0x3f0 [ 826.840206][T15174] do_syscall_64+0x55/0xa0 [ 826.840231][T15174] page last free stack trace: [ 826.840238][T15174] free_unref_page_prepare+0x7b2/0x8c0 [ 826.851239][ T8839] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 826.852743][T15174] free_unref_page_list+0xbe/0x860 [ 826.852778][T15174] release_pages+0x1f7a/0x2200 [ 826.870690][ T8839] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 826.873992][T15174] tlb_flush_mmu+0x379/0x510 [ 826.874027][T15174] tlb_finish_mmu+0xf9/0x220 [ 826.874051][T15174] exit_mmap+0x428/0xb90 [ 826.874074][T15174] __mmput+0x118/0x3c0 [ 826.874090][T15174] exit_mm+0x1f2/0x2c0 [ 826.913970][ T8839] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 826.915530][T15174] do_exit+0x8dd/0x2460 [ 826.915563][T15174] __ia32_sys_exit+0x0/0x40 [ 826.923573][ T8839] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 826.924862][T15174] do_syscall_64+0x55/0xa0 [ 826.924897][T15174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 826.932222][ T8839] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.935909][T15174] [ 826.935917][T15174] Memory state around the buggy address: [ 826.935929][T15174] ffff88805b865300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 826.935943][T15174] ffff88805b865380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 826.935956][T15174] >ffff88805b865400: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 826.935966][T15174] ^ [ 826.935975][T15174] ffff88805b865480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 826.935988][T15174] ffff88805b865500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 826.973078][ T8839] usb 4-1: config 0 descriptor?? [ 826.976395][T15174] ================================================================== [ 827.065923][T15174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 827.065939][T15174] CPU: 1 PID: 15174 Comm: syz.2.2645 Not tainted syzkaller #0 [ 827.065958][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 827.065969][T15174] Call Trace: [ 827.065977][T15174] [ 827.065985][T15174] dump_stack_lvl+0x18c/0x250 [ 827.066018][T15174] ? show_regs_print_info+0x20/0x20 [ 827.066058][T15174] ? load_image+0x400/0x400 [ 827.066085][T15174] panic+0x2dc/0x730 [ 827.066104][T15174] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 827.066127][T15174] ? bpf_jit_dump+0xd0/0xd0 [ 827.066148][T15174] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 827.066169][T15174] ? _raw_spin_unlock+0x40/0x40 [ 827.066190][T15174] ? strcmp+0x6b/0xb0 [ 827.066208][T15174] check_panic_on_warn+0x84/0xa0 [ 827.066229][T15174] ? strcmp+0x6b/0xb0 [ 827.066246][T15174] end_report+0x6f/0x130 [ 827.066266][T15174] kasan_report+0x128/0x150 [ 827.066287][T15174] ? strcmp+0x6b/0xb0 [ 827.066316][T15174] strcmp+0x6b/0xb0 [ 827.066335][T15174] hpfs_get_ea+0x135/0xed0 [ 827.066362][T15174] ? hpfs_read_ea+0xc20/0xc20 [ 827.066385][T15174] ? __getblk_gfp+0x54/0x660 [ 827.066413][T15174] ? __bread_gfp+0x64/0x330 [ 827.066436][T15174] ? hpfs_map_sector+0x14f/0x370 [ 827.066459][T15174] ? hpfs_map_fnode+0x27e/0x690 [ 827.066483][T15174] hpfs_read_inode+0x1a7/0x1050 [ 827.066505][T15174] ? iget_locked+0x733/0x840 [ 827.066524][T15174] ? __lock_acquire+0x7d40/0x7d40 [ 827.066544][T15174] ? hpfs_init_inode+0x2d0/0x2d0 [ 827.066565][T15174] ? security_inode_alloc+0xc1/0x110 [ 827.066590][T15174] ? do_raw_spin_unlock+0x121/0x230 [ 827.066615][T15174] ? hpfs_init_inode+0x1d0/0x2d0 [ 827.066637][T15174] hpfs_fill_super+0x135e/0x1fe0 [ 827.066671][T15174] ? hpfs_mount+0x40/0x40 [ 827.066694][T15174] ? vscnprintf+0x80/0x80 [ 827.066717][T15174] ? down_read_killable+0x340/0x340 [ 827.066737][T15174] ? setup_bdev_super+0x56b/0x660 [ 827.066755][T15174] mount_bdev+0x221/0x2d0 [ 827.066772][T15174] ? hpfs_mount+0x40/0x40 [ 827.066795][T15174] ? get_tree_bdev+0x520/0x520 [ 827.066812][T15174] ? vfs_parse_fs_param+0x420/0x420 [ 827.066835][T15174] legacy_get_tree+0xea/0x180 [ 827.066860][T15174] ? hpfs_ioctl+0x270/0x270 [ 827.066884][T15174] vfs_get_tree+0x8c/0x280 [ 827.066903][T15174] do_new_mount+0x24b/0xa40 [ 827.066923][T15174] __se_sys_mount+0x2e7/0x3d0 [ 827.066943][T15174] ? __x64_sys_mount+0xc0/0xc0 [ 827.066961][T15174] ? lockdep_hardirqs_on+0x98/0x150 [ 827.066980][T15174] ? __x64_sys_mount+0x20/0xc0 [ 827.066997][T15174] do_syscall_64+0x55/0xa0 [ 827.067020][T15174] ? clear_bhb_loop+0x40/0x90 [ 827.067039][T15174] ? clear_bhb_loop+0x40/0x90 [ 827.067060][T15174] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 827.067080][T15174] RIP: 0033:0x7efd40f9da8a [ 827.067097][T15174] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 827.067113][T15174] RSP: 002b:00007efd41f02e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 827.067133][T15174] RAX: ffffffffffffffda RBX: 00007efd41f02ee0 RCX: 00007efd40f9da8a [ 827.067146][T15174] RDX: 0000200000000080 RSI: 0000200000009ec0 RDI: 00007efd41f02ea0 [ 827.067158][T15174] RBP: 0000200000000080 R08: 00007efd41f02ee0 R09: 0000000003a00041 [ 827.067171][T15174] R10: 0000000003a00041 R11: 0000000000000246 R12: 0000200000009ec0 [ 827.067183][T15174] R13: 00007efd41f02ea0 R14: 0000000000009e3e R15: 0000200000000040 [ 827.067202][T15174] [ 827.069155][T15174] Kernel Offset: disabled