last executing test programs: 6.573047669s ago: executing program 2 (id=1924): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) write$UHID_INPUT(r0, &(0x7f0000001040)={0x9, {"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", 0x1000}}, 0x1006) 6.508409732s ago: executing program 2 (id=1925): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xe) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000680), 0x101402, 0x0) ioctl$PPPIOCATTCHAN(r1, 0x40047438, &(0x7f0000000040)=0x1) writev(r1, &(0x7f0000000000)=[{&(0x7f00000026c0)="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", 0xfff}, {&(0x7f00000001c0)="7624b8c75daf65e718680a1abe80cd60c591fa3c8e0015f72012cbb7a038884f19b816588373bbe886cad03033f18feace5a3450fb71681ceef92538bd7a2767", 0x40}], 0x2) 4.70204491s ago: executing program 1 (id=1931): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x183341, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x2000000}) creat(&(0x7f0000000e00)='./file0\x00', 0xc) 4.06188148s ago: executing program 1 (id=1932): socket$packet(0x11, 0x3, 0x300) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0x294}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x10113}], 0x1) 3.768893759s ago: executing program 3 (id=1933): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, 0x0, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0xea, 0xffffffffffffffff, 0x8, 0x5afc5b76, 0x0, 0xfffffffffffff30c, 0x5}, 0x0, 0x0, 0x0, 0x0) 3.677388262s ago: executing program 1 (id=1934): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x6, 0xfa11, 0xffffffff}, 0x0) r2 = socket$inet(0x2, 0x80000, 0xfffffffb) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f00000004c0)=ANY=[@ANYBLOB="72617700000034110000000000a5000000698f02de000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000694654b6a561883da131d09a51d448afd2afbb2b5fb601f417253c1a673bfdf7b8b5f8b1a5d6bdbd2411249dbb714ff74ed128911b259e6a1db6eb839e9c02caf5e31e04334de1e688f3d094efb73c4ea96a3c58d1cc2e488fcaa9b08fc7be5b6c01494405a0f69cd5077377ba1fabc8344b8f2bd245107072e1ccee62e08c7a8ecf95307d29c4bbef7717de9c2cbffee3bddd14ec1c8d86e84030fb28a249f08670935e331e373e1ee2267a57453e153ea94c8b21edd784297734c6772c278de6499fe8342eb1097615a65f9390f72643222f0b6a87219256867959c9"], 0x48) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3ff, 0x8, 0x0) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000200)) ioctl$VHOST_SET_FEATURES(r3, 0x4008af00, &(0x7f0000000080)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000040)=0x1) r4 = dup2(r3, r3) read$FUSE(r4, &(0x7f0000004d80)={0x2020}, 0x2020) write$vhost_msg_v2(r4, &(0x7f0000000380)={0x2, 0x0, {&(0x7f0000000140)=""/116, 0xfccf, 0x0, 0x1, 0x2}}, 0x48) 3.406071151s ago: executing program 2 (id=1935): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000540), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0xa002) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x12, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7fffffff}, {0x1, @svalue=0x8000}, {0x1, @svalue=0x2}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x15, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x50}]}, 0xe6}]}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x19) 3.296924814s ago: executing program 0 (id=1936): socket$kcm(0x29, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x0, 0x8, 0x81, 0x0, 0x9, 0xfffffffffffffffd, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[], 0x3c}}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x121101, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000004c0)) sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f0000000380)={0x0, 0xb, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x2, 0x1, 0x301, 0x0, 0x0, {0x2, 0x0, 0x4}, [@CTA_ZONE={0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20048001}, 0x4048814) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x200000c0}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000480)='/sys/kernel/address_bits', 0x1, 0x68) write$UHID_INPUT2(r6, &(0x7f00000003c0)=ANY=[@ANYBLOB="309c"], 0x6) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000080), 0x200) ioctl$SNDRV_TIMER_IOCTL_GINFO(r7, 0xc0f85403, &(0x7f0000000300)={{0x3, 0x0, 0x1, 0x1, 0x1}, 0xfffffffb, 0x25, 'id1\x00', 'timer1\x00', 0x0, 0x9, 0x200, 0x38e41e62, 0x64}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_io_uring_setup(0x497, &(0x7f0000000400)={0x0, 0x7079, 0x9, 0x15, 0xc2}, &(0x7f00000007c0), &(0x7f0000000200), &(0x7f0000000000)) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(ecb-aes-aesni)\x00'}, 0x58) 3.051501512s ago: executing program 0 (id=1937): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 2.877852798s ago: executing program 0 (id=1938): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00", @ANYBLOB="f7", @ANYRESDEC], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) add_key$fscrypt_provisioning(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff9) fcntl$setstatus(r0, 0x4, 0xc00) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000180), 0x4) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r2 = eventfd2(0x8, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r2, 0x4}) write$eventfd(r2, &(0x7f0000000080)=0x430f, 0x8) read$char_usb(r0, 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000140), 0x7ff, 0x145881) 2.764865362s ago: executing program 3 (id=1939): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x20001, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x20202) syz_open_dev$audion(&(0x7f0000000040), 0x1ff, 0x0) syz_open_dev$usbfs(&(0x7f0000000040), 0x76, 0x101a01) open(0x0, 0x142b42, 0x84) 2.616017996s ago: executing program 3 (id=1940): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b826, 0x25dfdc01, {0x0, 0x0, 0x0, r2, {0x0, 0xd}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x6, 0x6691}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x2880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {0x1, 0xd}, {0xffe0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 2.480154931s ago: executing program 3 (id=1941): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100024286bd10b00d815522f90102030109021200019ddb10010904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000800)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0x2603) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f00000002c0)={0x1, 0x0, 0x7, &(0x7f0000000240)={0x1b, "4e983e00c6d08804404b0aaa5ceb7a0903b7fffffffc00"}}) 1.985586276s ago: executing program 2 (id=1942): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x100000000000000, &(0x7f0000000680)="98"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) 1.760902124s ago: executing program 2 (id=1943): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) close(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[], 0xffdd) 1.604286719s ago: executing program 2 (id=1944): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(&(0x7f0000000240), 0xa530, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000083667d1040206402d14e0102030109021b000100000000090400000190f19c00090584"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4) sendmsg$inet6(r1, &(0x7f00000000c0)={&(0x7f00000001c0)={0xa, 0x4e00, 0x80000, @dev={0xfe, 0x80, '\x00', 0x38}, 0xfffffffe}, 0x1c, 0x0, 0x0, &(0x7f0000000500)=ANY=[], 0x18}, 0x8000) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r2 = syz_open_dev$I2C(&(0x7f0000000100), 0x2, 0x203) ioctl$I2C_RDWR(r2, 0x707, &(0x7f0000000080)={&(0x7f0000000840)=[{0x1, 0x5010, 0x0, 0x0}], 0x1}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000003c0)={0x1c, &(0x7f0000000180)=ANY=[], 0x0, 0x0}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) 1.336329547s ago: executing program 1 (id=1945): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$unix(0x1, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x2, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56441, 0x70bd28, 0x80100, {0x0, 0x0, 0x0, r4, {0x0, 0xfff2}, {0xfff2, 0xb}, {0x4, 0xb}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c821}, 0x20008844) 1.184797402s ago: executing program 0 (id=1946): syz_emit_ethernet(0x4a, &(0x7f0000000000)={@local, @random="c4bc9cac9686", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @local, @mcast2, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03", 0x3}], 0x1}, 0x0) r1 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r2], 0x1c}}, 0x4008054) write$nci(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="5001"], 0x14) 1.154770893s ago: executing program 0 (id=1947): syz_io_uring_setup(0x49a, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x100000d6}, 0x0, 0x0, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) epoll_create1(0x80000) r0 = socket$unix(0x1, 0x1, 0x0) close(r0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x6, 0x5635}]}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) pselect6(0x40, &(0x7f0000000100)={0xea, 0xffffffffffffffff, 0x8, 0x5afc5b76, 0x0, 0xfffffffffffff30c, 0x5}, 0x0, 0x0, 0x0, 0x0) 1.027934317s ago: executing program 3 (id=1948): openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) syz_io_uring_setup(0x3380, &(0x7f0000000180)={0x0, 0xfffffffd, 0x10100}, 0x0, 0x0, &(0x7f0000000000)) socket$nl_route(0x10, 0x3, 0x0) dup(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_tcp(0xa, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) r1 = gettid() sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4844) futex(&(0x7f000000cffc)=0x1, 0x5, 0x11, 0x0, 0x0, 0x7ffffffe) timer_create(0x0, &(0x7f0000000180)={0x0, 0x11, 0x4, @tid=r1}, &(0x7f0000000080)) read$FUSE(r0, &(0x7f00000008c0)={0x2020}, 0xfffffef0) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x20000000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 671.766129ms ago: executing program 1 (id=1949): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x709f, 0x6361, 0x8, 0xc, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x40804) sendmsg$nl_route_sched(r1, 0x0, 0x2880) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@getqdisc={0x24, 0x26, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r5, {0xfff1, 0xffe0}, {0x1, 0xd}, {0xffe0, 0xe}}}, 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0) 478.034775ms ago: executing program 1 (id=1950): r0 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000300)='mand\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) ioctl$RTC_WKALM_SET(0xffffffffffffffff, 0x4028700f, 0x0) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setattr(0x0, 0x0, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000540), 0x1, 0x2) ioctl$VIDIOC_S_TUNER(r3, 0x4054561e, &(0x7f0000000040)={0xffffffff, "a055babd9b8c29abbdd772a44c5518bc1661222efc50f8f5555dcf4617da81d7", 0x5, 0x80, 0x3, 0x6, 0x2, 0x4, 0xff7ffff9, 0x5}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000de2000/0x4000)=nil, 0x4000, 0x10) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r5, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100040, 0x1b35, 0x8, 0x2, 0x2, 0x0, 0x0, 0x1, 0x1}) r6 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x4, 0xa002) ioctl$FE_SET_PROPERTY(r6, 0x40106f52, &(0x7f0000000100)={0x3, &(0x7f0000000280)=[{0x12, '\x00', @st={0x4, [{0x3, @svalue=0x9}, {0x2, @svalue=0x7fffffff}, {0x1, @svalue=0x8000}, {0x1, @svalue=0x2}]}, 0x4}, {0x2, '\x00', @buffer={"156074847dff3ec92fd15c5a5ab6e820b94f2a1ade3e311b88351c3481518fff", 0x20}, 0x9}, {0x15, '\x00', @st={0x4, [{0x2, @svalue=0x787a9145}, {0x0, @uvalue=0xffffffffffffffff}, {0x3, @uvalue=0x3}, {0x1, @svalue=0x50}]}, 0xe6}]}) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x4e0, 0x348, 0x18c, 0x203, 0x0, 0x19030000, 0x410, 0x2e0, 0x2e0, 0x410, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x6}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x540) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) fsmount(r0, 0x0, 0x19) 168.776525ms ago: executing program 0 (id=1951): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8010, &(0x7f00000000c0), 0xff, 0x57d, &(0x7f0000000100)="$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") mknod$loop(&(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000480)='.\x00', 0x10000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, &(0x7f0000000080)={@desc={0x1, 0x0, @desc4}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 0s ago: executing program 3 (id=1952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)="d8000000140081044e81f782db44b9040a1d080201000000040000a118000200ff210000000000000010000000000000003f16ea1f00084003bc5f54c92011148ed08734843cb12b00000803600cfab94dcf5c0461c1d67f722f054f55153c6f94007134cf6ee08000a09108a8d8ef075c0100000000000000cb490000001fb791643a5e835913b06218df577b5ab4bcdcdbd9d322fe7c9fd68775730d1600360d8bcc00400040fad95667e0060000725c8bbb58794c643b000000000580bb9ad809d5e1cace81b341139fe3cd4032e8edb100273f90a9b9", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x20004c04) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) kernel console output (not intermixed with test programs): dpoint 0x81 has invalid wMaxPacketSize 0 [ 316.172497][ T34] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 316.182671][ T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 316.194668][ T34] usb 1-1: config 0 descriptor?? [ 316.458635][ T5807] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 316.815127][ T34] usbhid 1-1:0.0: can't add hid device: -71 [ 316.824188][ T34] usbhid: probe of 1-1:0.0 failed with error -71 [ 316.842159][ T34] usb 1-1: USB disconnect, device number 46 [ 317.222560][ T9743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1245'. [ 317.392803][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.399488][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.531956][ T9] usb 2-1: USB disconnect, device number 36 [ 317.584634][ T9755] input: syz1 as /devices/virtual/input/input23 [ 317.630092][ T9753] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1248'. [ 318.340288][ T9760] tipc: Started in network mode [ 318.355994][ T9760] tipc: Node identity , cluster identity 4711 [ 318.367718][ T9760] tipc: Failed to obtain node identity [ 318.381938][ T9760] tipc: Enabling of bearer rejected, failed to enable media [ 318.446247][ T5805] usb 4-1: USB disconnect, device number 50 [ 318.896066][ T9] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 318.978529][ T9775] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1254'. [ 319.066174][ T9] usb 2-1: device descriptor read/64, error -71 [ 319.346066][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 319.545557][ T9] usb 2-1: device descriptor read/64, error -71 [ 319.686275][ T9] usb usb2-port1: attempt power cycle [ 319.755995][ T5806] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 319.946906][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 319.955336][ T5806] usb 1-1: config 0 has no interfaces? [ 319.979825][ T5806] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 320.082932][ T5806] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 320.109712][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 320.131717][ T5806] usb 1-1: Manufacturer: syz [ 320.147797][ T9] usb 2-1: device descriptor read/8, error -71 [ 320.160555][ T5806] usb 1-1: config 0 descriptor?? [ 320.466018][ T9] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 320.474975][ T5807] hid-generic 0080:0005:FFFFFFFE.000B: unknown main item tag 0x0 [ 320.495318][ T5807] hid-generic 0080:0005:FFFFFFFE.000B: unknown main item tag 0x0 [ 320.496664][ T9] usb 2-1: device descriptor read/8, error -71 [ 320.528870][ T5807] hid-generic 0080:0005:FFFFFFFE.000B: hidraw0: HID v0.03 Device [syz0] on syz1 [ 320.668983][ T9] usb usb2-port1: unable to enumerate USB device [ 321.366075][ T9801] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1261'. [ 321.605933][ T5807] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 321.795924][ T5807] usb 3-1: Using ep0 maxpacket: 16 [ 321.802841][ T5807] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 321.814034][ T5807] usb 3-1: config 0 interface 0 has no altsetting 0 [ 321.820697][ T5807] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 321.830239][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.841167][ T5807] usb 3-1: config 0 descriptor?? [ 322.047401][ T5805] usb 2-1: new low-speed USB device number 41 using dummy_hcd [ 322.237675][ T5805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 322.245462][ T5805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.256882][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 322.275354][ T5805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 322.283654][ T5805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.297624][ T5807] nzxt-smart2 0003:1E71:2009.000C: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0 [ 322.300595][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 322.344060][ T5805] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 322.370606][ T5805] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 322.391367][ T5805] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 322.415816][ T5805] usb 2-1: string descriptor 0 read error: -22 [ 322.422775][ T5805] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 322.490873][ T5805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.547567][ T9811] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1265'. [ 322.570706][ T5805] adutux 2-1:168.0: interrupt endpoints not found [ 322.642379][ T5805] usb 1-1: USB disconnect, device number 47 [ 323.710878][ T9807] netlink: 'syz.1.1264': attribute type 64 has an invalid length. [ 323.731450][ T9807] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1264'. [ 323.765071][ T5805] usb 2-1: USB disconnect, device number 41 [ 324.063990][ T5807] hid-generic 0080:0005:FFFFFFFE.000D: unknown main item tag 0x0 [ 324.087587][ T5807] hid-generic 0080:0005:FFFFFFFE.000D: unknown main item tag 0x0 [ 324.122723][ T5807] hid-generic 0080:0005:FFFFFFFE.000D: hidraw1: HID v0.03 Device [syz0] on syz1 [ 325.116106][ T5807] usb 2-1: new full-speed USB device number 42 using dummy_hcd [ 325.126417][ T5805] usb 3-1: USB disconnect, device number 58 [ 325.342497][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 325.358871][ T5807] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.371047][ T5807] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 325.382020][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.392517][ T5807] usb 2-1: config 0 descriptor?? [ 325.765973][ T5805] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 325.915986][ T5805] usb 3-1: device descriptor read/64, error -71 [ 326.005968][ T788] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 326.012863][ T5807] usbhid 2-1:0.0: can't add hid device: -71 [ 326.023357][ T5807] usbhid: probe of 2-1:0.0 failed with error -71 [ 326.035703][ T5807] usb 2-1: USB disconnect, device number 42 [ 326.195955][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 326.201265][ T5805] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 326.218295][ T788] usb 1-1: config 0 has no interfaces? [ 326.232831][ T788] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 326.242099][ T788] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 326.251017][ T788] usb 1-1: Manufacturer: syz [ 326.258316][ T788] usb 1-1: config 0 descriptor?? [ 326.365952][ T5805] usb 3-1: device descriptor read/64, error -71 [ 326.493969][ T5805] usb usb3-port1: attempt power cycle [ 326.906581][ T5805] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 326.947036][ T5805] usb 3-1: device descriptor read/8, error -71 [ 327.215963][ T5805] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 327.273883][ T5805] usb 3-1: device descriptor read/8, error -71 [ 327.354368][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1279'. [ 327.416980][ T5805] usb usb3-port1: unable to enumerate USB device [ 328.398861][ T9887] input: syz1 as /devices/virtual/input/input24 [ 328.506894][ T788] hid-generic 0080:0005:FFFFFFFE.000E: unknown main item tag 0x0 [ 328.517811][ T788] hid-generic 0080:0005:FFFFFFFE.000E: unknown main item tag 0x0 [ 328.570759][ T788] hid-generic 0080:0005:FFFFFFFE.000E: hidraw0: HID v0.03 Device [syz0] on syz1 [ 328.648577][ T5807] usb 1-1: USB disconnect, device number 48 [ 329.315954][ T34] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 329.369274][ T9898] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1286'. [ 329.527687][ T34] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 329.585587][ T34] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 329.615744][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 329.655963][ T34] usb 1-1: Product: syz [ 329.666161][ T34] usb 1-1: Manufacturer: syz [ 329.671255][ T34] usb 1-1: SerialNumber: syz [ 329.919098][ T34] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 49 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 330.182400][ T788] usb 1-1: USB disconnect, device number 49 [ 330.190943][ T788] usblp0: removed [ 330.709869][ T9924] input: syz1 as /devices/virtual/input/input25 [ 330.784524][ T9927] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1295'. [ 330.960495][ T9931] netlink: 'syz.3.1296': attribute type 4 has an invalid length. [ 333.009714][ T9954] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1303'. [ 333.156701][ T5805] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 333.359421][ T5805] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 333.382286][ T5805] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 333.393048][ T5805] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 333.402237][ T5805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 333.419867][ T5805] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 333.449136][ T5805] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 333.475950][ T5805] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 333.488315][ T5805] usb 4-1: Product: syz [ 333.496320][ T5805] usb 4-1: Manufacturer: syz [ 333.540299][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 333.546352][ T5805] cdc_wdm 4-1:1.0: skipping garbage [ 333.553619][ T5805] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 333.560439][ T5805] cdc_wdm 4-1:1.0: Unknown control protocol [ 333.719551][ T9965] input: syz1 as /devices/virtual/input/input26 [ 333.748785][ T5807] usb 4-1: USB disconnect, device number 51 [ 333.835779][ T9970] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1308'. [ 334.390310][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1312'. [ 334.946125][ T5805] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 335.156073][ T5805] usb 2-1: device descriptor read/64, error -71 [ 335.425977][ T5805] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 335.596330][ T5805] usb 2-1: device descriptor read/64, error -71 [ 335.741180][ T5805] usb usb2-port1: attempt power cycle [ 336.093938][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1322'. [ 336.103222][ T34] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 336.186634][ T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 336.196017][ T5805] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 336.241151][T10011] input: syz1 as /devices/virtual/input/input27 [ 336.247627][ T5805] usb 2-1: device descriptor read/8, error -71 [ 336.287286][ T34] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 336.297301][ T34] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 336.307641][ T34] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 336.316883][ T34] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 336.329097][ T34] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 336.341740][ T34] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 336.350853][ T34] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 336.358910][ T34] usb 4-1: Product: syz [ 336.363075][ T34] usb 4-1: Manufacturer: syz [ 336.372818][ T34] cdc_wdm 4-1:1.0: skipping garbage [ 336.378139][ T34] cdc_wdm 4-1:1.0: skipping garbage [ 336.385223][ T34] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 336.391664][ T34] cdc_wdm 4-1:1.0: Unknown control protocol [ 336.391693][ T9] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 336.405988][ T9] usb 3-1: config 1 has no interface number 0 [ 336.416015][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.426900][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.437594][ T9] usb 3-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 336.450446][ T9] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 336.459985][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.468092][ T9] usb 3-1: Product: syz [ 336.472359][ T9] usb 3-1: Manufacturer: syz [ 336.479284][ T9] usb 3-1: SerialNumber: syz [ 336.490065][ T9] usb 3-1: Expected 3 endpoints, found: 0 [ 336.526024][ T5805] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 336.556503][ T5805] usb 2-1: device descriptor read/8, error -71 [ 336.578971][ T9] usb 4-1: USB disconnect, device number 52 [ 336.676072][ T5805] usb usb2-port1: unable to enumerate USB device [ 337.312458][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1326'. [ 338.983625][T10041] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1332'. [ 339.038778][ T5807] usb 3-1: USB disconnect, device number 63 [ 339.161915][T10044] input: syz1 as /devices/virtual/input/input28 [ 339.475981][ T34] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 339.658026][ T34] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 339.685996][ T34] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 339.703121][ T34] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 339.722431][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 339.745907][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 339.766940][ T34] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 339.776172][ T34] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 339.784148][ T34] usb 1-1: Product: syz [ 339.788449][ T34] usb 1-1: Manufacturer: syz [ 339.816085][ T34] cdc_wdm 1-1:1.0: skipping garbage [ 339.824892][ T34] cdc_wdm 1-1:1.0: skipping garbage [ 339.843320][ T34] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 339.858754][ T34] cdc_wdm 1-1:1.0: Unknown control protocol [ 340.037373][ T9] usb 1-1: USB disconnect, device number 50 [ 340.192650][T10057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1338'. [ 340.246082][ T5805] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 340.346197][ T34] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 340.435969][ T5805] usb 2-1: Using ep0 maxpacket: 8 [ 340.442808][ T5805] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 340.451411][ T5805] usb 2-1: config 0 has no interface number 0 [ 340.457989][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 340.469041][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 340.480015][ T5805] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 340.493088][ T5805] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 340.502413][ T5805] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.506930][ T34] usb 3-1: device descriptor read/64, error -71 [ 340.523929][ T5805] usb 2-1: config 0 descriptor?? [ 340.531538][ T5805] ldusb 2-1:0.55: Interrupt in endpoint not found [ 340.739104][T10051] fuse: Bad value for 'fd' [ 340.805973][ T34] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 340.986007][ T34] usb 3-1: device descriptor read/64, error -71 [ 341.106238][ T34] usb usb3-port1: attempt power cycle [ 341.263604][ T5806] usb 2-1: USB disconnect, device number 47 [ 341.545961][ T34] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 341.587163][ T34] usb 3-1: device descriptor read/8, error -71 [ 341.739815][ T5806] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 341.906079][ T34] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 341.937323][ T5806] usb 2-1: config 1 has an invalid interface number: 7 but max is 0 [ 341.949954][ T5806] usb 2-1: config 1 has no interface number 0 [ 341.958451][ T34] usb 3-1: device descriptor read/8, error -71 [ 341.964779][ T5806] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 341.990451][ T5806] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 342.001597][ T5806] usb 2-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 342.017093][ T5806] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 342.037990][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 342.046992][ T5806] usb 2-1: Product: syz [ 342.052524][ T5806] usb 2-1: Manufacturer: syz [ 342.061377][ T5806] usb 2-1: SerialNumber: syz [ 342.078737][ T5806] usb 2-1: Expected 3 endpoints, found: 0 [ 342.101592][ T34] usb usb3-port1: unable to enumerate USB device [ 342.283428][T10080] input: syz1 as /devices/virtual/input/input29 [ 343.259648][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'. [ 343.269725][T10093] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'. [ 343.279439][T10093] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1347'. [ 343.297148][T10094] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1348'. [ 343.448003][T10096] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.1347'. [ 344.066155][ T34] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 344.310562][ T34] usb 1-1: Using ep0 maxpacket: 8 [ 344.323971][ T34] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 344.359261][ T34] usb 1-1: config 0 has no interface number 0 [ 344.386272][ T34] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 344.425935][ T34] usb 1-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 344.465980][ T34] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 344.489416][ T34] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 344.509452][ T34] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.556599][ T34] usb 1-1: config 0 descriptor?? [ 344.580489][ T34] ldusb 1-1:0.55: Interrupt in endpoint not found [ 344.688064][ T9] usb 2-1: USB disconnect, device number 48 [ 344.795794][T10098] fuse: Bad value for 'fd' [ 345.356271][ T788] usb 1-1: USB disconnect, device number 51 [ 345.857122][T10126] syzkaller0: entered promiscuous mode [ 346.458075][T10139] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 346.476085][ T34] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 346.669014][ T34] usb 1-1: config 1 has an invalid interface number: 7 but max is 0 [ 346.696723][ T34] usb 1-1: config 1 has no interface number 0 [ 346.706055][ T34] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 346.719617][ T34] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 346.730273][ T34] usb 1-1: config 1 interface 7 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 346.745203][ T34] usb 1-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 346.754994][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 346.765873][ T34] usb 1-1: Product: syz [ 346.770870][ T34] usb 1-1: Manufacturer: syz [ 346.775512][ T34] usb 1-1: SerialNumber: syz [ 346.786050][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 346.790605][ T34] usb 1-1: Expected 3 endpoints, found: 0 [ 346.966074][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 346.972685][ T9] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 346.980872][ T9] usb 4-1: config 0 has no interface number 0 [ 346.987394][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 346.998120][ T9] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 347.008908][ T9] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 347.022956][ T9] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 347.032430][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.042139][ T9] usb 4-1: config 0 descriptor?? [ 347.050506][ T9] ldusb 4-1:0.55: Interrupt in endpoint not found [ 347.255714][T10141] fuse: Bad value for 'fd' [ 347.779698][ T788] usb 4-1: USB disconnect, device number 53 [ 347.812571][ T34] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 348.039477][ T34] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 348.056004][T10160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1370'. [ 348.074802][ T34] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 348.095072][ T34] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 348.109782][ T34] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 348.131877][ T34] usb 3-1: Manufacturer: syz [ 348.142344][ T34] usb 3-1: config 0 descriptor?? [ 348.377808][ T788] usb 3-1: USB disconnect, device number 68 [ 349.256008][ T788] usb 1-1: USB disconnect, device number 52 [ 349.536045][ T34] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 349.720541][ T34] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 349.729456][ T34] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 349.742444][ T34] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 349.751468][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 349.762611][ T34] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 349.775167][ T34] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 349.785352][ T34] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 349.793501][ T34] usb 3-1: Product: syz [ 349.797726][ T34] usb 3-1: Manufacturer: syz [ 349.807077][ T34] cdc_wdm 3-1:1.0: skipping garbage [ 349.812317][ T34] cdc_wdm 3-1:1.0: skipping garbage [ 349.818844][ T34] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 349.824748][ T34] cdc_wdm 3-1:1.0: Unknown control protocol [ 349.925930][ T5807] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 350.013010][ T788] usb 3-1: USB disconnect, device number 69 [ 350.106191][ T5807] usb 2-1: Using ep0 maxpacket: 8 [ 350.112848][ T5807] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 350.123133][ T5807] usb 2-1: config 0 has no interface number 0 [ 350.129361][ T5807] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 350.140130][ T5807] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 350.150899][ T5807] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 350.164559][ T5807] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 350.173669][ T5807] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.183496][ T5807] usb 2-1: config 0 descriptor?? [ 350.191666][ T5807] ldusb 2-1:0.55: Interrupt in endpoint not found [ 350.339818][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1379'. [ 350.415410][T10179] fuse: Bad value for 'fd' [ 350.685943][ T5807] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 350.878072][ T5807] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 350.898084][ T5807] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 350.919985][ T5807] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 350.943832][ T5807] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 350.952141][ T5807] usb 1-1: Manufacturer: syz [ 350.963653][ T5807] usb 1-1: config 0 descriptor?? [ 350.974727][ T34] usb 2-1: USB disconnect, device number 49 [ 351.201672][ T5807] usb 1-1: USB disconnect, device number 53 [ 352.431467][ T5807] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 352.625921][ T5807] usb 1-1: Using ep0 maxpacket: 16 [ 352.646642][ T5807] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 352.675147][ T34] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 352.682824][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.716079][ T5807] usb 1-1: Product: syz [ 352.725904][ T5807] usb 1-1: Manufacturer: syz [ 352.730687][ T5807] usb 1-1: SerialNumber: syz [ 352.916029][ T34] usb 4-1: Using ep0 maxpacket: 8 [ 352.933559][ T34] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 352.944740][ T34] usb 4-1: config 0 has no interface number 0 [ 352.966033][ T34] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 352.989691][ T5807] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 353.035805][ T34] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 353.051107][ T34] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 353.067189][ T34] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 353.078506][ T5807] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 353.091672][ T34] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 353.099986][ T5807] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 353.119014][ T5807] usb 1-1: media controller created [ 353.126431][ T34] usb 4-1: config 0 descriptor?? [ 353.139103][ T34] ldusb 4-1:0.55: Interrupt in endpoint not found [ 353.155462][ T5807] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 353.257441][ T5807] zl10353_read_register: readreg error (reg=127, ret==-71) [ 353.317393][ T5807] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 353.333288][ T5807] usb 1-1: USB disconnect, device number 54 [ 353.362626][T10227] fuse: Invalid rootmode [ 353.502384][T10237] syzkaller0: entered promiscuous mode [ 353.934221][ T9] usb 4-1: USB disconnect, device number 54 [ 353.947534][ T788] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 354.147593][ T788] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.163284][ T788] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.183580][ T788] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 354.203942][ T788] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 354.216512][ T788] usb 1-1: Manufacturer: syz [ 354.238224][ T788] usb 1-1: config 0 descriptor?? [ 354.281258][ T788] smsusb:smsusb_probe: board id=9, interface number 0 [ 354.288291][ T788] smsusb:smsusb_probe: Device initialized with return code -19 [ 354.491073][ T788] usb 1-1: USB disconnect, device number 55 [ 355.456144][ T5806] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 355.666082][ T5806] usb 1-1: Using ep0 maxpacket: 16 [ 355.678137][ T5806] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 355.711735][ T5806] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.730090][ T5806] usb 1-1: Product: syz [ 355.734302][ T5806] usb 1-1: Manufacturer: syz [ 355.764001][ T5806] usb 1-1: SerialNumber: syz [ 356.049168][ T5806] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 356.068411][ T5806] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 356.093937][ T5806] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 356.112878][ T5806] usb 1-1: media controller created [ 356.142866][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 356.151401][ T5807] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 356.187245][ T5806] zl10353_read_register: readreg error (reg=127, ret==-71) [ 356.255513][ T5806] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 356.286184][ T5806] usb 1-1: USB disconnect, device number 56 [ 356.356015][ T5807] usb 3-1: Using ep0 maxpacket: 8 [ 356.381555][ T5807] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 356.401152][ T5807] usb 3-1: config 0 has no interface number 0 [ 356.414521][ T5807] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 356.440466][ T5807] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 356.467891][ T5807] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 356.511080][ T5807] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 356.524202][ T5807] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 356.536783][ T5807] usb 3-1: config 0 descriptor?? [ 356.548937][ T5807] ldusb 3-1:0.55: Interrupt in endpoint not found [ 356.787734][T10281] fuse: Invalid rootmode [ 357.429929][ T5807] usb 3-1: USB disconnect, device number 70 [ 359.046002][ T9] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 359.235982][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 359.249202][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 359.266008][ T9] usb 3-1: config 0 has no interface number 0 [ 359.277056][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 359.303354][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 359.320349][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 359.335043][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 359.346217][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.383696][ T9] usb 3-1: config 0 descriptor?? [ 359.391630][ T9] ldusb 3-1:0.55: Interrupt in endpoint not found [ 359.634527][T10320] fuse: Invalid rootmode [ 359.935945][ T9] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 360.127987][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 360.144159][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 360.153823][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 360.162414][ T9] usb 2-1: Product: syz [ 360.166998][ T9] usb 2-1: Manufacturer: syz [ 360.171681][ T9] usb 2-1: SerialNumber: syz [ 360.182088][ T5806] usb 3-1: USB disconnect, device number 71 [ 360.399696][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 360.653654][ T9] usb 2-1: USB disconnect, device number 50 [ 360.664302][ T9] usblp0: removed [ 360.687152][ T788] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 360.866066][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 360.875310][ T788] usb 1-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15 [ 360.884841][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.893416][ T788] usb 1-1: Product: syz [ 360.898121][ T788] usb 1-1: Manufacturer: syz [ 360.902814][ T788] usb 1-1: SerialNumber: syz [ 360.909873][ T788] usb 1-1: config 0 descriptor?? [ 360.917305][ T788] ssu100 1-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected [ 361.338601][T10346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 361.359331][T10346] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.577491][ T9] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 361.765977][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 361.782876][ T9] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 361.793954][ T788] ssu100: probe of 1-1:0.0 failed with error -71 [ 361.801719][ T9] usb 3-1: config 0 has no interface number 0 [ 361.817018][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 361.828056][ T788] usb 1-1: USB disconnect, device number 57 [ 361.856075][ T9] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 361.872996][ T9] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 361.897405][ T9] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 361.920576][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.932750][ T9] usb 3-1: config 0 descriptor?? [ 361.949766][ T9] ldusb 3-1:0.55: Interrupt in endpoint not found [ 362.156863][T10361] fuse: Bad value for 'rootmode' [ 362.691793][ T788] usb 3-1: USB disconnect, device number 72 [ 364.255992][ T5807] usb 1-1: new low-speed USB device number 58 using dummy_hcd [ 364.467799][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 364.477692][ T5807] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.488872][ T5807] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 364.507907][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 364.515486][ T5807] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.535926][ T5807] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 364.549403][ T5807] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 364.557249][ T5807] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 364.568760][ T5807] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 364.587752][ T5807] usb 1-1: string descriptor 0 read error: -22 [ 364.594297][ T5807] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 364.604325][ T5807] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.628946][ T5807] adutux 1-1:168.0: interrupt endpoints not found [ 365.208744][T10424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 365.243192][ T788] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 365.270659][T10424] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 365.284672][ T9] usb 1-1: USB disconnect, device number 58 [ 365.455984][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 365.465799][ T788] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 365.479425][ T788] usb 3-1: config 0 has no interface number 0 [ 365.485701][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 365.499992][ T788] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 365.512241][ T788] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 365.526940][ T788] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 365.539378][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 365.554256][ T788] usb 3-1: config 0 descriptor?? [ 365.570258][ T788] ldusb 3-1:0.55: Interrupt in endpoint not found [ 365.786478][T10416] fuse: Bad value for 'rootmode' [ 366.375240][ T788] usb 3-1: USB disconnect, device number 73 [ 367.046755][T10458] netlink: 'syz.1.1472': attribute type 9 has an invalid length. [ 367.072792][T10458] netlink: 'syz.1.1472': attribute type 6 has an invalid length. [ 367.112401][T10458] gre1: entered promiscuous mode [ 367.346105][ T5807] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 367.576742][ T5807] usb 4-1: Using ep0 maxpacket: 8 [ 367.583239][ T5807] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 367.591489][ T5807] usb 4-1: config 0 has no interface number 0 [ 367.597599][ T5807] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 367.608258][ T5807] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 367.618935][ T5807] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 367.632099][ T5807] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 367.641227][ T5807] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.651752][ T5807] usb 4-1: config 0 descriptor?? [ 367.660610][ T5807] ldusb 4-1:0.55: Interrupt in endpoint not found [ 367.914419][T10462] fuse: Bad value for 'rootmode' [ 368.456072][ T9] usb 4-1: USB disconnect, device number 55 [ 369.386057][ T9] usb 3-1: new low-speed USB device number 74 using dummy_hcd [ 369.573391][ T27] audit: type=1326 audit(1774933761.046:2487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.604366][ T27] audit: type=1326 audit(1774933761.046:2488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.629571][ T27] audit: type=1326 audit(1774933761.046:2489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.652535][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.660104][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.671352][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 369.682579][ T27] audit: type=1326 audit(1774933761.046:2490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.708306][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.715966][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.732236][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 369.748193][ T27] audit: type=1326 audit(1774933761.046:2491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.750971][ T9] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 369.793739][ T9] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 369.800771][ T27] audit: type=1326 audit(1774933761.056:2492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.805689][ T9] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 369.838746][ T27] audit: type=1326 audit(1774933761.056:2493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=259 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.861757][ T27] audit: type=1326 audit(1774933761.056:2494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.885598][ T27] audit: type=1326 audit(1774933761.056:2495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=322 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.909207][ T27] audit: type=1326 audit(1774933761.186:2496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10491 comm="syz.0.1485" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x7ffc0000 [ 369.936173][ T9] usb 3-1: string descriptor 0 read error: -22 [ 369.942426][ T9] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 369.959264][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 370.006239][ T9] adutux 3-1:168.0: interrupt endpoints not found [ 370.153546][T10500] syzkaller0: entered promiscuous mode [ 370.379324][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 370.405777][T10503] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1488'. [ 370.429411][T10503] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1488'. [ 370.562379][T10487] netlink: 'syz.2.1483': attribute type 64 has an invalid length. [ 370.590237][T10487] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1483'. [ 370.633834][ T9] usb 3-1: USB disconnect, device number 74 [ 373.455736][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'. [ 373.483102][T10552] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1503'. [ 373.494628][T10552] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1503'. [ 373.926015][ T5806] usb 3-1: new full-speed USB device number 75 using dummy_hcd [ 373.946244][ T9] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 374.135354][ T5806] usb 3-1: unable to get BOS descriptor or descriptor too short [ 374.145731][ T9] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.148419][ T5806] usb 3-1: not running at top speed; connect to a high speed hub [ 374.181385][ T5806] usb 3-1: config 5 has an invalid interface number: 174 but max is 0 [ 374.194599][ T5806] usb 3-1: config 5 has no interface number 0 [ 374.198467][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 374.200904][ T5806] usb 3-1: config 5 interface 174 has no altsetting 0 [ 374.222464][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 374.223886][ T5806] usb 3-1: New USB device found, idVendor=0fe9, idProduct=db59, bcdDevice=57.ec [ 374.240029][ T9] usb 2-1: Product: syz [ 374.249265][ T9] usb 2-1: Manufacturer: syz [ 374.249271][ T5806] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.249290][ T5806] usb 3-1: Product: syz [ 374.253883][ T9] usb 2-1: SerialNumber: syz [ 374.278584][ T5806] usb 3-1: Manufacturer: syz [ 374.283370][ T5806] usb 3-1: SerialNumber: syz [ 374.492506][ T9] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 374.531228][ T5806] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual Digital 2' in warm state. [ 374.544301][ T5806] dvb-usb: bulk message failed: -71 (2/0) [ 374.558656][ T5806] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 374.571781][ T5806] dvb-usb: DViCO FusionHDTV DVB-T Dual Digital 2 error while loading driver (-19) [ 374.581712][ T5806] dvb_usb_cxusb: probe of 3-1:5.174 failed with error -22 [ 374.597046][ T5806] usb 3-1: USB disconnect, device number 75 [ 374.751596][ T9] usb 2-1: USB disconnect, device number 51 [ 374.772218][ T9] usblp0: removed [ 375.269357][T10586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1516'. [ 375.287253][T10586] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1516'. [ 375.300163][T10586] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1516'. [ 375.842328][T10602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'. [ 376.076748][T10607] syzkaller0: entered promiscuous mode [ 376.443827][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 376.483496][T10613] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1525'. [ 376.510695][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1525'. [ 376.675986][ T788] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 376.891186][ T788] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 376.942614][ T788] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 376.976191][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 376.998652][ T788] usb 4-1: Product: syz [ 377.008241][ T788] usb 4-1: Manufacturer: syz [ 377.018382][ T788] usb 4-1: SerialNumber: syz [ 377.243536][ T788] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 377.496038][ T788] usb 4-1: USB disconnect, device number 56 [ 377.582947][ T788] usblp0: removed [ 377.700818][T10630] syz.0.1532: attempt to access beyond end of device [ 377.700818][T10630] loop1: rw=0, sector=0, nr_sectors = 8 limit=0 [ 377.714432][T10630] F2FS-fs (loop1): Unable to read 1th superblock [ 377.721805][T10630] syz.0.1532: attempt to access beyond end of device [ 377.721805][T10630] loop1: rw=0, sector=8, nr_sectors = 8 limit=0 [ 377.735328][T10630] F2FS-fs (loop1): Unable to read 2th superblock [ 378.415677][T10647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1536'. [ 378.843306][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.849810][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.088283][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1541'. [ 380.116197][T10662] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1541'. [ 380.238427][T10662] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1541'. [ 380.655978][ T34] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 380.856785][ T34] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.876105][ T34] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 380.896066][ T34] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.920331][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 380.946070][ T34] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 380.987931][ T34] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 381.011955][ T5805] hid-generic 0080:0005:FFFFFFFE.000F: unknown main item tag 0x0 [ 381.028496][ T34] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 381.050027][ T5805] hid-generic 0080:0005:FFFFFFFE.000F: unknown main item tag 0x0 [ 381.076516][ T5805] hid-generic 0080:0005:FFFFFFFE.000F: hidraw0: HID v0.03 Device [syz0] on syz1 [ 381.149518][ T34] usb 1-1: Product: syz [ 381.202213][ T34] usb 1-1: Manufacturer: syz [ 381.292820][ T34] cdc_wdm 1-1:1.0: skipping garbage [ 381.330583][ T34] cdc_wdm 1-1:1.0: skipping garbage [ 381.400288][ T34] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 381.411583][ T34] cdc_wdm 1-1:1.0: Unknown control protocol [ 381.423785][T10684] fido_id[10684]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 381.540079][T10671] cdc_wdm 1-1:1.0: Error submitting int urb - -90 [ 381.566833][ T34] usb 1-1: USB disconnect, device number 59 [ 381.667854][T10688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1548'. [ 382.456034][ T5805] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 382.654707][ T5805] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.675385][ T5805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 382.697528][ T5805] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 382.722301][ T5805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 382.748314][ T5805] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 382.765443][ T5805] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 382.766012][ T34] usb 2-1: new low-speed USB device number 52 using dummy_hcd [ 382.775680][ T5805] usb 1-1: Manufacturer: syz [ 382.808440][ T5805] usb 1-1: config 0 descriptor?? [ 382.838370][ T5805] smsusb:smsusb_probe: board id=9, interface number 0 [ 382.850176][ T5805] smsusb:smsusb_probe: Device initialized with return code -19 [ 382.988168][ T34] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 382.995747][ T34] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.006592][ T34] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.018456][ T34] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.025992][ T34] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.036904][ T34] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.047562][ T5805] usb 1-1: USB disconnect, device number 60 [ 383.049159][ T34] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 383.064267][ T34] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 383.075554][ T34] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 383.090158][ T34] usb 2-1: string descriptor 0 read error: -22 [ 383.096621][ T34] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 383.106065][ T34] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.119880][ T34] adutux 2-1:168.0: interrupt endpoints not found [ 383.454774][T10702] netlink: 'syz.1.1552': attribute type 64 has an invalid length. [ 383.473312][T10702] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1552'. [ 383.486049][ T34] usb 2-1: USB disconnect, device number 52 [ 383.587323][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'. [ 383.596673][T10716] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1556'. [ 383.605733][T10716] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1556'. [ 384.366114][ T788] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 384.567995][ T788] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 384.642314][ T788] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 384.693708][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 384.751835][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.763624][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.793382][ T788] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 384.816244][ T788] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 384.830182][ T788] usb 4-1: Product: syz [ 384.834358][ T788] usb 4-1: Manufacturer: syz [ 384.870891][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 384.886203][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 384.917663][ T34] hid-generic 0080:0005:FFFFFFFE.0010: unknown main item tag 0x0 [ 384.925072][ T788] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 384.955938][ T34] hid-generic 0080:0005:FFFFFFFE.0010: unknown main item tag 0x0 [ 384.972182][ T788] cdc_wdm 4-1:1.0: Unknown control protocol [ 384.979355][ T34] hid-generic 0080:0005:FFFFFFFE.0010: hidraw0: HID v0.03 Device [syz0] on syz1 [ 385.087800][ T788] usb 4-1: USB disconnect, device number 57 [ 385.675384][T10742] kvm: requested 136609 ns i8254 timer period limited to 200000 ns [ 385.708203][T10742] kvm: requested 192762 ns i8254 timer period limited to 200000 ns [ 385.742478][T10742] kvm: requested 129066 ns i8254 timer period limited to 200000 ns [ 385.771220][T10742] kvm: requested 25980 ns i8254 timer period limited to 200000 ns [ 385.782887][T10742] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 385.803726][T10742] kvm: requested 75428 ns i8254 timer period limited to 200000 ns [ 385.827492][T10742] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 385.852335][T10742] kvm: requested 165942 ns i8254 timer period limited to 200000 ns [ 385.861195][T10742] kvm: requested 12571 ns i8254 timer period limited to 200000 ns [ 387.140746][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 387.169913][T10773] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1572'. [ 387.185432][T10773] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1572'. [ 387.416127][ T5806] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 387.658482][ T5806] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 387.675387][ T5806] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 387.698549][ T5806] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 387.720112][ T5806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.745729][ T5806] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.767788][ T5806] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 387.781443][ T5806] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 387.838483][ T5806] usb 2-1: Product: syz [ 387.852628][ T5806] usb 2-1: Manufacturer: syz [ 387.887608][ T5806] cdc_wdm 2-1:1.0: skipping garbage [ 387.903869][ T5806] cdc_wdm 2-1:1.0: skipping garbage [ 387.914923][ T5806] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 387.924143][ T5806] cdc_wdm 2-1:1.0: Unknown control protocol [ 388.113025][T10775] cdc_wdm 2-1:1.0: Error submitting int urb - -90 [ 388.144999][ T5806] usb 2-1: USB disconnect, device number 53 [ 388.573494][T10794] loop3: detected capacity change from 0 to 128 [ 388.602169][T10794] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 388.639128][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 388.776263][ T5806] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 388.837491][ T788] hid-generic 0080:0005:FFFFFFFE.0011: unknown main item tag 0x0 [ 388.855202][ T788] hid-generic 0080:0005:FFFFFFFE.0011: unknown main item tag 0x0 [ 388.913431][ T788] hid-generic 0080:0005:FFFFFFFE.0011: hidraw0: HID v0.03 Device [syz0] on syz1 [ 388.967705][ T5806] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 388.983734][ T5806] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 389.026901][ T5806] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 389.047624][ T5806] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 389.057433][ T5806] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 389.081327][ T5806] usb 1-1: Manufacturer: syz [ 389.100099][ T5806] usb 1-1: config 0 descriptor?? [ 389.114900][ T5806] smsusb:smsusb_probe: board id=9, interface number 0 [ 389.140963][ T5806] smsusb:smsusb_probe: Device initialized with return code -19 [ 389.319800][ T5806] usb 1-1: USB disconnect, device number 61 [ 389.485958][ T5807] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 389.686022][ T5807] usb 4-1: Using ep0 maxpacket: 16 [ 389.701238][ T5807] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 389.721043][ T5807] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 389.744469][ T5807] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.752959][ T5807] usb 4-1: Product: syz [ 389.757454][ T5807] usb 4-1: Manufacturer: syz [ 389.762076][ T5807] usb 4-1: SerialNumber: syz [ 389.774900][ T5807] usb 4-1: config 0 descriptor?? [ 389.789657][ T5807] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 389.826942][ T5807] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 390.100590][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 390.110502][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1589'. [ 390.119920][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1589'. [ 390.228145][ T788] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 390.424949][ T5807] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 390.432905][ T788] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 390.453439][ T788] usb 3-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 390.477538][ T788] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 390.503529][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 390.530281][ T788] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 390.560655][ T788] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 390.582294][ T788] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 390.608057][ T788] usb 3-1: Product: syz [ 390.618345][ T788] usb 3-1: Manufacturer: syz [ 390.655674][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 390.665489][ T788] cdc_wdm 3-1:1.0: skipping garbage [ 390.674787][ T788] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 390.855113][ T5807] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 390.876505][ T5807] em28xx 4-1:0.0: board has no eeprom [ 390.897069][ T788] usb 3-1: USB disconnect, device number 76 [ 391.276195][ T5807] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 391.288265][ T5807] em28xx 4-1:0.0: dvb set to bulk mode. [ 391.294142][ T5806] em28xx 4-1:0.0: Binding DVB extension [ 392.551756][T10811] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 392.700745][ T5807] hid-generic 0080:0005:FFFFFFFE.0012: unknown main item tag 0x0 [ 392.709253][ T5807] hid-generic 0080:0005:FFFFFFFE.0012: unknown main item tag 0x0 [ 392.723541][ T5807] hid-generic 0080:0005:FFFFFFFE.0012: hidraw0: HID v0.03 Device [syz0] on syz1 [ 392.739039][ T5806] em28xx 4-1:0.0: Registering input extension [ 392.739074][ T9] usb 4-1: USB disconnect, device number 58 [ 392.794860][ T9] em28xx 4-1:0.0: Disconnecting em28xx [ 392.811475][ T9] em28xx 4-1:0.0: Closing input extension [ 392.903742][T10865] fido_id[10865]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 392.908957][ T9] em28xx 4-1:0.0: Freeing device [ 392.945928][ T34] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 393.207729][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 393.225893][ T34] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 393.256209][ T34] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 393.277331][ T34] usb 1-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 393.300529][ T34] usb 1-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 393.330331][ T34] usb 1-1: Manufacturer: syz [ 393.350745][ T34] usb 1-1: config 0 descriptor?? [ 393.383073][ T34] smsusb:smsusb_probe: board id=9, interface number 0 [ 393.390977][ T34] smsusb:smsusb_probe: Device initialized with return code -19 [ 393.575770][ T9] usb 1-1: USB disconnect, device number 62 [ 393.783149][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1603'. [ 393.796333][T10883] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1603'. [ 393.817727][T10883] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1603'. [ 393.957766][ T788] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 394.168283][ T788] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 394.194829][ T788] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 394.237216][ T788] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 394.257275][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 394.269942][ T788] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 394.285063][ T788] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 394.294800][ T788] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 394.318584][ T788] usb 4-1: Product: syz [ 394.336151][ T788] usb 4-1: Manufacturer: syz [ 394.365577][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 394.401249][ T788] cdc_wdm 4-1:1.0: skipping garbage [ 394.434915][ T788] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 394.467409][T10893] syzkaller0: entered promiscuous mode [ 394.586573][ T788] usb 4-1: USB disconnect, device number 59 [ 395.219810][ T34] hid-generic 0080:0005:FFFFFFFE.0013: unknown main item tag 0x0 [ 395.275271][ T34] hid-generic 0080:0005:FFFFFFFE.0013: unknown main item tag 0x0 [ 395.310319][ T34] hid-generic 0080:0005:FFFFFFFE.0013: hidraw0: HID v0.03 Device [syz0] on syz1 [ 396.920814][T10932] syzkaller0: entered promiscuous mode [ 396.926111][ T34] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 397.142163][ T34] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 397.163173][ T34] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 397.186528][ T34] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 397.208521][ T34] usb 3-1: New USB device found, idVendor=2040, idProduct=2000, bcdDevice=65.72 [ 397.220071][ T34] usb 3-1: New USB device strings: Mfr=151, Product=0, SerialNumber=0 [ 397.234225][ T34] usb 3-1: Manufacturer: syz [ 397.246955][ T34] usb 3-1: config 0 descriptor?? [ 397.266779][ T34] smsusb:smsusb_probe: board id=9, interface number 0 [ 397.277354][ T34] smsusb:smsusb_probe: Device initialized with return code -19 [ 397.473392][ T34] usb 3-1: USB disconnect, device number 77 [ 397.626185][ T788] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 397.808408][ T788] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 397.831494][ T788] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 397.857829][ T788] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 397.872210][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 397.883882][ T788] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 397.903103][ T788] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 397.921530][ T788] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 397.933951][ T788] usb 1-1: Product: syz [ 397.941628][ T788] usb 1-1: Manufacturer: syz [ 397.955525][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 397.968453][ T788] cdc_wdm 1-1:1.0: skipping garbage [ 397.976188][ T788] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 398.061692][ T34] hid-generic 0080:0005:FFFFFFFE.0014: unknown main item tag 0x0 [ 398.082182][ T34] hid-generic 0080:0005:FFFFFFFE.0014: unknown main item tag 0x0 [ 398.150762][ T34] hid-generic 0080:0005:FFFFFFFE.0014: hidraw0: HID v0.03 Device [syz0] on syz1 [ 398.228512][ T34] usb 1-1: USB disconnect, device number 63 [ 399.219455][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1626'. [ 399.424247][T10974] syzkaller0: entered promiscuous mode [ 401.006766][ T9] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 401.198160][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 401.206987][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 401.226775][ T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 401.248209][ T9] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 401.258030][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.276015][ T9] usb 2-1: Product: syz [ 401.280493][ T9] usb 2-1: Manufacturer: syz [ 401.285101][ T9] usb 2-1: SerialNumber: syz [ 401.365994][ T5805] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 401.548734][ T5805] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 401.584779][ T5805] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 401.615805][ T5805] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 401.636042][ T5805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 401.651948][ T5805] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 401.670701][ T5805] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 401.691754][ T5805] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 401.703283][ T5805] usb 1-1: Product: syz [ 401.708087][ T9] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 401.723092][ T5805] usb 1-1: Manufacturer: syz [ 401.727834][ T9] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 401.745805][ T5805] cdc_wdm 1-1:1.0: skipping garbage [ 401.751835][ T9] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 401.760483][ T5805] cdc_wdm 1-1:1.0: skipping garbage [ 401.768232][ T5805] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 401.774678][ T9] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 401.801368][ T9] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 401.863031][ T9] usb 2-1: USB disconnect, device number 54 [ 402.015514][ T5807] usb 1-1: USB disconnect, device number 64 [ 402.034249][ T5756] udevd[5756]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 402.455954][ T34] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 402.648934][T11007] syzkaller0: entered promiscuous mode [ 402.672053][ T34] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 402.724295][ T34] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 402.767249][ T34] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 402.795262][ T34] usb 3-1: Product: syz [ 402.799710][ T34] usb 3-1: Manufacturer: syz [ 402.820664][ T34] usb 3-1: SerialNumber: syz [ 403.071200][ T34] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 78 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 403.325415][ T9] usb 3-1: USB disconnect, device number 78 [ 403.339251][ T9] usblp0: removed [ 404.656145][ T9] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 404.869713][ T9] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 404.878657][ T9] usb 4-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 404.892803][ T9] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 404.967861][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 404.989814][T11048] syzkaller0: entered promiscuous mode [ 404.996062][ T9] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 405.020481][ T9] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 405.030043][ T9] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 405.038781][ T9] usb 4-1: Product: syz [ 405.043181][ T9] usb 4-1: Manufacturer: syz [ 405.052618][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 405.068030][ T9] cdc_wdm 4-1:1.0: skipping garbage [ 405.083656][ T9] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 405.322479][ T9] usb 4-1: USB disconnect, device number 60 [ 405.840337][T11055] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 405.947421][ T5807] IPVS: starting estimator thread 0... [ 406.036297][T11065] IPVS: using max 36 ests per chain, 86400 per kthread [ 406.059428][T11069] loop3: detected capacity change from 0 to 64 [ 406.236315][ T5807] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 406.413412][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.413412][ T3519] loop3: rw=1, sector=65, nr_sectors = 1 limit=64 [ 406.437639][ T5807] usb 3-1: Using ep0 maxpacket: 32 [ 406.443936][ T3519] buffer_io_error: 23 callbacks suppressed [ 406.443949][ T3519] Buffer I/O error on dev loop3, logical block 65, lost async page write [ 406.463088][ T5807] usb 3-1: config 0 has no interfaces? [ 406.472888][ T5807] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 406.484328][ T5807] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.493125][ T5807] usb 3-1: Product: syz [ 406.505255][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.505255][ T3519] loop3: rw=1, sector=66, nr_sectors = 1 limit=64 [ 406.511127][ T5807] usb 3-1: Manufacturer: syz [ 406.529975][ T5807] usb 3-1: SerialNumber: syz [ 406.538991][ T3519] Buffer I/O error on dev loop3, logical block 66, lost async page write [ 406.540194][ T5807] usb 3-1: config 0 descriptor?? [ 406.581394][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.581394][ T3519] loop3: rw=1, sector=67, nr_sectors = 1 limit=64 [ 406.676231][ T3519] Buffer I/O error on dev loop3, logical block 67, lost async page write [ 406.700086][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.700086][ T3519] loop3: rw=1, sector=68, nr_sectors = 1 limit=64 [ 406.715596][ T3519] Buffer I/O error on dev loop3, logical block 68, lost async page write [ 406.734608][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.734608][ T3519] loop3: rw=1, sector=72, nr_sectors = 1 limit=64 [ 406.765931][ T3519] Buffer I/O error on dev loop3, logical block 72, lost async page write [ 406.774525][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.774525][ T3519] loop3: rw=1, sector=73, nr_sectors = 1 limit=64 [ 406.802698][ T3519] Buffer I/O error on dev loop3, logical block 73, lost async page write [ 406.845804][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.845804][ T3519] loop3: rw=1, sector=76, nr_sectors = 1 limit=64 [ 406.890560][ T3519] Buffer I/O error on dev loop3, logical block 76, lost async page write [ 406.925295][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.925295][ T3519] loop3: rw=1, sector=77, nr_sectors = 1 limit=64 [ 406.941803][ T3519] Buffer I/O error on dev loop3, logical block 77, lost async page write [ 406.969414][ T9] usb 3-1: USB disconnect, device number 79 [ 406.987062][ T3519] kworker/u4:11: attempt to access beyond end of device [ 406.987062][ T3519] loop3: rw=1, sector=78, nr_sectors = 4057 limit=64 [ 407.205231][T11084] syzkaller0: entered promiscuous mode [ 407.376101][ T788] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 407.591669][ T788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 407.615196][ T788] usb 2-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 407.638976][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 407.821961][T11097] loop2: detected capacity change from 0 to 40427 [ 407.843122][T11097] F2FS-fs (loop2): LFS is not compatible with checkpoint=disable [ 407.902175][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 7 [ 407.937195][ T788] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9272, setting to 1024 [ 407.985380][ T788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 407.997106][ T788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 408.095482][ T788] usb 2-1: Product: syz [ 408.134083][ T788] usb 2-1: Manufacturer: syz [ 408.147964][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 408.154974][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 408.163343][ T788] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 408.373575][ T788] usb 2-1: USB disconnect, device number 55 [ 409.663686][T11109] loop2: detected capacity change from 0 to 256 [ 409.710748][ T5086] Bluetooth: hci2: unexpected event for opcode 0x0c0d [ 409.830428][T11109] FAT-fs (loop2): Directory bread(block 64) failed [ 409.868377][T11109] FAT-fs (loop2): Directory bread(block 65) failed [ 409.912511][T11109] FAT-fs (loop2): Directory bread(block 66) failed [ 409.923987][T11109] FAT-fs (loop2): Directory bread(block 67) failed [ 409.932851][T11109] FAT-fs (loop2): Directory bread(block 68) failed [ 409.939791][T11109] FAT-fs (loop2): Directory bread(block 69) failed [ 409.949046][T11109] FAT-fs (loop2): Directory bread(block 70) failed [ 409.968624][T11109] FAT-fs (loop2): Directory bread(block 71) failed [ 409.984171][T11109] FAT-fs (loop2): Directory bread(block 72) failed [ 409.994298][T11109] FAT-fs (loop2): Directory bread(block 73) failed [ 410.153230][T11123] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1675'. [ 411.035951][ T34] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 411.255950][ T34] usb 4-1: device descriptor read/64, error -71 [ 412.275954][ T34] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 412.446014][ T34] usb 4-1: device descriptor read/64, error -71 [ 412.593716][ T34] usb usb4-port1: attempt power cycle [ 412.947547][T11162] loop1: detected capacity change from 0 to 2048 [ 413.066000][ T34] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 414.472769][ T34] usb 4-1: device descriptor read/8, error -71 [ 414.493749][T11162] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 416.071431][T11155] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 416.106488][T11178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 416.843822][T11202] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1698'. [ 416.855710][T11202] batman_adv: batadv0: Interface deactivated: dummy0 [ 416.886019][ T788] usb 2-1: new full-speed USB device number 56 using dummy_hcd [ 416.897659][T11202] batman_adv: batadv0: Removing interface: dummy0 [ 417.098594][ T788] usb 2-1: unable to get BOS descriptor or descriptor too short [ 417.112241][ T788] usb 2-1: not running at top speed; connect to a high speed hub [ 417.126168][ T788] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 417.156670][ T788] usb 2-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 417.169155][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.184318][ T788] usb 2-1: Product: syz [ 417.188989][ T34] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 417.197059][ T788] usb 2-1: Manufacturer: syz [ 417.205631][ T788] usb 2-1: SerialNumber: syz [ 417.401025][ T34] usb 1-1: Using ep0 maxpacket: 32 [ 417.418118][ T34] usb 1-1: config 0 has no interfaces? [ 417.446270][ T34] usb 1-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 417.494600][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 417.523455][ T34] usb 1-1: Product: syz [ 417.543123][ T34] usb 1-1: Manufacturer: syz [ 417.563933][ T788] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 417.582926][ T34] usb 1-1: SerialNumber: syz [ 417.598644][ T788] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 417.632530][ T788] usb 2-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 417.632994][ T34] usb 1-1: config 0 descriptor?? [ 417.682680][ T788] usb 2-1: found format II with max.bitrate = 512, frame size=4095 [ 417.709625][ T788] usb 2-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 417.801950][ T788] usb 2-1: USB disconnect, device number 56 [ 417.879609][ T5760] udevd[5760]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 418.030930][ T34] usb 1-1: USB disconnect, device number 65 [ 420.036028][ T788] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 420.235977][ T788] usb 3-1: Using ep0 maxpacket: 8 [ 420.246861][ T788] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 420.255092][ T788] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 420.289381][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 420.310670][ T788] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 420.321651][ T788] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 420.334817][ T788] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 420.355965][ T788] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.574804][ T788] usb 3-1: usb_control_msg returned -32 [ 420.580809][ T788] usbtmc 3-1:16.0: can't read capabilities [ 421.263328][T11213] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 421.706244][ T34] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 421.896041][ T34] usb 1-1: Using ep0 maxpacket: 16 [ 421.908504][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 421.935316][ T34] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 421.959683][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.968640][ T34] usb 1-1: Product: syz [ 421.972878][ T34] usb 1-1: Manufacturer: syz [ 421.977652][ T34] usb 1-1: SerialNumber: syz [ 421.990602][ T34] usb 1-1: config 0 descriptor?? [ 422.002603][ T34] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 422.013401][ T34] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 422.604451][ T34] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 422.863651][ T5815] usb 3-1: USB disconnect, device number 80 [ 423.048836][ T34] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 423.076986][ T34] em28xx 1-1:0.0: board has no eeprom [ 423.121425][T11303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1725'. [ 423.456135][ T34] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 423.464241][ T34] em28xx 1-1:0.0: dvb set to bulk mode. [ 423.470529][ T7392] em28xx 1-1:0.0: Binding DVB extension [ 424.589460][T11283] em28xx 1-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 424.617982][ T788] usb 1-1: USB disconnect, device number 66 [ 424.639258][ T788] em28xx 1-1:0.0: Disconnecting em28xx [ 424.708823][ T7392] em28xx 1-1:0.0: Registering input extension [ 424.719212][ T788] em28xx 1-1:0.0: Closing input extension [ 424.793860][ T788] em28xx 1-1:0.0: Freeing device [ 426.153522][T11308] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 428.726096][ T27] kauditd_printk_skb: 33 callbacks suppressed [ 428.726106][ T27] audit: type=1326 audit(1774933820.206:2530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11399 comm="syz.1.1749" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f358719c819 code=0x0 [ 428.982239][ T5086] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 428.993272][ T5086] Bluetooth: hci0: hcon ffff88801f7a8000 sent 1 < count 511 [ 429.606256][ T7392] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 429.805898][ T7392] usb 1-1: Using ep0 maxpacket: 16 [ 429.817111][ T7392] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 429.827970][ T7392] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 429.845114][ T7392] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 429.854882][ T7392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.870807][ T7392] usb 1-1: Product: syz [ 429.875025][ T7392] usb 1-1: Manufacturer: syz [ 429.883134][ T7392] usb 1-1: SerialNumber: syz [ 430.319303][ T788] usb 1-1: USB disconnect, device number 67 [ 431.516102][T11394] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 432.107973][T11469] loop0: detected capacity change from 0 to 65536 [ 432.153777][T11469] XFS (loop0): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 432.209449][T11469] XFS (loop0): Ending clean mount [ 432.233085][T11469] XFS (loop0): Quotacheck needed: Please wait. [ 432.275438][ T7392] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 432.295148][T11469] XFS (loop0): Quotacheck: Done. [ 432.462599][ T5765] XFS (loop0): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 432.477724][ T7392] usb 4-1: Using ep0 maxpacket: 16 [ 432.487639][ T7392] usb 4-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 432.515980][ T7392] usb 4-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 432.539178][ T7392] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 432.559642][ T7392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.575915][ T7392] usb 4-1: Product: syz [ 432.587135][ T7392] usb 4-1: Manufacturer: syz [ 432.591865][ T7392] usb 4-1: SerialNumber: syz [ 433.032221][ T5815] usb 4-1: USB disconnect, device number 65 [ 433.455965][ T788] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 433.455965][ T7392] usb 3-1: new low-speed USB device number 81 using dummy_hcd [ 433.649866][ T7392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 433.657861][ T7392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.665948][ T788] usb 2-1: Using ep0 maxpacket: 8 [ 433.676134][ T7392] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 433.687855][ T788] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 433.694697][ T7392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 433.703989][ T7392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.711022][ T788] usb 2-1: config 0 has no interface number 0 [ 433.721579][ T788] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 433.732644][ T788] usb 2-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 433.743344][ T7392] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 433.754539][ T7392] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 433.758726][ T788] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 433.779184][ T7392] usb 3-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 433.779504][ T788] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 433.799065][ T7392] usb 3-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 433.810517][ T788] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 433.821937][ T788] usb 2-1: config 0 descriptor?? [ 433.828300][ T7392] usb 3-1: string descriptor 0 read error: -22 [ 433.832115][ T788] ldusb 2-1:0.55: Interrupt in endpoint not found [ 433.834607][ T7392] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 433.853460][ T7392] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.872865][ T7392] adutux 3-1:168.0: interrupt endpoints not found [ 434.044925][T11498] fuse: Unknown parameter 'fd0x0000000000000007' [ 434.276328][ T7392] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 434.300870][ T34] usb 3-1: USB disconnect, device number 81 [ 434.478413][ T7392] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 434.502877][ T7392] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 434.516751][ T7392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 434.529096][ T7392] usb 4-1: Product: syz [ 434.533391][ T7392] usb 4-1: Manufacturer: syz [ 434.538682][ T7392] usb 4-1: SerialNumber: syz [ 434.613076][ T34] usb 2-1: USB disconnect, device number 57 [ 434.793514][ T7392] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 66 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 434.875984][ T788] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 435.546641][ T5815] usb 4-1: USB disconnect, device number 66 [ 435.566562][ T5815] usblp0: removed [ 435.646054][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 435.667067][ T788] usb 1-1: config 157 has an invalid descriptor of length 0, skipping remainder of the config [ 435.726420][ T788] usb 1-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 435.757218][ T788] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 435.768978][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.778438][ T788] usb 1-1: Product: syz [ 435.792281][ T788] usb 1-1: Manufacturer: syz [ 435.797457][ T788] usb 1-1: SerialNumber: syz [ 436.251382][ T34] usb 1-1: USB disconnect, device number 68 [ 436.296169][ T7392] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 436.605990][ T7392] usb 3-1: Using ep0 maxpacket: 8 [ 436.613208][ T7392] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 436.626205][ T7392] usb 3-1: config 0 has no interface number 0 [ 436.646076][ T7392] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 436.662025][ T7392] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 436.673970][ T7392] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 436.692516][ T7392] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 436.705366][ T7392] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.716071][ T7392] usb 3-1: config 0 descriptor?? [ 436.727235][ T7392] ldusb 3-1:0.55: Interrupt in endpoint not found [ 436.941405][T11553] fuse: Unknown parameter 'fd0x0000000000000007' [ 436.967063][ T788] usb 2-1: new low-speed USB device number 58 using dummy_hcd [ 437.167532][ T788] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 437.175014][ T788] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 437.186223][ T788] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 437.198455][ T788] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 437.205952][ T788] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 437.216742][ T788] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 437.228454][ T788] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 437.236015][ T788] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 437.246858][ T788] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 437.261003][ T788] usb 2-1: string descriptor 0 read error: -22 [ 437.267619][ T788] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 437.276719][ T788] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 437.287925][ T788] adutux 2-1:168.0: interrupt endpoints not found [ 437.408581][ T5815] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 437.497708][ T788] usb 3-1: USB disconnect, device number 82 [ 437.671296][ T5815] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 437.719111][ T5815] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 437.807341][ T5815] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 437.852004][ T5815] usb 1-1: Product: syz [ 437.865408][ T5815] usb 1-1: Manufacturer: syz [ 437.887103][ T788] usb 2-1: USB disconnect, device number 58 [ 437.898739][ T5815] usb 1-1: SerialNumber: syz [ 438.141593][ T5815] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 69 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 438.206624][ T7392] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 438.389592][T11602] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1814'. [ 438.406850][ T7392] usb 4-1: Using ep0 maxpacket: 16 [ 438.414577][ T7392] usb 4-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 438.433404][ T23] usb 1-1: USB disconnect, device number 69 [ 438.441550][ T7392] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 438.452240][ T7392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.460857][ T23] usblp0: removed [ 438.471897][ T7392] usb 4-1: Product: syz [ 438.477404][ T7392] usb 4-1: Manufacturer: syz [ 438.482357][ T7392] usb 4-1: SerialNumber: syz [ 438.786354][ T5815] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 438.933538][ T7392] usb 4-1: USB disconnect, device number 67 [ 439.056076][ T5815] usb 3-1: Using ep0 maxpacket: 8 [ 439.063107][ T5815] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 439.071626][ T5815] usb 3-1: config 0 has no interface number 0 [ 439.078361][ T5815] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 439.085484][T11613] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 439.089762][ T5815] usb 3-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 439.111672][ T5815] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 439.124807][ T5815] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 439.134127][ T5815] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.144401][ T5815] usb 3-1: config 0 descriptor?? [ 439.160316][ T5815] ldusb 3-1:0.55: Interrupt in endpoint not found [ 439.222184][T11615] loop1: detected capacity change from 0 to 512 [ 439.263862][T11615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 439.276822][T11615] ext4 filesystem being mounted at /412/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 439.322800][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 440.005999][ T7392] usb 1-1: new full-speed USB device number 70 using dummy_hcd [ 440.148675][ T23] usb 3-1: USB disconnect, device number 83 [ 440.184648][T11645] syzkaller0: entered promiscuous mode [ 440.268581][ T1275] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.274927][ T1275] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.318215][ T7392] usb 1-1: unable to get BOS descriptor or descriptor too short [ 440.328394][ T7392] usb 1-1: not running at top speed; connect to a high speed hub [ 440.338056][ T7392] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 440.355073][ T7392] usb 1-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 440.364913][ T7392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.373172][ T7392] usb 1-1: Product: syz [ 440.377549][ T7392] usb 1-1: Manufacturer: syz [ 440.386836][ T7392] usb 1-1: SerialNumber: syz [ 440.656043][ T23] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 440.672979][ T7392] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 440.681684][ T7392] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 440.690493][ T7392] usb 1-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 440.699279][ T7392] usb 1-1: found format II with max.bitrate = 512, frame size=4095 [ 440.708999][ T7392] usb 1-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 440.736992][ T7392] usb 1-1: USB disconnect, device number 70 [ 440.766051][ T5815] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 440.774543][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 440.848006][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 440.854892][ T23] usb 3-1: config 157 has 0 interfaces, different from the descriptor's value: 1 [ 440.868476][ T23] usb 3-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 440.878157][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 440.886205][ T23] usb 3-1: Product: syz [ 440.890481][ T23] usb 3-1: Manufacturer: syz [ 440.895060][ T23] usb 3-1: SerialNumber: syz [ 440.978230][ T5815] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 440.994832][ T5815] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 441.004035][ T5815] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 441.012247][ T5815] usb 2-1: Product: syz [ 441.016557][ T5815] usb 2-1: Manufacturer: syz [ 441.021190][ T5815] usb 2-1: SerialNumber: syz [ 441.244412][ T5815] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 441.326094][ T23] usb 3-1: USB disconnect, device number 84 [ 441.519955][T11674] fuse: Bad value for 'fd' [ 441.561455][ T23] usb 2-1: USB disconnect, device number 59 [ 441.660741][ T23] usblp0: removed [ 442.155983][ T7392] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 442.173327][T11678] loop2: detected capacity change from 0 to 40427 [ 442.193468][T11678] F2FS-fs (loop2): invalid crc value [ 442.218908][T11678] F2FS-fs (loop2): Found nat_bits in checkpoint [ 442.280182][T11678] F2FS-fs (loop2): Start checkpoint disabled! [ 442.329502][T11678] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 442.407392][ T7392] usb 4-1: Using ep0 maxpacket: 8 [ 442.417168][ T7392] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 442.798676][ T7392] usb 4-1: config 0 has no interface number 0 [ 442.956026][ T7392] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 442.991018][ T7392] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 443.018027][ T7392] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.061839][ T7392] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 443.145515][ T7392] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.201915][ T7392] usb 4-1: config 0 descriptor?? [ 443.223993][ T7392] ldusb 4-1:0.55: Interrupt in endpoint not found [ 443.269174][ T62] kworker/u4:5: attempt to access beyond end of device [ 443.269174][ T62] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 443.299501][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 443.341157][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 443.788770][T11697] syzkaller0: entered promiscuous mode [ 444.036676][ T7392] usb 4-1: USB disconnect, device number 68 [ 444.646055][ T7392] usb 4-1: new full-speed USB device number 69 using dummy_hcd [ 444.859066][ T7392] usb 4-1: unable to get BOS descriptor or descriptor too short [ 444.873482][ T7392] usb 4-1: not running at top speed; connect to a high speed hub [ 444.895281][ T7392] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 444.917977][ T7392] usb 4-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 444.936128][ T7392] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.950521][ T7392] usb 4-1: Product: syz [ 444.971022][T11726] fuse: Bad value for 'fd' [ 444.977754][ T7392] usb 4-1: Manufacturer: syz [ 444.982397][ T7392] usb 4-1: SerialNumber: syz [ 445.021403][T11728] syzkaller0: entered promiscuous mode [ 445.651814][ T7392] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 445.665924][ T7392] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 445.681656][ T7392] usb 4-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 445.705917][ T7392] usb 4-1: found format II with max.bitrate = 512, frame size=4095 [ 445.726758][ T7392] usb 4-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 446.059548][ T7392] usb 4-1: USB disconnect, device number 69 [ 446.173263][ T7568] udevd[7568]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 446.412088][T11743] loop1: detected capacity change from 0 to 4096 [ 446.431290][T11743] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 446.618690][T11754] EXT4-fs (loop1): shut down requested (1) [ 446.662563][T11743] EXT4-fs error (device loop1): ext4_do_update_inode:5248: inode #15: comm syz.1.1858: corrupted inode contents [ 446.927238][ T788] hid-generic 0080:0005:FFFFFFFE.0015: unknown main item tag 0x0 [ 446.950078][ T788] hid-generic 0080:0005:FFFFFFFE.0015: hidraw0: HID v0.03 Device [syz0] on syz1 [ 447.289679][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 447.316062][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1862'. [ 447.322799][ T5773] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 447.355472][T11766] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1862'. [ 447.367593][ T5963] EXT4-fs (loop1): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 447.391514][ T5963] Quota error (device loop1): write_blk: dquota write failed [ 447.415988][ T5963] Quota error (device loop1): free_dqentry: Can't write quota data block 5 [ 448.737590][T11786] loop2: detected capacity change from 0 to 40427 [ 448.760153][T11786] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 448.768167][T11786] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 448.778180][T11786] F2FS-fs (loop2): invalid crc value [ 448.804038][T11786] F2FS-fs (loop2): Found nat_bits in checkpoint [ 448.842372][T11786] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 448.850864][T11786] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 448.944443][T11784] fuse: Bad value for 'fd' [ 448.964776][ T27] audit: type=1800 audit(1774933840.436:2531): pid=11786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1868" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 449.647264][ T5769] syz-executor: attempt to access beyond end of device [ 449.647264][ T5769] loop2: rw=2049, sector=40960, nr_sectors = 8 limit=40427 [ 449.678354][ T5769] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 450.006115][ T788] usb 1-1: new low-speed USB device number 71 using dummy_hcd [ 450.242480][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 450.252803][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 450.271667][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 450.287980][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 450.295559][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 450.307456][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 450.320445][ T788] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 450.328396][ T788] usb 1-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 450.367669][ T788] usb 1-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 450.382490][ T788] usb 1-1: string descriptor 0 read error: -22 [ 450.389330][ T788] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 450.400909][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 450.421274][ T788] adutux 1-1:168.0: interrupt endpoints not found [ 450.687784][ T7392] usb 1-1: USB disconnect, device number 71 [ 450.870551][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 450.880397][T11824] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 450.890200][T11824] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1877'. [ 450.991251][ T788] hid-generic 0080:0005:FFFFFFFE.0016: unknown main item tag 0x0 [ 451.009658][ T788] hid-generic 0080:0005:FFFFFFFE.0016: unknown main item tag 0x0 [ 451.032981][ T788] hid-generic 0080:0005:FFFFFFFE.0016: hidraw0: HID v0.03 Device [syz0] on syz1 [ 452.525646][T11795] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 452.796217][T11857] syzkaller0: entered promiscuous mode [ 453.046294][ T34] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 453.245993][ T34] usb 4-1: Using ep0 maxpacket: 16 [ 453.326309][ T7392] usb 2-1: new low-speed USB device number 60 using dummy_hcd [ 453.337212][ T34] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 453.373021][ T34] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 453.400130][ T34] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.430573][ T34] usb 4-1: Product: syz [ 453.440717][ T34] usb 4-1: Manufacturer: syz [ 453.450866][ T34] usb 4-1: SerialNumber: syz [ 453.468339][ T34] usb 4-1: config 0 descriptor?? [ 453.507681][ T34] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 453.521782][ T34] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 453.557990][ T7392] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 453.584611][ T7392] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.607147][ T7392] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 453.633221][ T7392] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 453.640820][ T7392] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.666448][ T7392] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 453.682773][ T7392] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 453.701704][ T7392] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 453.731462][ T7392] usb 2-1: config 168 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 453.767031][ T7392] usb 2-1: string descriptor 0 read error: -22 [ 453.786301][ T7392] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 453.810768][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 453.819776][ T7392] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.826345][ T7392] adutux 2-1:168.0: interrupt endpoints not found [ 453.835575][T11865] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1888'. [ 453.845055][T11865] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1888'. [ 454.086958][ T5766] usb 2-1: USB disconnect, device number 60 [ 454.127407][ T34] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 454.314594][ T7392] hid-generic 0080:0005:FFFFFFFE.0017: unknown main item tag 0x0 [ 454.342957][ T7392] hid-generic 0080:0005:FFFFFFFE.0017: unknown main item tag 0x0 [ 454.370095][ T7392] hid-generic 0080:0005:FFFFFFFE.0017: hidraw0: HID v0.03 Device [syz0] on syz1 [ 454.539580][ T34] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 454.552184][ T34] em28xx 4-1:0.0: board has no eeprom [ 455.163826][T11878] loop1: detected capacity change from 0 to 40427 [ 455.183162][ T34] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 455.192047][ T34] em28xx 4-1:0.0: dvb set to bulk mode. [ 455.211089][ T34] em28xx 4-1:0.0: Binding DVB extension [ 455.227856][T11878] F2FS-fs (loop1): invalid crc value [ 455.265947][T11878] F2FS-fs (loop1): Found nat_bits in checkpoint [ 455.306264][T11878] F2FS-fs (loop1): Start checkpoint disabled! [ 455.332265][T11878] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 455.985877][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.135870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 456.395867][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 456.735861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 456.805860][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 457.105861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 457.315865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 457.365861][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 457.776963][T11854] em28xx 4-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 457.916017][ T34] em28xx 4-1:0.0: Registering input extension [ 457.923016][ T788] usb 4-1: USB disconnect, device number 70 [ 457.932793][ T788] em28xx 4-1:0.0: Disconnecting em28xx [ 457.960190][ T788] em28xx 4-1:0.0: Closing input extension [ 458.035765][ T788] em28xx 4-1:0.0: Freeing device [ 458.143486][ T11] kworker/u4:0: attempt to access beyond end of device [ 458.143486][ T11] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 458.162148][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 458.171601][ T11] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 459.568417][T11913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'. [ 459.579995][T11913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1899'. [ 459.589516][T11913] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1899'. [ 459.710079][T11915] loop2: detected capacity change from 0 to 4096 [ 459.755634][T11915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 459.903502][T11923] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #15: comm syz.2.1900: corrupted inode contents [ 459.918130][T11923] EXT4-fs error (device loop2): ext4_dirty_inode:6124: inode #15: comm syz.2.1900: mark_inode_dirty error [ 459.935272][T11923] EXT4-fs error (device loop2): ext4_do_update_inode:5248: inode #15: comm syz.2.1900: corrupted inode contents [ 459.942716][T11924] EXT4-fs (loop2): shut down requested (1) [ 459.976870][T11923] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.1900: mark_inode_dirty error [ 460.766176][ T34] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 460.807580][ T5766] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 460.955973][ T34] usb 1-1: Using ep0 maxpacket: 16 [ 460.962786][ T34] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 460.974668][ T34] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 460.983810][ T34] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 460.992195][ T34] usb 1-1: Product: syz [ 460.995952][ T5766] usb 2-1: Using ep0 maxpacket: 16 [ 460.996438][ T34] usb 1-1: Manufacturer: syz [ 461.006117][ T34] usb 1-1: SerialNumber: syz [ 461.013081][ T34] usb 1-1: config 0 descriptor?? [ 461.014636][ T5766] usb 2-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 461.026534][ T34] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 461.031139][ T5766] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.036571][ T34] em28xx 1-1:0.0: DVB interface 0 found: bulk [ 461.045116][ T5766] usb 2-1: Product: syz [ 461.058473][ T5766] usb 2-1: Manufacturer: syz [ 461.063091][ T5766] usb 2-1: SerialNumber: syz [ 461.065392][T11889] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 461.167129][ T5769] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 461.196194][ T11] EXT4-fs (loop2): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 461.208003][ T11] Quota error (device loop2): write_blk: dquota write failed [ 461.215487][ T11] Quota error (device loop2): free_dqentry: Can't write quota data block 5 [ 461.315328][ T5766] usb 2-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 461.357634][ T5766] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 461.385111][ T5766] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 461.393751][ T5766] usb 2-1: media controller created [ 461.436729][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 461.467128][ T5766] zl10353_read_register: readreg error (reg=127, ret==-71) [ 461.528393][ T5766] dvb_usb_gl861: probe of 2-1:157.0 failed with error -5 [ 461.549391][ T5766] usb 2-1: USB disconnect, device number 61 [ 461.629467][ T34] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 461.760019][T11930] loop3: detected capacity change from 0 to 40427 [ 461.775799][T11930] F2FS-fs (loop3): invalid crc value [ 461.807319][T11930] F2FS-fs (loop3): Found nat_bits in checkpoint [ 461.903553][T11932] loop2: detected capacity change from 0 to 40427 [ 461.913468][T11930] F2FS-fs (loop3): Start checkpoint disabled! [ 461.936014][T11930] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 461.955639][T11932] F2FS-fs (loop2): invalid crc value [ 461.987762][T11932] F2FS-fs (loop2): Found nat_bits in checkpoint [ 462.066502][ T34] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 462.074557][ T34] em28xx 1-1:0.0: board has no eeprom [ 462.149103][T11932] F2FS-fs (loop2): Start checkpoint disabled! [ 462.176230][T11932] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 462.268915][ T3564] kworker/u4:13: attempt to access beyond end of device [ 462.268915][ T3564] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 462.307614][ T3564] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 462.324198][ T3564] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 462.436172][ T34] em28xx 1-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 462.444105][ T34] em28xx 1-1:0.0: dvb set to bulk mode. [ 462.451540][ T62] kworker/u4:5: attempt to access beyond end of device [ 462.451540][ T62] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 462.469106][ T23] em28xx 1-1:0.0: Binding DVB extension [ 462.485501][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 462.501063][ T62] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 463.640110][T11926] em28xx 1-1:0.0: reading from i2c device at 0x2 failed (error=-5) [ 463.662456][ T788] usb 1-1: USB disconnect, device number 72 [ 463.710330][ T788] em28xx 1-1:0.0: Disconnecting em28xx [ 463.783633][ T23] em28xx 1-1:0.0: Registering input extension [ 463.814500][ T788] em28xx 1-1:0.0: Closing input extension [ 463.850291][ T788] em28xx 1-1:0.0: Freeing device [ 464.706139][ T788] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 464.899096][ T788] usb 1-1: Using ep0 maxpacket: 16 [ 464.918328][ T788] usb 1-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 464.935954][ T788] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 464.954483][ T788] usb 1-1: Product: syz [ 464.958877][ T788] usb 1-1: Manufacturer: syz [ 464.963493][ T788] usb 1-1: SerialNumber: syz [ 465.175127][T11965] loop3: detected capacity change from 0 to 40427 [ 465.209891][ T788] usb 1-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 465.227379][T11965] F2FS-fs (loop3): invalid crc value [ 465.249551][T11965] F2FS-fs (loop3): Found nat_bits in checkpoint [ 465.254118][ T788] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 465.274514][ T788] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 465.283967][ T788] usb 1-1: media controller created [ 465.332701][ T788] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 465.412250][ T788] zl10353_read_register: readreg error (reg=127, ret==-71) [ 465.441577][T11965] F2FS-fs (loop3): Start checkpoint disabled! [ 465.467140][T11965] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 465.527711][ T788] dvb_usb_gl861: probe of 1-1:157.0 failed with error -5 [ 465.575786][ T788] usb 1-1: USB disconnect, device number 73 [ 465.834941][ T3449] kworker/u4:9: attempt to access beyond end of device [ 465.834941][ T3449] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 465.858086][ T3449] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 465.865087][ T3449] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 465.979155][ T27] audit: type=1326 audit(1774933857.456:2532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11977 comm="syz.2.1921" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fea7619c819 code=0x0 [ 466.305014][T11973] loop1: detected capacity change from 0 to 40427 [ 466.324082][T11973] F2FS-fs (loop1): invalid crc value [ 466.349491][T11973] F2FS-fs (loop1): Found nat_bits in checkpoint [ 466.441466][T11973] F2FS-fs (loop1): Start checkpoint disabled! [ 466.470855][T11973] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 466.654018][ T62] kworker/u4:5: attempt to access beyond end of device [ 466.654018][ T62] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 466.672477][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 466.680043][ T62] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 467.486020][ T788] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 467.687420][ T788] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 467.731625][ T788] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 467.756064][ T788] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 467.765425][ T788] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 467.787399][ T788] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 467.806272][ T788] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 467.850326][ T788] usb 2-1: Product: syz [ 467.854645][ T788] usb 2-1: Manufacturer: syz [ 467.897125][ T788] cdc_wdm 2-1:1.0: skipping garbage [ 467.918773][ T788] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 467.998931][T11998] loop0: detected capacity change from 0 to 40427 [ 468.013771][T11998] F2FS-fs (loop0): invalid crc value [ 468.025969][T11998] F2FS-fs (loop0): Found nat_bits in checkpoint [ 468.083791][T11998] F2FS-fs (loop0): Start checkpoint disabled! [ 468.105603][T11998] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 468.128632][ T788] usb 2-1: USB disconnect, device number 62 [ 468.273881][ T5963] kworker/u4:14: attempt to access beyond end of device [ 468.273881][ T5963] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 468.288356][ T5963] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 468.295444][ T5963] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 468.476086][ T5766] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 468.677142][ T5766] usb 4-1: Using ep0 maxpacket: 16 [ 468.690074][ T5766] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 468.699504][ T5766] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 468.707931][ T5766] usb 4-1: Product: syz [ 468.715308][ T5766] usb 4-1: Manufacturer: syz [ 468.722657][ T5766] usb 4-1: SerialNumber: syz [ 468.746292][ T23] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 468.946042][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 468.954572][ T5766] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 468.973612][ T5766] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 468.976512][ T23] usb 1-1: config index 0 descriptor too short (expected 51443, got 18) [ 468.989414][ T5766] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 469.006632][ T5766] usb 4-1: media controller created [ 469.013624][ T23] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 469.035920][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.037774][ T5766] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 469.043923][ T23] usb 1-1: Product: syz [ 469.043939][ T23] usb 1-1: Manufacturer: syz [ 469.043952][ T23] usb 1-1: SerialNumber: syz [ 469.046886][ T23] r8152-cfgselector 1-1: config 0 descriptor?? [ 469.107216][ T5766] zl10353_read_register: readreg error (reg=127, ret==-71) [ 469.148577][ T5766] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 469.171708][ T5766] usb 4-1: USB disconnect, device number 71 [ 469.173373][T12011] loop1: detected capacity change from 0 to 40427 [ 469.206884][T12011] F2FS-fs (loop1): invalid crc value [ 469.219709][T12011] F2FS-fs (loop1): Found nat_bits in checkpoint [ 469.275442][T12011] F2FS-fs (loop1): Start checkpoint disabled! [ 469.284707][T12011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 469.300644][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 469.312173][ T23] r8152-cfgselector 1-1: bad CDC descriptors [ 469.396745][ T3564] kworker/u4:13: attempt to access beyond end of device [ 469.396745][ T3564] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 469.411008][ T3564] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 469.420390][ T3564] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 469.510905][ T23] r8152-cfgselector 1-1: Unknown version 0x0000 [ 469.557164][ T23] r8152-cfgselector 1-1: USB disconnect, device number 74 [ 469.678520][ T27] audit: type=1326 audit(1774933861.146:2533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12014 comm="syz.3.1933" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f7730d9c819 code=0x0 [ 470.948087][ T23] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 471.187801][ T23] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 471.206575][ T23] usb 1-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 471.256003][ T5806] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 471.296771][ T23] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 471.328926][ T23] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 471.350818][ T23] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 471.360530][ T23] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 471.370958][ T23] usb 1-1: Product: syz [ 471.375121][ T23] usb 1-1: Manufacturer: syz [ 471.419221][ T23] cdc_wdm 1-1:1.0: skipping garbage [ 471.446042][ T23] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 471.505962][ T5806] usb 4-1: Using ep0 maxpacket: 16 [ 471.533482][ T5806] usb 4-1: New USB device found, idVendor=0db0, idProduct=5581, bcdDevice=f9.22 [ 471.556235][ T5806] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.565734][ T5806] usb 4-1: Product: syz [ 471.570184][ T5806] usb 4-1: Manufacturer: syz [ 471.574888][ T5806] usb 4-1: SerialNumber: syz [ 471.658445][ T23] usb 1-1: USB disconnect, device number 75 [ 471.811225][ T5806] usb 4-1: dvb_usb_v2: found a 'MSI Mega Sky 55801 DVB-T USB2.0' in warm state [ 471.827329][ T5806] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 471.846646][ T5806] dvbdev: DVB: registering new adapter (MSI Mega Sky 55801 DVB-T USB2.0) [ 471.855362][ T5806] usb 4-1: media controller created [ 471.880225][ T5806] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 471.928354][ T5806] zl10353_read_register: readreg error (reg=127, ret==-71) [ 472.010728][ T5806] dvb_usb_gl861: probe of 4-1:157.0 failed with error -5 [ 472.055273][ T5806] usb 4-1: USB disconnect, device number 72 [ 472.136836][ T5766] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 472.318441][ T27] audit: type=1326 audit(1774933863.786:2534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12052 comm="syz.0.1947" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f03ceb9c819 code=0x0 [ 472.341243][ T5766] usb 3-1: Using ep0 maxpacket: 16 [ 472.353250][ T5766] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 472.370273][ T5766] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 472.389524][ T5766] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.404141][ T5766] usb 3-1: Product: syz [ 472.408818][ T5766] usb 3-1: Manufacturer: syz [ 472.413439][ T5766] usb 3-1: SerialNumber: syz [ 472.433363][ T5766] usb 3-1: config 0 descriptor?? [ 472.450497][ T5766] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 472.467130][ T5766] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 473.050036][ T5766] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 473.327034][T12068] loop0: detected capacity change from 0 to 512 [ 473.424808][T12068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 473.438113][T12068] ext4 filesystem being mounted at /463/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.473236][ T5766] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 473.518527][T12068] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.1951: corrupted inode contents [ 473.521476][ T5766] em28xx 3-1:0.0: board has no eeprom [ 473.537846][T12073] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1952'. [ 473.550302][T12068] EXT4-fs error (device loop0): ext4_dirty_inode:6124: inode #2: comm syz.0.1951: mark_inode_dirty error [ 473.573471][T12074] EXT4-fs (loop0): shut down requested (1) [ 473.573726][T12068] EXT4-fs error (device loop0): ext4_do_update_inode:5248: inode #2: comm syz.0.1951: corrupted inode contents [ 473.598485][T12068] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.1951: mark_inode_dirty error [ 473.613526][T12068] BUG: unable to handle page fault for address: ffffffffffffff93 [ 473.621246][T12068] #PF: supervisor read access in kernel mode [ 473.627391][T12068] #PF: error_code(0x0000) - not-present page [ 473.633360][T12068] PGD cf35067 P4D cf35067 PUD cf37067 PMD 0 [ 473.639513][T12068] Oops: 0000 [#1] PREEMPT SMP KASAN [ 473.644700][T12068] CPU: 1 PID: 12068 Comm: syz.0.1951 Not tainted syzkaller #0 [ 473.652142][T12068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 473.662273][T12068] RIP: 0010:ext4_ext_map_blocks+0x2d00/0x6800 [ 473.668341][T12068] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 78 dc 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 10 4d 89 fc 49 8d [ 473.687968][T12068] RSP: 0018:ffffc9000b93f4a0 EFLAGS: 00010246 [ 473.694021][T12068] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 473.702063][T12068] RDX: ffffc9000d0b9000 RSI: 00000000000620fc RDI: ffffffffffffff93 [ 473.710017][T12068] RBP: ffffc9000b93f750 R08: ffff88805bf8ca5b R09: 1ffff1100b7f194b [ 473.717973][T12068] R10: dffffc0000000000 R11: ffffed100b7f194c R12: 0000000000000000 [ 473.726100][T12068] R13: 1ffff92001727ec0 R14: dffffc0000000000 R15: ffffffffffffff8b [ 473.734055][T12068] FS: 00007f03cfa0d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 473.743067][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.749657][T12068] CR2: ffffffffffffff93 CR3: 0000000046b33000 CR4: 00000000003506e0 [ 473.757632][T12068] Call Trace: [ 473.760895][T12068] [ 473.763837][T12068] ? __might_sleep+0xe0/0xe0 [ 473.768440][T12068] ? ext4_ext_release+0x10/0x10 [ 473.773312][T12068] ? __lock_acquire+0x7d40/0x7d40 [ 473.778336][T12068] ? cgroup_rstat_updated+0xde/0x360 [ 473.783620][T12068] ? ext4_es_lookup_extent+0x60e/0xa00 [ 473.789077][T12068] ext4_map_blocks+0x9e2/0x1b80 [ 473.793950][T12068] ? ext4_issue_zeroout+0x250/0x250 [ 473.799195][T12068] ext4_getblk+0x1d0/0x6f0 [ 473.803663][T12068] ? ext4_get_block_unwritten+0x100/0x100 [ 473.809485][T12068] ? ext4_mark_iloc_dirty+0x1a65/0x1ca0 [ 473.815034][T12068] ? __asan_memset+0x22/0x40 [ 473.819616][T12068] ext4_bread+0x2a/0x170 [ 473.823872][T12068] ext4_append+0x2c2/0x560 [ 473.828295][T12068] ? ext4_init_new_dir+0x570/0x570 [ 473.833408][T12068] ext4_add_entry+0x9eb/0xd90 [ 473.838165][T12068] ? ext4_inc_count+0x1b0/0x1b0 [ 473.843040][T12068] ? dquot_initialize+0x20/0x20 [ 473.847925][T12068] ext4_add_nondir+0x93/0x270 [ 473.852616][T12068] ext4_mknod+0x303/0x4b0 [ 473.856948][T12068] ? ext4_rmdir+0xad0/0xad0 [ 473.861463][T12068] ? devcgroup_check_permission+0x2f/0x940 [ 473.867271][T12068] ? devcgroup_check_permission+0x885/0x940 [ 473.873184][T12068] ? bpf_lsm_inode_mknod+0x9/0x10 [ 473.878196][T12068] ? security_inode_mknod+0xc7/0x110 [ 473.883478][T12068] vfs_mknod+0x32b/0x360 [ 473.887719][T12068] do_mknodat+0x386/0x500 [ 473.892040][T12068] ? do_o_path+0x200/0x200 [ 473.896452][T12068] __x64_sys_mknod+0x8e/0xa0 [ 473.901046][T12068] do_syscall_64+0x55/0xa0 [ 473.905477][T12068] ? clear_bhb_loop+0x40/0x90 [ 473.910174][T12068] ? clear_bhb_loop+0x40/0x90 [ 473.914862][T12068] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 473.920835][T12068] RIP: 0033:0x7f03ceb9c819 [ 473.925254][T12068] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 473.945050][T12068] RSP: 002b:00007f03cfa0d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000085 [ 473.953460][T12068] RAX: ffffffffffffffda RBX: 00007f03cee15fa0 RCX: 00007f03ceb9c819 [ 473.961472][T12068] RDX: 0000000000000700 RSI: 0000000000006000 RDI: 0000200000000780 [ 473.969490][T12068] RBP: 00007f03cec32c91 R08: 0000000000000000 R09: 0000000000000000 [ 473.977551][T12068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.985537][T12068] R13: 00007f03cee16038 R14: 00007f03cee15fa0 R15: 00007ffce37fbd58 [ 473.993644][T12068] [ 473.996663][T12068] Modules linked in: [ 474.000576][T12068] CR2: ffffffffffffff93 [ 474.004739][T12068] ---[ end trace 0000000000000000 ]--- [ 474.010194][T12068] RIP: 0010:ext4_ext_map_blocks+0x2d00/0x6800 [ 474.016261][T12068] Code: 8b 7c 24 10 4d 85 ff 0f 84 bd 00 00 00 e8 78 dc 58 ff 49 8d 7f 08 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0 0f 85 3d 1e 00 00 <41> 0f b7 47 08 c1 e0 04 48 8d 04 40 48 89 44 24 10 4d 89 fc 49 8d [ 474.036103][T12068] RSP: 0018:ffffc9000b93f4a0 EFLAGS: 00010246 [ 474.042272][T12068] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000080000 [ 474.050265][T12068] RDX: ffffc9000d0b9000 RSI: 00000000000620fc RDI: ffffffffffffff93 [ 474.058247][T12068] RBP: ffffc9000b93f750 R08: ffff88805bf8ca5b R09: 1ffff1100b7f194b [ 474.066226][T12068] R10: dffffc0000000000 R11: ffffed100b7f194c R12: 0000000000000000 [ 474.074217][T12068] R13: 1ffff92001727ec0 R14: dffffc0000000000 R15: ffffffffffffff8b [ 474.082188][T12068] FS: 00007f03cfa0d6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 474.091114][T12068] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 474.097716][T12068] CR2: ffffffffffffff93 CR3: 0000000046b33000 CR4: 00000000003506e0 [ 474.105724][T12068] Kernel panic - not syncing: Fatal exception [ 474.112127][T12068] Kernel Offset: disabled [ 474.116450][T12068] Rebooting in 86400 seconds..