last executing test programs: 15m17.663752964s ago: executing program 32 (id=59): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYBLOB="23341129bfb4fcc388a80c49b4f4d96254cb9356759776b03b581050240d2d9a5cf3440e76c886f1e5c860656a3648101223fc288fc5274f0e609cfed0fc738d84eb544791dd1cb959421db9fbcb634df876aa2133fd62e245fb6b1ead07ca04772d78564af8f42015e5be557ab3bd60824768691005cbd3d295402693d934226595deeba1ff748b7dde9c617749aa38096ef667700a6b3668cb7296b024fbcf9f74e50bf0f834159f51737baac184f94dd13a9793b76946208f290637d8def94e5f56f1181da3eed500440f", @ANYRES32=0x0, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$eJzs3U1rE1scx/HfmaRteht6pw+XC3fZa0E3UutG3KRIXoS4ELWJUAwVbQV1YxVXIrp371vwLQhuFN+Arlz5AiIII+fMZJJJJzMxNDMNfj9gmMycM+d/Mg/n/AfsCMAf60rzy9uL3+w/I1VUkV5cljxJNakq6R/9W3uwf7h32Gm3MvbTDRxbyyisaY4V2t1vp9WtKaoR8e23quqD6zAdQRDsfJV0UHYgKJW7+lN40kJ0dbrttcIjy/Z0wnpHJxzHrDFddfVQy2XHAQAoVzT+e9E4X4/m754nbUbD/qkc/yfVLTuAqQsytw6M/y7LCow9vn+7Tf18z6VwdrvXyxLHaXlu6Pu8wjMrMcE0eVmli8VbvL3XaZ/fvdtpeXqmRmSg2Lr7bIWnbk9OtBspuWmGMfpu0meUS64Pc7YP2yPiX5uwxYmZD+aTuW58vVErnv9VA2MPkztS/tCRCuPfGr1H10vfllJ022g0Gl6iyIpr5L+ohUhOL2vpGYl6Z9SKkg8I/Lw4Xa3VoVph7y7k1FoLa+0sJmpt976NqLWeaMv2Jj6bR7c3beaVuWo29F3v1ByY/3s2vk1lXpn9q8ZshkOB+8XD/synN1d1+/SPjRxHulZProl/xYVRof/IvqdhyJOMbS91S5e0fPDo8Z1Kp9O+bxdupizcq8dr5p5LqWVKWPDUX6Oj/qYFhQ8ij9XqDUpFhnruRHdo7x+5he1VVkgHT82ZUMZC82OxJ1IZCwXdo1Cq/kHPLfq+kIBQNDfvCvO/gXxly0327IefMU/PnZBFewzsHDvOgGqJ+qtu6a/fyuCWRmdw4+Zc/5+VzsSrfgY5LfpRnLMhyJr6Waapz7rB838AAAAAAAAAAAAAAAAAAIBZU8R/Jyi7jwAAAAAAAAAAAAAAAAAAAAAAzLr4/b/qvf9X473/d/gvf1fCN7ycyPt/X++L9/8C0/crAAD//zZmik0=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101042, 0x186) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r1, 0x0, 0x0) syz_mount_image$hfs(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x22000c0, &(0x7f0000000080)={[{@codepage={'codepage', 0x3d, 'cp437'}}, {@iocharset={'iocharset', 0x3d, 'cp1251'}}]}, 0x4, 0x335, &(0x7f0000000880)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x2000002, &(0x7f0000000280), 0x9, 0x537, &(0x7f0000000fc0)="$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") rmdir(&(0x7f0000000080)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r6 = shmat(r5, &(0x7f0000ffc000/0x2000)=nil, 0x4000) shmat(r5, &(0x7f0000ff9000/0x1000)=nil, 0x5000) mremap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000fff000/0x1000)=nil) shmdt(r6) r7 = shmget$private(0x0, 0x1000, 0x40, &(0x7f0000884000/0x1000)=nil) shmctl$IPC_INFO(r7, 0x3, &(0x7f0000000300)=""/251) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804051, 0x0, 0x1, 0x0, &(0x7f0000000d40)) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) epoll_create(0x5) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0x1, 0x0, &(0x7f00000007c0)) 15m5.399835041s ago: executing program 33 (id=103): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') read$FUSE(r0, &(0x7f0000000200)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4\n\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|') 13m48.289376644s ago: executing program 34 (id=222): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0xa7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x4, 0x0, 0x0) 11m38.198364577s ago: executing program 35 (id=453): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3}, 0x15) 10m28.080883038s ago: executing program 36 (id=543): setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2f, &(0x7f0000000080)={0x9, {{0xa, 0x4e23, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}}, {{0xa, 0x4e22, 0x4, @ipv4={'\x00', '\xff\xff', @remote}, 0x156f}}}, 0x108) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)={0x44, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}, @nested={0x20, 0x2, 0x0, 0x1, [@nested={0x1c, 0x14, 0x0, 0x1, [@nested={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x77, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x30}}}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./file0\x00', 0x2000000, &(0x7f00000004c0)={[{@test_dummy_encryption_v1}]}, 0x82, 0x540, &(0x7f00000007c0)="$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") 6m4.516342934s ago: executing program 37 (id=1261): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINFO(r1, 0xc0104811, &(0x7f00000000c0)={0x0, 0x10, 0x10, 0x8}) 6m4.455280065s ago: executing program 9 (id=1265): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) write$sysctl(r1, &(0x7f0000000000)='2\x00', 0x2) 6m2.447230605s ago: executing program 9 (id=1271): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m59.2057494s ago: executing program 38 (id=1275): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010002000000404355050000000000000109022400010000000009040000010300010009"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0900ac"], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m59.120587641s ago: executing program 9 (id=1278): r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000580)=ANY=[@ANYBLOB="12010000000000084e04151200000000000109022d0001000058010904000d010300030009210000020122050009058103"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x6, {0x6, 0x21, "95353a0b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m58.542488217s ago: executing program 6 (id=1279): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x15, "25263408eb2f1b51ffc86d031c0496df1ad4e73231"}, &(0x7f0000000040)=0x1d) r0 = syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) write$usbip_server(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="000000030000000112cf96ef48ef13ee678ab1647df7872fe85a4787acd025f548b7ace1b87432ae4c719746d7e18f4d112aa90f4734937441d32edcd769733b791d44642a7728c3c463b5db554ee4855140ef92cf95a4b22ea268c0224f"], 0x35) write$tun(0xffffffffffffffff, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x24004014) 5m56.847087048s ago: executing program 9 (id=1283): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x200010, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f0000000580)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m56.240222233s ago: executing program 9 (id=1284): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0}, 0x0) 5m55.594720955s ago: executing program 6 (id=1285): openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r0 = openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$uinput_user_dev(r0, &(0x7f0000000a80)={'syz1\x00', {0xfffd}, 0x4a, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x400], [0x0, 0x0, 0x2000, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x185], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x9, 0x0, 0x3cc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe654, 0x0, 0xae, 0x0, 0x0, 0x88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2], [0x4, 0x4, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, 0x0, 0x0, 0x0, 0x4a9c, 0x4, 0x1, 0x0, 0x0, 0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2ec2, 0x0, 0x80, 0x4]}, 0x45c) ioctl$UI_SET_RELBIT(r0, 0x40045566, 0x8) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x2) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x1) ioctl$UI_DEV_CREATE(r0, 0x5501) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000340)={0x1, &(0x7f0000000000)=[{0x6, 0xf, 0x0, 0x7fff8000}]}) close_range(r1, 0xffffffffffffffff, 0x0) 5m54.90445379s ago: executing program 9 (id=1286): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m53.566860473s ago: executing program 39 (id=1286): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0}, 0x0) 5m53.543222762s ago: executing program 6 (id=1288): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x22401, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0, 0x3f}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) 5m52.223086195s ago: executing program 6 (id=1292): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x200010, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f0000000580)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m51.589244043s ago: executing program 6 (id=1293): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x15, "25263408eb2f1b51ffc86d031c0496df1ad4e73231"}, &(0x7f0000000040)=0x1d) syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) write$tun(0xffffffffffffffff, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x24004014) 5m50.599875826s ago: executing program 6 (id=1294): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 5m49.230161371s ago: executing program 40 (id=1294): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x44f, 0xb654, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\"'], 0x0}, 0x0) 5m45.847687363s ago: executing program 1 (id=1297): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x20000) ioctl$NBD_SET_SOCK(r1, 0xab00, 0xffffffffffffffff) ioctl$NBD_DO_IT(r1, 0xab03) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 5m45.571575212s ago: executing program 1 (id=1298): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xb05, 0x1822, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x5, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0xfd}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000240)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x2, {0x2, 0x11}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m43.379022101s ago: executing program 1 (id=1299): ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000440)) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000040)={0x3, 0x6576, 0xd}) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 5m42.584179886s ago: executing program 1 (id=1300): openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x200010, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f0000000580)="$eJzsmD9P6lAYxp/TciH35iY6u2giCTBY2qJGBgdmB038FzeJVIIWMdBB2PwUzn4CZ+JC4sfQQZ1ccHNyqGl7gAP+HdTE+PyG9zzv6dvTc94mT5OCEPJrub15uD5LJS90AP+RRELO3+mDGk2pb489Zi4ry+cn5v1Vu7OUH11PAPD9jz8/BqBT0OHJ3PeH707KcQ1aX69DQ0bqTQgYUm9Dw4bUDgS2pN5TdC2oN4zdiusYOzW3FAgzCFYQ7CDkRvfXPRYoKfsTyvVGs7VfdF2n/oXivf51CxoWlf2p76vXG1PpnwUNltQ5CKxKvYBErzdRS5TzT8QG6+vffH4KCoqfJgb+5J8KpBR/iin+kfWqh9lGszVTqRbLTtk5sO3cvDlrmnN2NjSiKL7hf39Df/qnrP/nldq4iOOo6Hl1K4r93I7iS44bD/1PQ3o6yoWcUwm/B+NiKhjSuswJIYQQQgghhBBCCCHk05mECP+CDpF/NmWvhNVPAQAA//94vnZt") ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m42.06623721s ago: executing program 1 (id=1301): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x15, "25263408eb2f1b51ffc86d031c0496df1ad4e73231"}, &(0x7f0000000040)=0x1d) syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) write$tun(0xffffffffffffffff, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x24004014) 5m41.380750375s ago: executing program 1 (id=1302): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x6, {0x6, 0x21, "95353a0b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m39.699470282s ago: executing program 41 (id=1302): syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0xe, 0x6, {0x6, 0x21, "95353a0b"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 5m27.909885796s ago: executing program 4 (id=1304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80800, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000001040)=[@text64={0x40, 0x0}], 0x1, 0x70, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) recvmsg(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000047c0)=""/4060, 0xfdc}], 0x1}, 0x40000100) sendmsg$inet(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000900)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x20000000) ioctl$KVM_RUN(r1, 0xae80, 0x0) 5m26.835791409s ago: executing program 4 (id=1305): creat(&(0x7f0000000240)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="1500000065ffff048000"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r3 = creat(&(0x7f0000000300)='./file0\x00', 0x0) write$UHID_INPUT(r3, 0x0, 0x0) 5m26.12902882s ago: executing program 4 (id=1306): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @loopback, 0x4e20, 0x3, 'lblcr\x00', 0x1, 0x5, 0x5}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x100, 0x77}, {@private=0xa010102, 0x4e23, 0x2, 0xcd, 0x12d5f, 0x3}}, 0x44) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000580)={{0x84, @multicast2, 0x4e23, 0x3, 'lc\x00', 0x2, 0x4, 0x7e}, {@private=0xa010102, 0x4e20, 0x2, 0xc8, 0x80012d58, 0x12d5c}}, 0x44) 5m26.024582248s ago: executing program 0 (id=1276): socket$tipc(0x1e, 0x2, 0x0) syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x80, 0x0, 0x161}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) memfd_secret(0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) r1 = syz_io_uring_setup(0x19f2, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000140)=0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0x14, 0x0, 0x0, 0xb928, 0x39, @empty, @dev={0xfe, 0x80, '\x00', 0x32}, 0x40, 0x0, 0x0, 0xfffe}}) socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[@ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0) syz_io_uring_submit(r2, 0x0, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x0, 0x0, r4, 0x0, r0}) io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0) 5m25.629724042s ago: executing program 4 (id=1307): openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x200010, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f0000000580)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m25.312868298s ago: executing program 0 (id=1308): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000780)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={0x0, 0x15, "25263408eb2f1b51ffc86d031c0496df1ad4e73231"}, &(0x7f0000000040)=0x1d) syz_usbip_server_init(0x1) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000600)) write$tun(0xffffffffffffffff, 0x0, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@hci={0x1f, 0x5865, 0x31}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)="b8b28225ea772f0daee8c7c98100", 0xe}], 0x1}, 0x24004014) 5m24.710056349s ago: executing program 4 (id=1309): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x8000) 5m23.991754223s ago: executing program 4 (id=1310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x68, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xe9ec, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m21.54581353s ago: executing program 42 (id=1310): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x68, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @broadcast, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x60, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xe9ec, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5m21.469997261s ago: executing program 0 (id=1313): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="04004600050034006e000000080026006c090000240051"], 0x54}}, 0x200000d0) 5m19.589671602s ago: executing program 0 (id=1316): openat$vcsu(0xffffffffffffff9c, 0x0, 0x4000, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) chdir(&(0x7f0000000340)='./file0\x00') syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000280)='./file1\x00', 0x200010, &(0x7f0000000740)=ANY=[], 0x1, 0x17d, &(0x7f0000000580)="$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") ioctl$AUTOFS_IOC_PROTOSUBVER(r1, 0x40049366, &(0x7f0000000180)) 5m18.844558463s ago: executing program 0 (id=1319): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e74000905"], 0x0) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) syz_usb_disconnect(r0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x7, 0x3, 0x0, 0x5, 0x24, 0x1, 0x7, 0x3c5b, 0x1, 0x24, 0x6, 0x5, 0x5, 0xffffffff, 0xe661, 0x4, 0x7, 0x5, 0x8, 0x4c74, 0x80000000, 0x40000, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x407, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x0, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x7, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0xf0000000, 0x8000012f, 0x8004, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0xd, 0xea4, 0xffffffff, 0x4, 0x7, 0x7fff, 0x5a7c, 0x420, 0x401, 0x6, 0x0, 0xff, 0x1, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0xfffffffe, 0x7, 0x9, 0x5, 0x3, 0x9, 0x1, 0x3, 0x6c0, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x8004, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x1, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xffe, 0xa2, 0x7, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xfffffffa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x1, 0x16, 0xffffffff, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0x20000d7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) 5m18.317041416s ago: executing program 0 (id=1321): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0), 0x0) 5m16.157721231s ago: executing program 43 (id=1321): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101041) openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) write$sndseq(r0, &(0x7f00000006c0), 0x0) 25.298603459s ago: executing program 2 (id=2669): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0x84, &(0x7f00000006c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001500)={0x34, &(0x7f00000012c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 24.491001679s ago: executing program 7 (id=2674): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000780)='}', 0x1}], 0x1}, 0x0) recvmsg$unix(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)=""/229, 0xec1}], 0x1}, 0x0) 24.487403515s ago: executing program 3 (id=2675): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x4, &(0x7f0000000000)={0x0, 0x10, 0x1, @tid=r0}, 0x0) ptrace(0x10, r0) ptrace$setregs(0x1a, r0, 0xc, &(0x7f0000000000)) 23.980607517s ago: executing program 7 (id=2677): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_open_dev$sg(0x0, 0x0, 0x80001) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x56, 0xa, 0x3, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e22956841e87000", 0x3032344d}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10012, &(0x7f0000000140), 0x0, 0x4e1, &(0x7f0000000ec0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x600}, 0x0) ftruncate(r1, 0x81ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$eJzs3M9LG2kYwPEnMYkxoslh2WUXFh92L7uXQbP3paEolAYq1pT+gNJRJ23INJFMsKSU2p56Lf0jehCP3oTWf8BLbz310puXQg/1UDol8yNGjdXGH/HH9wPyvvq8T+Z9Z1Sed2Bm4+bLh+WiYxTNukSTKhERkU2RjEQlFAnaqNdPSLtn8u/g5/d/Xr91+2ounx+fUp3ITf+XVdXhkTePngwEw1b7ZT1zd+NT9uP6r+u/b3ybflBytORopVpXU2eqH+rmjG3pXMkpG6qTtmU6lpYqjlXz41U/XrSr8/MNNStzQ6n5muU4alYaWrYaWq9qvdZQ875ZqqhhGDqUEuynsDQ1Zea6TJ494sngmNRqObNPRAZ2RQpLPZkQAADoqaD+b1X70WZJ3039H+tY/y//tVYfvLEyHNT/q4lm/S/SVv/f2/qsbfV/UkSOvf7fXRGdL6774/ih6n+cEc36PxX8/Xqe31ke9TrU/wAAAAAAAAAAAAAAAAAAAAAAnAWbrpt2XTcdtuFXv4gkvSdI/O97PU8cD67/xbb14o7YsIj9YqGwUPDbYMCaiNhiyaik5av3+xBo9hOi3iBtyshbezHIX1wo9HmRXFFKXv6YpCWzM991J67kx8fUtz0/Lqn2/Kyk5ZfO+dmd+fFmm5B//m7LNyQt72alKrbMBU/GhflPx1QvX8vvOP6ANw4AAAAAgPPA0JbW/r2/PW7sjvv7Yz/e2l93vD/g769HO+7vY/JHrFerBgAAAADgYnEaj8umbVu1c9cJV3jQrPC9xnuMiUhkr9ARdMKDn4JTFz/QGYt2NdWRxE9elI6d8LbRXmNksptPdtMihz2Hv716/eXorsX/K8l9VtptJ7HfSuMn9x8IAAAAwEnZKvrDn1zq7YQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALiATuLFcr1eIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBafA8AAP//ohEIjg==") 23.94427729s ago: executing program 3 (id=2678): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100003b6bc040950b2b774ca21802030109021200010000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x10) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f00000000c0), 0x2, 0x822b01) ioctl$EVIOCSMASK(r4, 0x40104593, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000700)}) 21.565123283s ago: executing program 8 (id=2684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_open_procfs(0x0, &(0x7f0000000180)='timerslack_ns\x00') lseek(r0, 0xcbe, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) r2 = syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x9) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r4, 0x8, &(0x7f0000000040)=0xcf3) ptrace(0x10, r4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prlimit64(r1, 0x9, &(0x7f0000000280)={0xfffffffffffffffb}, &(0x7f00000002c0)) ptrace$pokeuser(0x6, r4, 0x358, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x3, &(0x7f0000000a40), 0x1, 0x51b, &(0x7f0000001240)="$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") syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c7", @ANYRESHEX], 0x0) 21.302202534s ago: executing program 7 (id=2686): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}}, 0x0) 20.54193587s ago: executing program 2 (id=2687): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 17.647806677s ago: executing program 3 (id=2689): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x5e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r5 = socket$netlink(0x10, 0x3, 0x4) writev(r5, &(0x7f0000000140)=[{&(0x7f0000000200)="580000001400add4275a1bf00c45b45602067fffffff81005e22000d00ff0028925aa8002000eaa57b00090080000efffeffe809000000ff0000f03a0200f0ffffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 15.812265433s ago: executing program 8 (id=2690): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 15.464763641s ago: executing program 2 (id=2691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 14.548118977s ago: executing program 2 (id=2694): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r0, 0x0, 0x4000801) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 14.010697596s ago: executing program 5 (id=2695): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x3}, 0x94) bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r0}, 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00'}, 0x94) r2 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r1}, 0x8) close(r2) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 13.847829088s ago: executing program 2 (id=2696): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sg(0x0, 0x0, 0x80001) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb66128d7dca1466ef553dd2e4e4f62d53f607261202658a1f4ccea16fc7e8f71723e90be3ed2c4d80b216ca5f2241e699404f63e702615abb526a64e3b64b8fec365fd727355ca51adeb5b7c70fa346925665a7e0"], 0x2, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") r0 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f00000002c0)={0x56, 0xa, 0x3, "b50404cf3d04d7ad1ce6caa4751ea58fc78e9e22956841e87000", 0x3032344d}) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10012, &(0x7f0000000140), 0x0, 0x4e1, &(0x7f0000000ec0)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1, 0x0, 0x0, 0x600}, 0x0) ftruncate(r1, 0x81ff) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") 13.600068183s ago: executing program 3 (id=2697): r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f0000000040)={0x40, 0x17, 0x1, 'V'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001d00)={0x84, &(0x7f00000006c0)={0x40, 0x17}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000001500)={0x34, &(0x7f00000012c0)={0x20, 0xf}, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.517253265s ago: executing program 7 (id=2698): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000140)='./file2\x00', 0x1008400, &(0x7f0000000380)=ANY=[@ANYRES8=0x0, @ANYRES16, @ANYRES16=0x0, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYRES64=0x0, @ANYRESDEC], 0x85, 0x693, &(0x7f0000000500)="$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") 13.237575569s ago: executing program 5 (id=2699): bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) 13.048372371s ago: executing program 8 (id=2700): socket(0x15, 0x5, 0x0) unshare(0x26020480) unshare(0x700) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x2, 0x0, 0x4, 0x1, {0xa, 0x4e21, 0x4, @empty, 0x1f}}}, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_SET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, 0x1410, 0x20, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x2}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x1}, 0x4000000) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000005280)) 12.577835348s ago: executing program 5 (id=2701): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0xfc, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r0, 0x1, 0x24, &(0x7f0000000000), 0x4) 12.545526091s ago: executing program 7 (id=2702): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) recvmmsg(r0, &(0x7f0000003800)=[{{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000d00)=""/110, 0x6e}, {&(0x7f0000000d80)=""/31, 0x1f}, {&(0x7f0000000dc0)=""/13, 0xd}], 0x3}, 0x2}, {{0x0, 0x0, &(0x7f0000003640)=[{0x0}, {&(0x7f0000000ac0)=""/40, 0x28}], 0x2}, 0xac1}], 0x2, 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 12.233801822s ago: executing program 8 (id=2703): syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000140)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, &(0x7f0000bbdffc)=0x0) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f0000000140)={0x28, 0x0, 0x0, @host}, 0x10) 8.882779414s ago: executing program 8 (id=2704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$unix(0x1, 0x1, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x800, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x400}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r4, {0x7, 0xfff2}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 5.917355718s ago: executing program 2 (id=2705): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) recvfrom$inet6(r0, 0x0, 0x0, 0x40, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x17) socket$nl_netfilter(0x10, 0x3, 0xc) write$char_usb(r1, &(0x7f0000000000)="3f8c76c1749b4c297f47ddb9b5d3e6528d02d6336dc8253502bb6448eabf9c1fbb9b0e61b5504b07a0d9c85d0b0d6eb26b744ff97580", 0x36) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x4, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xfc, 0x0, 0x0, @loopback, @empty}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f5, &(0x7f0000000200)={'syztnl0\x00', &(0x7f0000000040)={'erspan0\x00', r4, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x208500, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r2, 0x1, &(0x7f0000000200)={0x100, r5}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x15) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x200}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000200)={0xdde, 0x8, 0x1, 0x101, 0x7, 0x55, 0x8000, 0xe, r8}, &(0x7f0000000240)=0x20) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) recvmmsg(r6, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x10040, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000006c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) 2.196270509s ago: executing program 5 (id=2706): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg(r0, 0x0, 0x4000801) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x4000) socket$netlink(0x10, 0x3, 0x0) sendmmsg$inet(r1, &(0x7f0000002240)=[{{&(0x7f0000000140)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0}}], 0x1, 0x4000000) 2.116557377s ago: executing program 7 (id=2707): io_setup(0x15, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) fsopen(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x2, 0x0, 0x0) r5 = io_uring_setup(0x2237, &(0x7f0000000880)={0x0, 0xfffffffc, 0x3018, 0x2}) r6 = syz_io_uring_setup(0x73d9, &(0x7f0000000280)={0x0, 0xba40, 0x80, 0x0, 0x313}, &(0x7f0000000300), &(0x7f0000000440)) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0xd, 0x0, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r1) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)=[{0x0}], 0x0, 0x1}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r5, 0xe, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x0, 0x1}, 0x20) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x40, 0x0, 0x0, 0x401}, {0x20, 0x0, 0x0, 0xfff}, {0x1000, 0xfc, 0xf, 0x6}]}, 0x10) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$TIOCSSOFTCAR(0xffffffffffffffff, 0x5453, 0x0) r7 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r0, &(0x7f0000000000)={0xdb880197c15ade5}) 1.861304803s ago: executing program 3 (id=2708): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x38}}, 0x0) 1.196884572s ago: executing program 8 (id=2709): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xc, {"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", 0x3b3cc1e9e7df1ab7}}, 0x9b) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r2}, 0x10) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x100) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001640)={0x2, 0x1, 0x0, 0x9, 0x2}, 0x10}}, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) 1.15032354s ago: executing program 5 (id=2710): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1.110770735s ago: executing program 3 (id=2711): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x1, 0x2, 0x40}, 0x48) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYRESHEX=r0, @ANYRES64=r1, @ANYRES32=r0, @ANYRESHEX=r1, @ANYRESDEC=r1, @ANYRES16=r1], 0x48) r2 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00f\x00'], 0xfe33) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000140)={'vlan0\x00'}) 0s ago: executing program 5 (id=2712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00'}, 0x10) ptrace(0x8, r3) r4 = syz_pidfd_open(r3, 0x0) process_mrelease(r4, 0x700000000000000) syz_emit_ethernet(0x2e, &(0x7f0000000140)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@lsrr={0x83, 0x3, 0x93}, @noop]}}, {0x800, 0x4e20, 0x8}}}}}, 0x0) kernel console output (not intermixed with test programs): failed: -22 [ 1089.813018][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1090.032586][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1090.094835][T12361] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2009'. [ 1090.395455][ T5848] usb 8-1: USB disconnect, device number 22 [ 1090.649063][T12366] geneve2: entered promiscuous mode [ 1090.793578][T12366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2010'. [ 1090.935139][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 1091.174474][ T5870] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1091.186488][ T5870] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1091.196875][ T5870] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1091.206411][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1091.257390][T12370] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1091.288666][ T5870] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 1091.535755][ T5870] usb 4-1: USB disconnect, device number 31 [ 1092.187841][T12381] loop2: detected capacity change from 0 to 2048 [ 1092.222520][T12381] hpfs: hpfs_map_sector(): read error [ 1092.593471][T10360] gspca_stk1135: reg_w 0x353 err -71 [ 1092.600551][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.610920][T10360] gspca_stk1135: Sensor write failed [ 1092.620192][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.635818][T10360] gspca_stk1135: Sensor write failed [ 1092.641413][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.653149][T10360] gspca_stk1135: Sensor read failed [ 1092.662494][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.672609][T10360] gspca_stk1135: Sensor read failed [ 1092.679457][T10360] gspca_stk1135: Detected sensor type unknown (0x0) [ 1092.686432][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.692973][T10360] gspca_stk1135: Sensor read failed [ 1092.698503][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.705142][T10360] gspca_stk1135: Sensor read failed [ 1092.710613][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.717385][T10360] gspca_stk1135: Sensor write failed [ 1092.728806][T10360] gspca_stk1135: serial bus timeout: status=0x00 [ 1092.737049][T10360] gspca_stk1135: Sensor write failed [ 1092.742772][T10360] stk1135 9-1:0.0: probe with driver stk1135 failed with error -71 [ 1092.773056][T10360] usb 9-1: USB disconnect, device number 32 [ 1092.818592][T12390] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2019'. [ 1093.285233][ T5848] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1093.476244][ T5848] usb 3-1: Using ep0 maxpacket: 32 [ 1093.492748][ T5848] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1093.501964][ T5848] usb 3-1: config 0 has no interface number 0 [ 1093.550299][ T5848] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1093.560274][ T5848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1093.568796][ T5848] usb 3-1: Product: syz [ 1093.573212][ T5848] usb 3-1: Manufacturer: syz [ 1093.578176][ T5848] usb 3-1: SerialNumber: syz [ 1093.618605][ T5848] usb 3-1: config 0 descriptor?? [ 1093.658000][ T5848] smsc95xx v2.0.0 [ 1093.662040][ T5848] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1093.673234][ T5848] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1093.750805][T12403] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2026'. [ 1093.777697][T12403] vlan2: entered promiscuous mode [ 1093.783014][T12403] gretap0: entered promiscuous mode [ 1094.600821][T12419] netlink: 32 bytes leftover after parsing attributes in process `syz.8.2032'. [ 1094.744388][ T5870] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1094.794672][T12417] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.995177][ T5870] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 1095.007354][ T5870] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 1095.017670][ T5870] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 1095.027301][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1095.043524][T12417] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.184806][T12414] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1095.213049][T12417] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.305461][ T5870] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 1095.481584][ T5870] usb 8-1: USB disconnect, device number 23 [ 1095.550508][T12417] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.747275][T12417] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.777314][T12417] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.808439][T12417] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.838653][T12417] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1096.074654][T10360] usb 9-1: new high-speed USB device number 33 using dummy_hcd [ 1096.130174][ T5870] usb 3-1: USB disconnect, device number 33 [ 1096.307679][T10360] usb 9-1: Using ep0 maxpacket: 8 [ 1096.330635][T10360] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.341490][T10360] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1096.428334][T10360] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1096.439198][T10360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.451334][T10360] usb 9-1: Product: syz [ 1096.457448][T10360] usb 9-1: Manufacturer: syz [ 1096.462316][T10360] usb 9-1: SerialNumber: syz [ 1096.478790][T10360] usb 9-1: config 0 descriptor?? [ 1096.524370][ T9607] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1096.589173][T12438] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 1096.684667][ T9607] usb 4-1: Using ep0 maxpacket: 16 [ 1096.703275][ T9607] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1096.714892][ T9607] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1096.771247][ T9607] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1096.781007][ T9607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.789589][ T9607] usb 4-1: Product: syz [ 1096.794160][ T9607] usb 4-1: Manufacturer: syz [ 1096.799028][ T9607] usb 4-1: SerialNumber: syz [ 1097.099094][ T9607] usb 4-1: 0:2 : does not exist [ 1097.199431][ T9607] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1097.344890][ T9607] usb 4-1: USB disconnect, device number 32 [ 1097.747609][ T5848] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1097.964863][ T5848] usb 8-1: Using ep0 maxpacket: 8 [ 1098.025814][ T5848] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1098.035674][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1098.047539][ T5848] usb 8-1: Product: syz [ 1098.052063][ T5848] usb 8-1: Manufacturer: syz [ 1098.058451][ T5848] usb 8-1: SerialNumber: syz [ 1098.121892][ T5848] usb 8-1: config 0 descriptor?? [ 1098.258350][T12457] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2043'. [ 1098.337691][ T5848] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1098.964417][ T9607] usb 9-1: USB disconnect, device number 33 [ 1098.972923][ T5848] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1099.033889][ T5848] usb 8-1: USB disconnect, device number 24 [ 1099.375930][ T5870] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 1099.568285][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 1099.603470][ T5870] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1099.612487][ T5870] usb 3-1: config 0 has no interface number 0 [ 1099.710381][ T5870] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1099.720270][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.728771][ T5870] usb 3-1: Product: syz [ 1099.733234][ T5870] usb 3-1: Manufacturer: syz [ 1099.738297][ T5870] usb 3-1: SerialNumber: syz [ 1099.751436][ T5870] usb 3-1: config 0 descriptor?? [ 1099.797110][ T5870] smsc95xx v2.0.0 [ 1099.801144][ T5870] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 1099.812561][ T5870] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -22 [ 1099.830932][T10551] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 1100.003223][T10551] usb 4-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1100.014553][T10551] usb 4-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1100.024204][T10551] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1100.066674][T10551] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1100.076452][T10551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.084921][T10551] usb 4-1: Product: syz [ 1100.089374][T10551] usb 4-1: Manufacturer: syz [ 1100.095668][T10551] usb 4-1: SerialNumber: syz [ 1100.164618][ T5848] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1100.364568][T10551] usb 4-1: Found UVC 0.00 device syz (8086:0b07) [ 1100.371648][T10551] usb 4-1: No valid video chain found. [ 1100.395400][T10551] usb 4-1: USB disconnect, device number 33 [ 1100.434326][T10360] usb 9-1: new high-speed USB device number 34 using dummy_hcd [ 1100.464377][ T5848] usb 8-1: Using ep0 maxpacket: 8 [ 1100.480669][ T5848] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 1100.489691][ T5848] usb 8-1: config 179 has no interface number 0 [ 1100.496529][ T5848] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1100.511736][ T5848] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1100.525072][ T5848] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1100.536658][ T5848] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1100.548694][ T5848] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1100.562441][ T5848] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1100.572400][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1100.595483][T12479] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1100.665337][T10360] usb 9-1: Using ep0 maxpacket: 16 [ 1100.695467][T10360] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1100.710193][T10360] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1100.763347][T10360] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1100.773676][T10360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1100.783202][T10360] usb 9-1: Product: syz [ 1100.788571][T10360] usb 9-1: Manufacturer: syz [ 1100.794417][T10360] usb 9-1: SerialNumber: syz [ 1100.851244][T12479] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1100.861246][T12479] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1100.958057][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1100.958075][T10551] usb 8-1: USB disconnect, device number 25 [ 1100.958257][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1101.137982][T10360] usb 9-1: 0:2 : does not exist [ 1101.194619][T10360] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1101.282783][T10360] usb 9-1: USB disconnect, device number 34 [ 1101.292379][T12491] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2055'. [ 1102.386582][T10551] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1102.468220][ T5842] usb 3-1: USB disconnect, device number 34 [ 1102.594229][T10551] usb 8-1: Using ep0 maxpacket: 32 [ 1102.693738][T10551] usb 8-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 1102.703531][T10551] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.712109][T10551] usb 8-1: Product: syz [ 1102.716636][T10551] usb 8-1: Manufacturer: syz [ 1102.721473][T10551] usb 8-1: SerialNumber: syz [ 1102.846456][T10551] usb 8-1: config 0 descriptor?? [ 1102.883185][T10551] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 1103.234883][T10360] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1103.455070][T10360] usb 4-1: Using ep0 maxpacket: 8 [ 1103.538713][T10360] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1103.548830][T10360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1103.557280][T10360] usb 4-1: Product: syz [ 1103.561693][T10360] usb 4-1: Manufacturer: syz [ 1103.566692][T10360] usb 4-1: SerialNumber: syz [ 1103.681994][T10360] usb 4-1: config 0 descriptor?? [ 1103.931707][T10360] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1104.148926][ T5870] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 1104.225628][T12524] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2066'. [ 1104.363381][ T5870] usb 3-1: config 220 has an invalid descriptor of length 1, skipping remainder of the config [ 1104.375568][ T5870] usb 3-1: config 220 has 1 interface, different from the descriptor's value: 3 [ 1104.385136][ T5870] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1104.468276][ T5870] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1104.478217][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.486984][ T5870] usb 3-1: Product: syz [ 1104.491555][ T5870] usb 3-1: Manufacturer: syz [ 1104.498113][ T5870] usb 3-1: SerialNumber: syz [ 1104.556029][T10360] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1104.602465][T10360] usb 4-1: USB disconnect, device number 34 [ 1104.774130][ T5870] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1104.781429][ T5870] usb 3-1: No valid video chain found. [ 1104.794417][ T5870] usb 3-1: USB disconnect, device number 35 [ 1104.874442][ T5848] usb 9-1: new high-speed USB device number 35 using dummy_hcd [ 1104.975554][T12530] team_slave_0: entered promiscuous mode [ 1104.981611][T12530] team_slave_1: entered promiscuous mode [ 1104.987999][T12530] vlan2: entered promiscuous mode [ 1104.993269][T12530] team0: entered promiscuous mode [ 1105.096242][ T5848] usb 9-1: Using ep0 maxpacket: 8 [ 1105.115049][ T5848] usb 9-1: config 179 has an invalid interface number: 65 but max is 0 [ 1105.124321][ T5848] usb 9-1: config 179 has no interface number 0 [ 1105.130983][ T5848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1105.142669][ T5848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 1105.154469][ T5848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1105.167161][ T5848] usb 9-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 1105.180501][ T5848] usb 9-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1105.195815][ T5848] usb 9-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 1105.205743][ T5848] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1105.438899][T12526] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1105.754461][T12526] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1105.764680][T12526] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1106.191521][ T5848] usb 9-1: USB disconnect, device number 35 [ 1106.197850][ C0] xpad 9-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 1106.198060][ C0] xpad 9-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1106.258095][T10551] gspca_stk1135: reg_w 0x353 err -71 [ 1106.264896][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.271454][T10551] gspca_stk1135: Sensor write failed [ 1106.277383][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.284053][T10551] gspca_stk1135: Sensor write failed [ 1106.289653][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.296326][T10551] gspca_stk1135: Sensor read failed [ 1106.301823][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.308618][T10551] gspca_stk1135: Sensor read failed [ 1106.314099][T10551] gspca_stk1135: Detected sensor type unknown (0x0) [ 1106.321025][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.327795][T10551] gspca_stk1135: Sensor read failed [ 1106.333259][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.341436][T10551] gspca_stk1135: Sensor read failed [ 1106.347044][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.353593][T10551] gspca_stk1135: Sensor write failed [ 1106.359257][T10551] gspca_stk1135: serial bus timeout: status=0x00 [ 1106.366321][T10551] gspca_stk1135: Sensor write failed [ 1106.372063][T10551] stk1135 8-1:0.0: probe with driver stk1135 failed with error -71 [ 1106.480580][T10551] usb 8-1: USB disconnect, device number 26 [ 1107.924338][ T5848] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 1108.094453][ T5848] usb 4-1: Using ep0 maxpacket: 32 [ 1108.124942][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1108.136354][ T5848] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1108.147237][ T5848] usb 4-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1108.157004][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.238657][ T5848] usb 4-1: config 0 descriptor?? [ 1108.244446][T10551] usb 9-1: new high-speed USB device number 36 using dummy_hcd [ 1108.348548][T12567] team_slave_0: entered promiscuous mode [ 1108.354761][T12567] team_slave_1: entered promiscuous mode [ 1108.361032][T12567] vlan0: entered promiscuous mode [ 1108.366770][T12567] team0: entered promiscuous mode [ 1108.429018][T10551] usb 9-1: Using ep0 maxpacket: 8 [ 1108.504449][T10551] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1108.513844][T10551] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1108.522299][T10551] usb 9-1: Product: syz [ 1108.526915][T10551] usb 9-1: Manufacturer: syz [ 1108.531752][T10551] usb 9-1: SerialNumber: syz [ 1108.612742][T10551] usb 9-1: config 0 descriptor?? [ 1108.692898][ T5848] smartjoyplus 0003:0925:8866.0017: unknown main item tag 0x4 [ 1108.707467][ T5848] smartjoyplus 0003:0925:8866.0017: item fetching failed at offset 3/5 [ 1108.741924][ T5848] smartjoyplus 0003:0925:8866.0017: parse failed [ 1108.749172][ T5848] smartjoyplus 0003:0925:8866.0017: probe with driver smartjoyplus failed with error -22 [ 1108.834379][T10551] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1108.904137][ T5848] usb 4-1: USB disconnect, device number 35 [ 1109.139174][T12573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2084'. [ 1109.448649][T10551] dvb_usb_rtl28xxu 9-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1109.466207][T10551] usb 9-1: USB disconnect, device number 36 [ 1110.044976][T10551] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1110.254798][T10551] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1110.265464][T10551] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1110.400586][T10551] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1110.412077][T10551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1110.421136][T10551] usb 3-1: SerialNumber: syz [ 1110.771428][T10551] usb 3-1: 0:2 : does not exist [ 1110.869283][T10551] usb 3-1: USB disconnect, device number 36 [ 1112.284564][T10551] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1112.501396][T10551] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1112.511957][T10551] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1112.546489][T10551] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1112.556673][T10551] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1112.565049][T10551] usb 4-1: SerialNumber: syz [ 1112.707507][ T5870] usb 9-1: new high-speed USB device number 37 using dummy_hcd [ 1112.815001][T10551] usb 4-1: 0:2 : does not exist [ 1112.846350][T10551] usb 4-1: USB disconnect, device number 36 [ 1112.881981][ T5870] usb 9-1: Using ep0 maxpacket: 32 [ 1112.911013][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1112.923352][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1112.934499][ T5870] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1112.943857][ T5870] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1112.964783][ T5842] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1112.991233][ T5870] usb 9-1: config 0 descriptor?? [ 1113.149430][ T5842] usb 8-1: Using ep0 maxpacket: 8 [ 1113.222136][ T5842] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1113.232026][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.240601][ T5842] usb 8-1: Product: syz [ 1113.245420][ T5842] usb 8-1: Manufacturer: syz [ 1113.250468][ T5842] usb 8-1: SerialNumber: syz [ 1113.279023][ T5842] usb 8-1: config 0 descriptor?? [ 1113.479812][ T5870] smartjoyplus 0003:0925:8866.0018: unknown main item tag 0x4 [ 1113.487948][ T5870] smartjoyplus 0003:0925:8866.0018: item fetching failed at offset 3/5 [ 1113.511993][ T5870] smartjoyplus 0003:0925:8866.0018: parse failed [ 1113.520560][ T5870] smartjoyplus 0003:0925:8866.0018: probe with driver smartjoyplus failed with error -22 [ 1113.573090][ T5842] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1113.685436][ T5870] usb 9-1: USB disconnect, device number 37 [ 1114.178329][ T5842] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1114.201883][ T5842] usb 8-1: USB disconnect, device number 27 [ 1114.284372][T10360] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1114.451579][T10360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1114.462914][T10360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1114.503026][T10360] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1114.512981][T10360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1114.526471][T10360] usb 4-1: SerialNumber: syz [ 1114.806360][T10360] usb 4-1: 0:2 : does not exist [ 1114.860536][T10360] usb 4-1: USB disconnect, device number 37 [ 1115.808165][ T5842] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 1115.966112][ T5870] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1116.004671][ T5842] usb 6-1: Using ep0 maxpacket: 8 [ 1116.025390][ T5842] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1116.051605][ T5842] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1116.061223][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.071098][ T5842] usb 6-1: Product: syz [ 1116.075656][ T5842] usb 6-1: Manufacturer: syz [ 1116.080511][ T5842] usb 6-1: SerialNumber: syz [ 1116.095067][ T5842] usb 6-1: config 0 descriptor?? [ 1116.164427][ T5870] usb 3-1: Using ep0 maxpacket: 16 [ 1116.180845][ T5870] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 1116.189833][ T5870] usb 3-1: config 0 has no interface number 0 [ 1116.196356][ T5870] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 1116.206683][ T5870] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 1116.217036][ T5870] usb 3-1: config 0 interface 41 has no altsetting 0 [ 1116.224860][T10551] usb 9-1: new high-speed USB device number 38 using dummy_hcd [ 1116.249840][ T5870] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 1116.259650][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.268021][ T5870] usb 3-1: Product: syz [ 1116.273610][ T5870] usb 3-1: Manufacturer: syz [ 1116.278700][ T5870] usb 3-1: SerialNumber: syz [ 1116.289379][ T5870] usb 3-1: config 0 descriptor?? [ 1116.298410][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.309229][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.396276][T10551] usb 9-1: Using ep0 maxpacket: 32 [ 1116.413201][T10551] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1116.425071][T10551] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1116.435778][T10551] usb 9-1: New USB device found, idVendor=0925, idProduct=8866, bcdDevice= 0.00 [ 1116.445643][T10551] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.481298][T10551] usb 9-1: config 0 descriptor?? [ 1116.600705][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.615838][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1116.926978][T10551] smartjoyplus 0003:0925:8866.0019: unknown main item tag 0x4 [ 1116.935315][T10551] smartjoyplus 0003:0925:8866.0019: item fetching failed at offset 3/5 [ 1117.000709][T10551] smartjoyplus 0003:0925:8866.0019: parse failed [ 1117.008126][T10551] smartjoyplus 0003:0925:8866.0019: probe with driver smartjoyplus failed with error -22 [ 1117.044698][ T5870] Error reading MAC address [ 1117.053377][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1117.061795][T12663] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1117.085171][ T5842] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1117.118796][T10360] usb 9-1: USB disconnect, device number 38 [ 1117.247374][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1117.311847][ T5842] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 1117.321645][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1117.330364][ T5842] usb 4-1: Product: syz [ 1117.335062][ T5842] usb 4-1: Manufacturer: syz [ 1117.340129][ T5842] usb 4-1: SerialNumber: syz [ 1117.361127][ T5842] usb 4-1: config 0 descriptor?? [ 1117.482452][ T5870] sr9700 3-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 1117.587272][ T5842] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1118.236165][ T5842] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1118.262264][ T5842] usb 4-1: USB disconnect, device number 38 [ 1118.514731][ T5870] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1118.665059][ T5842] usb 6-1: USB disconnect, device number 43 [ 1118.771216][ T5870] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.782004][ T5870] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1118.840316][ T5870] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1118.850130][ T5870] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1118.858565][ T5870] usb 8-1: SerialNumber: syz [ 1118.908012][T12704] vlan2: entered promiscuous mode [ 1119.078245][T10360] usb 3-1: USB disconnect, device number 37 [ 1119.180088][ T5870] usb 8-1: 0:2 : does not exist [ 1119.259327][ T5870] usb 8-1: USB disconnect, device number 28 [ 1119.680784][T12718] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2136'. [ 1120.634321][ T5870] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 1120.766851][ T5842] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 1120.825233][T10551] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 1120.836294][ T5870] usb 6-1: Using ep0 maxpacket: 16 [ 1120.864759][ T5870] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1120.876882][ T5870] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1120.907921][ T5870] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1120.917802][ T5870] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1120.926157][ T5870] usb 6-1: Product: syz [ 1120.930554][ T5870] usb 6-1: Manufacturer: syz [ 1120.935477][ T5870] usb 6-1: SerialNumber: syz [ 1120.973410][ T5870] usb 6-1: config 0 descriptor?? [ 1120.980239][ T5842] usb 4-1: Using ep0 maxpacket: 8 [ 1121.003343][ T5842] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1121.034474][T10551] usb 8-1: Using ep0 maxpacket: 16 [ 1121.051691][ T5870] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1121.061502][ T5870] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1121.082745][T10551] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1121.095250][T10551] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1121.124807][ T5842] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1121.134694][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.143148][ T5842] usb 4-1: Product: syz [ 1121.147911][ T5842] usb 4-1: Manufacturer: syz [ 1121.152929][ T5842] usb 4-1: SerialNumber: syz [ 1121.183378][ T5842] usb 4-1: config 0 descriptor?? [ 1121.219392][T10551] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1121.228903][T10551] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1121.237354][T10551] usb 8-1: Product: syz [ 1121.241785][T10551] usb 8-1: Manufacturer: syz [ 1121.246730][T10551] usb 8-1: SerialNumber: syz [ 1121.481749][T10551] usb 8-1: 0:2 : does not exist [ 1121.544857][T10551] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1121.583559][T12746] autofs: Unknown parameter 'fd0x0000000000000000' [ 1121.627595][ T5870] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1121.642779][ T5870] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1121.654669][ T5870] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1121.661982][ T5870] em28xx 6-1:0.0: No AC97 audio processor [ 1121.681559][T10551] usb 8-1: USB disconnect, device number 29 [ 1123.615643][T10551] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 1123.655919][ T5870] usb 6-1: USB disconnect, device number 44 [ 1123.663746][ T5870] em28xx 6-1:0.0: Disconnecting em28xx [ 1123.685553][ T5870] em28xx 6-1:0.0: Freeing device [ 1123.734674][T10360] usb 4-1: USB disconnect, device number 39 [ 1123.866944][T10551] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1123.875790][T10551] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1123.886459][T10551] usb 8-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1123.895965][T10551] usb 8-1: config 220 has no interface number 1 [ 1123.902496][T10551] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1123.909953][T10551] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1123.962094][T10551] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1123.971622][T10551] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1123.980299][T10551] usb 8-1: Product: syz [ 1123.984802][T10551] usb 8-1: Manufacturer: syz [ 1123.989657][T10551] usb 8-1: SerialNumber: syz [ 1124.273316][T10551] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1124.280415][T10551] usb 8-1: No valid video chain found. [ 1124.288957][ T5842] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 1124.344780][T10551] usb 8-1: USB disconnect, device number 30 [ 1124.465527][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 1124.497151][ T5842] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1124.507902][ T5842] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1124.563030][ T5842] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1124.573760][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1124.582099][ T5842] usb 6-1: Product: syz [ 1124.586688][ T5842] usb 6-1: Manufacturer: syz [ 1124.591561][ T5842] usb 6-1: SerialNumber: syz [ 1124.832092][ T5842] usb 6-1: 0:2 : does not exist [ 1124.884875][ T5842] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 1124.993375][ T5842] usb 6-1: USB disconnect, device number 45 [ 1125.096859][T12804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2169'. [ 1125.934995][ T5842] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 1125.984649][T10551] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 1126.118099][ T5842] usb 8-1: Using ep0 maxpacket: 8 [ 1126.164245][T10551] usb 6-1: Using ep0 maxpacket: 32 [ 1126.183083][ T5842] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1126.193616][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.202754][ T5842] usb 8-1: Product: syz [ 1126.208193][ T5842] usb 8-1: Manufacturer: syz [ 1126.213093][ T5842] usb 8-1: SerialNumber: syz [ 1126.227305][ T5842] usb 8-1: config 0 descriptor?? [ 1126.239675][T10551] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1126.248228][T10551] usb 6-1: config 0 has no interface number 0 [ 1126.281378][T10551] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1126.291088][T10551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1126.299701][T10551] usb 6-1: Product: syz [ 1126.304439][T10551] usb 6-1: Manufacturer: syz [ 1126.310399][T10551] usb 6-1: SerialNumber: syz [ 1126.341430][T10551] usb 6-1: config 0 descriptor?? [ 1126.355983][T10551] smsc95xx v2.0.0 [ 1126.458443][ T5842] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1126.619187][T12831] netdevsim netdevsim8 netdevsim0: entered promiscuous mode [ 1126.668755][ T5842] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1126.790361][T10360] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1126.802827][T10551] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1126.814455][T10551] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1127.002806][T10360] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1127.012253][T10360] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1127.023164][T10360] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1127.036187][T10360] usb 3-1: config 220 has no interface number 1 [ 1127.042752][T10360] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1127.051417][T10360] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1127.062186][T10551] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1127.074583][T10551] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1127.111834][T10360] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1127.121600][T10360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1127.132960][T10360] usb 3-1: Product: syz [ 1127.138921][T10360] usb 3-1: Manufacturer: syz [ 1127.143805][T10360] usb 3-1: SerialNumber: syz [ 1127.161876][T12836] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2184'. [ 1127.386712][T10360] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1127.393629][T10360] usb 3-1: No valid video chain found. [ 1127.455535][T10360] usb 3-1: USB disconnect, device number 38 [ 1127.689551][T12843] team_slave_0: entered promiscuous mode [ 1127.695735][T12843] team_slave_1: entered promiscuous mode [ 1127.701949][T12843] vlan2: entered promiscuous mode [ 1127.707310][T12843] team0: entered promiscuous mode [ 1128.751152][T10551] usb 8-1: USB disconnect, device number 31 [ 1128.925371][T12866] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2196'. [ 1129.076840][T10551] usb 6-1: USB disconnect, device number 46 [ 1129.149385][T12863] bridge0: port 2(bridge_slave_1) entered disabled state [ 1129.159334][T12863] bridge0: port 1(bridge_slave_0) entered disabled state [ 1129.414796][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1129.439641][T12863] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1131.196441][T10360] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1131.425061][T10360] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 1131.434571][T12863] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.434759][T12863] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.434935][T12863] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.435208][T12863] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1131.475409][T10360] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.486073][T10360] usb 4-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1131.495679][T10360] usb 4-1: config 220 has no interface number 1 [ 1131.502224][T10360] usb 4-1: config 220 interface 0 has no altsetting 0 [ 1131.509419][T10360] usb 4-1: config 220 interface 76 has no altsetting 0 [ 1131.525414][T12863] geneve2: left promiscuous mode [ 1131.585245][T12882] team_slave_0: entered promiscuous mode [ 1131.591332][T12882] team_slave_1: entered promiscuous mode [ 1131.597754][T12882] vlan2: entered promiscuous mode [ 1131.603029][T12882] team0: entered promiscuous mode [ 1131.659370][T10360] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1131.669049][T10360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.677588][T10360] usb 4-1: Product: syz [ 1131.682002][T10360] usb 4-1: Manufacturer: syz [ 1131.686979][T10360] usb 4-1: SerialNumber: syz [ 1131.926167][T10360] usb 4-1: Found UVC 7.01 device syz (8086:0b07) [ 1131.932904][T10360] usb 4-1: No valid video chain found. [ 1132.018886][T10360] usb 4-1: USB disconnect, device number 40 [ 1132.804837][T10360] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 1132.944269][T10551] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1132.974674][T10360] usb 8-1: Using ep0 maxpacket: 8 [ 1133.013598][T10360] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1133.023268][T10360] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.031855][T10360] usb 8-1: Product: syz [ 1133.036423][T10360] usb 8-1: Manufacturer: syz [ 1133.041292][T10360] usb 8-1: SerialNumber: syz [ 1133.062979][T10360] usb 8-1: config 0 descriptor?? [ 1133.114388][T10551] usb 4-1: Using ep0 maxpacket: 32 [ 1133.136633][T10551] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1133.144870][ T5848] usb 9-1: new high-speed USB device number 39 using dummy_hcd [ 1133.153519][T10551] usb 4-1: config 0 has no interface number 0 [ 1133.212273][T10551] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1133.222024][T10551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1133.230412][T10551] usb 4-1: Product: syz [ 1133.234926][T10551] usb 4-1: Manufacturer: syz [ 1133.239761][T10551] usb 4-1: SerialNumber: syz [ 1133.251471][T10551] usb 4-1: config 0 descriptor?? [ 1133.264404][T10551] smsc95xx v2.0.0 [ 1133.294128][ T5848] usb 9-1: device descriptor read/64, error -71 [ 1133.301234][T10360] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1133.318780][T12909] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2211'. [ 1133.508584][T10360] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 1133.534761][ T5848] usb 9-1: new high-speed USB device number 40 using dummy_hcd [ 1133.685097][ T5848] usb 9-1: device descriptor read/64, error -71 [ 1133.698995][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1133.710413][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1133.714679][T12913] vlan2: entered promiscuous mode [ 1133.800197][ T5848] usb usb9-port1: attempt power cycle [ 1133.959708][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1133.971848][T10551] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1134.170897][ T5848] usb 9-1: new high-speed USB device number 41 using dummy_hcd [ 1134.215630][ T5848] usb 9-1: device descriptor read/8, error -71 [ 1134.489225][ T5848] usb 9-1: new high-speed USB device number 42 using dummy_hcd [ 1134.520257][ T5848] usb 9-1: device descriptor read/8, error -71 [ 1134.651072][ T5848] usb usb9-port1: unable to enumerate USB device [ 1135.038389][T10551] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1135.226029][T10551] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1135.234921][T10551] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1135.245573][T10551] usb 3-1: config 220 has 2 interfaces, different from the descriptor's value: 3 [ 1135.255076][T10551] usb 3-1: config 220 has no interface number 1 [ 1135.261698][T10551] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1135.268897][T10551] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1135.305271][T10551] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1135.314834][T10551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.323644][T10551] usb 3-1: Product: syz [ 1135.328288][T10551] usb 3-1: Manufacturer: syz [ 1135.333136][T10551] usb 3-1: SerialNumber: syz [ 1135.575257][T10551] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1135.582133][T10551] usb 3-1: No valid video chain found. [ 1135.626513][T10551] usb 3-1: USB disconnect, device number 39 [ 1135.669793][ T5848] usb 8-1: USB disconnect, device number 32 [ 1135.928645][T10551] usb 4-1: USB disconnect, device number 41 [ 1136.118465][ T5848] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 1136.190735][T12944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2223'. [ 1136.276856][T12946] vlan2: entered promiscuous mode [ 1136.333591][ T5848] usb 8-1: Using ep0 maxpacket: 16 [ 1136.357440][ T5848] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1136.368900][ T5848] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1136.454959][ T5848] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1136.464717][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1136.473069][ T5848] usb 8-1: Product: syz [ 1136.477568][ T5848] usb 8-1: Manufacturer: syz [ 1136.482395][ T5848] usb 8-1: SerialNumber: syz [ 1136.588933][ T5848] usb 8-1: config 0 descriptor?? [ 1137.413751][T12964] binder: 12963:12964 ioctl c0306201 0 returned -14 [ 1138.067012][T10551] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1138.124501][ T5848] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 1138.237554][T10551] usb 4-1: Using ep0 maxpacket: 32 [ 1138.254176][T10551] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 1138.262599][T10551] usb 4-1: config 0 has no interface number 0 [ 1138.274367][T10360] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1138.283140][ T5848] usb 6-1: device descriptor read/64, error -71 [ 1138.297068][T10551] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1138.307210][T10551] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.315592][T10551] usb 4-1: Product: syz [ 1138.320048][T10551] usb 4-1: Manufacturer: syz [ 1138.325101][T10551] usb 4-1: SerialNumber: syz [ 1138.350096][T12981] vlan0: entered promiscuous mode [ 1138.363312][T10551] usb 4-1: config 0 descriptor?? [ 1138.375869][T10551] smsc95xx v2.0.0 [ 1138.486062][T10360] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1138.497941][T10360] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1138.510123][T10360] usb 9-1: config 220 has no interface number 2 [ 1138.516786][T10360] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1138.530347][T10360] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1138.537691][T10360] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1138.545010][T10360] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1138.558590][ T5848] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 1138.578316][T10360] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1138.587831][T10360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1138.599502][T10360] usb 9-1: Product: syz [ 1138.605331][T10360] usb 9-1: Manufacturer: syz [ 1138.610189][T10360] usb 9-1: SerialNumber: syz [ 1138.700081][ T5848] usb 6-1: device descriptor read/64, error -71 [ 1138.771084][T12985] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2239'. [ 1138.815910][ T5848] usb usb6-port1: attempt power cycle [ 1138.832106][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1138.843554][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1138.889087][T10360] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 1138.897979][T10360] usb 9-1: No valid video chain found. [ 1138.977528][T10360] usb 9-1: USB disconnect, device number 43 [ 1139.067189][ T5870] usb 8-1: USB disconnect, device number 33 [ 1139.090663][T10551] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1139.102617][T10551] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 1139.195408][ T5848] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 1139.230593][ T5848] usb 6-1: device descriptor read/8, error -71 [ 1139.503735][ T5848] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 1139.560610][ T5848] usb 6-1: device descriptor read/8, error -71 [ 1139.676456][ T5848] usb usb6-port1: unable to enumerate USB device [ 1140.842263][ T5870] usb 4-1: USB disconnect, device number 42 [ 1141.078519][T13013] vlan0: entered promiscuous mode [ 1141.087439][T13015] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2250'. [ 1141.354284][ T5848] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1141.603748][ T5848] usb 9-1: Using ep0 maxpacket: 16 [ 1141.644527][ T5848] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.655307][ T5848] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1141.732831][ T5848] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1141.742483][ T5848] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.751285][ T5848] usb 9-1: Product: syz [ 1141.755834][ T5848] usb 9-1: Manufacturer: syz [ 1141.760687][ T5848] usb 9-1: SerialNumber: syz [ 1141.787822][ T5848] usb 9-1: config 0 descriptor?? [ 1142.094253][ T5848] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 1142.300000][ T5848] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1142.308924][ T5848] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.319826][ T5848] usb 6-1: config 220 has no interface number 2 [ 1142.327181][ T5848] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1142.340732][ T5848] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1142.349265][ T5848] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1142.356679][ T5848] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1142.448479][ T5848] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1142.458111][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.467535][ T5848] usb 6-1: Product: syz [ 1142.471945][ T5848] usb 6-1: Manufacturer: syz [ 1142.479429][ T5848] usb 6-1: SerialNumber: syz [ 1142.552162][T13041] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2263'. [ 1142.765779][ T5848] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1142.772773][ T5848] usb 6-1: No valid video chain found. [ 1142.852177][ T5848] usb 6-1: USB disconnect, device number 51 [ 1144.199340][T13062] loop3: detected capacity change from 0 to 16 [ 1144.246135][T13062] erofs: Unknown parameter '/dev/vcsu' [ 1144.435464][ T5870] usb 9-1: USB disconnect, device number 44 [ 1145.545407][ T5848] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 1145.584874][ T5870] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1145.602526][T13093] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2283'. [ 1145.611972][T13093] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2283'. [ 1145.735151][ T5848] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1145.744279][ T5848] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.755011][ T5848] usb 8-1: config 220 has no interface number 2 [ 1145.761545][ T5848] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1145.778257][ T5848] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1145.786751][ T5848] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1145.794176][ T5848] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1145.815198][ T5870] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1145.825806][ T5870] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1145.851822][ T5870] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1145.861928][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1145.870868][ T5870] usb 4-1: SerialNumber: syz [ 1146.111427][ T5870] usb 4-1: 0:2 : does not exist [ 1146.211587][ T5870] usb 4-1: USB disconnect, device number 43 [ 1146.273847][ T5848] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1146.290995][ T5848] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1146.302188][ T5848] usb 8-1: Product: syz [ 1146.306749][ T5848] usb 8-1: Manufacturer: syz [ 1146.311609][ T5848] usb 8-1: SerialNumber: syz [ 1146.735756][ T5848] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1146.742604][ T5848] usb 8-1: No valid video chain found. [ 1146.788535][T10551] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1146.834761][ T5848] usb 8-1: USB disconnect, device number 34 [ 1147.011773][T10551] usb 9-1: Using ep0 maxpacket: 16 [ 1147.026049][T10551] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1147.036742][T10551] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1147.055672][T10551] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1147.065499][T10551] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1147.073793][T10551] usb 9-1: Product: syz [ 1147.078296][T10551] usb 9-1: Manufacturer: syz [ 1147.083137][T10551] usb 9-1: SerialNumber: syz [ 1147.180963][T13102] loop3: detected capacity change from 0 to 16 [ 1147.234557][T13102] erofs: Unknown parameter '/dev/vcsu' [ 1147.411483][T10551] usb 9-1: 0:2 : does not exist [ 1147.440473][T10551] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1147.635789][T10551] usb 9-1: USB disconnect, device number 45 [ 1148.854317][T13129] netlink: 'syz.8.2298': attribute type 8 has an invalid length. [ 1148.864362][ T5848] usb 8-1: new high-speed USB device number 35 using dummy_hcd [ 1149.018555][ T5848] usb 8-1: device descriptor read/64, error -71 [ 1149.074191][T10360] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1149.146469][ T1641] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 1149.189897][T13134] loop2: detected capacity change from 0 to 16 [ 1149.198923][T13134] erofs: Unknown parameter '/dev/vcsu' [ 1149.261013][T10360] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.271913][T10360] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1149.283339][ T5848] usb 8-1: new high-speed USB device number 36 using dummy_hcd [ 1149.301756][T10360] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1149.311650][T10360] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1149.320230][T10360] usb 4-1: SerialNumber: syz [ 1149.353576][ T1641] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1149.362545][ T1641] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1149.373478][ T1641] usb 6-1: config 220 has no interface number 2 [ 1149.380138][ T1641] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1149.393753][ T1641] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1149.400865][ T1641] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1149.408149][ T1641] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1149.441850][ T1641] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1149.454790][ T1641] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1149.463080][ T1641] usb 6-1: Product: syz [ 1149.469164][ T1641] usb 6-1: Manufacturer: syz [ 1149.474319][ T1641] usb 6-1: SerialNumber: syz [ 1149.483610][ T5848] usb 8-1: device descriptor read/64, error -71 [ 1149.575191][T10360] usb 4-1: 0:2 : does not exist [ 1149.605724][ T5848] usb usb8-port1: attempt power cycle [ 1149.685911][T10360] usb 4-1: USB disconnect, device number 44 [ 1149.816103][ T1641] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1149.822810][ T1641] usb 6-1: No valid video chain found. [ 1149.885884][ T1641] usb 6-1: USB disconnect, device number 52 [ 1149.984685][ T5848] usb 8-1: new high-speed USB device number 37 using dummy_hcd [ 1150.028291][ T5848] usb 8-1: device descriptor read/8, error -71 [ 1150.242132][T13144] vlan2: entered promiscuous mode [ 1150.274396][ T5848] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 1150.313422][ T5848] usb 8-1: device descriptor read/8, error -71 [ 1150.485495][ T5848] usb usb8-port1: unable to enumerate USB device [ 1150.987832][ T5848] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1151.158033][ T5848] usb 4-1: Using ep0 maxpacket: 16 [ 1151.175371][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.185949][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.233768][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1151.240626][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1151.261741][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.271333][ T5848] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.272279][T13160] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2313'. [ 1151.279644][ T5848] usb 4-1: Product: syz [ 1151.279754][ T5848] usb 4-1: Manufacturer: syz [ 1151.279864][ T5848] usb 4-1: SerialNumber: syz [ 1151.290825][T10551] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 1151.498599][T10551] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.509378][T10551] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1151.518875][T10551] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.586613][ T5848] usb 4-1: 0:2 : does not exist [ 1151.616427][T10551] usb 3-1: config 0 descriptor?? [ 1151.638593][ T5848] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1151.661970][T10551] pwc: Askey VC010 type 2 USB webcam detected. [ 1151.755836][ T5848] usb 4-1: USB disconnect, device number 45 [ 1152.062617][T10551] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1152.088816][T10551] pwc: recv_control_msg error -32 req 02 val 2700 [ 1152.108114][T10551] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1152.125519][T10551] pwc: recv_control_msg error -32 req 04 val 1000 [ 1152.344345][ T5848] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1152.344798][T10551] pwc: recv_control_msg error -32 req 04 val 1400 [ 1152.400196][T10551] pwc: recv_control_msg error -32 req 02 val 2000 [ 1152.434120][T10551] pwc: recv_control_msg error -32 req 02 val 2100 [ 1152.463511][T10551] pwc: recv_control_msg error -32 req 04 val 1500 [ 1152.480996][T10551] pwc: recv_control_msg error -32 req 02 val 2500 [ 1152.518519][T13176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2321'. [ 1152.569152][ T5848] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1152.579159][ T5848] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1152.589812][ T5848] usb 6-1: config 220 has no interface number 2 [ 1152.596429][ T5848] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1152.610036][ T5848] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1152.617205][ T5848] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1152.627382][ T5848] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1152.702644][T10551] pwc: recv_control_msg error -71 req 02 val 2600 [ 1152.704299][ T5848] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1152.711147][T10551] pwc: recv_control_msg error -71 req 02 val 2900 [ 1152.718642][ T5848] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.730286][T10551] pwc: recv_control_msg error -71 req 02 val 2800 [ 1152.737621][ T5848] usb 6-1: Product: syz [ 1152.746806][ T5848] usb 6-1: Manufacturer: syz [ 1152.751666][ T5848] usb 6-1: SerialNumber: syz [ 1152.755204][ T5870] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1152.769839][T10551] pwc: recv_control_msg error -71 req 04 val 1100 [ 1152.784531][T13176] bridge3: port 1(veth3) entered blocking state [ 1152.791736][T13176] bridge3: port 1(veth3) entered disabled state [ 1152.798901][T13176] veth3: entered allmulticast mode [ 1152.808207][T13176] veth3: entered promiscuous mode [ 1152.826706][T10551] pwc: recv_control_msg error -71 req 04 val 1200 [ 1152.840880][T10551] pwc: Registered as video103. [ 1152.849177][T10551] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input45 [ 1152.852260][T13179] vlan2: entered allmulticast mode [ 1152.864967][T13179] veth1: entered allmulticast mode [ 1152.869821][T10551] usb 3-1: USB disconnect, device number 40 [ 1152.871842][T13179] bridge3: port 2(vlan2) entered blocking state [ 1152.883231][T13179] bridge3: port 2(vlan2) entered disabled state [ 1152.894105][T13179] vlan2: entered promiscuous mode [ 1152.899388][T13179] veth1: entered promiscuous mode [ 1152.917693][ T5870] usb 9-1: Using ep0 maxpacket: 16 [ 1152.936533][ T5870] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1152.949565][ T5870] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1153.006090][ T5870] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1153.016986][ T5870] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.027350][ T5870] usb 9-1: Product: syz [ 1153.033639][ T5870] usb 9-1: Manufacturer: syz [ 1153.040283][ T5870] usb 9-1: SerialNumber: syz [ 1153.058674][ T5870] usb 9-1: config 0 descriptor?? [ 1153.075611][ T5870] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1153.085750][ T5870] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1153.207473][ T5848] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1153.214604][ T5848] usb 6-1: No valid video chain found. [ 1153.295680][ T5848] usb 6-1: USB disconnect, device number 53 [ 1153.708272][ T5870] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1153.718294][T13190] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2325'. [ 1153.744612][T13189] netlink: 60 bytes leftover after parsing attributes in process `syz.7.2325'. [ 1153.744722][ T5870] em28xx 9-1:0.0: Config register raw data: 0xfffffffb [ 1153.830618][ T5870] em28xx 9-1:0.0: AC97 chip type couldn't be determined [ 1153.838233][ T5870] em28xx 9-1:0.0: No AC97 audio processor [ 1154.304626][ T5848] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1154.469545][ T5848] usb 4-1: device descriptor read/64, error -71 [ 1154.734449][ T5848] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1154.844267][T10360] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1154.852802][ T1641] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1154.879651][ T5848] usb 4-1: device descriptor read/64, error -71 [ 1154.997757][ T5848] usb usb4-port1: attempt power cycle [ 1155.014313][ T5872] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1155.022808][T10360] usb 3-1: Using ep0 maxpacket: 16 [ 1155.028995][ T1641] usb 8-1: Using ep0 maxpacket: 16 [ 1155.041192][T10360] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1155.053336][T10360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1155.071339][ T1641] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.085230][ T1641] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1155.103112][T10360] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1155.112569][T10360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.120888][T10360] usb 3-1: Product: syz [ 1155.125365][T10360] usb 3-1: Manufacturer: syz [ 1155.130226][T10360] usb 3-1: SerialNumber: syz [ 1155.144419][T10360] usb 3-1: config 0 descriptor?? [ 1155.150794][ T1641] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1155.160538][ T1641] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.168849][ T1641] usb 8-1: Product: syz [ 1155.173214][ T1641] usb 8-1: Manufacturer: syz [ 1155.178248][ T1641] usb 8-1: SerialNumber: syz [ 1155.198264][T10360] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1155.208178][T10360] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1155.243018][ T5872] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1155.254164][ T5872] usb 6-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1155.263524][ T5872] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1155.279814][ T5872] usb 6-1: config 0 descriptor?? [ 1155.312157][ T5872] pwc: Askey VC010 type 2 USB webcam detected. [ 1155.394839][ T5848] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1155.422839][ T5848] usb 4-1: device descriptor read/8, error -71 [ 1155.445501][ T1641] usb 8-1: 0:2 : does not exist [ 1155.477053][ T1641] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1155.546372][ T1641] usb 8-1: USB disconnect, device number 39 [ 1155.647492][ T5870] usb 9-1: USB disconnect, device number 46 [ 1155.655629][ T5870] em28xx 9-1:0.0: Disconnecting em28xx [ 1155.669872][ T5870] em28xx 9-1:0.0: Freeing device [ 1155.684448][ T5848] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1155.738092][ T5872] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1155.749723][ T5848] usb 4-1: device descriptor read/8, error -71 [ 1155.763868][ T5872] pwc: recv_control_msg error -32 req 02 val 2700 [ 1155.779160][ T5872] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1155.788023][T10360] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1155.802625][ T5872] pwc: recv_control_msg error -32 req 04 val 1000 [ 1155.810631][T10360] em28xx 3-1:0.0: Config register raw data: 0xe8 [ 1155.817974][T10360] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1155.824586][T10360] em28xx 3-1:0.0: No AC97 audio processor [ 1155.868261][ T5848] usb usb4-port1: unable to enumerate USB device [ 1156.020429][ T5872] pwc: recv_control_msg error -32 req 04 val 1400 [ 1156.031202][ T5872] pwc: recv_control_msg error -32 req 02 val 2000 [ 1156.047491][ T5872] pwc: recv_control_msg error -32 req 02 val 2100 [ 1156.065490][ T5872] pwc: recv_control_msg error -32 req 04 val 1500 [ 1156.075689][ T5872] pwc: recv_control_msg error -32 req 02 val 2500 [ 1156.212434][T10360] usb 3-1: USB disconnect, device number 41 [ 1156.286988][ T5872] pwc: recv_control_msg error -71 req 02 val 2600 [ 1156.296234][ T5872] pwc: recv_control_msg error -71 req 02 val 2900 [ 1156.305858][ T5872] pwc: recv_control_msg error -71 req 02 val 2800 [ 1156.332544][ T5872] pwc: recv_control_msg error -71 req 04 val 1100 [ 1156.351437][ T5872] pwc: recv_control_msg error -71 req 04 val 1200 [ 1156.362987][ T5872] pwc: Registered as video103. [ 1156.370411][ T5872] input: PWC snapshot button as /devices/platform/dummy_hcd.5/usb6/6-1/input/input46 [ 1156.391875][ T5872] usb 6-1: USB disconnect, device number 54 [ 1156.554868][ T5870] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1156.762878][ T5870] usb 8-1: config 220 has an invalid interface number: 76 but max is 2 [ 1156.772055][ T5870] usb 8-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1156.782803][ T5870] usb 8-1: config 220 has no interface number 2 [ 1156.789487][ T5870] usb 8-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1156.800253][T13226] No control pipe specified [ 1156.802943][ T5870] usb 8-1: config 220 interface 0 has no altsetting 0 [ 1156.814747][ T5870] usb 8-1: config 220 interface 76 has no altsetting 0 [ 1156.822415][ T5870] usb 8-1: config 220 interface 1 has no altsetting 0 [ 1156.933615][ T5870] usb 8-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1156.943515][ T5870] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.952061][ T5870] usb 8-1: Product: syz [ 1156.956694][ T5870] usb 8-1: Manufacturer: syz [ 1156.961522][ T5870] usb 8-1: SerialNumber: syz [ 1157.287766][ T5870] usb 8-1: Found UVC 7.01 device syz (8086:0b07) [ 1157.295018][ T5870] usb 8-1: No valid video chain found. [ 1157.386514][ T5870] usb 8-1: USB disconnect, device number 40 [ 1158.214605][ T5872] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1158.394379][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 1158.425464][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1158.436198][ T5872] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1158.504442][ T5872] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1158.516573][ T5872] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.527974][ T5872] usb 4-1: Product: syz [ 1158.532408][ T5872] usb 4-1: Manufacturer: syz [ 1158.537418][ T5872] usb 4-1: SerialNumber: syz [ 1158.827340][ T5872] usb 4-1: 0:2 : does not exist [ 1158.875569][ T5872] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1158.984218][ T5872] usb 4-1: USB disconnect, device number 50 [ 1159.274599][T10360] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1159.474377][T10360] usb 6-1: Using ep0 maxpacket: 32 [ 1159.532927][T10360] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1159.541720][T10360] usb 6-1: config 0 has no interface number 0 [ 1159.574629][T10360] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1159.584250][T10360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.595722][T10360] usb 6-1: Product: syz [ 1159.600127][T10360] usb 6-1: Manufacturer: syz [ 1159.606409][T10360] usb 6-1: SerialNumber: syz [ 1159.666718][T10360] usb 6-1: config 0 descriptor?? [ 1159.681525][T10360] smsc95xx v2.0.0 [ 1159.844495][T13270] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 1159.851352][T13270] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1159.859778][T13270] vhci_hcd vhci_hcd.0: Device attached [ 1160.127023][ T5870] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 1160.135113][T10360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1160.148124][T10360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1160.156169][T10551] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1160.325091][T10551] usb 4-1: device descriptor read/64, error -71 [ 1160.367221][T10360] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1160.380401][T10360] smsc95xx 6-1:0.67: probe with driver smsc95xx failed with error -32 [ 1160.585193][T10551] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1160.754342][T10551] usb 4-1: device descriptor read/64, error -71 [ 1160.869112][T10551] usb usb4-port1: attempt power cycle [ 1161.244653][T10551] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1161.316133][T10551] usb 4-1: device descriptor read/8, error -71 [ 1161.564275][T10551] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1161.589164][T13298] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2370'. [ 1161.626595][T10551] usb 4-1: device descriptor read/8, error -71 [ 1161.735769][T10551] usb usb4-port1: unable to enumerate USB device [ 1161.924192][T13305] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2372'. [ 1162.139919][ T9607] usb 6-1: USB disconnect, device number 55 [ 1162.187935][T10551] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1162.354907][T10551] usb 3-1: Using ep0 maxpacket: 16 [ 1162.382273][T10551] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1162.393000][T10551] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1162.462784][T10551] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1162.472484][T10551] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.480981][T10551] usb 3-1: Product: syz [ 1162.485538][T10551] usb 3-1: Manufacturer: syz [ 1162.490378][T10551] usb 3-1: SerialNumber: syz [ 1162.788406][T10551] usb 3-1: 0:2 : does not exist [ 1162.859838][T13271] vhci_hcd: connection reset by peer [ 1162.883049][ T1120] vhci_hcd: stop threads [ 1162.887788][ T1120] vhci_hcd: release socket [ 1162.892490][ T1120] vhci_hcd: disconnect device [ 1162.898319][T10551] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 1163.034565][T10551] usb 3-1: USB disconnect, device number 42 [ 1163.139406][T13317] pim6reg1: entered promiscuous mode [ 1163.145322][T13317] pim6reg1: entered allmulticast mode [ 1163.907061][T13328] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2383'. [ 1163.948798][T13330] netlink: 'syz.5.2382': attribute type 8 has an invalid length. [ 1164.415581][T13338] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 1164.422409][T13338] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1164.430654][T13338] vhci_hcd vhci_hcd.0: Device attached [ 1164.674274][T10551] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 1164.744476][ T9607] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1164.904234][ T9607] usb 6-1: device descriptor read/64, error -71 [ 1165.144362][ T9607] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1165.274318][ T5870] vhci_hcd: vhci_device speed not set [ 1165.324279][ T9607] usb 6-1: device descriptor read/64, error -71 [ 1165.331082][ T5842] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1165.435863][ T9607] usb usb6-port1: attempt power cycle [ 1165.484698][ T5842] usb 8-1: Using ep0 maxpacket: 16 [ 1165.504616][ T5842] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1165.515378][ T5842] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1165.587071][ T5842] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1165.596924][ T5842] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.605851][ T5842] usb 8-1: Product: syz [ 1165.610275][ T5842] usb 8-1: Manufacturer: syz [ 1165.615400][ T5842] usb 8-1: SerialNumber: syz [ 1165.807522][ T9607] usb 6-1: new high-speed USB device number 58 using dummy_hcd [ 1165.867866][ T9607] usb 6-1: device descriptor read/8, error -71 [ 1165.910959][ T5842] usb 8-1: 0:2 : does not exist [ 1165.990806][ T5842] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1166.100035][ T5842] usb 8-1: USB disconnect, device number 41 [ 1166.125454][ T9607] usb 6-1: new high-speed USB device number 59 using dummy_hcd [ 1166.176547][ T9607] usb 6-1: device descriptor read/8, error -71 [ 1166.224275][T13364] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2396'. [ 1166.286530][ T9607] usb usb6-port1: unable to enumerate USB device [ 1166.595007][T13370] netlink: 'syz.3.2397': attribute type 8 has an invalid length. [ 1167.559049][T13340] vhci_hcd: connection reset by peer [ 1167.566297][ T14] vhci_hcd: stop threads [ 1167.570782][ T14] vhci_hcd: release socket [ 1167.581820][ T14] vhci_hcd: disconnect device [ 1168.514250][ T5842] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1168.554687][T13400] netlink: 'syz.2.2412': attribute type 4 has an invalid length. [ 1168.583807][T13400] netlink: 'syz.2.2412': attribute type 4 has an invalid length. [ 1168.694784][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1168.720305][ T5842] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1168.731155][ T5842] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1168.791941][ T5842] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1168.801811][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1168.810838][ T5842] usb 4-1: Product: syz [ 1168.815464][ T5842] usb 4-1: Manufacturer: syz [ 1168.820357][ T5842] usb 4-1: SerialNumber: syz [ 1169.106871][ T5842] usb 4-1: 0:2 : does not exist [ 1169.118789][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2416'. [ 1169.168518][ T5842] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 1169.292025][ T5842] usb 4-1: USB disconnect, device number 55 [ 1169.754663][T10551] vhci_hcd: vhci_device speed not set [ 1170.282045][T13427] xt_policy: neither incoming nor outgoing policy selected [ 1170.792548][T13438] pim6reg1: entered promiscuous mode [ 1170.798419][T13438] pim6reg1: entered allmulticast mode [ 1170.944237][T10360] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1171.114138][T10360] usb 3-1: Using ep0 maxpacket: 16 [ 1171.118337][T13442] vlan3: entered promiscuous mode [ 1171.132541][T10360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.144043][T10360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1171.155413][T10360] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1171.264557][T10360] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1171.274087][T10360] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1171.282332][T10360] usb 3-1: Manufacturer: syz [ 1171.325250][T10360] usb 3-1: config 0 descriptor?? [ 1171.499410][T13446] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2431'. [ 1172.322397][T13457] vlan2: entered allmulticast mode [ 1172.327964][T13457] veth1: entered allmulticast mode [ 1173.877184][T10360] usb 3-1: USB disconnect, device number 43 [ 1173.985510][T13473] vlan2: entered promiscuous mode [ 1174.414260][T10360] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1174.653638][T10360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1174.664782][T10360] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1174.674242][T10360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1174.703709][T10360] usb 3-1: config 0 descriptor?? [ 1174.725982][T10360] pwc: Askey VC010 type 2 USB webcam detected. [ 1175.140309][T10360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1175.169311][T10360] pwc: recv_control_msg error -32 req 02 val 2700 [ 1175.190235][T10360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1175.200168][T10360] pwc: recv_control_msg error -32 req 04 val 1000 [ 1175.398630][T13494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2451'. [ 1175.426625][T13494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2451'. [ 1175.435952][T10360] pwc: recv_control_msg error -32 req 04 val 1400 [ 1175.442194][T10360] pwc: recv_control_msg error -32 req 02 val 2000 [ 1175.476412][T10360] pwc: recv_control_msg error -32 req 02 val 2100 [ 1175.507467][T10360] pwc: recv_control_msg error -32 req 04 val 1500 [ 1175.539000][T10360] pwc: recv_control_msg error -32 req 02 val 2500 [ 1175.586594][T10360] pwc: recv_control_msg error -32 req 02 val 2400 [ 1175.608802][T10360] pwc: recv_control_msg error -71 req 02 val 2600 [ 1175.630196][T10360] pwc: recv_control_msg error -71 req 02 val 2900 [ 1175.657287][T10360] pwc: recv_control_msg error -71 req 02 val 2800 [ 1175.690766][T10360] pwc: recv_control_msg error -71 req 04 val 1100 [ 1175.734863][T10360] pwc: recv_control_msg error -71 req 04 val 1200 [ 1175.762628][T10360] pwc: Registered as video103. [ 1175.780931][T10360] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input47 [ 1175.857236][T10360] usb 3-1: USB disconnect, device number 44 [ 1176.258947][T13505] team_slave_0: entered promiscuous mode [ 1176.265141][T13505] team_slave_1: entered promiscuous mode [ 1176.271491][T13505] vlan3: entered promiscuous mode [ 1176.277055][T13505] team0: entered promiscuous mode [ 1176.295018][T10551] usb 6-1: new high-speed USB device number 60 using dummy_hcd [ 1176.464495][T10551] usb 6-1: Using ep0 maxpacket: 16 [ 1176.477361][T10551] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1176.488642][T10551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1176.500008][T10551] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1176.587215][T10551] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1176.597123][T10551] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1176.605515][T10551] usb 6-1: Manufacturer: syz [ 1176.651914][T10551] usb 6-1: config 0 descriptor?? [ 1177.635138][T13528] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2464'. [ 1177.648492][T13529] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1177.676460][T13528] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2464'. [ 1177.695132][T13529] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1177.705363][T13529] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1177.807027][T13530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2465'. [ 1177.842981][T13529] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2466'. [ 1177.844912][T13530] netlink: 'syz.3.2465': attribute type 1 has an invalid length. [ 1177.906784][T13529] netlink: 'syz.2.2466': attribute type 1 has an invalid length. [ 1178.105169][T10551] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1178.304144][T10551] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1178.315055][T10551] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1178.324887][T10551] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.406567][T10551] usb 8-1: config 0 descriptor?? [ 1178.440696][T10551] pwc: Askey VC010 type 2 USB webcam detected. [ 1178.443304][T13539] vlan0: entered promiscuous mode [ 1178.834042][T10551] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1178.871201][T10551] pwc: recv_control_msg error -32 req 02 val 2700 [ 1178.884926][T10551] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1178.904658][T10551] pwc: recv_control_msg error -32 req 04 val 1000 [ 1179.128588][T10551] pwc: recv_control_msg error -32 req 04 val 1400 [ 1179.154519][T10551] pwc: recv_control_msg error -32 req 02 val 2000 [ 1179.164077][T10551] pwc: recv_control_msg error -32 req 02 val 2100 [ 1179.180831][T10551] pwc: recv_control_msg error -32 req 04 val 1500 [ 1179.215037][T10551] pwc: recv_control_msg error -32 req 02 val 2500 [ 1179.236049][T10360] usb 6-1: USB disconnect, device number 60 [ 1179.245675][T10551] pwc: recv_control_msg error -32 req 02 val 2400 [ 1179.263145][T10551] pwc: recv_control_msg error -71 req 02 val 2600 [ 1179.294600][T10551] pwc: recv_control_msg error -71 req 02 val 2900 [ 1179.334460][T10551] pwc: recv_control_msg error -71 req 02 val 2800 [ 1179.364626][T10551] pwc: recv_control_msg error -71 req 04 val 1100 [ 1179.404519][T10551] pwc: recv_control_msg error -71 req 04 val 1200 [ 1179.425274][T10551] pwc: Registered as video103. [ 1179.432892][T10551] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input48 [ 1179.500977][T10551] usb 8-1: USB disconnect, device number 42 [ 1180.208311][T13558] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2478'. [ 1180.274337][T10551] usb 6-1: new high-speed USB device number 61 using dummy_hcd [ 1180.494937][T10551] usb 6-1: Using ep0 maxpacket: 16 [ 1180.514353][T10551] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1180.528283][T10551] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1180.577325][T10551] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1180.587499][T10551] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1180.595934][T10551] usb 6-1: Product: syz [ 1180.600365][T10551] usb 6-1: Manufacturer: syz [ 1180.605656][T10551] usb 6-1: SerialNumber: syz [ 1180.679734][T10551] usb 6-1: config 0 descriptor?? [ 1180.709125][T10551] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1180.718941][T10551] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1181.349007][T10551] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1181.362194][T10551] em28xx 6-1:0.0: Config register raw data: 0x41 [ 1181.564672][ T5842] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1181.744321][ T5842] usb 8-1: Using ep0 maxpacket: 16 [ 1181.779434][ T5842] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1181.790878][ T5842] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1181.802240][ T5842] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1181.822904][ T5842] usb 8-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1181.833510][ T5842] usb 8-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1181.841935][ T5842] usb 8-1: Manufacturer: syz [ 1181.854520][ T5842] usb 8-1: config 0 descriptor?? [ 1181.995191][T10360] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1182.184555][T10360] usb 3-1: Using ep0 maxpacket: 16 [ 1182.210415][T10360] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1182.225946][T10360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1182.268237][T10360] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1182.277874][T10360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1182.286432][T10360] usb 3-1: Product: syz [ 1182.290849][T10360] usb 3-1: Manufacturer: syz [ 1182.295862][T10360] usb 3-1: SerialNumber: syz [ 1182.305745][T10360] usb 3-1: config 0 descriptor?? [ 1182.331939][T10360] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1182.341621][T10360] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1182.968761][T10360] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1182.986918][T10360] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1183.002863][T10360] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1183.010409][T10360] em28xx 3-1:0.0: No AC97 audio processor [ 1183.067199][T10360] usb 6-1: USB disconnect, device number 61 [ 1183.075388][T10360] em28xx 6-1:0.0: Disconnecting em28xx [ 1183.084243][T10360] em28xx 6-1:0.0: Freeing device [ 1183.624728][T13615] netlink: 'syz.3.2500': attribute type 1 has an invalid length. [ 1184.376740][T10360] usb 8-1: USB disconnect, device number 43 [ 1184.919199][T10360] usb 3-1: USB disconnect, device number 45 [ 1184.932210][T10360] em28xx 3-1:0.0: Disconnecting em28xx [ 1184.964701][T10360] em28xx 3-1:0.0: Freeing device [ 1185.094574][ T5842] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1185.308956][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1185.330675][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1185.343283][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1185.449674][ T5842] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1185.459487][ T5842] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1185.468025][ T5842] usb 4-1: Product: syz [ 1185.472469][ T5842] usb 4-1: Manufacturer: syz [ 1185.477534][ T5842] usb 4-1: SerialNumber: syz [ 1185.536780][ T5842] usb 4-1: config 0 descriptor?? [ 1185.592828][ T5842] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1185.603349][ T5842] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1186.184658][ T5842] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1186.200473][ T5842] em28xx 4-1:0.0: Config register raw data: 0x41 [ 1186.215352][T10360] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1186.405824][T10360] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1186.419866][T10360] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 1186.431484][T10360] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.527302][T10360] usb 3-1: config 0 descriptor?? [ 1186.552061][T10360] pwc: Askey VC010 type 2 USB webcam detected. [ 1186.980112][T10360] pwc: recv_control_msg error -32 req 02 val 2b00 [ 1186.995589][T10360] pwc: recv_control_msg error -32 req 02 val 2700 [ 1187.018391][T10360] pwc: recv_control_msg error -32 req 02 val 2c00 [ 1187.035158][ T5842] usb 6-1: new high-speed USB device number 62 using dummy_hcd [ 1187.039440][T10360] pwc: recv_control_msg error -32 req 04 val 1000 [ 1187.244000][ T5842] usb 6-1: Using ep0 maxpacket: 16 [ 1187.266348][ T5842] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1187.281450][ T5842] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1187.299771][T10360] pwc: recv_control_msg error -32 req 04 val 1400 [ 1187.318088][T10360] pwc: recv_control_msg error -32 req 02 val 2000 [ 1187.327134][ T5842] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1187.337398][ T5842] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1187.345803][ T5842] usb 6-1: Product: syz [ 1187.350323][ T5842] usb 6-1: Manufacturer: syz [ 1187.352030][T10360] pwc: recv_control_msg error -32 req 02 val 2100 [ 1187.355233][ T5842] usb 6-1: SerialNumber: syz [ 1187.381953][ T5842] usb 6-1: config 0 descriptor?? [ 1187.384669][T10360] pwc: recv_control_msg error -32 req 04 val 1500 [ 1187.410612][T10360] pwc: recv_control_msg error -32 req 02 val 2500 [ 1187.426829][T10360] pwc: recv_control_msg error -32 req 02 val 2400 [ 1187.434699][ T5842] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1187.445040][ T5842] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1187.474494][T10360] pwc: recv_control_msg error -71 req 02 val 2600 [ 1187.482893][T10360] pwc: recv_control_msg error -71 req 02 val 2900 [ 1187.503636][T10360] pwc: recv_control_msg error -71 req 02 val 2800 [ 1187.519904][T10360] pwc: recv_control_msg error -71 req 04 val 1100 [ 1187.540047][T10360] pwc: recv_control_msg error -71 req 04 val 1200 [ 1187.584585][T10360] pwc: Registered as video103. [ 1187.592250][T10360] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input49 [ 1187.629825][T13671] __nla_validate_parse: 1 callbacks suppressed [ 1187.629921][T13671] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2523'. [ 1187.697689][T10360] usb 3-1: USB disconnect, device number 46 [ 1187.957564][T10360] usb 4-1: USB disconnect, device number 56 [ 1187.965756][T10360] em28xx 4-1:0.0: Disconnecting em28xx [ 1188.045668][T10360] em28xx 4-1:0.0: Freeing device [ 1188.061678][ T5842] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1188.094605][ T5842] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1188.306775][ T5842] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1188.314503][ T5842] em28xx 6-1:0.0: No AC97 audio processor [ 1188.790636][T13686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2528'. [ 1188.950546][T13693] sctp: [Deprecated]: syz.8.2532 (pid 13693) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1188.950546][T13693] Use struct sctp_sack_info instead [ 1189.362941][T13699] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2534'. [ 1189.935321][T10360] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1190.050835][ T5872] usb 6-1: USB disconnect, device number 62 [ 1190.058882][ T5872] em28xx 6-1:0.0: Disconnecting em28xx [ 1190.093536][ T5872] em28xx 6-1:0.0: Freeing device [ 1190.144696][T10360] usb 9-1: Using ep0 maxpacket: 16 [ 1190.169974][T10360] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1190.182276][T10360] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1190.299301][T10360] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1190.313111][T10360] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1190.322902][T10360] usb 9-1: Product: syz [ 1190.327467][T10360] usb 9-1: Manufacturer: syz [ 1190.332328][T10360] usb 9-1: SerialNumber: syz [ 1190.353065][T10360] usb 9-1: config 0 descriptor?? [ 1190.370661][T10360] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1190.380431][T10360] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1191.020067][T10360] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1191.074662][T10360] em28xx 9-1:0.0: Config register raw data: 0xe8 [ 1191.081425][T10360] em28xx 9-1:0.0: I2S Audio (1 sample rate(s)) [ 1191.088054][T10360] em28xx 9-1:0.0: No AC97 audio processor [ 1191.601721][T13725] sctp: [Deprecated]: syz.2.2544 (pid 13725) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1191.601721][T13725] Use struct sctp_sack_info instead [ 1191.748442][T13728] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2546'. [ 1191.859536][ T5842] usb 9-1: USB disconnect, device number 47 [ 1192.191415][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2548'. [ 1192.595424][T13738] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2551'. [ 1192.699415][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2553'. [ 1192.777449][T13742] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2553'. [ 1192.786861][T13742] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2553'. [ 1192.908250][T13742] netlink: 140 bytes leftover after parsing attributes in process `syz.7.2553'. [ 1193.259262][T13755] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2559'. [ 1193.330198][T13753] sctp: [Deprecated]: syz.8.2558 (pid 13753) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1193.330198][T13753] Use struct sctp_sack_info instead [ 1193.988488][T13752] loop2: detected capacity change from 0 to 32768 [ 1194.060128][T13752] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1194.449923][T13774] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2564'. [ 1194.527161][T13752] XFS (loop2): Ending clean mount [ 1194.537609][T13752] XFS (loop2): Quotacheck needed: Please wait. [ 1194.566027][T13752] XFS (loop2): Quotacheck: Done. [ 1194.832593][T10360] usb 6-1: new high-speed USB device number 63 using dummy_hcd [ 1194.875823][ T30] audit: type=1800 audit(1751543940.515:148): pid=13777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2557" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 1195.105005][T10360] usb 6-1: Using ep0 maxpacket: 16 [ 1195.146182][T10360] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1195.158434][T10360] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1195.284230][ T5872] page_pool_release_retry() stalled pool shutdown: id 104, 1 inflight 60 sec [ 1195.416819][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 1195.430343][T13782] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2567'. [ 1195.489975][T10360] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1195.499631][T10360] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.508183][T10360] usb 6-1: Product: syz [ 1195.512584][T10360] usb 6-1: Manufacturer: syz [ 1195.517770][T10360] usb 6-1: SerialNumber: syz [ 1195.617936][T10242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1195.618101][T10360] usb 6-1: config 0 descriptor?? [ 1195.729689][T10360] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1195.745203][T10360] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1196.273123][T10360] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1196.291812][T10360] em28xx 6-1:0.0: Config register raw data: 0xe8 [ 1196.298627][T10360] em28xx 6-1:0.0: I2S Audio (1 sample rate(s)) [ 1196.306469][T10360] em28xx 6-1:0.0: No AC97 audio processor [ 1196.534703][T13791] sctp: [Deprecated]: syz.7.2572 (pid 13791) Use of struct sctp_assoc_value in delayed_ack socket option. [ 1196.534703][T13791] Use struct sctp_sack_info instead [ 1197.126885][T10551] usb 6-1: USB disconnect, device number 63 [ 1198.172969][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1198.182450][T13814] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2580'. [ 1198.717467][T13824] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2584'. [ 1198.802438][T13812] loop2: detected capacity change from 0 to 32768 [ 1198.851233][T13812] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1199.175371][T13837] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2586'. [ 1199.195012][T13812] XFS (loop2): Ending clean mount [ 1199.207188][T13812] XFS (loop2): Quotacheck needed: Please wait. [ 1199.310728][T13812] XFS (loop2): Quotacheck: Done. [ 1199.733391][ T30] audit: type=1800 audit(1751543945.265:149): pid=13842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2579" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 1200.362918][T10242] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1200.894249][T10360] page_pool_release_retry() stalled pool shutdown: id 107, 1 inflight 60 sec [ 1201.012377][T13859] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2595'. [ 1201.246044][T13861] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2596'. [ 1201.488503][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1201.499450][T13865] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2597'. [ 1201.684498][T10360] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1201.708770][T13867] netlink: 24032 bytes leftover after parsing attributes in process `syz.8.2598'. [ 1201.718619][T13867] netlink: 104088 bytes leftover after parsing attributes in process `syz.8.2598'. [ 1201.865167][T10360] usb 3-1: Using ep0 maxpacket: 16 [ 1201.902949][T10360] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1201.915155][T10360] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1202.016641][T10360] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1202.026283][T10360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1202.042416][T10360] usb 3-1: Product: syz [ 1202.047001][T10360] usb 3-1: Manufacturer: syz [ 1202.051846][T10360] usb 3-1: SerialNumber: syz [ 1202.150046][T10360] usb 3-1: config 0 descriptor?? [ 1202.976387][T13872] loop5: detected capacity change from 0 to 32768 [ 1202.999251][T10360] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1203.013311][T10360] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1203.068497][T13872] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1203.101939][T10360] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1203.141671][T10360] em28xx 3-1:0.0: Config register raw data: 0xe8 [ 1203.149055][T10360] em28xx 3-1:0.0: I2S Audio (1 sample rate(s)) [ 1203.156180][T10360] em28xx 3-1:0.0: No AC97 audio processor [ 1203.390803][T13892] netlink: 'syz.8.2603': attribute type 2 has an invalid length. [ 1203.399953][T13892] __nla_validate_parse: 2 callbacks suppressed [ 1203.400020][T13892] netlink: 164 bytes leftover after parsing attributes in process `syz.8.2603'. [ 1203.440839][T13872] XFS (loop5): Ending clean mount [ 1203.454965][T13872] XFS (loop5): Quotacheck needed: Please wait. [ 1203.490827][T13872] XFS (loop5): Quotacheck: Done. [ 1203.749725][ T30] audit: type=1800 audit(1751543949.385:150): pid=13894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.2600" name="file1" dev="loop5" ino=9286 res=0 errno=0 [ 1204.372451][T10360] usb 3-1: USB disconnect, device number 47 [ 1204.423064][T13898] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2605'. [ 1204.658611][T10440] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1204.831310][T13903] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2607'. [ 1204.837895][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1204.855973][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2610'. [ 1205.680729][T13917] netlink: 'syz.3.2615': attribute type 10 has an invalid length. [ 1206.087708][T13926] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2618'. [ 1206.268005][ T5842] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1206.375350][T13936] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2622'. [ 1206.439996][ T5842] usb 4-1: Using ep0 maxpacket: 16 [ 1206.446328][ T9607] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1206.468728][ T5842] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1206.479682][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1206.491586][ T5842] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1206.501663][ T5842] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1206.511783][ T5842] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1206.602652][ T5842] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1206.612356][ T5842] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1206.621498][ T5842] usb 4-1: Manufacturer: syz [ 1206.644358][ T9607] usb 9-1: Using ep0 maxpacket: 16 [ 1206.665458][ T9607] usb 9-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1206.677656][ T9607] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1206.719236][ T5842] usb 4-1: config 0 descriptor?? [ 1206.789419][ T9607] usb 9-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1206.799843][ T9607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1206.808867][ T9607] usb 9-1: Product: syz [ 1206.813476][ T9607] usb 9-1: Manufacturer: syz [ 1206.818605][ T9607] usb 9-1: SerialNumber: syz [ 1206.878593][ T9607] usb 9-1: config 0 descriptor?? [ 1206.930871][ T9607] em28xx 9-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1206.942052][ T9607] em28xx 9-1:0.0: Audio interface 0 found (Vendor Class) [ 1207.234392][ T5842] rc_core: IR keymap rc-hauppauge not found [ 1207.240791][ T5842] Registered IR keymap rc-empty [ 1207.248372][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.277849][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.307070][ T5842] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 1207.323386][ T5842] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input50 [ 1207.380204][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.474159][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.496198][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.534822][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.559076][ T9607] em28xx 9-1:0.0: unknown em28xx chip ID (0) [ 1207.576291][ T9607] em28xx 9-1:0.0: Config register raw data: 0xe8 [ 1207.583252][ T9607] em28xx 9-1:0.0: I2S Audio (1 sample rate(s)) [ 1207.590299][ T9607] em28xx 9-1:0.0: No AC97 audio processor [ 1207.606037][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.658188][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.687417][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.715291][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.767689][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.780869][T13952] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 1207.793434][T13952] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 1207.804594][ T5842] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 1207.821192][T13952] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 1207.828505][ T5842] mceusb 4-1:0.0: Registered 爬 with mce emulator interface version 1 [ 1207.838047][ T5842] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1207.869076][T13952] netlink: 'syz.2.2629': attribute type 29 has an invalid length. [ 1207.935165][ T5842] usb 4-1: USB disconnect, device number 57 [ 1209.323497][T13971] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2638'. [ 1209.382844][T13962] loop7: detected capacity change from 0 to 40427 [ 1209.419889][T13962] F2FS-fs (loop7): invalid crc value [ 1209.486060][ T5842] usb 9-1: USB disconnect, device number 48 [ 1209.879816][T13962] F2FS-fs (loop7): Start checkpoint disabled! [ 1209.904685][T13962] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1210.070964][T13977] netlink: 55631 bytes leftover after parsing attributes in process `syz.2.2642'. [ 1210.415893][ T7026] kworker/u8:3: attempt to access beyond end of device [ 1210.415893][ T7026] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1210.465965][ T7026] kworker/u8:3: attempt to access beyond end of device [ 1210.465965][ T7026] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1210.484353][ T7026] CPU: 0 UID: 0 PID: 7026 Comm: kworker/u8:3 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1210.484492][ T7026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1210.484590][ T7026] Workqueue: writeback wb_workfn (flush-7:7) [ 1210.484760][ T7026] Call Trace: [ 1210.484807][ T7026] [ 1210.484856][ T7026] __dump_stack+0x26/0x30 [ 1210.485009][ T7026] dump_stack_lvl+0x1df/0x270 [ 1210.485170][ T7026] dump_stack+0x1e/0x25 [ 1210.485310][ T7026] f2fs_handle_critical_error+0xa6f/0xc20 [ 1210.485523][ T7026] f2fs_stop_checkpoint+0x65/0x80 [ 1210.485703][ T7026] f2fs_write_end_io+0xb4b/0x1920 [ 1210.485857][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.486069][ T7026] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1210.486193][ T7026] bio_endio+0xe27/0xf80 [ 1210.486358][ T7026] submit_bio_noacct+0x214/0x2710 [ 1210.486575][ T7026] submit_bio+0x5a9/0x5d0 [ 1210.486753][ T7026] f2fs_submit_write_bio+0x92/0x250 [ 1210.486931][ T7026] __submit_merged_bio+0x16f/0x6a0 [ 1210.487107][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.487302][ T7026] __submit_merged_write_cond+0x458/0x9a0 [ 1210.487503][ T7026] f2fs_write_data_pages+0x4bb2/0x5480 [ 1210.487811][ T7026] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1210.488003][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.488189][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.488384][ T7026] ? __update_load_avg_cfs_rq+0xd7f/0x1010 [ 1210.488585][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.488770][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.488967][ T7026] ? __rb_insert_augmented+0x80/0x11b0 [ 1210.489178][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.489348][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.489521][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.489693][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.489860][ T7026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1210.490065][ T7026] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1210.490248][ T7026] do_writepages+0x3ef/0x860 [ 1210.490409][ T7026] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1210.490601][ T7026] ? queue_io+0x781/0x790 [ 1210.490750][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.490947][ T7026] __writeback_single_inode+0x101/0x1190 [ 1210.491122][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.491310][ T7026] writeback_sb_inodes+0xaa9/0x1c90 [ 1210.491582][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.491851][ T7026] wb_writeback+0x4ce/0xc00 [ 1210.492031][ T7026] ? queue_io+0x481/0x790 [ 1210.492203][ T7026] wb_workfn+0x397/0x1910 [ 1210.492349][ T7026] ? kmsan_get_metadata+0xfb/0x160 [ 1210.492572][ T7026] ? __pfx_wb_workfn+0x10/0x10 [ 1210.492728][ T7026] process_scheduled_works+0xb8e/0x1d80 [ 1210.492990][ T7026] worker_thread+0xedf/0x1590 [ 1210.493228][ T7026] kthread+0xd5c/0xf00 [ 1210.493355][ T7026] ? __pfx_worker_thread+0x10/0x10 [ 1210.493581][ T7026] ? __pfx_kthread+0x10/0x10 [ 1210.493726][ T7026] ret_from_fork+0x1e0/0x310 [ 1210.493853][ T7026] ? __pfx_kthread+0x10/0x10 [ 1210.493988][ T7026] ret_from_fork_asm+0x1a/0x30 [ 1210.494192][ T7026] [ 1210.799376][ T7026] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1211.550521][T14002] netlink: 'syz.8.2650': attribute type 39 has an invalid length. [ 1211.632357][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.754299][T14002] bridge_slave_0 (unregistering): left allmulticast mode [ 1211.761661][T14002] bridge_slave_0 (unregistering): left promiscuous mode [ 1211.769351][T14002] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.992576][T14011] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2651'. [ 1212.668602][ T1289] ieee802154 phy0 wpan0: encryption failed: -22 [ 1212.675654][ T1289] ieee802154 phy1 wpan1: encryption failed: -22 [ 1212.885395][T14020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2654'. [ 1214.136744][T14024] loop5: detected capacity change from 0 to 40427 [ 1214.162254][T14024] F2FS-fs (loop5): invalid crc value [ 1214.461859][T14024] F2FS-fs (loop5): Start checkpoint disabled! [ 1214.490654][T14024] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6 [ 1214.716115][T14048] netlink: 36 bytes leftover after parsing attributes in process `syz.8.2663'. [ 1214.725823][T14048] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2663'. [ 1214.979981][ T14] kworker/u8:1: attempt to access beyond end of device [ 1214.979981][ T14] loop5: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1214.992128][T14054] loop8: detected capacity change from 0 to 256 [ 1215.007020][ T14] kworker/u8:1: attempt to access beyond end of device [ 1215.007020][ T14] loop5: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1215.021819][ T14] CPU: 0 UID: 0 PID: 14 Comm: kworker/u8:1 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1215.021977][ T14] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1215.022087][ T14] Workqueue: writeback wb_workfn (flush-7:5) [ 1215.022286][ T14] Call Trace: [ 1215.022336][ T14] [ 1215.022385][ T14] __dump_stack+0x26/0x30 [ 1215.022543][ T14] dump_stack_lvl+0x1df/0x270 [ 1215.022712][ T14] dump_stack+0x1e/0x25 [ 1215.022857][ T14] f2fs_handle_critical_error+0xa6f/0xc20 [ 1215.023089][ T14] f2fs_stop_checkpoint+0x65/0x80 [ 1215.023275][ T14] f2fs_write_end_io+0xb4b/0x1920 [ 1215.023456][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.023690][ T14] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1215.023832][ T14] bio_endio+0xe27/0xf80 [ 1215.024025][ T14] submit_bio_noacct+0x214/0x2710 [ 1215.024250][ T14] submit_bio+0x5a9/0x5d0 [ 1215.024427][ T14] f2fs_submit_write_bio+0x92/0x250 [ 1215.024618][ T14] __submit_merged_bio+0x16f/0x6a0 [ 1215.024806][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.025034][ T14] __submit_merged_write_cond+0x458/0x9a0 [ 1215.025249][ T14] f2fs_write_data_pages+0x4bb2/0x5480 [ 1215.025583][ T14] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1215.025758][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.025941][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.026144][ T14] ? __update_load_avg_cfs_rq+0xe9/0x1010 [ 1215.026348][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.026526][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.026718][ T14] ? __rb_insert_augmented+0xad0/0x11b0 [ 1215.026908][ T14] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1215.027082][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.027259][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.027449][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.027625][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.027815][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1215.028022][ T14] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1215.028213][ T14] do_writepages+0x3ef/0x860 [ 1215.028378][ T14] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1215.028583][ T14] ? queue_io+0x781/0x790 [ 1215.028726][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.028926][ T14] __writeback_single_inode+0x101/0x1190 [ 1215.029129][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.029332][ T14] writeback_sb_inodes+0xaa9/0x1c90 [ 1215.029599][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.029835][ T14] wb_writeback+0x4ce/0xc00 [ 1215.030071][ T14] ? queue_io+0x481/0x790 [ 1215.030230][ T14] wb_workfn+0x397/0x1910 [ 1215.030447][ T14] ? kmsan_get_metadata+0xfb/0x160 [ 1215.030653][ T14] ? __pfx_wb_workfn+0x10/0x10 [ 1215.030788][ T14] process_scheduled_works+0xb8e/0x1d80 [ 1215.031032][ T14] worker_thread+0xedf/0x1590 [ 1215.031250][ T14] kthread+0xd5c/0xf00 [ 1215.031375][ T14] ? __pfx_worker_thread+0x10/0x10 [ 1215.031567][ T14] ? __pfx_kthread+0x10/0x10 [ 1215.031695][ T14] ret_from_fork+0x1e0/0x310 [ 1215.031829][ T14] ? __pfx_kthread+0x10/0x10 [ 1215.031984][ T14] ret_from_fork_asm+0x1a/0x30 [ 1215.032197][ T14] [ 1215.346602][ T14] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 1215.648208][ T30] audit: type=1800 audit(1751543961.325:151): pid=14054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2666" name="file1" dev="loop8" ino=1048677 res=0 errno=0 [ 1215.725278][T14054] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 1215.734818][T14054] FAT-fs (loop8): Filesystem has been set read-only [ 1215.901611][T14059] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2668'. [ 1216.174229][ T5842] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1216.385179][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 1216.408927][ T5842] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1216.421528][ T5842] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1216.498327][ T5842] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1216.507847][ T5842] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1216.516314][ T5842] usb 3-1: Product: syz [ 1216.521375][ T5842] usb 3-1: Manufacturer: syz [ 1216.526372][ T5842] usb 3-1: SerialNumber: syz [ 1216.580567][ T5842] usb 3-1: config 0 descriptor?? [ 1216.616413][ T5842] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1216.626763][ T5842] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1217.269790][ T5842] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1217.695642][T10360] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1217.915266][T10360] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1217.926335][T10360] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1218.034693][T10360] usb 4-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c [ 1218.044554][T10360] usb 4-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3 [ 1218.052912][T10360] usb 4-1: Product: syz [ 1218.060810][T10360] usb 4-1: Manufacturer: syz [ 1218.067161][T10360] usb 4-1: SerialNumber: syz [ 1218.145765][T14080] loop7: detected capacity change from 0 to 40427 [ 1218.156178][ T5842] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1218.184736][T10360] usb 4-1: config 0 descriptor?? [ 1218.199343][T14080] F2FS-fs (loop7): invalid crc value [ 1218.409717][T14091] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2682'. [ 1218.553711][ T5842] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 1218.567954][ T5842] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 1218.578182][T14080] F2FS-fs (loop7): Start checkpoint disabled! [ 1218.598531][T14080] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1218.795088][ T5842] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 1218.803039][ T5842] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 1218.813584][ T5842] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 1218.822513][ T5842] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 1218.842833][ T5842] usb 3-1: USB disconnect, device number 48 [ 1218.919421][T14094] loop8: detected capacity change from 0 to 1024 [ 1219.468566][ T14] hfsplus: b-tree write err: -5, ino 4 [ 1219.806875][ T3512] kworker/u8:13: attempt to access beyond end of device [ 1219.806875][ T3512] loop7: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1219.869551][ T3512] kworker/u8:13: attempt to access beyond end of device [ 1219.869551][ T3512] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1219.884450][ T3512] CPU: 1 UID: 0 PID: 3512 Comm: kworker/u8:13 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1219.884601][ T3512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1219.884705][ T3512] Workqueue: writeback wb_workfn (flush-7:7) [ 1219.884881][ T3512] Call Trace: [ 1219.884930][ T3512] [ 1219.884995][ T3512] __dump_stack+0x26/0x30 [ 1219.885160][ T3512] dump_stack_lvl+0x1df/0x270 [ 1219.885327][ T3512] dump_stack+0x1e/0x25 [ 1219.885498][ T3512] f2fs_handle_critical_error+0xa6f/0xc20 [ 1219.885730][ T3512] f2fs_stop_checkpoint+0x65/0x80 [ 1219.885924][ T3512] f2fs_write_end_io+0xb4b/0x1920 [ 1219.886076][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.886292][ T3512] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1219.886427][ T3512] bio_endio+0xe27/0xf80 [ 1219.886643][ T3512] submit_bio_noacct+0x214/0x2710 [ 1219.886869][ T3512] submit_bio+0x5a9/0x5d0 [ 1219.887049][ T3512] f2fs_submit_write_bio+0x92/0x250 [ 1219.887267][ T3512] __submit_merged_bio+0x16f/0x6a0 [ 1219.887464][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.887687][ T3512] __submit_merged_write_cond+0x458/0x9a0 [ 1219.887920][ T3512] f2fs_write_data_pages+0x4bb2/0x5480 [ 1219.888264][ T3512] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1219.888466][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.888665][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.888878][ T3512] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 1219.889080][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.889261][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.889451][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.889636][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.889826][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.890012][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.890198][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.890404][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.890607][ T3512] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1219.890837][ T3512] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1219.891053][ T3512] do_writepages+0x3ef/0x860 [ 1219.891230][ T3512] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1219.891447][ T3512] ? queue_io+0x781/0x790 [ 1219.891613][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.891834][ T3512] __writeback_single_inode+0x101/0x1190 [ 1219.892025][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.892240][ T3512] writeback_sb_inodes+0xaa9/0x1c90 [ 1219.892537][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.892788][ T3512] wb_writeback+0x4ce/0xc00 [ 1219.892977][ T3512] ? queue_io+0x481/0x790 [ 1219.893157][ T3512] wb_workfn+0x397/0x1910 [ 1219.893317][ T3512] ? kmsan_get_metadata+0xfb/0x160 [ 1219.893531][ T3512] ? __pfx_wb_workfn+0x10/0x10 [ 1219.893681][ T3512] process_scheduled_works+0xb8e/0x1d80 [ 1219.893950][ T3512] worker_thread+0xedf/0x1590 [ 1219.894164][ T3512] kthread+0xd5c/0xf00 [ 1219.894291][ T3512] ? __pfx_worker_thread+0x10/0x10 [ 1219.894510][ T3512] ? __pfx_kthread+0x10/0x10 [ 1219.894681][ T3512] ret_from_fork+0x1e0/0x310 [ 1219.894830][ T3512] ? __pfx_kthread+0x10/0x10 [ 1219.894966][ T3512] ret_from_fork_asm+0x1a/0x30 [ 1219.895163][ T3512] [ 1220.201976][ T3512] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1223.338459][T14111] loop8: detected capacity change from 0 to 512 [ 1223.359440][T14111] EXT4-fs (loop8): blocks per group (7872) and clusters per group (32768) inconsistent [ 1223.409573][ T5842] usb 4-1: USB disconnect, device number 58 [ 1224.096496][ T9607] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1224.408688][ T9607] usb 9-1: Using ep0 maxpacket: 16 [ 1224.555466][ T9607] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.566096][ T9607] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1225.267192][ T9607] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1225.276897][ T9607] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1226.242125][ T9607] usb 9-1: can't set config #1, error -71 [ 1226.264946][ T9607] usb 9-1: USB disconnect, device number 49 [ 1227.933359][T14140] loop7: detected capacity change from 0 to 1024 [ 1227.945188][T10360] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1228.079744][T14140] hfsplus: failed to load extents file [ 1228.144483][T10360] usb 4-1: Using ep0 maxpacket: 16 [ 1228.227731][T10360] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1228.239910][T10360] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1228.391165][T14133] loop2: detected capacity change from 0 to 40427 [ 1228.424175][T14133] F2FS-fs (loop2): invalid crc value [ 1228.432081][T10360] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1228.441938][T10360] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.450502][T10360] usb 4-1: Product: syz [ 1228.455133][T10360] usb 4-1: Manufacturer: syz [ 1228.459980][T10360] usb 4-1: SerialNumber: syz [ 1228.662983][T10360] usb 4-1: config 0 descriptor?? [ 1228.721492][T10360] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1228.731585][T10360] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 1228.777272][T14133] F2FS-fs (loop2): Start checkpoint disabled! [ 1228.816445][T14133] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1230.144371][ T5797] Bluetooth: hci2: command 0x0406 tx timeout [ 1230.584308][T10360] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 1230.642207][T10360] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 1232.127362][T10360] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 1232.134841][T10360] em28xx 4-1:0.0: No AC97 audio processor [ 1235.178888][ T3538] kworker/u8:14: attempt to access beyond end of device [ 1235.178888][ T3538] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 1237.174417][ T3538] kworker/u8:14: attempt to access beyond end of device [ 1237.174417][ T3538] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 1237.188935][ T3538] CPU: 1 UID: 0 PID: 3538 Comm: kworker/u8:14 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1237.189092][ T3538] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1237.189198][ T3538] Workqueue: writeback wb_workfn (flush-7:2) [ 1237.189373][ T3538] Call Trace: [ 1237.189425][ T3538] [ 1237.189478][ T3538] __dump_stack+0x26/0x30 [ 1237.189633][ T3538] dump_stack_lvl+0x1df/0x270 [ 1237.189812][ T3538] dump_stack+0x1e/0x25 [ 1237.189965][ T3538] f2fs_handle_critical_error+0xa6f/0xc20 [ 1237.190205][ T3538] f2fs_stop_checkpoint+0x65/0x80 [ 1237.190392][ T3538] f2fs_write_end_io+0xb4b/0x1920 [ 1237.190542][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.190754][ T3538] ? __pfx_f2fs_write_end_io+0x10/0x10 [ 1237.190909][ T3538] bio_endio+0xe27/0xf80 [ 1237.191087][ T3538] submit_bio_noacct+0x214/0x2710 [ 1237.191303][ T3538] submit_bio+0x5a9/0x5d0 [ 1237.191478][ T3538] f2fs_submit_write_bio+0x92/0x250 [ 1237.191663][ T3538] __submit_merged_bio+0x16f/0x6a0 [ 1237.191839][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.192037][ T3538] __submit_merged_write_cond+0x458/0x9a0 [ 1237.192249][ T3538] f2fs_write_data_pages+0x4bb2/0x5480 [ 1237.192565][ T3538] ? kmsan_internal_set_shadow_origin+0x79/0x110 [ 1237.192759][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.192954][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.193182][ T3538] ? __update_load_avg_cfs_rq+0xc30/0x1010 [ 1237.193392][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.193584][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.193792][ T3538] ? __rb_insert_augmented+0x80/0x11b0 [ 1237.194000][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.194190][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.194385][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.194569][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.194763][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.194964][ T3538] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1237.195176][ T3538] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1237.195386][ T3538] do_writepages+0x3ef/0x860 [ 1237.195546][ T3538] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1237.195769][ T3538] ? queue_io+0x781/0x790 [ 1237.195924][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.196144][ T3538] __writeback_single_inode+0x101/0x1190 [ 1237.196318][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.196515][ T3538] writeback_sb_inodes+0xaa9/0x1c90 [ 1237.196784][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.197020][ T3538] wb_writeback+0x4ce/0xc00 [ 1237.197212][ T3538] ? queue_io+0x481/0x790 [ 1237.197383][ T3538] wb_workfn+0x397/0x1910 [ 1237.197532][ T3538] ? kmsan_get_metadata+0xfb/0x160 [ 1237.197763][ T3538] ? __pfx_wb_workfn+0x10/0x10 [ 1237.197905][ T3538] process_scheduled_works+0xb8e/0x1d80 [ 1237.198174][ T3538] worker_thread+0xedf/0x1590 [ 1237.198393][ T3538] kthread+0xd5c/0xf00 [ 1237.198525][ T3538] ? __pfx_worker_thread+0x10/0x10 [ 1237.198727][ T3538] ? __pfx_kthread+0x10/0x10 [ 1237.198865][ T3538] ret_from_fork+0x1e0/0x310 [ 1237.199002][ T3538] ? __pfx_kthread+0x10/0x10 [ 1237.199151][ T3538] ret_from_fork_asm+0x1a/0x30 [ 1237.199348][ T3538] [ 1237.506646][ T3538] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1239.024549][T10360] usb 4-1: USB disconnect, device number 59 [ 1239.032458][T10360] em28xx 4-1:0.0: Disconnecting em28xx [ 1239.116572][T10360] em28xx 4-1:0.0: Freeing device [ 1240.499224][T14179] netlink: 'syz.3.2711': attribute type 39 has an invalid length. [ 1240.527234][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1240.766026][T14179] bridge_slave_0 (unregistering): left allmulticast mode [ 1240.773353][T14179] bridge_slave_0 (unregistering): left promiscuous mode [ 1240.780934][T14179] bridge0: port 1(bridge_slave_0) entered disabled state [ 1242.121870][T14186] ===================================================== [ 1242.129477][T14186] BUG: KMSAN: kernel-infoleak in _copy_to_user+0xcc/0x120 [ 1242.137092][T14186] _copy_to_user+0xcc/0x120 [ 1242.141928][T14186] copy_siginfo_to_user+0x3f/0x140 [ 1242.147551][T14186] x64_setup_rt_frame+0x1392/0x2590 [ 1242.153117][T14186] arch_do_signal_or_restart+0x63c/0xbf0 [ 1242.159191][T14186] exit_to_user_mode_loop+0xec/0x330 [ 1242.165534][T14186] do_syscall_64+0x1e3/0x210 [ 1242.170480][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.176779][T14186] [ 1242.179327][T14186] Uninit was stored to memory at: [ 1242.184843][T14186] __dequeue_signal+0x4d6/0x970 [ 1242.190025][T14186] dequeue_signal+0x1c0/0x840 [ 1242.195110][T14186] get_signal+0xbf8/0x2a20 [ 1242.199872][T14186] arch_do_signal_or_restart+0x53/0xbf0 [ 1242.205998][T14186] exit_to_user_mode_loop+0xec/0x330 [ 1242.211671][T14186] do_syscall_64+0x1e3/0x210 [ 1242.216710][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.223668][T14186] [ 1242.226200][T14186] Uninit was created at: [ 1242.230938][T14186] __alloc_frozen_pages_noprof+0x689/0xf00 [ 1242.237175][T14186] alloc_pages_mpol+0x328/0x860 [ 1242.242417][T14186] alloc_frozen_pages_noprof+0xf7/0x200 [ 1242.248476][T14186] allocate_slab+0x24d/0x1220 [ 1242.253524][T14186] ___slab_alloc+0xfec/0x3480 [ 1242.258653][T14186] kmem_cache_alloc_noprof+0x91b/0xec0 [ 1242.264647][T14186] __send_signal_locked+0x27d/0x14c0 [ 1242.270305][T14186] send_signal_locked+0x738/0xb70 [ 1242.275771][T14186] do_send_sig_info+0x1ab/0x260 [ 1242.280975][T14186] group_send_sig_info+0xef/0x140 [ 1242.286462][T14186] do_bpf_send_signal+0xf8/0x260 [ 1242.291739][T14186] irq_work_run+0x1b3/0x780 [ 1242.296750][T14186] __sysvec_irq_work+0x45/0x320 [ 1242.301984][T14186] sysvec_irq_work+0x7c/0x90 [ 1242.307065][T14186] asm_sysvec_irq_work+0x1f/0x30 [ 1242.312347][T14186] [ 1242.314988][T14186] Bytes 12-15 of 48 are uninitialized [ 1242.320629][T14186] Memory access of size 48 starts at ffff88805c35bdf0 [ 1242.328289][T14186] Data copied to user address 00007ffd249b1bb0 [ 1242.334772][T14186] [ 1242.337373][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.5.2712 Not tainted 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1242.349997][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1242.360462][T14186] ===================================================== [ 1242.367756][T14186] Disabling lock debugging due to kernel taint [ 1242.374266][T14186] Kernel panic - not syncing: kmsan.panic set ... [ 1242.380844][T14186] CPU: 1 UID: 0 PID: 14186 Comm: syz.5.2712 Tainted: G B 6.16.0-rc4-syzkaller-00049-gb4911fb0b060 #0 PREEMPT(undef) [ 1242.394776][T14186] Tainted: [B]=BAD_PAGE [ 1242.399042][T14186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1242.409248][T14186] Call Trace: [ 1242.412632][T14186] [ 1242.415672][T14186] __dump_stack+0x26/0x30 [ 1242.420203][T14186] dump_stack_lvl+0x53/0x270 [ 1242.424989][T14186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1242.431036][T14186] dump_stack+0x1e/0x25 [ 1242.435402][T14186] panic+0x4bd/0xd50 [ 1242.439581][T14186] kmsan_report+0x31c/0x320 [ 1242.444294][T14186] ? copy_fpstate_to_sigframe+0x1111/0x13d0 [ 1242.450444][T14186] ? kmsan_internal_check_memory+0x16c/0x230 [ 1242.456639][T14186] ? kmsan_copy_to_user+0xf1/0x190 [ 1242.461954][T14186] ? _copy_to_user+0xcc/0x120 [ 1242.466818][T14186] ? copy_siginfo_to_user+0x3f/0x140 [ 1242.472297][T14186] ? x64_setup_rt_frame+0x1392/0x2590 [ 1242.477896][T14186] ? arch_do_signal_or_restart+0x63c/0xbf0 [ 1242.483940][T14186] ? exit_to_user_mode_loop+0xec/0x330 [ 1242.489605][T14186] ? do_syscall_64+0x1e3/0x210 [ 1242.494553][T14186] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.500805][T14186] ? stack_depot_save_flags+0x35/0x7b0 [ 1242.506444][T14186] ? kmsan_get_metadata+0xfb/0x160 [ 1242.511769][T14186] ? kmsan_internal_check_memory+0x9c/0x230 [ 1242.517889][T14186] ? copy_fpstate_to_sigframe+0x126f/0x13d0 [ 1242.524023][T14186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1242.530078][T14186] ? kmsan_get_metadata+0xfb/0x160 [ 1242.535436][T14186] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1242.541478][T14186] kmsan_internal_check_memory+0x16c/0x230 [ 1242.547510][T14186] kmsan_copy_to_user+0xf1/0x190 [ 1242.552655][T14186] _copy_to_user+0xcc/0x120 [ 1242.557352][T14186] copy_siginfo_to_user+0x3f/0x140 [ 1242.562672][T14186] x64_setup_rt_frame+0x1392/0x2590 [ 1242.568145][T14186] arch_do_signal_or_restart+0x63c/0xbf0 [ 1242.574074][T14186] exit_to_user_mode_loop+0xec/0x330 [ 1242.579577][T14186] do_syscall_64+0x1e3/0x210 [ 1242.584355][T14186] ? irqentry_exit+0x16/0x60 [ 1242.589161][T14186] ? clear_bhb_loop+0x40/0x90 [ 1242.594042][T14186] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1242.600132][T14186] RIP: 0033:0x7f00cbc4d9fc [ 1242.604702][T14186] Code: 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 41 38 3c 10 74 0b 41 88 3c 10 31 c0 <49> 89 34 d1 c3 b8 01 00 00 00 c3 66 0f 1f 84 00 00 00 00 00 48 83 [ 1242.624492][T14186] RSP: 002b:00007ffd249b2028 EFLAGS: 00010246 [ 1242.630727][T14186] RAX: 0000000000000000 RBX: 00007f00ccae5720 RCX: 0000000000000000 [ 1242.638859][T14186] RDX: 0000000000001e51 RSI: ffffffff81941e51 RDI: 0000000000000009 [ 1242.646977][T14186] RBP: ffffffff81941e51 R08: 00007f00cbfa0000 R09: 00007f00cbfa2000 [ 1242.655113][T14186] R10: 0000000081941e55 R11: 0000000000000009 R12: 0000000000000009 [ 1242.663243][T14186] R13: 0000000000000000 R14: ffffffff81941398 R15: 0000000000000001 [ 1242.671391][T14186] ? kernel_clone+0x28/0x1070 [ 1242.676284][T14186] ? kernel_clone+0xae1/0x1070 [ 1242.681242][T14186] ? kernel_clone+0xae1/0x1070 [ 1242.686212][T14186] [ 1242.689722][T14186] Kernel Offset: disabled [ 1242.694144][T14186] Rebooting in 86400 seconds..