last executing test programs: 6m16.746009733s ago: executing program 2 (id=184): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036312c6e6f646f74732c00fef7e57e4b88b74f39306f71729ff8b6dad1d347a8049c440504160f5c5eafd60da5e669f00800"], 0x1, 0x29b, &(0x7f0000000340)="$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") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lstat(&(0x7f0000000100)='./file0\x00', 0x0) 6m16.390727759s ago: executing program 2 (id=190): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000000010000081100000900000001000000", @ANYRES32], 0x50) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r1, 0x4008ae89, &(0x7f0000000100)=ANY=[@ANYBLOB="08000000000000006d02"]) 6m15.430171093s ago: executing program 2 (id=194): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000a00)='E', 0x1}], 0x1}}], 0x1, 0x4000045) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r1, 0xffffffffffffffff, 0x0) 6m15.280250378s ago: executing program 2 (id=196): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) chroot(&(0x7f0000000100)='./file0\x00') mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 6m15.171036259s ago: executing program 2 (id=198): syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000300)='./file0\x00', 0x4000, &(0x7f0000000ac0)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c636865636b3d72656c617865642c646d61736b3d30303030303030303030303030303030303030303036312c6e6f646f74732c00fef7e57e4b88b74f39306f71729ff8b6dad1d347a8049c440504160f5c5eafd60da5e669f00800"], 0x1, 0x29b, &(0x7f0000000340)="$eJzs3c9LFG0AB/DHVfHFF8XTy1uXHurUZVDPHZRQkBaKcoMKghHHWnbalZ097EoHO3cJOvYfRMduQfQP+F90k0A8ecqw8dcKXdI08PO5zJf5zjM8zww8c5zNW29eNFaKZCXthMrMQKjMhFDZGQgToRIOrIebb1+9e/3g0eM7s9Xq3P0Y52cXp6ZjjOPXPj95+eH6l86/Dz+OfxoJGxNPN7emv278t3Fl8/vi83oR60VstjoxjUutViddyrO4XC8aSYz38iwtslhvFlm7r1/JW6urvZg2l8dGV9tZUcS02YuNrBc7rdhp92L6LK03Y5IkcWw0cBq19zu7u2Frt3TRs+H8ef+X27FN/Z8Qtte7tW6tPJb9/EJ1bjL+NHw0arvbrQ0e9lNlH/v74TC630+f7A8+LTfKfq+7fbd6YvxIWP7DawcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAODySuKhiaOz291ubbDsk1/1ZZpfqM5N7l/Q3w+Fq0PntgwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOJWit9ZI8zxrC78f9h7kXzANQTi7cNE7EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJy//p/YAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcFkVvbVGmudZ+6zCt//LGx+rLnqNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHBaPwIAAP//P3honA==") mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) lstat(&(0x7f0000000100)='./file0\x00', 0x0) 6m14.758200579s ago: executing program 2 (id=203): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x3}) read$FUSE(r1, &(0x7f000000a3c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000500)=""/166, 0xa6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 6m14.397973085s ago: executing program 32 (id=203): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000008100)='/sys/kernel/oops_count', 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'trusted:', 'syz', 0x20, 0x1000}, 0x2d, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000200)={0x1, 0x0, 0x0, 0x3}) read$FUSE(r1, &(0x7f000000a3c0)={0x2020}, 0x2020) r6 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r6, 0x0, 0x0) setsockopt$inet6_int(r6, 0x29, 0xce, 0x0, 0x0) connect$inet6(r6, 0x0, 0x0) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000040)) getdents64(r0, &(0x7f0000000500)=""/166, 0xa6) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) 7.692200611s ago: executing program 3 (id=1750): syz_usb_connect(0x4, 0x2d, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0xa, 0x1, 0x106) r2 = socket$packet(0x11, 0x3, 0x300) dup(r2) openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x2}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x1, {0x0, 0x1, 0x3}, 0xfe}, 0x18) sendmmsg$sock(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 7.595786561s ago: executing program 0 (id=1751): syz_emit_ethernet(0x1a, 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x5, 0x84) openat$kvm(0x0, &(0x7f00000002c0), 0x0, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) unshare(0x22020600) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@loopback, 0x4e23, 0x10000, 0xc24, 0x9, 0xfffffffb}}, 0x44) 7.482971402s ago: executing program 0 (id=1752): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 7.377374232s ago: executing program 0 (id=1753): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 7.30401797s ago: executing program 0 (id=1754): socket$netlink(0x10, 0x3, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000140)={0x0, 0x0, 0x1a, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5, 0x0, 0x2}]) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xb, 0x7fff, 0x5, 0xffffffff, 0x1000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x240080c1}, 0x0) ioctl$IOCTL_STOP_ACCEL_DEV(0xffffffffffffffff, 0x40096101, &(0x7f00000001c0)={{}, 0x5}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {}, {0x2, 0xb}, {0xb, 0xb}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x9, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 7.161476324s ago: executing program 0 (id=1755): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x403, 0x6030, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x2}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x1, 0x0, r2, 0x0}]) r3 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_IO(r3, 0x2285, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) write$sndseq(r4, 0x0, 0x0) write$sndseq(r4, &(0x7f0000000200)=[{0x0, 0x0, 0x0, 0x0, @time={0xffffffff}, {0x4}, {0x0, 0x4}, @time=@tick=0x3}, {0xff, 0x0, 0x0, 0x0, @time={0x7}, {0x0, 0x3}, {}, @control={0x0, 0x0, 0x800}}, {0x0, 0x0, 0x0, 0x7, @tick, {}, {0x0, 0x4}, @raw32={[0x3, 0xffffffff, 0x5df]}}, {0x0, 0x0, 0x0, 0x0, @tick, {0x0, 0x3}, {}, @quote={{0x0, 0xfe}}}, {0x0, 0x0, 0x0, 0x5, @time, {0x2}, {0x0, 0x9}, @raw8={"448cc880fe353ca0f2c2e953"}}, {0x0, 0x1, 0x2, 0x0, @tick=0x401, {}, {}, @connect}], 0xa8) ioctl$SG_GET_NUM_WAITING(r3, 0x227d, &(0x7f0000000300)) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x2, {[@main=@item_012={0x1, 0x0, 0x7, "a4"}]}}, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000940)={0x44, &(0x7f0000000100)={0x20, 0x6, 0xd, "5e6424818327b2369deca65eb2"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB='\x00\x00M'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r5 = socket$kcm(0xa, 0x3, 0x87) sendmsg$kcm(r5, &(0x7f0000000580)={&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x7, @dev={0xfe, 0x80, '\x00', 0x28}, 0x0, 0x8002}, 0x80, &(0x7f0000000340)=[{&(0x7f00000005c0)="5fd1c9ef", 0x4}], 0x1}, 0x8c90) r6 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_SEQ_NRSYNTHS(r7, 0x40045108, &(0x7f0000001b80)) read(r6, 0x0, 0x0) 4.531004113s ago: executing program 3 (id=1757): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1c8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_vlan={0x178, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.521549514s ago: executing program 1 (id=1758): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r1 = dup3(0xffffffffffffffff, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x58, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x30, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000400)={@flat=@weak_handle={0x77682a85, 0x0, 0x1}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x22}, @fd}, &(0x7f0000000bc0)={0x0, 0x18, 0x40}}, 0x1000}, @exit_looper], 0x0, 0x0, 0x0}) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x5, 0x7, 0x0, 0x2, 0x4, 0x0, "36e6e56ea27156a3570361811f2789bcea41ccd5a752f287f84bef456999539f295747bf668a270d091a9cb4c9c11f86f40d91c08e7b77588cfc620ac2a08282", "99190353f77436f19bc1dddf360b1fd2196fd6884e81721195bc29dd3b706a1b0551814f05fe51ad551fe52062f039e6823ef32b909342a9104facb3e1825055", "11c215585e4aef97380fe337eaaf8acc5cf33c51fbbe371be886dcccaf5e892a", [0x1, 0x8]}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000540)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x48, 0x18, &(0x7f00000004c0)={@fd={0x66642a85, 0x0, r0}, @fd={0x66642a85, 0x0, r2}, @flat=@weak_handle={0x77682a85, 0x1001}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) prlimit64(0x0, 0x7, &(0x7f0000000ec0), 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000001c0), 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 4.260079169s ago: executing program 3 (id=1760): syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f0000000480)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x8000c6, &(0x7f0000000240)=ANY=[], 0x0, 0x17d, &(0x7f0000001ac0)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x0) chdir(&(0x7f0000000000)='./bus/file0\x00') r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f00000001c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GET_LEASE(r1, 0xc01064c8, &(0x7f0000000280)={0x1, 0x0, &(0x7f0000000200)=[0x0]}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0], &(0x7f0000000280), 0x1, r3}) ioctl$DRM_IOCTL_MODE_ATOMIC(r1, 0xc03864bc, &(0x7f0000000380)={0x601, 0x1, &(0x7f00000000c0)=[r3], &(0x7f0000000200), &(0x7f0000000300)=[r4], &(0x7f0000000580)}) 4.195123956s ago: executing program 1 (id=1761): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 3.291707245s ago: executing program 1 (id=1763): r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0) syz_usb_disconnect(r0) 3.280991186s ago: executing program 3 (id=1764): r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) r1 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r2 = fcntl$dupfd(r1, 0x0, r1) read$FUSE(r2, 0x0, 0x70) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0x6a9f0eede9332711}, {0xfff3, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_INGRESS={0x8, 0xf, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) write$FUSE_INIT(r2, &(0x7f0000002200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x5, 0xa0300f10, 0x9, 0x8, 0x8, 0xd9, 0x0, 0x0, 0x10, 0xf}}, 0x50) close(r0) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r5 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x9, 0x145000) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(r0, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, {0xc7}}, './file0\x00'}) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r4, 0x8982, &(0x7f0000002800)={0x1, 'vlan0\x00'}) r6 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r6, &(0x7f00000001c0)={0x2a, 0xffffffff, 0x1}, 0xc) getsockopt$sock_buf(r6, 0x1, 0x1c, 0x0, &(0x7f0000005500)) syz_usb_connect$hid(0x5, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="1201000000000020ac050f0222000182830109022400010100000009040000020301020009210005000122000009058103", @ANYRES32], 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r7, 0xffffffffffffffff, 0x0) 3.086999555s ago: executing program 4 (id=1765): setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) open$dir(0x0, 0x28000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x80a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x48001059, 0xffffffffffffffff, 0x0) r2 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000280)={'syz', 0x1}, &(0x7f00000002c0)="1d", 0xfe3a, 0xfffffffffffffffe) keyctl$read(0xb, r2, &(0x7f0000001300)=""/4096, 0xffffffffffffffd2) 2.191635793s ago: executing program 4 (id=1766): syz_mount_image$nilfs2(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x40, &(0x7f0000000cc0)=ANY=[], 0x4, 0xfbd, &(0x7f0000006d00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.stat\x00', 0x275a, 0x0) write$uinput_user_dev(r0, &(0x7f0000000180)={'syz0\x00', {0xfe2c, 0x1000, 0xff00, 0x7ff}, 0x44, [0x0, 0x6, 0x7, 0x9, 0xc194, 0xdcf, 0x1, 0xd05, 0x7fff, 0x6, 0x8, 0x1, 0x0, 0x29, 0x3, 0x2, 0x81, 0x4, 0x9, 0x0, 0x5, 0x7, 0x0, 0x3, 0x20000000, 0x5, 0xb, 0x6, 0x7, 0xd0bc, 0x80000001, 0x200, 0x2, 0x42b90b17, 0x7, 0x5, 0x8, 0x0, 0xff, 0x200, 0x4, 0x5, 0x3, 0xefd0, 0x6, 0x98, 0xab4, 0x2, 0x4, 0x7f, 0x10000, 0x2, 0x8000, 0x8, 0x8f100000, 0x400, 0xffffffb3, 0x40, 0xc, 0x5, 0x8, 0xc2ee, 0x6c96, 0x88b0], [0xff, 0x49, 0x4, 0xc016, 0x6, 0x7ff, 0x5, 0x1, 0xb, 0x8, 0x80000001, 0x10000, 0xc74475f, 0x5, 0x224f22e7, 0xa, 0x2, 0x0, 0x0, 0x7fffffff, 0xfffffff2, 0x9ba1, 0x4, 0x47e, 0xbf2, 0xc, 0x5, 0x7, 0x3, 0xe2db, 0x6, 0x800, 0x6a1f, 0x5, 0x2448f173, 0x2, 0x4, 0x1, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x243e5e64, 0x0, 0x5, 0xbb5e, 0xc, 0x52, 0x1, 0xfffffffe, 0x85, 0x8, 0x3, 0x800, 0x4, 0x1, 0x10, 0x7, 0x6, 0xd, 0x1000, 0x7], [0x41ea, 0x8, 0xcf72, 0x7, 0x7, 0x6, 0x3, 0x10000, 0x80000000, 0x7, 0x1, 0x400, 0x5, 0x26eff1d2, 0x5, 0x5, 0x5, 0x200, 0xffff7fff, 0x5, 0xdd, 0xffff, 0xa263, 0x1, 0x7, 0x8, 0x8, 0x4, 0x1, 0x5, 0x2, 0x9, 0x6, 0x6, 0x8, 0x7, 0x8, 0x5, 0x3000000, 0xb5, 0x43, 0xfffffffa, 0xfffe, 0x2000000, 0x4, 0x3, 0x3, 0x6, 0x6, 0x1, 0x80000001, 0x1, 0x2, 0xffff, 0x4, 0x80000001, 0x2, 0x0, 0x4, 0x0, 0x7, 0x37d9272d, 0x80000000], [0x9, 0x7f, 0x5, 0x0, 0x8, 0x8, 0x5, 0x0, 0x283, 0x7, 0x0, 0x0, 0x3ce, 0x7, 0x4, 0xff, 0x3, 0x4da, 0x7, 0x5, 0x1, 0x9, 0x1ff, 0x40, 0x7be, 0xfffffffe, 0x200, 0x3, 0xfffffff9, 0x3, 0x1, 0x3, 0x7, 0xfffffff3, 0x5, 0x5, 0xfffffffb, 0x9, 0x800, 0xcaaf, 0x7, 0xfffffffa, 0x8, 0x81, 0xa, 0x7, 0x6, 0x10, 0x4d5, 0xf929, 0x0, 0x7c753245, 0x4, 0xffffffff, 0x8d, 0x4305, 0x7, 0x5ef81e72, 0x1, 0x4, 0xfffffffd, 0x5a, 0x5, 0x2]}, 0x45c) sync_file_range(r0, 0x6, 0x0, 0x6) 1.957766427s ago: executing program 0 (id=1767): syz_mount_image$jfs(&(0x7f0000000040), &(0x7f0000000240)='./file7\x00', 0xc03, &(0x7f0000000740)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYRESDEC, @ANYRESDEC, @ANYRESOCT=0x0, @ANYRES32], 0x2, 0x5fbf, &(0x7f0000002080)="$eJzs3VtvHGf9B/DfHrw+9N/U6kWVf8QhTTm0lCaNkzYtp6ZC4gIEVKpyn8i4VYQLKAkVrSzsKhL3SFyj8iK4BqHeIBWJl8AbiGT3hghEBo39PM54vPbaJN5Zez4fyZn97TPjfSZfj2fXc3gCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIjvf+/ti52IuP5+emI+4v+iF9GNmC3rs/HXiNX7ef5+RJyOzeZ4JiJOTUeUy2/+81TE5Yj49FTE+sbKYvn0wgH78cpb9/72w7d/tPbbL/7l7//+5Pd/qre/9cl3f/DH1Yj507/53X9WH8+6AwAAQFsURVF0Nj/mR5xJn++7TXcKABiLvP8vkvy8Wv0odT92aro/arVard6tGG61WkTEWnWZ8j2Dw/EAcMysxf2mu0CD5N9q/Yh4oulOABOt03QHOBLrGyuLnZRvp7o/OLvVns8F2ZH/Wmf7+o69pqPUzzEZ18/X3ejF03v0Z3ZMfZgkOf9uPf/rW+2DNN9R5z8ue+U/2Lr0qXVy/r16/jUnJ//u0PzbKuffP1T+PfkDAAAAAMAEy3//n2/4+O/0o6/Kgex3/PfsmPoAAAAAAAAAAI/bAcb/Kx9czfPXx//bZvw/AAAAmFjlZ/XSx6cePrfXvdjK5691Ip6szQ+0TLpYZq7pfgAAAAAAAAAAAABAm/S3zuG91omYiogn5+aKoii/qur1YT3q8sdd29cf2qzpX/IAALDl01O1a/k7ETMRcS3d629qbm6uKGZm54q5YnY6v58dTM8Us5XPtXlaPjc9OMAb4v6gKL/ZTGW5qlGfl0e1179f+VqDoneAjo1Hg4EDQERs7Y3W7ZFOmKJ4Kpp+l8PxYPs/eWz/HETTP6cAAADA0SuKouik23mfScf8u013CgAYi7z/rx8XUKvVarVaffLqqmK41WoREWvVZcr3DIbjB4BjZi3uN90FGiT/VutHxOmmOwFMtE7THeBIrG+sLHZSvp3q/iCN757PBdmR/1pnc7m8/LDpKPVzTMb183U3evH0Hv15Zkx9mCQ5/249/+tb7YM031HnPy575V+u53wD/Wlazr9Xz7/m5OTfHZp/W+X8+4fKvyd/AAAAAACYYPnv//OO/+ZVBgAAAAAAAIBjZ31jZTFf95qP/39uyHyu/zyZcv4d+bdSzr9bz792Qk6v8vjemw/z/2xjZfHj/7/yhTyd+PyneoPytac63V5/65yff+Zbmy7Fy7vmL+cppt6Jm7EcS3FxV/vUjvaFEe2XdrUPyvbZ3H4+FuPnsRw/2W6fHnFi1MyI9mJEe86/Z/tvpZx/v/JV5j+X2ju1aeneR91d2311Oux1rv74wZXdW9f43Y3e9rpVlet3roH+bP6fPDGIX95eunX+Vzfu3Ll1MdJkx7MLkSaPWc5/Kn3l/J9/bqs9/96vbq/3PhocOv9JcTf6e+b/XOVxub4vjLlvTcj5D9JXzj/vgYZv/8c5/723/xcb6A8AAAAAAAAAAAAAAADspyiKzUtEr0bEq+n6n6auzQQAxivv/4t8M4xErVar1Wr1yauriuHeqBYR8efqMuV7hl8P+2YAwCR7EBH/aLoTNEb+LZbv91dOv9R0Z4Cxuv3Bhz+9sby8dOv2/7J00Xv8PQIAAAAAAAAADiuP/3m2Mv7z5nlAtXGjd4z/+mac/WxjZfH9+X99/tiN/9kd9DbHOk8r9GxUx+fePULxudh//O/+iNebGtE+GNE+PaJ9ZkT70As9KnL+z6aMc/5n0ortN/5rzr8+HfGSjdpv/NfnG+hP03L+59JYzzn/r9bmq+Zf/OE4j//b3ZH/hTvv/eLC7Q8+fOnmezfeXXp36WeXLi+8fnHhyuXXXr7wzs3lpfRvgz0+Wjn/PPa180DbJeefM5d/u+T8v5xq+bdLzv8rqZZ/u+T88/s9+bdLzj9/9tnO/0Gz/WI8cv4vpNr23y45/6+lWv7tkvN/MdXyb5ec/9dTLf92yfm/lGr5t0vO/3yq5d8uOf8LqZZ/u+T88xEu+bdLzj+f2SD/dsn5L6Ra/u2S87+Uavm3S87/cqrl3y45/1dSLf92yfm/mupD5O/eXydAzv9Kqm3/7ZLzfy3V8m+XnP/rqZZ/u+T8v5Fq+bdLzv+bqZZ/u+T8v5Vq+bdLzv/bqZZ/u+T8vxMPLyaVf3vk/N9Ite2/XR7e/98DDzzwID9o+jcTAAAAAAAAAAAAAFA3jtOJm15HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOC/7MCBAAAAAACQ/2sjVFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWEHDgQAAAAAgPxfG6GqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqoKe3cXI1d53w/87Ju9NsTeJIbwYmBtDBhYvOsX/PL/18FASCm0DSGBvpEa116bTfxWr00AIbERNEUCqVxwQSslBYSqXKQKahM1SDSiUqU2vWmv2psqrdSoQlGonKg3jQquzpzneTwzOzuz6921Z875fBD+eWfOzDx75szsfsf6zgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQb8O9k3/Yl2VZ/n/tj5Esuzz/+6psX/7lzM5LvUIAAABgsT6s/fnttemEffO4UN02f3f9P3733Llz57LsT9Z96tV8BqNZtmZllhXnBcM/OdmwTfB8NtzXX/d1f4ebH+hw/mCH84c6nL+iw/krO5w/3OH8WTtgllXF6zG1K9tU++tIsUuzddlQ7bxNLS71fN/K/v74Wk5NX+0y54YOZ1PZ0Wwym5h1mb7af1n27ob8tu7P4m31193W+izLzv7s2YNxDX1hH2/KGm6spv6+++DubPTnP3v24JMjv7iu1ey4G2atNMs2b8zX+UKWnX+5KuvLVqZ9EtfZX7fO9S3WOdCwzr7a5fK/N6/z7DzXGb/v4bDOf2qzzvXhtKduzLJsJptzm2bPZ/3Z6qZbTft7uDgi8uvI78pPZIMLOk42zOM4yS/z4xsbj5PmYzLu/w1hnwzOsYb6u+ODr62Ytd8v9DjJv+tuOFbz634ov9Hh4fqXVhuO1XybZ2+a+xhoed+1OAbSsVx3DGzsdAz0rxioHQP959e8seEY2DrrMv1ZX+223r+p/TEwfvrYyfHpp5+5Y+rYgSOTRyaPb9+xbc/Wbbt27J4YPzx1dDL8ubBd2kNWZ/3pGNwYnmviMXhL07b1h+S5N4rHwetX77q+1VzIGoaX6HGwmDVk4Xj54s35gi7vz+Y4xvNtXti8+MdB+rlf9zgYrHsctHxObfE4GJzH4yDf5uzm+f3MHKz7v9UaWj0XLsUxMFJ3DCzm52H9Gi7k52F+m4/dOvdz4fqwrhdvW+jPw4FZx0D8tvrCYy8/Jf2+N7w77JfZx8U1+RmXrcjOTE+e2vLUgdOnT23NwrgoPll3XzUfL6vrvqds1vHSv+DjZd/nPtp1TYvTR8K+Gr69/X2Vb7NjrP19VXt2b70/G07dloWxxC72/mz10yzfnylLtNmf+TYv3LH43wVTLql7/hvq9Pw3MDRYPP8NpL0x1PD8N/uuGaitLMvO3jG/57+h8P/Ffv5b1yXPf/m+emxL+2Mg3+bF8YUeA4Ntn/9uDLMvrOfWkBiG63L/R7XzZ4rDtO6+7HjcDA4OheNmMN5i43GzfdZl8mvLb3vzxIUdN5tvbLyvGn5vKeFxk++rVyfaHzf5Nu9tXfxzx6r417rnjhWdjoGhgRX5eofSQVA8351bFY+BLdnB7ER2NDuULpPfy/ltjW2b3zGwIvx/sZ87ruqSYyDfV69ta38M5Nv87fal/d1pczglbVP3u1Pz6wtzZf5rBs9fX/NuW+rMn6/zMzvavzaUb/PTHQvNGe330+3hlMta7Kfmx89cx/ShrPN+WqpjOl/n0TvbvzaVb7Nu5zyPp31Zlr3z0lvF613F67t/ceafv9vwum+r15Tfeemtz1/9wx8uZP0AAFy4j2p/zqwoftes+xfr+fz7PwAAANATYu7vDzOR/wEAAKA0Yu4fCDOR/wEAAKA0Yu4fDDPZ1+nd8crhib6vv/rhc1l6N8BzQTw/vgzy0Mpiu9jxnglfj547Lz/9nreGHvzec/O77f4sy/73gWtbbv/Eyriuwsm4zoHG02e56oZ53f7jj5zfrv79E872F9cfv5/5vgwUu8rv/ts9tesdvbWY7z2Q1ebDMy8+X7v+PcXXcfv3/6PY7hvhTUv2He5ruPzmsJ5NYY6G95R5aNX5/ZDPeLnvvHvk7z/96Pnbi5fr27im9m2+tqW43vgeUa/8ZbF9/L7nWv9fv/St7+TbP3VT6/U/1996/e+H6/1xmP/zQXF6/T7/Xt36/yCsP95evNyWN3/Qcv1v/1Wx/dvhuHg9zOb13/1H133Y6v6Kt7NvsLhcvP2JP7uvdrl4ffH6m9c/PH5Pw/5ovv733iyuZ++T/z1Qv308Pd5O9Phg4/HdF+7fhh55lmXf+nrWsJ+zoeJy7zStP17fycHW67+9aZ0n33iidvnm7yf65iP3tvx+43r2/flIw/fzypqw//pX/UN+ve9fG47HcP4vZorra34v07fXND7fxO1fHyket/H6xpvW/0rT+mduyPdd5/Xf//Ni/W/ftbJh/fvWhuPp48XstP4jf7q24fJvfLZYz6mvjh0/MX1mKr7HwUjT43jl8KrVl13+sTVrw3Np89f7T5x+YvLU6MToRJaN9uBbBi73+t8M87+KMbP0t1D4l8HiuHv5weLn1i1DxdevhNMfD/dn/Pn4zT8eajhem+/3meFiLnb9t4V1zNf6TT/ZPa8N/3PH26/+68Nfav69IH4/J68Yrn1/r224snZe33vF+c3PV538+xWNj+sfrSvm98N+PRfemXnjlcXtNV9/fG+Sl79QPH7jb3Lx8lnT+4mMDDR+H4td/4/C7zE/uKrx+S8eH99/rundnEeyvnwJM+H5IZspzo9bxf398tkrW95efB+ebObqhSxzTtNPT48fnTp+5qnx05PTp8enn35m/7ETZ46f3l9779L9X+50+fOP79W1x/ehyZ07stqj/UQxltmlXv/JRw4e2jVx86HJwwfOHD79yMnJU0cOTk8fnDw0ffOBw4cnv9rp8lOH9m7dtmf7rm1jR6YO7d29Z8/2PWNTx0/kyygW1cHOia+MHT+1v3aR6b079my9884dE2PHThya3LtrYmLsTKfL1342jeWXfnLs1OTRA6enjk2OTU89M7l3656dO7d1fPfHYycPT4+OnzpzfPzM9OSp8eJ7GT1dOzn/2dfp8lTD9NrwfNekL/x2ft/tO9P74+be+tqcV1VsMtJ44k/De0F9Y3j77vl8HXP/UJiJf/8HAACA0oi5P3w+xfnX3eV/AAAAKI3wgX/hMyP9+z8AAACUUcz9w2EmFcn/+v/6/xfQ/091bf1//f9M/1//vwP9f/3/dvT/9f97ef36//r/dNZt/f+Y+1dlWSXzPwAAAFRBzP2rw0zkfwAAACiNmPsvCzOR/wEAAKA0Yu6/PMykIvlf/1//3+f/l6//35dlM/r/+v/dQv9f/78d/X/9/15ev/6//j+ddVv/P+b+j4WZVCT/AwAAQBXE3L8mzET+BwAAgNKIuX9tmIn8DwAAAKURc/9ImEmZ8v9dc5+l/1/1/v+A/n8J+/8+/7+g/98d9P/1/9vR/9f/7+X16//r/9NZt/X/Y+7/eJhJmfI/AAAAVFzM/Z8IM5H/AQAAoDRi7v9kmIn8DwAAAKURc/+6MJOK5H/9/6r3/33+f6b/v4z9/7il/r/+v/5/r/f/V4WT9f8b6f/r/+v/6//TXrf1/2PuvyLMpCL5HwAAAKog5v4rw0zkfwAAACiNmPs/FWYi/wMAAEBpxNx/VZhJRfK//r/+v/6//r/P/9f/X076/+Xo/8eT9f8b6f/r/+v/6//TXrf1/2PuvzrMpCL5HwAAAKog5v5rwkzkfwAAACiNmPuvDTOR/wEAAKA0Yu5fH2ZSkfyv/6//r/+v/6//r/+/nPT/9f/b0f/X/+/l9ev/6//TWbf1/2Puvy7MpCL5HwAAAKog5v7rw0zkfwAAACiNmPtvCDOR/wEAAKA0Yu4fDTOpSP7X/9f/1//X/9f/1/9fTvr/+v/t6P/r//fy+vX/9f/prNv6/zH3bwgzqUj+BwAAgCqIuX9jmIn8DwAAAKURc/+NYSbyPwAAAJRGzP2bwkwqkv/1//X/9f/L2v8f0P/X/+8K+v/6/+3o/+v/9/L69f/1/+ms2/r/MfffFGZSkfwPAAAAVRBz/81hJvI/AAAAlEbM/beEmcj/AAAAUBox928OM6lI/tf/1//X/y9r/9/n/+v/dwf9f/3/dvT/9f97ef36//r/dNZt/f+Y+28NM6lI/gcAAIAqiLn/tjAT+R8AAABKI+b+28NM5H8AAAAojZj7x8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O/r/+v+9vH79f/1/Ouu2/n/M/XeEmVQk/wMAAEAVxNy/JcxE/gcAAIDSiLl/PMxE/gcAAIDSiLl/IsykIvlf/1//X/9f/1//X/9/Oen/6/+3o/+v/9/L69f/1/+ns27r/8fcvzXMpCL5HwAAAHrUdQvZOOb+bWEm8j8AAACURsz928NM5H8AAAAojZj7d4SZVCT/6//r/+v/6//r/+v/Lyf9f/3/dur7//kl9f+r0v+f6ydNr6y/oP+v/09n3db/j7n/zjCTiuR/AAAAqIKY+3eGmcj/AAAAUBox9+8KM5md///m4q0KAAAAWEox9+8OM+n5f/+fX6+qUv3/A/env+r/F/T/9f8z/X/9/2Wm/6//347P/69q/39pXOr16//r/9NZt/X/Y+7fE2bS8/kfAAAAiGLu/39hJvI/AAAAlEbM/f8/zET+BwAAgNKIuf+Xwkwqkv8r1f+vo/9f0P/X/8/0//X/l5n+v/5/O/r/+v+9vP7u7f9/e3WW6f/THbqt/x9z/94wk4rkfwAAAKiCmPs/HWYyd/4fXv5VAQAAAEsp5v67wkz8+z8AAACURsz9+8JMKpL/9f/1//X/9f/1//X/l5P+v/5/O4vr/4/q/y/Spe7P9/r6u7f/7/P/6R7d1v+Puf/uMJOK5H8AAACogpj77wkzkf8BAACgNGLuvzfMRP4HAACA0oi5/zNhJhXJ/xet/9+iUKz/r/+f6f/r/+v/6/8vkv5/lfv/Pv9/sS51f34J1p/f5fr/+v90sW7r/8fcf1+YSUXyPwAAAFRBzP2fDTOR/wEAAKA0Yu7/5TAT+R8AAABKI+b++8NMKpL/ff6//r/+v/6//r/+/3LS/9f/b0f/X/+/l9ev/6//T2fd1v+Puf9Xwkwqkv8BAACgCmLufyDMRP4HAACA0oi5/8EwE/kfAAAASiPm/l8NM6lI/tf/1//X/9f/1//X/19O+v/6/+3o/+v/9/L69f/1/+ms2/r/Mff/WphJRfI/AAAAlMLcrx/UxNz/62Em8j8AAACURsz9nwszkf8BAACgNGLufyjMpCL5X/9f/1//X/9f/1//fznp/+v/t6P/r//fy+vX/9f/p7Nu6//H3P/5MJOK5H8AAACogpj7Hw4zkf8BAACgNGLu/0KYifwPAAAAPeDsvLaKuf+LYSYVyf/6//r/+v/6/0vY/1+R6f8n+v+ran/q/+v/t9NL/f9W5+j/6//r/+v/01639f9j7n8kzKQi+R8AAACqIOb+R8NM5H8AAAAojZj7fyPMRP4HAACA0oi5/zfDTCqS//X/9f/1//X/ff6//v9y0v/X/2+nl/r/rej/6//r/+v/01639f9j7v+tMJOK5H8AAACogpj7fzvMRP4HAACA0oi5/3fCTOR/AAAAKI2Y+x8LM6lI/i/6/48e1P8v6P/r/+v/6/9H+v9LQ/9f/78d/X/9/15ev/6//j+ddVv/P+b+L4WZVCT/AwAAQBXE3P+7YSbyPwAAAJRGzP37w0zkfwAAACiNmPsfDzOpSP73+f/6//r/+v8L6f+vanG6/n9B/781/X/9/3b0/8vc/1+xJGu8dOuf6wlrMP1N/1//n866rf8fc/+BMJOK5H8AAACogpj7fy/MRP4HAACA0oi5/2CYifwPAAAApRFz/6Ewk4rkf/1//X/9f/3/Hvn8/6FsOfr/M/r/y60k/f/39P8L+v+N9P99/r/+v/4/7XVb/z/m/skwk4rkfwAAAOh183nX0Zj7D4eZyP8AAABQGjH3Hwkzkf8BAACgNGLufyLMpCL5vxv7/zfo/+v/6/+n69H/9/n/+v/t+fx//f9M//+CXer+fK+vX/9f/5/Ouq3/H3P/VJhJRfI/AAAAVEHM/V8OM5H/AQAAoDRi7v9KmIn8DwAAAD1n5Rynx9x/NMykIvm/G/v/mf6//r/+f7oe/X/9f/3/9vT/9f8z/f8Ldqn7872+/iXt/6/Q/6ecuq3/H3P/sTCTiuR/AAAAqIKY+4+Hmcj/AAAAUBox958IM5H/AQAAoDRi7j8ZZtKT+b9vzt7uXPT/9f+7rf9f37wsdf9/pf6//r/+/1LQ/9f/z/T/L9il7s/3+vp9/r/+P511W/8/5v7fDzPpyfwPAAAAtBJz/6kwE/kfAAAASiPm/ukwE/kfAAAASiPm/v9j7z539LirOI4/thI7kSC8R9wLiPvgNTdAL4npLfQamqmh995b6BB6773XUEKRgrR7zok3Xs/sPvjxzvzP5/PmsGTXO5GN0U+rr+YBccv0/j+926e6cvT/+v+l9f9t3/9/lf4/6f/1/8eh/9f/b/T/Wzvpfn7tz6//1/8zb2n9f+7+B8Ytfv4PAAAAw8jd/6C4xf4HAACAYeTuf3DcYv8DAADAMHL3PyRuabL/r2z/f98DH+n/9f+brfr/s/W1Q/X/3v9/5++r/l//fwxd+//8m1D/v0//v52T7ufX/vz6f/0/85bW/+fuf2jc0mT/AwAAQAe5+x8Wt9j/AAAAMIzc/Q+PW+x/AAAAGEbu/kfELU32v/f/6//X1/8P+v5//X/R/+v/j6Nr/5/0//v0/9s56X5+7c+v/9f/M29p/X/u/kfGLU32PwAAAHSQu//6uMX+BwAAgGHk7r8hbrH/AQAAYBi5+8/FLU32v/5f/6//1//r//X/u6T/1/9P0f8vt/+/Q/8/+/31//p/5i2t/z9342Zv9+9/m377HwAAADrI3f/ouMX+BwAAgGHk7n9M3GL/AwAAwDBy9z82bmmy//X/+n/9v/5f/6//3yX9v/5/iv5/uf2/9//r/+e+Xv/PUSyt/8/d/7i4pcn+BwAAgA5y9z8+brH/AQAAYBi5+58Qt9j/AAAAMIzc/U+MW5rsf/2//l//r//X/+v/d0n/r/+fspL+P36Ji3979P9D9//3v9fM11+y/z+10f/r/wlL6/9z9z8pbmmy/wEAAKCD3P1PjlvsfwAAABhG7v6nxC32PwAAAAwjd/+NcUuT/a//1//r//X/+n/9/y7p//X/U1bS/1+S/n/o/n/2+3v/v/6feUvr/3P3PzVuOTD8zh7z3xIAAABYktz9T4tbmvz8HwAAADrI3f/0uMX+BwAAgGHk7n9G3NJk/+v/5/v/6+8+/+vp/w9/fv2//l//r//X/6+g/7/5kE/U/x+J/r9R/3/txV+v/9f/M29p/X/u/mfGLU32PwAAAHSQu/9ZcYv9DwAAAMPI3f/suMX+BwAAgGHk7n9O3HKfzeaIGfuq6f+9/1//r//X/+v/d0n/v4L+/zD6/yPR/zfq/w+h/9f/M29p/X/u/ufGLX7+DwAAAMPI3f+8uMX+BwAAgGHk7n9+3GL/AwAAwDBy978gbmmy//X/6+n/r9L/j9D/3/OW8/fT/8c/1//r/y8H/b/+f6P/39pJ9/Nrf379v/6feUvr/3P33xS3NNn/AAAA0EHu/hfGLfY/AAAADCN3/4viFvsfAAAAhpG7/8VxS5P9r/9fT//v/f9D9P/e/7/g/v9R8ecx6f8vD/2//n/KZej/b7pO/7+1k+7nT+j5T1+u59f/6/+Zt7T+P3f/S+KWJvsfAAAAOsjd/9K4xf4HAACAYeTuPx+32P8AAAAwjNz9L4tbmux//b/+X/+v/9f/e///Lun/9f9TvP9f/7/m59f/6/+Zt7T+P3f/y+OWJvsfAAAAOsjd/4q4xf4HAACAYeTuf2XcYv8DAADAql3YgeXuf1Xc0mT/6//1//r/S/X/5/X/d6H/1/9vQ/+v/5+i/9f/r/n59f/6f+Ytrf/P3f/quKXJ/gcAAIAOcvffHLfY/wAAADCM3P2viVvsfwAAABhG7v7Xxi1N9r/+X/+v//f+f/2//n+X9P/6/yn6f/3/mp9f/6//Z97S+v/c/a+LW5rsfwAAAOggd//r4xb7HwAAAIaRu/8NcYv9DwAAAMPI3f/GuKXJ/tf/6//1//p//b/+f5f0//r/Kfp//f+an1//r/9n3tL6/9z9b4pbmux/AAAA6CB3/5vjFvsfAAAAhpG7/y1xi/0PAAAAw8jd/9a4pcn+1//r//X/+n/9v/5/l/T/+v8p+n/9/5qfX/+v/2fe0vr/3P1vi1ua7H8AAADoIHf/2+MW+x8AAACGkbv/HXGL/Q8AAADDyN3/zrilyf7X/+v/9f/6f/2//n+X9P/6/ynr6/+vPvCR/l//r//X/zNtaf1/7v53xS1N9j8AAAB0kLv/3XGL/Q8AAADDyN3/nrjF/gcAAIBh5O5/b9zSZP/r/zv3/6fObTb6/43+X/+v/98p/b/+f8r6+v+D9P/6f/2//p9pS+v/c/e/L25psv8BAACgg9z9749b7H8AAAAYRu7+D8Qt9j8AAAAMI3f/B+OWJvtf/9+5//f+f/3/wefU/+v/d0H/r/+fov/X/6/5+Zfc/5/W/7MQJ97/5yfGx7n7PxS3NNn/AAAA0EHu/g/HLfY/AAAADCN3/0fiFvsfAAAAhpG7/6NxS5P9r//X/+v/9f8X9v9nDv8jvkf/r//fhv5f/z9F/6//X/PzL7n/9/5/luLE+/+7fJy7/2NxS5P9DwAAAB3k7v943GL/AwAAwDBy938ibrH/AQAAYBi5+2+JW5rsf/2//l//r//3/n/9/y7p//X/U/T/q+v/r7rwA/2//l//z5yl9f+5+z8ZtzTZ/wAAALBy1x7lk3L3fypusf8BAABgGLn7Px232P8AAAAwjNz9n4lbmuz/bfr/s/r/i+j/D39+/b/+X/+v/19Y/3/Ntt9H/79P/39Qw/7/AP2//l//z5yl9f+5+z8btzTZ/wAAANBB7v7PxS32PwAAAAwjd//n4xb7HwAAAIaRu/8LcUuT/e/9//p//f+x+v8b9P/6f/3/8Sys/9+a/n/f7vr/e2969P9Xx3/Q/4/w/Pp//T/zltb/5+7/YtzSZP8DAABAB7n7b41b7H8AAAAYRu7+L8Ut9j8AAAAMI3f/l+OWJvtf/6//1/97/7/+X/+/S/r/4/b/Z471XOP0/97/v9H/r+759f/6f+Ytrf/P3f+VuKXJ/gcAAIAOcvd/NW6x/wEAAGAYufu/FrfY/wAAADCM3P1fj1ua7H/9v/5f/6//1//r/3dJ/+/9/1P0//r/NT+//l//z7yl9f+5+78RtzTZ/wAAANBB7v5vxi32PwAAAAwjd/+34hb7HwAAAIaRu//bcUuT/a//1//r//X/+v+F9P+nzun/t6D/1/9v9P9bO+l+fu3Pr//X/zNvaf1/7v7vxC1N9j8AAAB0kLv/u3GL/Q8AAADDyN3/vbjF/gcAAIBh5O7/ftzSZP/P9P/VwOn/p+n/N3v/+9H/H/z19f/6f+//1//r/6fp//X/a35+/b/+n3lL6/9z9/8gbrlz+J05/r8lAAAAsCS5+38YtzT5+T8AAAB0kLv/R3GL/Q8AAADDyN3/47ilyf73/n/9v/f/6//1//r/XdL/6/+n6P/1/2t+fv2//p95S+v/c/f/JG5psv8BAACgg9z9P41b7H8AAAAYRu7+n8Ut9j8AAAAMI3f/z+OWJvtf/z9q/3/b3fb/qf5f/6//n3t+/f9u6f/1/1P0//r/NT+//l//z7yl9f+5+38RtzTZ/wAAALB+p2c/I3f/L+MW+x8AAACGkbv/V3GL/Q8AAADDyN3/67ilyf7X/4/a/3v/v/5f/6//Xwb9v/5/iv5f/7/m59f/6/+Zt7T+P3f/b+KWJvsfAAAAOsjd/9u4xf4HAACAYeTu/13cYv8DAADAMHL3/z5uabL/9f+76P9v1f/r//fo//X/+v/19/+n4i8c/f8+/f9B+n/9v/5f/8+0pfX/ufv/ELc02f8AAADQQe7+P8Yt9j8AAAAMI3f/n+IW+x8AAACGkbv/z3FLk/0/Tv8fT7qI/t/7//X/+/T/+n/9//r7/6T/36f/P0j/r//X/+v/mba0/j93/1/ilib7HwAAADrI3f/XuMX+BwAAgGHk7r8tbrH/AQAAYBi5+/8WtzTZ/+P0/0H/r//X/+v/47/X/y+D/l//P0X/r/9f8/Pr//X/zFta/5+7/+9xS5P9DwAAAB3k7v9H3GL/AwAAwDBy9/8zbrH/AQAAYBi5+2+PWy7a/2eu4FNdOfp//f/u+v877rHZ6P/1//p//b/+X/9/afp//f+an1//r/9n3tL6/9v3/r/2ms2/9r7az/8BAABgRLn7/x232P8AAAAwjNz9/4lb7H8AAAAYRu7+/8YtTfa//l//7/3//1f/f93Unwf9v/5f/6//1/9P0//r/9f8/Pp//T/zltb/5+7/XwAAAP//RByXNg==") syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) syz_mount_image$msdos(&(0x7f0000000940), &(0x7f0000001cc0)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xb, 0x0, &(0x7f0000000000)) truncate(&(0x7f0000000040)='./file1\x00', 0x40006) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x1}}, 0x20) 1.443146577s ago: executing program 1 (id=1768): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102392, 0x18ff8) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x8, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x14) r1 = socket$kcm(0x2d, 0x2, 0x0) r2 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000380)={r1}) close(r3) 1.432822508s ago: executing program 4 (id=1769): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000c00)=@delchain={0x1c8, 0x65, 0x20, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0xe}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x8, 0x81}}, @filter_kind_options=@f_bpf={{0x8}, {0x194, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x17c, 0x1, [@m_vlan={0x178, 0x9, 0x0, 0x0, {{0x9}, {0x54, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xaa2}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xc70}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0xfffffff9, 0x8, 0x2000000e, 0x3, 0x40}, 0x3}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x7, 0x3, 0x10000000, 0x5, 0x9}, 0x2}}]}, {0xf9, 0x6, "986ec045006365b68b08d0c39134b4087ab54a2a5d35d886b99a60d4553985bfaac53e110787b47af4df44b6ebd96f384f85d972e512a03edb3ca84857986ff96be9127fd7eb6d2df60f4be3a79bde32ed489e7b21550c31626e5afc84bbfdecc943876141653b52e4f33fe7689b726345a93f2e981865e47278358122f2d0125fc43fa1051cbd344fc9b4a169c010c3bc75b4c117d53ec3f42f75a4da3786cc852aba45f48da01cfb69db2d22bf4a1bcedce3d8f732201b0876b5842c7c646422ae6336f65d7ae8ce080a1533ec748164ece26fd949603480e9a631bced4b26e5a8d84d2fbd544c4b4e55416ba108e2c93bd17b40"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x80}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 853.653926ms ago: executing program 3 (id=1770): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f00000001c0)='./file1\x00', 0x3000046, &(0x7f0000000bc0)={[{@dioread_nolock}, {@data_err_abort}, {@inlinecrypt}, {@noauto_da_alloc}, {@data_err_ignore}, {@nojournal_checksum}, {@errors_remount}, {@grpquota}, {@noblock_validity}, {@user_xattr}, {@dioread_lock}, {@errors_remount}]}, 0x11, 0x553, &(0x7f0000001080)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40) pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfb}], 0x1, 0x5405, 0x0, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000600)={0x9, 0x3fffffffc00, 0x5, 0x7f}) 443.064306ms ago: executing program 1 (id=1771): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x80b00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x805, 0x0) syz_io_uring_setup(0x10c, &(0x7f00000000c0)={0x0, 0x3eac, 0x400, 0x2, 0x105}, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_udp(0xa, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c000200200000001f000000060001000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 430.181907ms ago: executing program 4 (id=1772): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4a372eaf541d002007000000", @ANYRES32=r1, @ANYBLOB, @ANYRES16=r2, @ANYRES32=r2], 0x44}}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000000c0)=[{0x0}], 0x1) 337.260846ms ago: executing program 4 (id=1773): sendmsg(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0a0000000300000008000000"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="070000000400"], 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 89.25999ms ago: executing program 4 (id=1774): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000440)={0x2c, &(0x7f0000000100)={0x20, 0x46e2ce1dfc86f44b, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r1, 0x5b04, 0x0) 88.473601ms ago: executing program 1 (id=1775): bind$unix(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) socket(0x10, 0x2, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000300), 0x10) sendmsg$can_bcm(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x8040}, 0x0) 0s ago: executing program 3 (id=1776): ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x8926, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r1, r0}, 0xc) syz_open_dev$sndctrl(0x0, 0x0, 0x801) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=@HCI_EVENT_PKT={0x4, @HCI_EV_VENDOR={{0xff, 0x1}, "02"}}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0}, 0x94) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r3, 0x40047438, &(0x7f0000000180)=""/246) writev(r3, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) kernel console output (not intermixed with test programs): 7][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 318.329371][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 318.373618][ T9] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 318.392695][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.446962][ T9] usb 5-1: config 0 descriptor?? [ 319.014577][ T9353] random: crng reseeded on system resumption [ 319.157615][ T9] input: HID 0955:7214 Haptics as /devices/virtual/input/input16 [ 319.332683][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 319.335376][ T9] shield 0003:0955:7214.0003: Registered Thunderstrike controller [ 319.355145][ T9] shield 0003:0955:7214.0003: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 319.496282][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.375821][ T970] net_ratelimit: 2 callbacks suppressed [ 320.375841][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 320.526540][ T7971] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -ESHUTDOWN [ 320.577039][ T7971] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 320.634230][ T7971] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 320.661152][ T7971] shield 0003:0955:7214.0003: Failed to output Thunderstrike HOSTCMD request HID report due to -EPIPE [ 320.688731][ T8] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 321.396205][ T8] usb 5-1: device descriptor read/64, error -32 [ 321.405728][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 321.416151][ T7973] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 321.607953][ T7973] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 321.617959][ T7973] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.637956][ T7973] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 321.652590][ T7973] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 321.662727][ T7973] usb 2-1: Manufacturer: syz [ 321.683871][ T7973] usb 2-1: config 0 descriptor?? [ 321.689431][ T8] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 321.817327][ T7973] rc_core: IR keymap rc-hauppauge not found [ 321.823519][ T7973] Registered IR keymap rc-empty [ 321.844180][ T7973] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 321.851603][ T9404] tipc: Enabled bearer , priority 0 [ 321.856160][ T8] usb 5-1: device descriptor read/64, error -71 [ 321.870624][ T7973] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input17 [ 321.874087][ T9404] tipc: Resetting bearer [ 321.911661][ T9403] tipc: Disabling bearer [ 322.157766][ T8] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 322.207839][ T8] usb 5-1: device descriptor read/8, error -71 [ 322.459837][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.487713][ T8] usb 5-1: reset high-speed USB device number 21 using dummy_hcd [ 322.526282][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 322.537989][ T8] usb 5-1: device descriptor read/8, error -71 [ 322.682679][ T9] usb 5-1: USB disconnect, device number 21 [ 322.926193][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 323.102204][ T9] usb 5-1: device descriptor read/64, error -71 [ 323.436017][ T9] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 323.496291][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.546341][ T7973] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 323.626164][ T9] usb 5-1: device descriptor read/64, error -71 [ 323.746250][ T7973] usb 1-1: Using ep0 maxpacket: 32 [ 323.751957][ T9] usb usb5-port1: attempt power cycle [ 323.760909][ T7973] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 323.774251][ T7973] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 323.787284][ T7973] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 323.804520][ T7973] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 323.815262][ T7973] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 323.831863][ T7973] usb 1-1: Product: syz [ 323.837263][ T7973] usb 1-1: Manufacturer: syz [ 323.842314][ T7973] usb 1-1: SerialNumber: syz [ 323.861806][ T9422] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 323.891993][ T7973] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input18 [ 323.924305][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 323.962332][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 323.980219][ T3576] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 323.990813][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.005727][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 324.260419][ T7973] usb 2-1: USB disconnect, device number 11 [ 324.316513][ T7965] usb 1-1: USB disconnect, device number 17 [ 324.316626][ C0] appletouch 1-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 324.461057][ T7965] appletouch 1-1:1.0: input: appletouch disconnected [ 324.523111][ T9435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1021'. [ 324.556570][ T9435] vlan2: entered promiscuous mode [ 324.561884][ T9435] dummy0: entered promiscuous mode [ 324.628355][ T9437] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1020'. [ 324.660872][ T9437] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.670449][ T9437] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.680296][ T9437] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.689642][ T9437] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 324.711588][ T9437] vxlan0: entered promiscuous mode [ 325.086222][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.396269][ T9] usb 4-1: new low-speed USB device number 19 using dummy_hcd [ 325.440435][ T9459] fuse: Unknown parameter '0x0000000000000004' [ 325.586928][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 325.619135][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 325.655762][ T8] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 325.665195][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 325.706817][ T9] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 325.744310][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 325.765103][ T9] usb 4-1: config 0 descriptor?? [ 325.813765][ T9] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 325.887569][ T8] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 325.901380][ T8] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 325.919104][ T9464] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1031'. [ 325.931353][ T8] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 325.949727][ T9464] vlan2: entered promiscuous mode [ 325.955130][ T8] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 325.964130][ T9464] dummy0: entered promiscuous mode [ 325.971392][ T8] usb 5-1: Manufacturer: syz [ 326.020413][ T8] usb 5-1: config 0 descriptor?? [ 326.142074][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 326.206061][ T8] rc_core: IR keymap rc-hauppauge not found [ 326.223919][ T8] Registered IR keymap rc-empty [ 326.270450][ T8] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 326.340137][ T8] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input19 [ 327.176032][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.206332][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.444398][ T7973] usb 4-1: USB disconnect, device number 19 [ 328.492898][ T8] usb 5-1: USB disconnect, device number 25 [ 328.606845][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 328.802642][ T9489] fuse: Unknown parameter '0x0000000000000004' [ 329.048188][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 329.246381][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.263043][ T8] usb 5-1: config 0 has no interfaces? [ 329.320276][ T8] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 329.377929][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.413736][ T8] usb 5-1: Product: syz [ 329.425814][ T8] usb 5-1: Manufacturer: syz [ 329.437309][ T8] usb 5-1: SerialNumber: syz [ 329.450627][ T8] usb 5-1: config 0 descriptor?? [ 329.493425][ T7965] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 329.700162][ T7965] usb 2-1: config index 0 descriptor too short (expected 23569, got 27) [ 329.720036][ T7965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 329.723092][ T27] kauditd_printk_skb: 32 callbacks suppressed [ 329.723110][ T27] audit: type=1326 audit(1760087053.423:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9481 comm="syz.4.1035" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad0f8eec9 code=0x0 [ 329.759776][ C0] vkms_vblank_simulate: vblank timer overrun [ 329.773443][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.783730][ T7967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.799094][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 329.809113][ T7965] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 329.821835][ T7965] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 329.833626][ T7965] usb 2-1: Manufacturer: syz [ 329.836531][ T8] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 329.848750][ T7965] usb 2-1: config 0 descriptor?? [ 329.913205][ T7973] usb 5-1: USB disconnect, device number 26 [ 330.026530][ T8] usb 4-1: Using ep0 maxpacket: 32 [ 330.044579][ T8] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 330.063713][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.072130][ T8] usb 4-1: Product: syz [ 330.077640][ T8] usb 4-1: Manufacturer: syz [ 330.082468][ T8] usb 4-1: SerialNumber: syz [ 330.091868][ T8] usb 4-1: config 0 descriptor?? [ 330.104809][ T8] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 330.106383][ T7965] rc_core: IR keymap rc-hauppauge not found [ 330.136756][ T9514] fuse: Unknown parameter 'Name: syz.0.1046 [ 330.136756][ T9514] Umask: 0077 [ 330.136756][ T9514] State: R (running) [ 330.136756][ T9514] Tgid: 818 [ 330.136756][ T9514] Ngid: 0 [ 330.136756][ T9514] Pid: 819 [ 330.136756][ T9514] PPid: 1 [ 330.136756][ T9514] TracerPid: 0 [ 330.136756][ T9514] Uid: 0 0 0 0 [ 330.136756][ T9514] Gid: 0 0 0 0 [ 330.136756][ T9514] FDSize: 256 [ 330.136756][ T9514] Groups: 0 10 [ 330.136756][ T9514] NStgid: 818 [ 330.136756][ T9514] NSpid: 819 [ 330.136756][ T9514] NSpgid: 818 [ 330.136756][ T9514] NSsid: 0 [ 330.136756][ T9514] Kthread: 0 [ 330.136756][ T9514] VmPeak: 102012 kB [ 330.136756][ T9514] VmSize: 102012 kB [ 330.136756][ T9514] VmLck: 0 kB [ 330.136756][ T9514] VmPin: 0 kB [ 330.136756][ T9514] VmHWM: 24144 kB [ 330.136756][ T9514] VmRSS: 24144 kB [ 330.136756][ T9514] RssAnon: 1320 kB [ 330.136756][ T9514] RssFile: 22824 kB [ 330.136756][ T9514] RssShmem: 0 kB [ 330.136756][ T9514] VmData: 36588 kB [ 330.136756][ T9514] VmStk: 132 kB [ 330.136756][ T9514] VmExe: 1676 kB [ 330.136756][ T9514] VmLib: 8 kB [ 330.136756][ T9514] VmPTE: 128 kB [ 330.136756][ T9514] VmSwap: 0 kB [ 330.136756][ T9514] HugetlbPages: 0 kB [ 330.136756][ T9514] CoreDumping: 0 [ 330.136756][ T9514] THP_enabled: 1 [ 330.136756][ T9514] untag_mask: 0xffffffffffffffff [ 330.136756][ T9514] Threads: 2 [ 330.136756][ T9514] SigQ: 0/13125 [ 330.136756][ T9514] SigPnd: 0000000000000000 [ 330.136756][ T9514] ShdPnd: 0000000000000000 [ 330.136756][ T9514] SigBlk: 0000000000000000 [ 330.136756][ T9514] SigIgn: fffffffefffaba35 [ 330.136756][ T9514] SigCgt: 0000000100010440 [ 330.136756][ T9514] CapInh: 0000000000000000 [ 330.136756][ T9514] CapPrm: 000001ffff77ffff [ 330.136756][ T9514] CapEff: 000001ffff77ffff [ 330.136756][ T9514] CapBnd: 000001ffffffffff [ 330.136756][ T9514] CapAmb: 0000000000000000 [ 330.136756][ T9514] NoNewPrivs: 0 [ 330.323597][ T7965] Registered IR keymap rc-empty [ 330.329626][ T7965] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 330.345333][ T7965] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input20 [ 330.390407][ T9516] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1046'. [ 330.855937][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.192546][ T9525] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1049'. [ 331.449479][ T9528] rtc_cmos 00:00: Alarms can be up to one day in the future [ 331.646488][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 331.893622][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 332.264014][ T7965] usb 2-1: USB disconnect, device number 12 [ 332.560253][ T9539] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1053'. [ 332.638940][ T9539] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1053'. [ 332.717827][ T7973] usb 4-1: USB disconnect, device number 20 [ 332.829621][ T9542] can0: slcan on ttyS3. [ 332.929225][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 333.005545][ T7965] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 333.036485][ T9540] can0 (unregistered): slcan off ttyS3. [ 333.256155][ T7965] usb 1-1: Using ep0 maxpacket: 16 [ 333.291509][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 333.367628][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 333.409686][ T7965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 333.549526][ T7965] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 333.576164][ T7965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.639216][ T7965] usb 1-1: config 0 descriptor?? [ 333.976707][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.215834][ T9544] random: crng reseeded on system resumption [ 334.354188][ T7965] input: HID 0955:7214 Haptics as /devices/virtual/input/input21 [ 334.513443][ T7965] shield 0003:0955:7214.0004: Registered Thunderstrike controller [ 334.697633][ T787] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 334.706982][ T7965] shield 0003:0955:7214.0004: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 335.009591][ T7967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.489073][ T11] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.499682][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.538100][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 335.780865][ T970] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 335.781180][ T7973] usb 1-1: USB disconnect, device number 18 [ 335.848219][ T970] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 335.907526][ T970] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 336.025614][ T970] shield 0003:0955:7214.0004: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 336.608884][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.659912][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 337.726499][ T9] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 338.685738][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 339.755945][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.766208][ T7973] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 340.776280][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.247679][ T992] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.256737][ T970] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.268280][ T7965] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 341.584257][ T9680] fuse: Unknown parameter 'fd0x0000000000000004' [ 341.740719][ T9685] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1096'. [ 341.801526][ T9685] vlan2: entered promiscuous mode [ 341.909584][ T9686] netlink: 'syz.3.1095': attribute type 10 has an invalid length. [ 341.957501][ T9686] team0: Port device netdevsim0 added [ 342.286514][ T7967] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 342.411056][ T9698] QAT: Device 253 not found [ 342.498251][ T9700] sch_tbf: burst 1821 is lower than device lo mtu (65550) ! [ 344.386669][ T9724] tipc: Enabled bearer , priority 0 [ 344.407156][ T9724] syzkaller0: entered promiscuous mode [ 344.414480][ T9724] syzkaller0: entered allmulticast mode [ 344.498723][ T9724] tipc: Resetting bearer [ 344.524288][ T9722] tipc: Resetting bearer [ 344.591196][ T9722] tipc: Disabling bearer [ 344.848468][ T9] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 345.052398][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 345.072590][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 345.127109][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 345.136891][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 345.149436][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 345.214306][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 345.250131][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 345.268389][ T9] usb 2-1: Product: syz [ 345.284692][ T9] usb 2-1: Manufacturer: syz [ 345.356296][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 345.363909][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 345.396429][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 345.451673][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 348.104537][ T787] usb 2-1: USB disconnect, device number 13 [ 348.216405][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 348.468769][ T9] usb 1-1: config 0 has no interfaces? [ 348.523990][ T9] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 348.581211][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 348.603845][ T9] usb 1-1: Product: syz [ 348.614852][ T9] usb 1-1: Manufacturer: syz [ 348.635077][ T9] usb 1-1: SerialNumber: syz [ 348.660321][ T9] usb 1-1: config 0 descriptor?? [ 348.828295][ T9793] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1131'. [ 348.844251][ T9793] 8021q: VLANs not supported on caif0 [ 349.018411][ T27] audit: type=1326 audit(1760087072.713:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9772 comm="syz.0.1124" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f410af8eec9 code=0x0 [ 349.169074][ T7965] usb 1-1: USB disconnect, device number 19 [ 349.617902][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 349.828800][ T9] usb 4-1: device descriptor read/64, error -71 [ 350.116185][ T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 350.303332][ T9] usb 4-1: device descriptor read/64, error -71 [ 350.441215][ T9] usb usb4-port1: attempt power cycle [ 350.866731][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 350.946895][ T9] usb 4-1: device descriptor read/8, error -71 [ 351.249693][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 351.301304][ T9] usb 4-1: device descriptor read/8, error -71 [ 351.426333][ T9] usb usb4-port1: unable to enumerate USB device [ 351.525728][ T970] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 351.718808][ T970] usb 5-1: config 0 has no interfaces? [ 351.730820][ T970] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 351.744184][ T970] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 351.756222][ T970] usb 5-1: Manufacturer: syz [ 351.772231][ T970] usb 5-1: config 0 descriptor?? [ 351.835781][ T7965] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 352.025685][ T7965] usb 1-1: Using ep0 maxpacket: 16 [ 352.033387][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 352.061605][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 352.085584][ T7965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 352.119278][ T7965] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 352.141442][ T7965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.176908][ T7965] usb 1-1: config 0 descriptor?? [ 352.195939][ T970] usb 5-1: USB disconnect, device number 27 [ 352.626086][ T9834] random: crng reseeded on system resumption [ 352.710726][ T7965] input: HID 0955:7214 Haptics as /devices/virtual/input/input22 [ 352.812614][ T7965] shield 0003:0955:7214.0005: Registered Thunderstrike controller [ 352.836732][ T7965] shield 0003:0955:7214.0005: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 353.148393][ T7966] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 353.148743][ T7973] usb 1-1: USB disconnect, device number 20 [ 353.200185][ T7966] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.245853][ T7966] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.275634][ T7966] shield 0003:0955:7214.0005: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 353.738601][ T27] audit: type=1326 audit(1760087077.443:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9853 comm="syz.4.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad0f8eec9 code=0x0 [ 354.876108][ T787] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 355.156342][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 355.183513][ T787] usb 2-1: unable to get BOS descriptor or descriptor too short [ 355.198385][ T787] usb 2-1: config 4 interface 0 has no altsetting 0 [ 355.210585][ T787] usb 2-1: string descriptor 0 read error: -22 [ 355.227041][ T787] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 355.272639][ T9882] tipc: Enabled bearer , priority 0 [ 355.281967][ T787] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3 [ 355.319611][ T9882] syzkaller0: entered promiscuous mode [ 355.334592][ T787] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 355.360256][ T787] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 355.374529][ T9882] syzkaller0: entered allmulticast mode [ 355.393835][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 355.406202][ T787] usb 2-1: media controller created [ 355.463570][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 355.529703][ T9882] tipc: Resetting bearer [ 355.632719][ T9881] tipc: Resetting bearer [ 355.673813][ T9881] tipc: Disabling bearer [ 356.609324][ T787] zl10353_read_register: readreg error (reg=127, ret==0) [ 356.855039][ T787] usb 2-1: USB disconnect, device number 14 [ 356.975692][ T970] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 357.186319][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 357.212703][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 357.236656][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 357.249639][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 357.263331][ T970] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 357.274916][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.295029][ T970] usb 1-1: config 0 descriptor?? [ 357.545007][ T9904] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 357.734201][ T9894] random: crng reseeded on system resumption [ 358.816636][ T970] usbhid 1-1:0.0: can't add hid device: -71 [ 358.828508][ T970] usbhid: probe of 1-1:0.0 failed with error -71 [ 358.851029][ T970] usb 1-1: USB disconnect, device number 21 [ 359.845574][ T970] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 360.101739][ T970] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 360.150576][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 360.162686][ T970] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 360.185296][ T970] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 360.194071][ T970] usb 1-1: Manufacturer: syz [ 360.204513][ T970] usb 1-1: config 0 descriptor?? [ 360.299352][ T970] rc_core: IR keymap rc-hauppauge not found [ 360.306318][ T970] Registered IR keymap rc-empty [ 360.312757][ T970] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 360.341926][ T970] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input23 [ 360.428782][ T7973] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 360.646212][ T7973] usb 5-1: Using ep0 maxpacket: 32 [ 360.664158][ T7973] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 360.687833][ T7973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.696036][ T970] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 360.717730][ T7973] usb 5-1: Product: syz [ 360.742982][ T7973] usb 5-1: Manufacturer: syz [ 360.753339][ T7973] usb 5-1: SerialNumber: syz [ 360.773048][ T7973] usb 5-1: config 0 descriptor?? [ 360.797190][ T7973] ati_remote 5-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 360.979887][ T9961] geneve2: entered allmulticast mode [ 361.003388][ T27] audit: type=1326 audit(1760087084.703:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc038eec9 code=0x7ffc0000 [ 361.070244][ T27] audit: type=1326 audit(1760087084.703:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.121828][ T27] audit: type=1326 audit(1760087084.703:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.158636][ T27] audit: type=1326 audit(1760087084.733:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.186787][ T27] audit: type=1326 audit(1760087084.733:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.211535][ T27] audit: type=1326 audit(1760087084.733:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fddc038eec9 code=0x7ffc0000 [ 361.251880][ T27] audit: type=1326 audit(1760087084.733:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.358333][ T27] audit: type=1326 audit(1760087084.733:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.440144][ T27] audit: type=1326 audit(1760087084.733:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 361.533727][ T27] audit: type=1326 audit(1760087084.733:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9946 comm="syz.1.1178" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fddc032af79 code=0x7ffc0000 [ 362.627438][ T7973] usb 1-1: USB disconnect, device number 22 [ 363.362238][ T7965] usb 5-1: USB disconnect, device number 28 [ 364.342763][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1192'. [ 364.462023][ T9994] vlan2: entered promiscuous mode [ 365.341359][T10004] veth1_to_bridge: entered promiscuous mode [ 365.383287][T10003] veth1_to_bridge: left promiscuous mode [ 365.595214][T10009] tipc: Enabled bearer , priority 0 [ 365.699957][T10009] tipc: Resetting bearer [ 365.737301][T10008] tipc: Disabling bearer [ 365.905863][ T970] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 366.105527][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 366.118899][ T970] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 366.133011][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 366.144990][ T970] usb 4-1: Product: syz [ 366.152464][ T970] usb 4-1: Manufacturer: syz [ 366.160324][ T970] usb 4-1: SerialNumber: syz [ 366.181523][ T970] usb 4-1: config 0 descriptor?? [ 366.193871][ T970] ati_remote 4-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 366.531456][T10030] syz.0.1202 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 366.554363][T10030] random: crng reseeded on system resumption [ 366.738825][T10035] bridge3: entered promiscuous mode [ 368.036096][ T787] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 368.228094][ T787] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 368.336849][ T787] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 368.471238][ T787] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 368.573074][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 368.590939][ T787] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 368.608151][ T787] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 368.623049][ T787] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 368.640233][ T787] usb 2-1: Product: syz [ 368.725213][ T787] usb 2-1: Manufacturer: syz [ 368.795123][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 368.832749][ T7973] usb 4-1: USB disconnect, device number 25 [ 368.860286][ T787] cdc_wdm 2-1:1.0: skipping garbage [ 368.912060][ T787] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 368.943839][ T787] cdc_wdm 2-1:1.0: Unknown control protocol [ 369.110968][T10047] tipc: Enabled bearer , priority 0 [ 369.150179][T10047] syzkaller0: entered promiscuous mode [ 369.164990][T10047] syzkaller0: entered allmulticast mode [ 369.230798][T10047] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 369.263204][T10047] tipc: Resetting bearer [ 369.281562][T10046] tipc: Resetting bearer [ 369.351828][T10046] tipc: Disabling bearer [ 369.968155][ T787] IPVS: starting estimator thread 0... [ 370.001762][T10051] usb usb7: usbfs: process 10051 (syz.3.1211) did not claim interface 0 before use [ 370.177632][T10054] IPVS: using max 26 ests per chain, 62400 per kthread [ 370.596424][T10056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 370.836320][ T787] usb 2-1: USB disconnect, device number 16 [ 371.366001][ T787] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 371.598128][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 371.620808][ T787] usb 1-1: config 0 has an invalid interface number: 31 but max is 0 [ 371.650618][ T787] usb 1-1: config 0 has no interface number 0 [ 371.680607][T10088] bridge2: entered promiscuous mode [ 371.688648][ T787] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 371.711266][ T787] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.733298][ T787] usb 1-1: Product: syz [ 371.751259][ T787] usb 1-1: Manufacturer: syz [ 371.766017][ T787] usb 1-1: SerialNumber: syz [ 371.805299][ T787] usb 1-1: config 0 descriptor?? [ 372.114313][ T787] usb 1-1: Found UVC 0.04 device syz (046d:08c3) [ 372.134755][ T787] uvcvideo 1-1:0.31: Entity type for entity Output 6 was not initialized! [ 372.167517][ T787] usb 1-1: Failed to create links for entity 5 [ 372.202627][ T787] usb 1-1: Failed to register entities (-22). [ 372.224389][ T787] usb 1-1: USB disconnect, device number 23 [ 374.225497][ T970] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 374.395658][ T970] usb 5-1: device descriptor read/64, error -71 [ 374.596122][ T9] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 374.685623][ T970] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 374.855517][ T970] usb 5-1: device descriptor read/64, error -71 [ 374.859500][ T9] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 374.875289][ T9] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 374.892036][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 374.918226][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 374.941944][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 374.973321][ T9] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 374.988300][ T9] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 375.000679][ T9] usb 2-1: Product: syz [ 375.010544][ T9] usb 2-1: Manufacturer: syz [ 375.025789][ T970] usb usb5-port1: attempt power cycle [ 375.048639][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 375.058611][ T9] cdc_wdm 2-1:1.0: skipping garbage [ 375.067749][ T9] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 375.073750][ T9] cdc_wdm 2-1:1.0: Unknown control protocol [ 375.436166][ T970] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 375.501309][ T970] usb 5-1: device descriptor read/8, error -71 [ 375.808213][ T970] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 375.856383][ T970] usb 5-1: device descriptor read/8, error -71 [ 375.976500][ T970] usb usb5-port1: unable to enumerate USB device [ 376.973751][T10114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'. [ 376.990116][T10114] 8021q: VLANs not supported on nlmon0 [ 377.504739][ T7973] usb 2-1: USB disconnect, device number 17 [ 377.728448][T10132] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1234'. [ 378.666236][ T7973] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 378.819231][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1241'. [ 378.910647][ T7973] usb 1-1: config 0 has no interfaces? [ 378.919168][ T7973] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 378.939185][ T7973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.984458][ T7973] usb 1-1: Product: syz [ 379.017676][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.024835][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.070277][ T7973] usb 1-1: Manufacturer: syz [ 379.086011][ T7973] usb 1-1: SerialNumber: syz [ 379.101177][ T7973] usb 1-1: config 0 descriptor?? [ 379.235623][ T970] usb 5-1: new low-speed USB device number 33 using dummy_hcd [ 379.410354][ T27] kauditd_printk_skb: 346 callbacks suppressed [ 379.410374][ T27] audit: type=1326 audit(1760087103.093:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10142 comm="syz.0.1239" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f410af8eec9 code=0x0 [ 379.480617][ T970] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 379.501255][ T970] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 379.547806][ T970] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 379.568292][ T970] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.657251][ T970] usb 5-1: config 0 descriptor?? [ 379.678314][ T970] qmi_wwan: probe of 5-1:0.0 failed with error -22 [ 379.720305][ T7965] usb 1-1: USB disconnect, device number 24 [ 379.890185][ T970] usb 5-1: USB disconnect, device number 33 [ 380.016187][ T7973] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 380.156373][ T7965] IPVS: starting estimator thread 0... [ 380.240823][ T7973] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 380.266693][ T7973] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 380.296870][T10168] IPVS: using max 26 ests per chain, 62400 per kthread [ 380.441451][ T7973] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 380.477314][ T7973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 380.552811][ T7973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 380.631782][ T7973] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 380.720239][ T7973] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 380.729949][ T7973] usb 4-1: Product: syz [ 380.734867][ T7973] usb 4-1: Manufacturer: syz [ 380.752673][ T7973] cdc_wdm 4-1:1.0: skipping garbage [ 380.759901][ T7973] cdc_wdm 4-1:1.0: skipping garbage [ 380.773244][ T7973] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 380.789992][ T7973] cdc_wdm 4-1:1.0: Unknown control protocol [ 380.955703][ T970] usb 2-1: new low-speed USB device number 18 using dummy_hcd [ 381.182988][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 381.206328][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 381.217697][ T970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 381.228775][ T970] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 381.246943][ T970] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 381.257972][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.298445][ T970] usb 2-1: config 0 descriptor?? [ 381.329535][T10175] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 382.011355][ T970] usbhid 2-1:0.0: can't add hid device: -71 [ 382.036339][ T970] usbhid: probe of 2-1:0.0 failed with error -71 [ 382.054660][ T970] usb 2-1: USB disconnect, device number 18 [ 383.280450][ T7966] usb 4-1: USB disconnect, device number 26 [ 383.837383][ T7966] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 384.045540][ T7966] usb 4-1: Using ep0 maxpacket: 16 [ 384.054661][ T7966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 384.066904][ T7966] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 384.076818][ T7966] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 384.090804][ T7966] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 384.102494][ T7966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.118026][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1258'. [ 384.122210][ T7966] usb 4-1: config 0 descriptor?? [ 384.155616][ T970] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 384.335951][ T970] usb 2-1: device descriptor read/64, error -71 [ 384.609650][ T7966] input: HID 0955:7214 Haptics as /devices/virtual/input/input24 [ 384.666123][ T970] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 384.678002][ T7966] shield 0003:0955:7214.0006: Registered Thunderstrike controller [ 384.744014][ T7966] shield 0003:0955:7214.0006: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 384.843796][ T7965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 384.855454][ T7966] usb 4-1: USB disconnect, device number 27 [ 384.875977][ T7965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 384.887998][ T970] usb 2-1: device descriptor read/64, error -71 [ 384.987059][ T7965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 385.021510][ T7965] shield 0003:0955:7214.0006: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 385.035709][ T970] usb usb2-port1: attempt power cycle [ 385.495663][ T970] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 385.515220][T10220] tipc: Enabled bearer , priority 0 [ 385.544745][T10220] syzkaller0: entered promiscuous mode [ 385.552626][T10220] syzkaller0: entered allmulticast mode [ 385.555855][ T970] usb 2-1: device descriptor read/8, error -71 [ 385.620071][T10220] tipc: Resetting bearer [ 385.642061][T10219] tipc: Resetting bearer [ 385.707301][T10219] tipc: Disabling bearer [ 385.835538][ T970] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 385.895067][T10224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1263'. [ 385.927558][ T970] usb 2-1: device descriptor read/8, error -71 [ 386.130343][ T970] usb usb2-port1: unable to enumerate USB device [ 387.385658][ T7966] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 387.568716][ T7966] usb 2-1: device descriptor read/64, error -71 [ 387.865640][ T7966] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 387.995522][ T970] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 388.076207][ T7966] usb 2-1: device descriptor read/64, error -71 [ 388.185508][ T970] usb 1-1: Using ep0 maxpacket: 16 [ 388.198460][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 388.217626][ T970] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 388.229542][ T970] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 388.243055][ T7966] usb usb2-port1: attempt power cycle [ 388.252108][ T970] usb 1-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 388.262139][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.290248][ T970] usb 1-1: config 0 descriptor?? [ 388.665625][ T7966] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 388.716906][ T7966] usb 2-1: device descriptor read/8, error -71 [ 388.746116][ T787] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 388.766633][ T970] input: HID 0955:7214 Haptics as /devices/virtual/input/input25 [ 388.843418][ T970] shield 0003:0955:7214.0007: Registered Thunderstrike controller [ 388.852986][ T970] shield 0003:0955:7214.0007: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.0-1/input0 [ 388.963127][ T970] usb 1-1: USB disconnect, device number 25 [ 388.985628][ T7965] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 388.997963][ T7966] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 389.021782][ T7965] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.050663][ T7965] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.068357][ T7966] usb 2-1: device descriptor read/8, error -71 [ 389.083575][ T7965] shield 0003:0955:7214.0007: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 389.139264][ T787] usb 5-1: config 0 has no interfaces? [ 389.195718][ T7966] usb usb2-port1: unable to enumerate USB device [ 389.296387][ T7973] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 389.336231][ T787] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 389.350670][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.359543][ T787] usb 5-1: Product: syz [ 389.364066][ T787] usb 5-1: Manufacturer: syz [ 389.369507][ T787] usb 5-1: SerialNumber: syz [ 389.381987][ T787] usb 5-1: config 0 descriptor?? [ 389.466322][ T7973] usb 4-1: device descriptor read/64, error -71 [ 389.739409][ T7973] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 389.773564][ T27] audit: type=1326 audit(1760087113.473:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10261 comm="syz.4.1274" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad0f8eec9 code=0x0 [ 389.914264][ T7973] usb 4-1: device descriptor read/64, error -71 [ 389.933494][ T970] usb 5-1: USB disconnect, device number 34 [ 390.036154][ T7973] usb usb4-port1: attempt power cycle [ 390.456150][ T7973] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 390.496938][ T7973] usb 4-1: device descriptor read/8, error -71 [ 390.766224][ T7973] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 390.811352][ T7973] usb 4-1: device descriptor read/8, error -71 [ 390.942700][ T7973] usb usb4-port1: unable to enumerate USB device [ 392.537509][ T8] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 392.675783][ T7966] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 392.696310][ T8] usb 1-1: device descriptor read/64, error -71 [ 392.711391][ T787] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 392.865976][ T7966] usb 4-1: device descriptor read/64, error -71 [ 392.906196][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 392.921363][ T787] usb 5-1: unable to get BOS descriptor or descriptor too short [ 392.936008][ T787] usb 5-1: config 4 interface 0 has no altsetting 0 [ 392.952153][ T787] usb 5-1: string descriptor 0 read error: -22 [ 392.964302][ T787] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 392.975997][ T8] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 393.000681][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.044687][ T787] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 393.094867][ T787] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 393.107358][ T787] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 393.114621][ T787] usb 5-1: media controller created [ 393.156084][ T8] usb 1-1: device descriptor read/64, error -71 [ 393.176770][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 393.195680][ T7966] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 393.286495][ T8] usb usb1-port1: attempt power cycle [ 393.355645][ T7966] usb 4-1: device descriptor read/64, error -71 [ 393.500066][ T7966] usb usb4-port1: attempt power cycle [ 393.706157][ T8] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 393.758231][ T8] usb 1-1: device descriptor read/8, error -71 [ 393.945995][ T7966] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 393.977987][ T7966] usb 4-1: device descriptor read/8, error -71 [ 394.036054][ T8] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 394.067000][ T8] usb 1-1: device descriptor read/8, error -71 [ 394.185781][ T8] usb usb1-port1: unable to enumerate USB device [ 394.252289][ T7966] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 394.290613][ T7966] usb 4-1: device descriptor read/8, error -71 [ 394.393384][ T787] usb 5-1: USB disconnect, device number 35 [ 394.426977][ T7966] usb usb4-port1: unable to enumerate USB device [ 394.841070][T10332] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1295'. [ 394.862487][ T5802] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 395.886431][ T787] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 396.086321][ T787] usb 4-1: Using ep0 maxpacket: 8 [ 396.108278][ T787] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 396.130295][ T787] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 396.175061][ T787] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 396.192767][ T787] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 396.213240][ T787] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.233809][ T787] usbtmc 4-1:16.0: bulk endpoints not found [ 397.186131][ T9] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 397.213951][ T7966] usb 4-1: USB disconnect, device number 36 [ 397.376210][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 397.383530][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 397.396296][ T9] usb 5-1: config 0 has no interfaces? [ 397.402051][ T9] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 397.413621][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 397.432383][ T9] usb 5-1: config 0 descriptor?? [ 397.667218][T10372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 397.679563][T10372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 397.805682][ T7966] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 397.995780][ T7966] usb 4-1: Using ep0 maxpacket: 8 [ 398.008656][ T7966] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 398.027023][ T7966] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 398.036684][ T7966] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.045269][ T7966] usb 4-1: Product: syz [ 398.050852][ T7966] usb 4-1: Manufacturer: syz [ 398.056162][ T7966] usb 4-1: SerialNumber: syz [ 398.064302][ T7966] usb 4-1: config 0 descriptor?? [ 398.077751][ T7966] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 398.086868][ T7966] usb 4-1: setting power ON [ 398.091676][ T7966] dvb-usb: bulk message failed: -22 (2/0) [ 398.106383][ T7966] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 398.117208][ T7966] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 398.128905][ T7966] usb 4-1: media controller created [ 398.155734][ T7966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 398.178504][ T7966] usb 4-1: selecting invalid altsetting 6 [ 398.184431][ T7966] usb 4-1: digital interface selection failed (-22) [ 398.192358][ T7966] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 398.203484][ T7966] usb 4-1: setting power OFF [ 398.210944][ T970] usb 5-1: USB disconnect, device number 36 [ 398.246976][ T7966] dvb-usb: bulk message failed: -22 (2/0) [ 398.270609][ T7966] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 398.287936][T10384] dvb-usb: bulk message failed: -22 (3/0) [ 398.293969][ T7966] (NULL device *): no alternate interface [ 398.302564][T10384] dvb-usb: bulk message failed: -22 (4/0) [ 398.327241][T10384] cxusb: i2c read failed [ 398.371285][ T7966] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 398.403156][ T7966] usb 4-1: USB disconnect, device number 37 [ 399.626129][ T787] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 399.818999][ T787] usb 5-1: Using ep0 maxpacket: 8 [ 399.827401][ T787] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 17 [ 399.844028][ T787] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07 [ 399.854479][ T787] usb 5-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60 [ 399.864578][ T787] usb 5-1: Product: syz [ 399.869537][ T787] usb 5-1: Manufacturer: syz [ 399.874457][ T787] usb 5-1: SerialNumber: syz [ 399.883957][ T787] usb 5-1: config 0 descriptor?? [ 400.117253][ T787] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 400.495662][ T970] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 400.715783][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 400.730181][ T970] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 400.762130][ T970] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 400.785186][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 400.798784][ T970] usb 4-1: Product: syz [ 400.803043][ T970] usb 4-1: Manufacturer: syz [ 400.808151][ T970] usb 4-1: SerialNumber: syz [ 400.816095][ T970] usb 4-1: config 0 descriptor?? [ 400.828883][ T970] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 400.837320][ T970] usb 4-1: setting power ON [ 400.841985][ T970] dvb-usb: bulk message failed: -22 (2/0) [ 400.853492][ T970] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 400.864418][ T970] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 400.873521][ T970] usb 4-1: media controller created [ 400.902505][ T970] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 400.935053][ T970] usb 4-1: selecting invalid altsetting 6 [ 400.941342][ T970] usb 4-1: digital interface selection failed (-22) [ 400.948342][ T970] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 400.958543][ T970] usb 4-1: setting power OFF [ 400.963886][ T970] dvb-usb: bulk message failed: -22 (2/0) [ 400.970157][ T970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 400.980549][ T970] (NULL device *): no alternate interface [ 401.039505][ T970] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 401.071754][ T787] gspca_sunplus: reg_w_riv err -71 [ 401.077682][ T787] sunplus: probe of 5-1:0.0 failed with error -71 [ 401.079472][ T970] usb 4-1: USB disconnect, device number 38 [ 401.126396][ T787] usb 5-1: USB disconnect, device number 37 [ 401.626186][ T787] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 401.826322][ T787] usb 2-1: Using ep0 maxpacket: 8 [ 401.834064][ T787] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 401.843094][ T787] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.853599][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.864203][ T787] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.875041][ T787] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.889653][ T787] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.898924][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.035512][ T7965] usb 5-1: new low-speed USB device number 38 using dummy_hcd [ 402.036122][ T7973] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 402.120304][ T787] usb 2-1: usb_control_msg returned -32 [ 402.127386][ T787] usbtmc 2-1:16.0: can't read capabilities [ 402.196190][ T7965] usb 5-1: device descriptor read/64, error -71 [ 402.228468][ T7973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 402.240256][ T7973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 402.250855][ T7973] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 402.262055][ T7973] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 402.275842][ T7973] usb 4-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 402.284947][ T7973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.297217][ T7973] usb 4-1: config 0 descriptor?? [ 402.307363][T10450] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 402.465861][ T7965] usb 5-1: new low-speed USB device number 39 using dummy_hcd [ 402.498215][T10457] usbtmc 2-1:16.0: usb_control_msg returned -32 [ 402.507326][ T7966] usb 2-1: USB disconnect, device number 27 [ 402.553675][ T7973] usbhid 4-1:0.0: can't add hid device: -71 [ 402.570036][ T7973] usbhid: probe of 4-1:0.0 failed with error -71 [ 402.586372][ T7973] usb 4-1: USB disconnect, device number 39 [ 402.636791][ T7965] usb 5-1: device descriptor read/64, error -71 [ 402.755718][ T7965] usb usb5-port1: attempt power cycle [ 403.220323][ T7965] usb 5-1: new low-speed USB device number 40 using dummy_hcd [ 403.278512][ T7965] usb 5-1: device descriptor read/8, error -71 [ 403.326811][T10463] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 403.595775][ T7965] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 403.671542][ T7965] usb 5-1: device descriptor read/8, error -71 [ 403.816959][ T7965] usb usb5-port1: unable to enumerate USB device [ 403.946108][ T7973] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 404.136023][ T7973] usb 4-1: Using ep0 maxpacket: 8 [ 404.159146][ T7973] usb 4-1: config index 0 descriptor too short (expected 30, got 18) [ 404.204453][ T7973] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 404.224617][ T7973] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.246216][ T7973] usb 4-1: Product: syz [ 404.250904][ T7973] usb 4-1: Manufacturer: syz [ 404.273418][ T7973] usb 4-1: SerialNumber: syz [ 404.303337][ T7973] usb 4-1: config 0 descriptor?? [ 404.327815][ T7973] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 404.366150][ T7973] usb 4-1: setting power ON [ 404.378987][ T7973] dvb-usb: bulk message failed: -22 (2/0) [ 404.424720][ T7973] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 404.446580][ T7973] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 404.464532][ T7973] usb 4-1: media controller created [ 404.521361][ T7973] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 404.533961][T10469] dvb-usb: bulk message failed: -22 (3/0) [ 404.553729][T10469] dvb-usb: bulk message failed: -22 (4/0) [ 404.575495][T10469] cxusb: i2c read failed [ 404.597522][ T7973] usb 4-1: selecting invalid altsetting 6 [ 404.609111][ T7973] usb 4-1: digital interface selection failed (-22) [ 404.634099][ T7973] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 404.661125][ T7973] usb 4-1: setting power OFF [ 404.676037][ T7973] dvb-usb: bulk message failed: -22 (2/0) [ 404.684362][ T7973] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 404.741258][ T7973] (NULL device *): no alternate interface [ 404.857773][ T7973] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 404.945034][ T7973] usb 4-1: USB disconnect, device number 40 [ 405.196677][ T787] usb 2-1: new low-speed USB device number 28 using dummy_hcd [ 405.210878][T10498] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 405.417265][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 405.449560][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.465178][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 80, setting to 8 [ 405.480892][ T787] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 405.506121][ T787] usb 2-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 405.521483][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.542745][ T787] usb 2-1: config 0 descriptor?? [ 405.555616][ T7965] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 405.557242][T10494] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 405.785612][ T7965] usb 4-1: Using ep0 maxpacket: 16 [ 405.820644][ T7965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 405.842367][ T7965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 405.852319][ T787] usbhid 2-1:0.0: can't add hid device: -71 [ 405.852438][ T787] usbhid: probe of 2-1:0.0 failed with error -71 [ 405.861385][ T787] usb 2-1: USB disconnect, device number 28 [ 405.872582][ T9] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 405.876535][ T7965] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 405.894166][ T7965] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 405.904402][ T7965] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 405.930678][ T7965] usb 4-1: config 0 descriptor?? [ 406.080513][ T9] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 406.105058][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 406.132527][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 406.151083][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 406.169576][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 406.179909][ T9] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 406.189126][ T9] usb 5-1: Manufacturer: syz [ 406.198935][ T9] usb 5-1: config 0 descriptor?? [ 406.359676][ T7965] usbhid 4-1:0.0: can't add hid device: -71 [ 406.374493][ T7965] usbhid: probe of 4-1:0.0 failed with error -71 [ 406.384394][ T7965] usb 4-1: USB disconnect, device number 41 [ 406.572392][T10518] tipc: Enabled bearer , priority 0 [ 406.591369][T10518] syzkaller0: entered promiscuous mode [ 406.599072][T10518] syzkaller0: entered allmulticast mode [ 406.615722][T10518] tipc: Resetting bearer [ 406.629318][T10517] tipc: Resetting bearer [ 406.639294][ T9] appleir 0003:05AC:8243.0008: unknown main item tag 0x0 [ 406.662539][ T9] appleir 0003:05AC:8243.0008: No inputs registered, leaving [ 406.672991][T10517] tipc: Disabling bearer [ 406.692454][ T9] appleir 0003:05AC:8243.0008: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0 [ 406.805520][ T7965] usb 1-1: new low-speed USB device number 30 using dummy_hcd [ 406.996168][ T7965] usb 1-1: device descriptor read/64, error -71 [ 407.216052][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 407.235631][ T7966] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 407.275807][ T7965] usb 1-1: new low-speed USB device number 31 using dummy_hcd [ 407.396036][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 407.413317][ T9] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 407.423928][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.425538][ T7966] usb 4-1: Using ep0 maxpacket: 8 [ 407.433205][ T9] usb 2-1: Product: syz [ 407.438785][ T7965] usb 1-1: device descriptor read/64, error -71 [ 407.454448][ T7966] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 407.455162][ T9] usb 2-1: Manufacturer: syz [ 407.465723][ T7966] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 407.477056][ T9] usb 2-1: SerialNumber: syz [ 407.490370][ T7966] pvrusb2: Hardware description: Terratec Grabster AV400 [ 407.498002][ T7966] pvrusb2: ********** [ 407.500831][ T9] usb 2-1: config 0 descriptor?? [ 407.502397][ T7966] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 407.520127][ T7966] pvrusb2: Important functionality might not be entirely working. [ 407.528993][ T7966] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 407.531371][ T9] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 407.541159][ T7966] pvrusb2: ********** [ 407.556019][ T7965] usb usb1-port1: attempt power cycle [ 407.693241][ T2319] pvrusb2: Invalid write control endpoint [ 407.761801][ T2319] pvrusb2: Invalid write control endpoint [ 407.766463][ T9] usb 2-1: USB disconnect, device number 29 [ 407.771649][ T2319] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 407.793789][ T2319] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 407.812014][ T2319] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 407.827124][ T2319] pvrusb2: Device being rendered inoperable [ 407.833598][ T2319] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 407.841146][ T2319] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 407.856010][ T2319] pvrusb2: Attached sub-driver cx25840 [ 407.861550][ T2319] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 407.873275][ T2319] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 407.918029][T10525] pvrusb2: Attempted to execute control transfer when device not ok [ 407.929481][ T7966] usb 4-1: USB disconnect, device number 42 [ 408.015709][ T7965] usb 1-1: new low-speed USB device number 32 using dummy_hcd [ 408.057817][ T7965] usb 1-1: device descriptor read/8, error -71 [ 408.338118][ T7965] usb 1-1: new low-speed USB device number 33 using dummy_hcd [ 408.378551][ T7965] usb 1-1: device descriptor read/8, error -71 [ 408.496790][ T7965] usb usb1-port1: unable to enumerate USB device [ 408.568521][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1363'. [ 408.602636][T10533] vlan2: entered promiscuous mode [ 408.619006][T10533] batadv0: entered promiscuous mode [ 408.780691][ T7973] usb 5-1: USB disconnect, device number 42 [ 409.226053][ T7973] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 409.433030][ T7973] usb 5-1: config 0 has no interfaces? [ 409.447282][ T7973] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 409.458371][ T7973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.467287][ T7973] usb 5-1: Product: syz [ 409.472069][ T7973] usb 5-1: Manufacturer: syz [ 409.478652][ T7973] usb 5-1: SerialNumber: syz [ 409.486952][ T7973] usb 5-1: config 0 descriptor?? [ 409.611445][T10563] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1376'. [ 409.628949][ T5802] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 409.752803][ T27] audit: type=1326 audit(1760087133.453:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10541 comm="syz.4.1367" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fdad0f8eec9 code=0x0 [ 409.872194][ T7966] usb 5-1: USB disconnect, device number 43 [ 410.064778][T10578] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 410.986092][ T787] usb 2-1: new low-speed USB device number 30 using dummy_hcd [ 411.136133][ T787] usb 2-1: device descriptor read/64, error -71 [ 411.406120][ T787] usb 2-1: new low-speed USB device number 31 using dummy_hcd [ 411.565555][ T787] usb 2-1: device descriptor read/64, error -71 [ 411.696546][ T787] usb usb2-port1: attempt power cycle [ 411.747025][T10592] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1386'. [ 411.891274][T10594] syzkaller0: entered promiscuous mode [ 411.897327][T10594] syzkaller0: entered allmulticast mode [ 412.116258][ T787] usb 2-1: new low-speed USB device number 32 using dummy_hcd [ 412.149753][ T787] usb 2-1: device descriptor read/8, error -71 [ 412.426037][ T787] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 412.456911][ T787] usb 2-1: device descriptor read/8, error -71 [ 412.539524][T10613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1393'. [ 412.600814][ T787] usb usb2-port1: unable to enumerate USB device [ 412.747976][T10618] tipc: Enabled bearer , priority 0 [ 412.756759][T10618] syzkaller0: entered promiscuous mode [ 412.762312][T10618] syzkaller0: entered allmulticast mode [ 412.784745][T10618] tipc: Resetting bearer [ 412.793037][T10617] tipc: Resetting bearer [ 412.828476][T10617] tipc: Disabling bearer [ 413.086217][ T7973] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 413.291678][ T7973] usb 1-1: config 0 has no interfaces? [ 413.322114][ T7973] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 413.348288][ T7973] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.363451][ T7973] usb 1-1: Product: syz [ 413.374666][ T7973] usb 1-1: Manufacturer: syz [ 413.385343][ T7973] usb 1-1: SerialNumber: syz [ 413.400530][ T7973] usb 1-1: config 0 descriptor?? [ 413.643407][ T27] audit: type=1326 audit(1760087137.343:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10619 comm="syz.0.1396" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f410af8eec9 code=0x0 [ 413.797290][ T7965] usb 1-1: USB disconnect, device number 34 [ 414.183075][T10643] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1402'. [ 415.058569][T10643] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 415.208319][T10643] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 415.399550][T10643] bond0 (unregistering): Released all slaves [ 415.480218][T10647] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1404'. [ 415.491802][T10647] 8021q: VLANs not supported on caif0 [ 415.980224][T10659] bridge3: entered promiscuous mode [ 416.705598][ T7965] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 416.839067][T10667] tipc: Enabled bearer , priority 0 [ 416.864759][T10667] syzkaller0: entered promiscuous mode [ 416.871019][ T7965] usb 2-1: device descriptor read/64, error -71 [ 416.888498][T10667] syzkaller0: entered allmulticast mode [ 416.925561][T10667] tipc: Resetting bearer [ 416.949515][T10666] tipc: Resetting bearer [ 417.028714][T10666] tipc: Disabling bearer [ 417.155668][ T7965] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 417.315741][ T7965] usb 2-1: device descriptor read/64, error -71 [ 417.445905][ T7965] usb usb2-port1: attempt power cycle [ 417.895677][ T7965] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 417.924198][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1415'. [ 417.951556][T10678] 8021q: VLANs not supported on caif0 [ 417.966868][ T7965] usb 2-1: device descriptor read/8, error -71 [ 418.235492][ T7965] usb 2-1: new low-speed USB device number 37 using dummy_hcd [ 418.301395][ T7965] usb 2-1: device descriptor read/8, error -71 [ 418.437924][ T7965] usb usb2-port1: unable to enumerate USB device [ 418.855975][ T9] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 419.076534][ T9] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 419.125862][ T9] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 419.160461][ T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 419.173671][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 419.209705][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 419.267563][ T9] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 419.285866][ T9] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 419.306023][ T9] usb 5-1: Product: syz [ 419.310358][ T9] usb 5-1: Manufacturer: syz [ 419.457608][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 419.463164][ T9] cdc_wdm 5-1:1.0: skipping garbage [ 419.566557][ T9] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 419.572620][ T9] cdc_wdm 5-1:1.0: Unknown control protocol [ 420.080650][T10708] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1424'. [ 420.104734][T10708] vlan2: entered promiscuous mode [ 420.114020][T10708] batadv0: entered promiscuous mode [ 422.294093][ T9] usb 5-1: USB disconnect, device number 44 [ 422.443454][T10726] tipc: Enabled bearer , priority 0 [ 422.453828][T10726] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 422.466579][T10726] tipc: Resetting bearer [ 422.514228][T10725] tipc: Disabling bearer [ 422.547039][ T7966] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 422.752773][ T7966] usb 1-1: config 0 has no interfaces? [ 422.765808][ T7966] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 422.785677][ T7966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.794009][ T7966] usb 1-1: Product: syz [ 422.804348][ T7966] usb 1-1: Manufacturer: syz [ 422.812992][ T7966] usb 1-1: SerialNumber: syz [ 422.841592][ T7966] usb 1-1: config 0 descriptor?? [ 423.084567][ T27] audit: type=1326 audit(1760087146.783:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10721 comm="syz.0.1428" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f410af8eec9 code=0x0 [ 423.125979][ T9] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 423.206516][ T787] usb 1-1: USB disconnect, device number 35 [ 423.316077][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 423.329248][ T9] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 423.339720][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 423.367116][T10746] random: crng reseeded on system resumption [ 423.368974][ T9] usb 2-1: Product: syz [ 423.397194][ T9] usb 2-1: Manufacturer: syz [ 423.422052][ T9] usb 2-1: SerialNumber: syz [ 423.446402][ T9] usb 2-1: config 0 descriptor?? [ 423.466622][ T9] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 423.781337][ T9] usb 2-1: USB disconnect, device number 38 [ 423.970059][T10752] tipc: Enabling of bearer rejected, failed to enable media [ 423.980489][T10752] syzkaller0: entered promiscuous mode [ 423.987146][T10752] syzkaller0: entered allmulticast mode [ 424.821948][T10760] tipc: Enabled bearer , priority 0 [ 424.847888][T10760] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 424.883684][T10760] tipc: Resetting bearer [ 425.003991][T10759] tipc: Disabling bearer [ 425.579580][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 425.631958][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 425.660627][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 425.675285][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 425.686781][T10768] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1444'. [ 425.948631][T10781] tipc: Enabled bearer , priority 0 [ 425.962985][T10781] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 425.984179][T10781] tipc: Resetting bearer [ 426.006899][T10784] tipc: Enabling of bearer rejected, failed to enable media [ 426.044630][T10780] tipc: Disabling bearer [ 426.057230][T10788] syzkaller0: entered promiscuous mode [ 426.063045][T10788] syzkaller0: entered allmulticast mode [ 426.170595][T10790] bridge1: entered promiscuous mode [ 429.310853][T10831] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'. [ 429.329043][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1462'. [ 429.339675][T10831] netlink: 'syz.3.1462': attribute type 15 has an invalid length. [ 429.816490][ T7966] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 429.823627][T10836] tipc: Enabled bearer , priority 0 [ 429.867624][T10836] syzkaller0: entered promiscuous mode [ 429.873489][T10836] syzkaller0: entered allmulticast mode [ 429.904504][T10836] tipc: Resetting bearer [ 429.949231][T10835] tipc: Resetting bearer [ 429.994954][T10835] tipc: Disabling bearer [ 430.015508][ T7966] usb 4-1: Using ep0 maxpacket: 32 [ 430.023787][ T7966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 430.045832][ T7966] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 430.079170][ T7966] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 430.105044][ T7966] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 430.145450][ T7966] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 430.153972][ T7966] usb 4-1: Product: syz [ 430.155290][T10840] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 430.195534][ T7966] usb 4-1: Manufacturer: syz [ 430.200255][ T7966] usb 4-1: SerialNumber: syz [ 430.221235][T10831] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 430.271591][ T7966] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input26 [ 430.790488][ T970] usb 4-1: USB disconnect, device number 43 [ 430.840784][ T970] appletouch 4-1:1.0: input: appletouch disconnected [ 431.067998][T10861] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1473'. [ 431.104187][ T5802] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 431.453155][T10867] input: syz0 as /devices/virtual/input/input27 [ 431.510433][T10867] input: syz1 as /devices/virtual/input/input28 [ 431.702347][T10869] tipc: Enabling of bearer rejected, failed to enable media [ 431.736150][T10869] syzkaller0: entered promiscuous mode [ 431.741787][T10869] syzkaller0: entered allmulticast mode [ 432.055729][ T7965] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 432.258112][ T7965] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 432.272721][ T7965] usb 2-1: config 1 has an invalid descriptor of length 56, skipping remainder of the config [ 432.321012][ T7965] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 432.353327][ T7965] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 432.397538][ T7965] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 432.411675][ T7965] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 432.430500][ T7965] usb 2-1: Product: syz [ 432.434773][ T7965] usb 2-1: Manufacturer: syz [ 432.475558][ T7965] cdc_wdm 2-1:1.0: skipping garbage [ 432.481006][ T7965] cdc_wdm: probe of 2-1:1.0 failed with error -22 [ 432.586508][T10884] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1483'. [ 432.606496][ T787] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 432.635260][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 432.684179][ T970] usb 2-1: USB disconnect, device number 39 [ 432.752635][T10888] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1484'. [ 432.764586][ T5802] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 432.796074][ T787] usb 1-1: Using ep0 maxpacket: 32 [ 432.803647][ T787] usb 1-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 432.826238][ T787] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 432.842978][ T787] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 432.861872][ T787] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 432.876731][ T787] usb 1-1: Product: syz [ 432.886050][ T787] usb 1-1: Manufacturer: syz [ 432.890899][ T787] usb 1-1: SerialNumber: syz [ 432.906564][ T787] appletouch 1-1:1.0: Could not find int-in endpoint [ 432.920076][ T787] appletouch: probe of 1-1:1.0 failed with error -5 [ 432.928603][ T787] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 433.022798][T10894] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'. [ 433.039036][T10894] vlan2: entered promiscuous mode [ 433.044146][T10894] batadv0: entered promiscuous mode [ 433.053563][T10897] tipc: Enabling of bearer rejected, failed to enable media [ 433.070440][T10897] syzkaller0: entered promiscuous mode [ 433.076064][T10897] syzkaller0: entered allmulticast mode [ 433.124462][ T970] usb 1-1: USB disconnect, device number 36 [ 433.413320][T10908] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1494'. [ 433.423957][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 433.538907][T10912] tipc: Enabled bearer , priority 0 [ 433.548472][T10912] syzkaller0: entered promiscuous mode [ 433.561232][T10912] syzkaller0: entered allmulticast mode [ 433.592825][T10912] tipc: Resetting bearer [ 433.603759][T10911] tipc: Resetting bearer [ 433.622418][ T7965] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 433.631530][T10911] tipc: Disabling bearer [ 433.792637][T10918] tipc: Enabling of bearer rejected, failed to enable media [ 433.803651][T10918] syzkaller0: entered promiscuous mode [ 433.810274][T10918] syzkaller0: entered allmulticast mode [ 433.815701][ T7965] usb 2-1: Using ep0 maxpacket: 32 [ 433.834053][ T7965] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 433.849532][ T7965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 433.858802][ T7965] usb 2-1: Product: syz [ 433.863158][ T7965] usb 2-1: Manufacturer: syz [ 433.873259][ T7965] usb 2-1: SerialNumber: syz [ 433.908488][ T7965] usb 2-1: config 0 descriptor?? [ 433.925274][ T7965] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 434.039222][T10922] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1500'. [ 434.613972][T10937] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1504'. [ 434.636818][ T5802] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 434.797264][T10939] tipc: Enabled bearer , priority 0 [ 434.807149][T10939] syzkaller0: entered promiscuous mode [ 434.814183][T10939] syzkaller0: entered allmulticast mode [ 434.875571][ T970] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 434.883680][T10939] tipc: Resetting bearer [ 434.904382][T10938] tipc: Resetting bearer [ 434.940239][T10938] tipc: Disabling bearer [ 435.085738][ T970] usb 1-1: Using ep0 maxpacket: 8 [ 435.092822][ T970] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 435.102329][ T970] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 435.117865][ T970] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 435.147013][ T970] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 435.180409][ T970] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 435.215679][ T970] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 435.226742][ T970] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.461979][ T970] usb 1-1: usb_control_msg returned -32 [ 435.490252][ T970] usbtmc 1-1:16.0: can't read capabilities [ 435.518416][ T970] usb 1-1: USB disconnect, device number 37 [ 435.791747][T10949] syzkaller0: entered promiscuous mode [ 435.797844][T10949] syzkaller0: entered allmulticast mode [ 436.163449][T10959] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1514'. [ 436.186217][ T5802] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 436.523631][ T970] usb 2-1: USB disconnect, device number 40 [ 436.798911][ T27] audit: type=1400 audit(1760087160.503:466): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=10968 comm="syz.0.1517" [ 436.818595][ C1] vkms_vblank_simulate: vblank timer overrun [ 436.899625][T10976] usb usb8: usbfs: process 10976 (syz.0.1517) did not claim interface 0 before use [ 437.105744][ T970] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 437.325798][ T970] usb 2-1: Using ep0 maxpacket: 8 [ 437.345992][ T970] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 437.364471][ T970] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 437.385266][ T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 437.444123][ T970] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 437.456362][ T970] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 437.471625][ T970] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 437.488905][ T970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.758064][ T970] usb 2-1: usb_control_msg returned -32 [ 437.765789][ T7966] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 437.807251][ T970] usbtmc 2-1:16.0: can't read capabilities [ 437.855998][ T970] usb 2-1: USB disconnect, device number 41 [ 437.997493][ T7966] usb 5-1: Using ep0 maxpacket: 8 [ 438.017729][ T7966] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 438.045631][ T7966] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 438.086084][ T7966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 438.107749][ T7966] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 438.135650][T10983] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1521'. [ 438.162652][ T7966] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 438.195812][ T7966] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 438.222393][ T7966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.459568][ T7966] usb 5-1: usb_control_msg returned -32 [ 438.471251][ T7966] usbtmc 5-1:16.0: can't read capabilities [ 438.505935][ T7966] usb 5-1: USB disconnect, device number 45 [ 438.959516][T10999] tipc: Enabled bearer , priority 0 [ 438.970889][T10999] syzkaller0: entered promiscuous mode [ 438.977024][T10999] syzkaller0: entered allmulticast mode [ 439.032451][T10999] tipc: Resetting bearer [ 439.041947][T10998] tipc: Resetting bearer [ 439.097605][T10998] tipc: Disabling bearer [ 439.135828][ T970] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 439.325683][ T970] usb 2-1: Using ep0 maxpacket: 32 [ 439.347475][ T970] usb 2-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice= e.74 [ 439.366520][ T970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.401310][ T970] usb 2-1: Product: syz [ 439.425002][ T970] usb 2-1: Manufacturer: syz [ 439.430199][ T970] usb 2-1: SerialNumber: syz [ 439.447204][ T970] usb 2-1: config 0 descriptor?? [ 439.468238][ T970] ati_remote 2-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 439.775968][ T787] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 439.955982][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 439.964724][ T787] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 439.974671][ T787] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 439.996122][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 440.020629][ T787] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 440.049388][ T787] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 440.084660][ T787] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 440.105954][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.450682][ T1287] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.457416][ T1287] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.830800][T11020] fuse: Bad value for 'fd' [ 442.106170][T11037] TCP: tcp_parse_options: Illegal window scaling value 255 > 14 received [ 442.111077][ T787] usb 2-1: USB disconnect, device number 42 [ 442.631906][T11047] fuse: Bad value for 'fd' [ 443.058026][ T787] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 443.104369][T11054] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1544'. [ 443.261879][ T787] usb 2-1: Using ep0 maxpacket: 32 [ 443.279090][ T787] usb 2-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config [ 443.298403][ T787] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 443.329793][ T787] usb 2-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 443.346063][ T787] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 443.366119][ T787] usb 2-1: Product: syz [ 443.386057][ T787] usb 2-1: Manufacturer: syz [ 443.394662][ T787] usb 2-1: SerialNumber: syz [ 443.417836][ T787] appletouch 2-1:1.0: Could not find int-in endpoint [ 443.430963][ T787] appletouch: probe of 2-1:1.0 failed with error -5 [ 443.444938][ T787] usbhid 2-1:1.0: couldn't find an input interrupt endpoint [ 443.650136][ T787] usb 2-1: USB disconnect, device number 43 [ 445.425845][ T7966] usb 5-1: new low-speed USB device number 46 using dummy_hcd [ 445.618232][ T7966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 445.629683][ T7966] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 445.639156][ T7966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.653161][T11012] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 445.664673][ T7966] usb 5-1: config 0 descriptor?? [ 445.741354][ T7973] usb 1-1: USB disconnect, device number 38 [ 445.834071][T11077] input: syz0 as /devices/virtual/input/input29 [ 445.885583][ T7966] usb 5-1: USB disconnect, device number 46 [ 446.215474][ T7973] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 446.396131][ T7973] usb 1-1: Using ep0 maxpacket: 8 [ 446.403420][ T7973] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 446.412729][ T7973] usb 1-1: config 0 has no interface number 0 [ 446.419887][ T7973] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 446.431825][ T7973] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 446.441866][ T7973] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.460999][ T7973] usb 1-1: config 0 descriptor?? [ 446.486927][ T7973] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 447.232313][ T9] usb 1-1: USB disconnect, device number 39 [ 447.836229][ T9] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 447.865639][ T7966] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 448.038252][ T9] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 448.065789][ T7966] usb 2-1: Using ep0 maxpacket: 8 [ 448.066058][ T9] usb 1-1: config 1 has an invalid descriptor of length 52, skipping remainder of the config [ 448.077790][ T7966] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 448.095823][ T7966] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 448.099673][ T9] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 448.115881][ T7966] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 448.115923][ T7966] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 448.115949][ T7966] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 448.115996][ T7966] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 448.116021][ T7966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.250701][ T9] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 448.282860][ T9] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 448.300942][ T9] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 448.312215][ T9] usb 1-1: Product: syz [ 448.327314][ T9] usb 1-1: Manufacturer: syz [ 448.351922][ T9] cdc_wdm 1-1:1.0: skipping garbage [ 448.369025][ T9] cdc_wdm: probe of 1-1:1.0 failed with error -22 [ 448.581792][ T9] usb 1-1: USB disconnect, device number 40 [ 449.039627][T11125] tipc: Enabled bearer , priority 0 [ 449.073282][T11125] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 449.085264][T11125] tipc: Resetting bearer [ 449.117118][T11124] tipc: Disabling bearer [ 452.127540][T11159] tipc: Enabled bearer , priority 0 [ 452.137692][T11159] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 452.150267][T11159] tipc: Resetting bearer [ 452.180992][T11158] tipc: Disabling bearer [ 452.703409][T11169] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1581'. [ 453.647116][T11101] usbtmc 2-1:16.0: usb_control_msg returned -110 [ 453.681246][ T787] usb 2-1: USB disconnect, device number 44 [ 453.795969][ T7966] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 453.990877][ T7966] usb 5-1: Using ep0 maxpacket: 8 [ 454.001390][ T7966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 454.019803][ T7966] usb 5-1: config 4 interface 0 has no altsetting 0 [ 454.044684][ T7966] usb 5-1: string descriptor 0 read error: -22 [ 454.060278][ T7966] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 454.080076][ T7966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 454.120861][ T7966] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 454.167252][ T7966] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 454.205910][ T7966] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 454.213412][ T7966] usb 5-1: media controller created [ 454.307304][ T7966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 454.826327][ T7965] usb 1-1: new low-speed USB device number 41 using dummy_hcd [ 455.012667][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 455.034252][ T7965] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 455.050189][ T7965] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 455.064716][ T7965] usb 1-1: New USB device found, idVendor=1e71, idProduct=2011, bcdDevice= 0.00 [ 455.074489][ T7965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.082839][ T970] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 455.094627][ T7965] usb 1-1: config 0 descriptor?? [ 455.300317][ T970] usb 4-1: Using ep0 maxpacket: 8 [ 455.316925][ T970] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 455.333252][ T970] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 455.361388][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 455.372650][ T7965] usbhid 1-1:0.0: can't add hid device: -71 [ 455.380091][ T970] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 455.392581][ T7965] usbhid: probe of 1-1:0.0 failed with error -71 [ 455.407998][ T7966] zl10353_read_register: readreg error (reg=127, ret==0) [ 455.420626][ T7965] usb 1-1: USB disconnect, device number 41 [ 455.427238][ T970] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 455.469142][ T970] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 455.492024][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.552389][ T7966] usb 5-1: USB disconnect, device number 47 [ 455.854742][T11213] tipc: Enabling of bearer rejected, failed to enable media [ 457.132788][T11250] tipc: Enabling of bearer rejected, failed to enable media [ 457.185674][ T7966] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 457.376015][ T7966] usb 1-1: Using ep0 maxpacket: 8 [ 457.388535][ T7966] usb 1-1: unable to get BOS descriptor or descriptor too short [ 457.409165][ T7966] usb 1-1: config 4 interface 0 has no altsetting 0 [ 457.429120][ T7966] usb 1-1: string descriptor 0 read error: -22 [ 457.437484][ T7966] usb 1-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 457.452721][ T7966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 457.481378][ T7966] usb 1-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 457.499659][ T7966] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 457.511346][ T7966] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 457.519321][ T7966] usb 1-1: media controller created [ 457.576989][ T7966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 458.685937][ T7966] zl10353_read_register: readreg error (reg=127, ret==0) [ 458.787029][ T7966] usb 1-1: USB disconnect, device number 42 [ 459.516247][ T7973] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 459.706623][ T7973] usb 2-1: Using ep0 maxpacket: 16 [ 459.716148][ T7973] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 459.736057][ T7973] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 459.745317][ T7973] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 459.760725][ T7973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 459.783294][ T7973] usb 2-1: config 0 descriptor?? [ 459.961107][T11285] tipc: Enabling of bearer rejected, failed to enable media [ 460.573846][T11303] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1627'. [ 461.007644][T11202] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 461.078540][ T7964] usb 4-1: USB disconnect, device number 44 [ 461.619748][T11322] tipc: Enabling of bearer rejected, failed to enable media [ 462.033501][T11337] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1636'. [ 462.262208][ T7973] usb 2-1: USB disconnect, device number 45 [ 462.760478][T11355] tipc: Enabling of bearer rejected, failed to enable media [ 462.900866][ T7964] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 463.135561][ T7964] usb 2-1: config 0 has no interfaces? [ 463.167794][ T7964] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b [ 463.197670][ T7964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.209547][ T7964] usb 2-1: Product: syz [ 463.214146][ T7964] usb 2-1: Manufacturer: syz [ 463.219623][ T7964] usb 2-1: SerialNumber: syz [ 463.228639][ T7964] usb 2-1: config 0 descriptor?? [ 463.499939][T11372] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1646'. [ 463.733385][T11378] bond2: entered allmulticast mode [ 464.398389][ T7964] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 464.613948][T11392] tipc: Enabling of bearer rejected, failed to enable media [ 464.617007][ T7964] usb 5-1: Using ep0 maxpacket: 16 [ 464.640247][ T7964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 464.692246][ T7964] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 464.735164][ T7964] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 464.787047][ T7964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 464.854047][ T7964] usb 5-1: config 0 descriptor?? [ 465.243705][T11404] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1655'. [ 465.283607][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 465.611117][ T787] usb 2-1: USB disconnect, device number 46 [ 466.160442][T11432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1664'. [ 466.187749][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 466.364864][T11435] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1665'. [ 466.374816][T11435] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 466.384473][T11435] netlink: 'syz.3.1665': attribute type 15 has an invalid length. [ 466.695864][ T7965] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 466.905701][ T7965] usb 4-1: Using ep0 maxpacket: 32 [ 466.920265][ T7965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 466.966289][ T7965] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 466.986271][ T7965] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 467.002398][ T7965] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 467.015208][ T7965] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 467.034061][ T7965] usb 4-1: Product: syz [ 467.042689][ T7965] usb 4-1: Manufacturer: syz [ 467.051503][ T7965] usb 4-1: SerialNumber: syz [ 467.065139][T11434] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 467.141024][ T787] usb 5-1: USB disconnect, device number 48 [ 467.168882][ T7965] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input30 [ 467.235023][ C0] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -1 [ 467.296161][ T8] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 467.323376][T11442] fuse: Bad value for 'group_id' [ 467.349890][ T7965] usb 4-1: USB disconnect, device number 45 [ 467.376932][ T7965] appletouch 4-1:1.0: input: appletouch disconnected [ 467.576338][ T8] usb 1-1: Using ep0 maxpacket: 8 [ 467.633597][ T8] usb 1-1: New USB device found, idVendor=093b, idProduct=a104, bcdDevice= 0.01 [ 467.653478][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.682368][ T8] usb 1-1: Product: syz [ 467.685166][T11447] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1669'. [ 467.702651][ T8] usb 1-1: Manufacturer: syz [ 467.720842][ T8] usb 1-1: SerialNumber: syz [ 467.750925][ T8] usb 1-1: config 0 descriptor?? [ 467.784030][ T8] go7007: probe of 1-1:0.0 failed with error -12 [ 468.125773][T11440] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 468.254843][T11440] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 468.489208][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 468.885612][ T8] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 468.917090][T11465] fuse: Bad value for 'group_id' [ 469.088544][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 469.120057][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 469.178977][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 469.201014][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 469.275979][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 469.290719][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 469.300840][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 469.317571][ T8] usb 4-1: Product: syz [ 469.358144][ T8] usb 4-1: Manufacturer: syz [ 469.402109][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 469.415950][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 469.430253][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 469.455320][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 469.637545][ T7967] usb 4-1: USB disconnect, device number 46 [ 469.904291][T11475] syzkaller0: entered promiscuous mode [ 469.921700][T11475] syzkaller0: entered allmulticast mode [ 470.070749][ T7973] usb 1-1: USB disconnect, device number 43 [ 470.231646][ T5802] Bluetooth: hci1: Malformed MSFT vendor event: 0x02 [ 470.625475][ T28] usb 4-1: new low-speed USB device number 47 using dummy_hcd [ 470.837870][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 470.853675][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 470.906190][ T28] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47 [ 470.922612][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 470.933230][ T28] usb 4-1: config 0 descriptor?? [ 470.940679][ T28] qmi_wwan: probe of 4-1:0.0 failed with error -22 [ 471.154495][ T28] usb 4-1: USB disconnect, device number 47 [ 471.957759][ T5802] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 471.967999][T11507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1691'. [ 472.556296][ T8] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 472.567721][T11518] tipc: Enabled bearer , priority 0 [ 472.580862][T11518] syzkaller0: entered promiscuous mode [ 472.586992][T11518] syzkaller0: entered allmulticast mode [ 472.608013][T11518] tipc: Resetting bearer [ 472.626349][T11517] tipc: Resetting bearer [ 472.683037][T11517] tipc: Disabling bearer [ 472.750830][ T8] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 472.778036][ T8] usb 4-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 472.817971][ T8] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 472.830142][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 472.857119][ T8] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 472.902818][ T8] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 472.918927][ T8] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 472.934482][ T8] usb 4-1: Product: syz [ 472.946363][ T8] usb 4-1: Manufacturer: syz [ 472.972897][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 472.974101][T11528] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1701'. [ 472.996077][ T8] cdc_wdm 4-1:1.0: skipping garbage [ 473.013722][ T8] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 473.022465][ T8] cdc_wdm 4-1:1.0: Unknown control protocol [ 473.033654][ T5802] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 473.200660][T11533] loop4: detected capacity change from 0 to 2048 [ 473.249722][T11533] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 473.264142][T11533] ext4 filesystem being mounted at /355/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 473.314000][T11536] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm ext4lazyinit: bg 0: block 349: padding at end of block bitmap is not set [ 473.370069][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.380237][ T28] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 473.421008][T11538] syzkaller0: entered promiscuous mode [ 473.427668][T11538] syzkaller0: entered allmulticast mode [ 473.557287][ T28] usb 2-1: device descriptor read/64, error -71 [ 473.835965][ T28] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 473.935761][ T7966] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 474.006624][ T28] usb 2-1: device descriptor read/64, error -71 [ 474.128861][ T28] usb usb2-port1: attempt power cycle [ 474.148383][ T7966] usb 5-1: Using ep0 maxpacket: 8 [ 474.175547][ T7966] usb 5-1: unable to get BOS descriptor or descriptor too short [ 474.197498][ T7966] usb 5-1: config 4 interface 0 has no altsetting 0 [ 474.234687][ T7966] usb 5-1: string descriptor 0 read error: -22 [ 474.242674][ T7966] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 474.252664][ T7966] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 474.357385][ T7966] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 474.375962][ T7966] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 474.387786][ T7966] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 474.395108][ T7966] usb 5-1: media controller created [ 474.426484][ T7966] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 474.585704][ T28] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 474.620742][ T28] usb 2-1: device descriptor read/8, error -71 [ 474.906468][ T28] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 474.968339][ T28] usb 2-1: device descriptor read/8, error -71 [ 475.096273][ T28] usb usb2-port1: unable to enumerate USB device [ 475.332734][ T28] usb 4-1: USB disconnect, device number 48 [ 475.512626][T11556] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1712'. [ 475.545872][ T5802] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 475.566415][ T7966] zl10353_read_register: readreg error (reg=127, ret==0) [ 475.574930][T11543] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 475.655885][ T7966] usb 5-1: USB disconnect, device number 49 [ 475.898039][T11558] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1713'. [ 476.265209][T11572] tipc: Enabled bearer , priority 0 [ 476.287867][T11572] syzkaller0: entered promiscuous mode [ 476.293498][T11572] syzkaller0: entered allmulticast mode [ 476.327659][T11572] tipc: Resetting bearer [ 476.339991][T11571] tipc: Resetting bearer [ 476.383704][T11571] tipc: Disabling bearer [ 476.587768][T11582] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1723'. [ 476.595600][ T7966] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 476.719156][ T28] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 476.732360][T11585] syzkaller0: entered promiscuous mode [ 476.738714][T11585] syzkaller0: entered allmulticast mode [ 476.797559][ T7966] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 476.806761][ T7966] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 476.817980][ T7966] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 476.830022][ T7966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 476.841801][ T7966] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 476.855817][ T7966] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 476.865286][ T7966] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 476.875302][ T7966] usb 5-1: Product: syz [ 476.881534][ T7966] usb 5-1: Manufacturer: syz [ 476.895979][ T7966] cdc_wdm 5-1:1.0: skipping garbage [ 476.901437][ T7966] cdc_wdm 5-1:1.0: skipping garbage [ 476.909268][ T7966] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 476.915234][ T7966] cdc_wdm 5-1:1.0: Unknown control protocol [ 476.925959][ T28] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 476.944629][ T28] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 476.975588][ T28] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 476.990613][ T28] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 477.000772][ T28] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 477.009777][ T28] usb 4-1: Manufacturer: syz [ 477.017787][ T28] usb 4-1: config 0 descriptor?? [ 477.031290][ T28] igorplugusb 4-1:0.0: incorrect number of endpoints [ 477.556190][ T7973] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 477.716202][ T7973] usb 2-1: device descriptor read/64, error -71 [ 477.985885][ T7973] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 478.139441][ T7973] usb 2-1: device descriptor read/64, error -71 [ 478.266423][ T7973] usb usb2-port1: attempt power cycle [ 478.675528][ T7973] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 478.709914][ T7973] usb 2-1: device descriptor read/8, error -71 [ 478.985690][ T7973] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 479.016774][ T7973] usb 2-1: device descriptor read/8, error -71 [ 479.049170][T11598] block nbd0: shutting down sockets [ 479.136819][ T7973] usb usb2-port1: unable to enumerate USB device [ 479.347594][ T28] usb 5-1: USB disconnect, device number 50 [ 479.458939][T11608] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1732'. [ 479.499867][ T7966] usb 4-1: USB disconnect, device number 49 [ 479.511294][T11611] tipc: Enabled bearer , priority 0 [ 479.521692][T11611] syzkaller0: entered promiscuous mode [ 479.546120][T11611] syzkaller0: entered allmulticast mode [ 479.566780][T11611] tipc: Resetting bearer [ 479.591594][T11610] tipc: Resetting bearer [ 479.644542][T11610] tipc: Disabling bearer [ 481.109918][T11622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 481.129915][T11622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 481.136922][T11622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 481.144487][T11622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 481.199280][T11636] loop4: detected capacity change from 0 to 1024 [ 481.228714][T11636] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 481.302170][T11636] ext4 filesystem being mounted at /362/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 481.496406][ T8] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 481.699013][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 481.711040][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 481.739270][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 481.750707][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 481.765191][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 481.782876][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 481.793243][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 481.808305][ T8] usb 2-1: Product: syz [ 481.812886][ T8] usb 2-1: Manufacturer: syz [ 481.830723][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 481.841065][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 481.853476][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 481.861374][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 481.918928][ T6408] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 482.435448][ T7966] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 482.644179][ T7966] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 482.653319][ T7966] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 482.672818][ T7966] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 482.693055][ T7966] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 482.703736][ T7966] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 482.715250][ T7966] usb 5-1: Manufacturer: syz [ 482.726502][ T7966] usb 5-1: config 0 descriptor?? [ 482.740584][ T7966] igorplugusb 5-1:0.0: incorrect number of endpoints [ 483.165995][T11634] Bluetooth: hci2: command 0x0c1a tx timeout [ 483.172572][T11634] Bluetooth: hci1: command 0x0c1a tx timeout [ 483.172871][ T5806] Bluetooth: hci0: command 0x0c1a tx timeout [ 483.179648][ T5802] Bluetooth: hci3: command 0x0c1a tx timeout [ 484.336462][ T7966] usb 2-1: USB disconnect, device number 55 [ 484.895532][ T7966] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 485.075473][ T7966] usb 2-1: Using ep0 maxpacket: 16 [ 485.082831][ T7966] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.096895][ T7966] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 485.113063][ T7966] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 485.122709][ T7966] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.134160][ T7966] usb 2-1: config 0 descriptor?? [ 485.149257][ T7966] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 485.186055][ T8] usb 5-1: USB disconnect, device number 51 [ 485.235860][ T28] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 487.308873][T11683] sched: RT throttling activated [ 487.322164][ T28] usb 1-1: Using ep0 maxpacket: 32 [ 487.334941][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 487.347854][ T28] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 487.530836][ T8] usb 2-1: USB disconnect, device number 56 [ 487.564913][ T28] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 487.574395][ T28] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 487.713361][ T28] usb 1-1: config 0 descriptor?? [ 487.752015][T11695] binder: BINDER_SET_CONTEXT_MGR already set [ 487.768190][T11695] binder: 11694:11695 ioctl 4018620d 2000000002c0 returned -16 [ 487.894920][T11700] loop3: detected capacity change from 0 to 16 [ 487.913092][T11700] erofs: (device loop3): mounted with root inode @ nid 36. [ 488.404630][ T28] ft260 0003:0403:6030.0009: unknown main item tag 0x7 [ 488.594846][ T28] ft260 0003:0403:6030.0009: chip code: 6424 8183 [ 488.825893][ T28] ft260 0003:0403:6030.0009: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0 [ 488.899682][ T5802] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 488.984816][T11714] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 489.004932][T11714] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1764'. [ 489.022098][ T28] ft260 0003:0403:6030.0009: failed to retrieve status: -32, no wakeup [ 489.026194][T11714] netlink: 'syz.3.1764': attribute type 15 has an invalid length. [ 489.031893][ T28] ft260 0003:0403:6030.0009: failed to retrieve status: -32 [ 489.205695][ T970] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 489.439271][ T970] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 489.463279][ T970] usb 2-1: config 0 interface 0 has no altsetting 0 [ 489.491736][ T970] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 489.502818][ T970] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 489.511563][ T970] usb 2-1: Product: syz [ 489.516925][ T970] usb 2-1: Manufacturer: syz [ 489.521816][ T970] usb 2-1: SerialNumber: syz [ 489.552952][ T970] usb 2-1: config 0 descriptor?? [ 489.572955][ T7973] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 489.582761][ T970] usb 2-1: selecting invalid altsetting 0 [ 489.625643][ T28] usb 1-1: reset high-speed USB device number 44 using dummy_hcd [ 489.896108][ T7973] usb 4-1: Using ep0 maxpacket: 32 [ 489.903658][T11680] ft260 0003:0403:6030.0009: ft260_i2c_read: failed with -38 [ 489.914787][ T7973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 489.929137][ T970] usb 2-1: USB disconnect, device number 57 [ 489.975960][ T7973] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 490.019590][ T7973] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 490.043069][ T7973] usb 4-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 490.054946][ T7973] usb 4-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 490.090478][ T7973] usb 4-1: Product: syz [ 490.094740][ T7973] usb 4-1: Manufacturer: syz [ 490.101855][ T7973] usb 4-1: SerialNumber: syz [ 490.123987][T11710] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 490.176468][ T7973] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input31 [ 490.196092][T11718] loop4: detected capacity change from 0 to 4096 [ 490.377563][T11721] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 490.400686][ T7965] usb 4-1: USB disconnect, device number 50 [ 490.452779][ T7965] appletouch 4-1:1.0: input: appletouch disconnected [ 490.770425][ T7967] usb 1-1: USB disconnect, device number 44 [ 491.530727][T11733] loop3: detected capacity change from 0 to 1024 [ 491.553227][T11733] EXT4-fs: inline encryption not supported [ 491.624558][T11733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 491.646479][T11720] loop0: detected capacity change from 0 to 32768 [ 491.903741][T11720] syz.0.1767: attempt to access beyond end of device [ 491.903741][T11720] loop14: rw=0, sector=8, nr_sectors = 8 limit=0 [ 491.956127][T11720] lbmIODone: I/O error in JFS log [ 491.962210][T11720] *** Log Format Error ! *** [ 491.975089][T11720] lmLogInit: exit(-22) [ 491.980633][T11720] lmLogOpen: exit(-22) [ 492.085276][T11720] ERROR: (device loop0): txBegin: read-only filesystem [ 492.085276][T11720] [ 492.103621][ T5796] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 492.192767][T11720] ERROR: (device loop0): remounting filesystem as read-only [ 492.202139][T11720] jfs_dirty_inode called on read-only volume [ 492.249072][T11720] Is remount racy? [ 492.342524][T11720] jfs_dirty_inode called on read-only volume [ 492.387515][ T28] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 492.425788][T11720] Is remount racy? [ 492.429872][T11720] INFO: trying to register non-static key. [ 492.435881][T11720] The code is fine but needs lockdep annotation, or maybe [ 492.443030][T11720] you didn't initialize this object before use? [ 492.449702][T11720] turning off the locking correctness validator. [ 492.456086][T11720] CPU: 1 PID: 11720 Comm: syz.0.1767 Not tainted syzkaller #0 [ 492.463583][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.474028][T11720] Call Trace: [ 492.477330][T11720] [ 492.480392][T11720] dump_stack_lvl+0x16c/0x230 [ 492.485196][T11720] ? show_regs_print_info+0x20/0x20 [ 492.490721][T11720] ? load_image+0x3b0/0x3b0 [ 492.495460][T11720] ? lock_release+0xba/0x8b0 [ 492.500119][T11720] ? __is_module_percpu_address+0x219/0x380 [ 492.506142][T11720] ? __is_kernel_percpu_address+0x133/0x270 [ 492.512259][T11720] assign_lock_key+0x1f9/0x230 [ 492.517265][T11720] ? SOFTIRQ_verbose+0x10/0x10 [ 492.522081][T11720] register_lock_class+0x212/0x890 [ 492.527305][T11720] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.533593][T11720] ? kernel_text_address+0xa0/0xd0 [ 492.538817][T11720] ? is_dynamic_key+0x260/0x260 [ 492.543867][T11720] ? unwind_get_return_address+0x91/0xc0 [ 492.549725][T11720] ? stack_trace_save+0xe0/0xe0 [ 492.554610][T11720] __lock_acquire+0x17a/0x7c80 [ 492.559676][T11720] ? stack_trace_snprint+0xf0/0xf0 [ 492.564892][T11720] ? check_noncircular+0x175/0x3c0 [ 492.570136][T11720] ? print_deadlock_bug+0x5d0/0x5d0 [ 492.575457][T11720] ? lockdep_unlock+0x137/0x2d0 [ 492.580357][T11720] ? lockdep_lock+0x220/0x220 [ 492.585134][T11720] ? verify_lock_unused+0x140/0x140 [ 492.590462][T11720] ? add_lock_to_list+0x191/0x280 [ 492.595527][T11720] ? __lock_acquire+0x2b6b/0x7c80 [ 492.600705][T11720] lock_acquire+0x197/0x410 [ 492.605964][T11720] ? __wake_up+0xf8/0x190 [ 492.610686][T11720] ? read_lock_is_recursive+0x20/0x20 [ 492.616435][T11720] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 492.622103][T11720] ? lockdep_hardirqs_on+0x98/0x150 [ 492.627354][T11720] _raw_spin_lock_irqsave+0xa8/0xf0 [ 492.632573][T11720] ? __wake_up+0xf8/0x190 [ 492.636919][T11720] ? _raw_spin_lock+0x40/0x40 [ 492.641641][T11720] ? lock_acquire+0x1f2/0x410 [ 492.646468][T11720] __wake_up+0xf8/0x190 [ 492.650832][T11720] ? __wake_up_bit+0x1e0/0x1e0 [ 492.655698][T11720] ? do_raw_spin_lock+0x121/0x2c0 [ 492.660743][T11720] ? __rwlock_init+0x150/0x150 [ 492.665536][T11720] txEnd+0x8a/0x520 [ 492.669368][T11720] jfs_truncate_nolock+0x1e5/0x2c0 [ 492.674535][T11720] ? jfs_direct_IO+0x220/0x220 [ 492.679336][T11720] ? block_truncate_page+0x710/0x9f0 [ 492.684765][T11720] ? jfs_dirty_inode+0x240/0x240 [ 492.689727][T11720] jfs_truncate+0xce/0x140 [ 492.694161][T11720] jfs_setattr+0x4f8/0x750 [ 492.698620][T11720] ? jfs_fsync+0x1b0/0x1b0 [ 492.703142][T11720] notify_change+0xb0d/0xe10 [ 492.708019][T11720] do_truncate+0x19b/0x220 [ 492.712500][T11720] ? put_page_bootmem+0x2c0/0x2c0 [ 492.717555][T11720] ? bpf_lsm_path_truncate+0x9/0x10 [ 492.722785][T11720] vfs_truncate+0x266/0x300 [ 492.727355][T11720] do_sys_truncate+0xe0/0x1a0 [ 492.732551][T11720] ? break_lease+0xd0/0xd0 [ 492.737079][T11720] ? lockdep_hardirqs_on+0x98/0x150 [ 492.742401][T11720] do_syscall_64+0x55/0xb0 [ 492.746948][T11720] ? clear_bhb_loop+0x40/0x90 [ 492.751670][T11720] ? clear_bhb_loop+0x40/0x90 [ 492.756716][T11720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 492.762799][T11720] RIP: 0033:0x7f410af8eec9 [ 492.767398][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.787076][T11720] RSP: 002b:00007f410bde1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 492.795646][T11720] RAX: ffffffffffffffda RBX: 00007f410b1e5fa0 RCX: 00007f410af8eec9 [ 492.803742][T11720] RDX: 0000000000000000 RSI: 0000000000040006 RDI: 0000200000000040 [ 492.811909][T11720] RBP: 00007f410b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 492.819979][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.828224][T11720] R13: 00007f410b1e6038 R14: 00007f410b1e5fa0 R15: 00007ffddd908458 [ 492.836602][T11720] [ 492.839873][T11720] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 492.851731][T11720] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 492.860607][T11720] CPU: 1 PID: 11720 Comm: syz.0.1767 Not tainted syzkaller #0 [ 492.868439][T11720] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 492.878903][T11720] RIP: 0010:__wake_up_common+0x23c/0x4e0 [ 492.884722][T11720] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 f6 81 78 00 48 ba 00 00 00 00 00 fc [ 492.904460][T11720] RSP: 0018:ffffc900110b79b8 EFLAGS: 00010046 [ 492.910555][T11720] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 492.918645][T11720] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002609030 [ 492.926676][T11720] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc900110b7a60 [ 492.934779][T11720] R10: dffffc0000000000 R11: fffff52002216f20 R12: ffffc90002609030 [ 492.942878][T11720] R13: ffffc90002609070 R14: 0000000000000000 R15: 0000000000000000 [ 492.950869][T11720] FS: 00007f410bde16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 492.960113][T11720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 492.966721][T11720] CR2: 0000200000024000 CR3: 000000002f8a6000 CR4: 00000000003506e0 [ 492.974828][T11720] Call Trace: [ 492.978206][T11720] [ 492.981157][T11720] __wake_up+0x112/0x190 [ 492.985445][T11720] ? __wake_up_bit+0x1e0/0x1e0 [ 492.990253][T11720] ? do_raw_spin_lock+0x121/0x2c0 [ 492.995392][T11720] ? __rwlock_init+0x150/0x150 [ 493.000201][T11720] txEnd+0x8a/0x520 [ 493.004114][T11720] jfs_truncate_nolock+0x1e5/0x2c0 [ 493.009422][T11720] ? jfs_direct_IO+0x220/0x220 [ 493.014236][T11720] ? block_truncate_page+0x710/0x9f0 [ 493.019545][T11720] ? jfs_dirty_inode+0x240/0x240 [ 493.024510][T11720] jfs_truncate+0xce/0x140 [ 493.029150][T11720] jfs_setattr+0x4f8/0x750 [ 493.033786][T11720] ? jfs_fsync+0x1b0/0x1b0 [ 493.038243][T11720] notify_change+0xb0d/0xe10 [ 493.042868][T11720] do_truncate+0x19b/0x220 [ 493.047836][T11720] ? put_page_bootmem+0x2c0/0x2c0 [ 493.052984][T11720] ? bpf_lsm_path_truncate+0x9/0x10 [ 493.058209][T11720] vfs_truncate+0x266/0x300 [ 493.062767][T11720] do_sys_truncate+0xe0/0x1a0 [ 493.067453][T11720] ? break_lease+0xd0/0xd0 [ 493.071897][T11720] ? lockdep_hardirqs_on+0x98/0x150 [ 493.077130][T11720] do_syscall_64+0x55/0xb0 [ 493.081559][T11720] ? clear_bhb_loop+0x40/0x90 [ 493.086251][T11720] ? clear_bhb_loop+0x40/0x90 [ 493.090942][T11720] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 493.096882][T11720] RIP: 0033:0x7f410af8eec9 [ 493.101406][T11720] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 493.121638][T11720] RSP: 002b:00007f410bde1038 EFLAGS: 00000246 ORIG_RAX: 000000000000004c [ 493.130428][T11720] RAX: ffffffffffffffda RBX: 00007f410b1e5fa0 RCX: 00007f410af8eec9 [ 493.138585][T11720] RDX: 0000000000000000 RSI: 0000000000040006 RDI: 0000200000000040 [ 493.146829][T11720] RBP: 00007f410b011f91 R08: 0000000000000000 R09: 0000000000000000 [ 493.155185][T11720] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 493.163258][T11720] R13: 00007f410b1e6038 R14: 00007f410b1e5fa0 R15: 00007ffddd908458 [ 493.171438][T11720] [ 493.174476][T11720] Modules linked in: [ 493.178401][T11720] ---[ end trace 0000000000000000 ]--- [ 493.184207][T11720] RIP: 0010:__wake_up_common+0x23c/0x4e0 [ 493.190099][T11720] Code: 24 00 00 00 00 49 83 c5 40 4d 39 ef 0f 84 ed 01 00 00 45 31 f6 eb 09 4d 39 ef 0f 84 df 01 00 00 4c 89 fd 4c 89 f8 48 c1 e8 03 <80> 3c 10 00 74 12 48 89 ef e8 f6 81 78 00 48 ba 00 00 00 00 00 fc [ 493.210079][T11720] RSP: 0018:ffffc900110b79b8 EFLAGS: 00010046 [ 493.216162][T11720] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 493.224225][T11720] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffffc90002609030 [ 493.232247][T11720] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffc900110b7a60 [ 493.240323][T11720] R10: dffffc0000000000 R11: fffff52002216f20 R12: ffffc90002609030 [ 493.248322][T11720] R13: ffffc90002609070 R14: 0000000000000000 R15: 0000000000000000 [ 493.256379][T11720] FS: 00007f410bde16c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 493.265421][T11720] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 493.272101][T11720] CR2: 0000200000024000 CR3: 000000002f8a6000 CR4: 00000000003506e0 [ 493.280122][T11720] Kernel panic - not syncing: Fatal exception [ 493.286588][T11720] Kernel Offset: disabled [ 493.290934][T11720] Rebooting in 86400 seconds..