last executing test programs: 13m5.998367845s ago: executing program 3 (id=4): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000005600)='/dev/comedi4\x00', 0x0, 0x0) r1 = getuid() syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x22000406, &(0x7f0000000080)={[], [{@euid_eq={'euid', 0x3d, r1}}], 0x2c}, 0x83, 0x4bb, &(0x7f00000000c0)="$eJzs3MtvG8UfAPDvbh59N2l//QF9QA0FEVFImrRADxwAgdQLEhIcyjGkoSpNW9QEiVYVDQiVI+IvAI5ISJy4cAIJIeAE4gp3hFShXlo4IKO1dxO7sR3HeRjqz0eyM7MPz3x3d9azO1kH0LNK2VsSsT0ifomIoWq2foFS9c+tG1em/rxxZSqJcvmlP5LKcjdvXJkqFi3W25ZnRtKI9L0k9jcod/bS5bOTMzPTF/P82Ny5N8ZmL11+7My5ydPTp6fPTxw/fuzo+JNPTDzeVhxXl5mfxXVz39sXDuw98cqHL0yV49XvP8vquz2fXxtH1XBb5bZSilKUc4tTByvvD6360/9ddtSkk/4uVoQV6YuIbHcNVNr/UPTF4s4biuffXch806UKAusm+27atWRqX/43Xfj+Au5EiTYOPar4xs+uf4vXRvY/uu36M9n7dCX+W/mrOqc/0uxadrh6xd7XZP27Wn98eWiZ8rdHxMn5vz7KXtHwPgQAwNr6Kuv/PNqo/5fW9W125mMowxFxOCJ2R8T/ImJPRPw/7wfdHRH3rLD80m35pf2fn7Z0FFibsv7fU/nYVn3/L82XSBZyOyrxDySvnZmZPpJvk5EY2JTlx1uU8fVzP3/QbF6ppv+XvbLyi75gXo/f+zfVr3Nqcm5yFSHXuf5OxL7+RvEnCyMB2RbYGxH7Ovj8bJudeeTTA1l657al85ePv4U1GGcqfxLxcHX/z8dt8ReSaknNxifHNsfM9JGx4qhY6ocfr71Ymx+oSdfFv7m9mDZ3GmwD2f7f2vD4z+MvmkExXju78jKu/fp+02uapfs/iZPztUvkx3/NWSA7/geTlyvpwXzaW5NzcxfHIwbzCXXTJxbXLfLF8ln8I4cat//dEX9/nK+3PyKyg/jeiLgvIg7mdb8/Ih6IiEMt4v/u2Qdfb72FOjz+10AW/6lW+z9iOKkdr+8g0Xf22y+bld/e+e9YJTWST2nn/NduBVez7QAAAOC/Iq2MQSfpaJGuuTm1J7amMxdm5w6X4s3zp6pj1cMxkBZ3uoZq7oeO5/eGi/zEbfmjEbGr8p9GWyr50akLMzu6GThQeVanrv1Hmo6OVuf91uyfXoA7x4rG0WqfDvz8i7WvDLChPK8JvUv7h96l/UPv0v6hdzVq/1cjbnWhKsAG8/0PvUv7h96l/UPv0v6hJy19JL74oYVOnvRfTOw+sarV1z1RHlqXT55f+Vp96xRp1P5oR9NEEhGdFRFp62UG2yi9a4l02WWeXm6zDKzqNzGyxME8sSki2l3r6oZt1eIMkSRdOzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACsgX8CAAD//zMG3Y4=") r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x40086604, &(0x7f00000005c0)=@v2={0x2, @aes256, 0x0, '\x00', @c}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000005640)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x20, 0x1, &(0x7f00000056c0)=[0x0], 0x1, 0x0}) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket$netlink(0x10, 0x3, 0x6) bind$netlink(r3, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000640)={0xa, 0x4e22, 0x9, @loopback, 0x3e}, 0x1c) read(r0, 0x0, 0x0) 13m5.579969158s ago: executing program 3 (id=5): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x5c}}, 0x0) 13m5.394515037s ago: executing program 3 (id=6): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@barrier}, {@jqfmt_vfsold}, {@noquota}, {@min_batch_time={'min_batch_time', 0x3d, 0x7}}, {@journal_dev={'journal_dev', 0x3d, 0xd}}]}, 0x1, 0x4be, &(0x7f0000000500)="$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") mkdirat(0xffffffffffffff9c, &(0x7f00000009c0)='./bus\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000a00)='.\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000a40)={0x23e3, 0x0, 0xd, 0x2}) rename(&(0x7f0000000a80)='./file1\x00', &(0x7f0000000ac0)='./file0/file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000b00)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000b40)='./bus\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000bc0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000c00)='./bus\x00') 13m4.853030472s ago: executing program 3 (id=9): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x5, 0x559a, &(0x7f0000005680)="$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") openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000001c0)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) sendfile(r0, 0xffffffffffffffff, 0x0, 0xfffe82) ioctl$BTRFS_IOC_ENCODED_READ(r0, 0x80809440, &(0x7f0000000080)={&(0x7f0000000140)=[{&(0x7f0000000000)='\vH', 0xffffffab}], 0x1, 0x0, 0x0, 0x8000001003, 0x820000950, 0xed, 0x1, 0x4}) 13m3.166138464s ago: executing program 3 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x5c}}, 0x0) 13m2.582174274s ago: executing program 32 (id=14): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x5}]}]}, 0x5c}}, 0x0) 12m50.158912013s ago: executing program 2 (id=51): socket(0x1e, 0x805, 0x0) syz_mount_image$ext4(&(0x7f0000000380)='ext2\x00', &(0x7f00000003c0)='./file0\x00', 0x163c81, &(0x7f000000aa00), 0x1, 0x265, &(0x7f000000aa40)="$eJzs3T9oJFUcB/DfzO4m5g8haiMIKgQRDYTYCTaxUQhICCKCChGRNIoRYoKda2VjobVKKpsgdkZLSRNslIOrcncpcs3BXbjiwhV3xR67szmSzR7Zy252LpnPBzbzJ+/N7w3J982kmEwAhTUeETMRUYqIyYioRERyuMFL2We8ubk2tLUQUau9dztptMu2Mwf9RiKiGhFvRMRmmsTn5YjVjY92726/88oPK5WXf9v4cKivJ9m0t7vz7v6vc9//Ofv66v+Xb84lMROjR86r95I2+8pJxDNnUewJkZTzHgGdmP/mjyv13D8bERON/FcijeyH9+PywGYlXvvlUX1/unXp+X6OFei9Wq1SvwZWa0DhpBExGkk6FRHZeppOTWX38FdLw+kXS8tfTy4urXz5Wd4zFdAroxE7b/89+NdIS/5vlLL8AxdXPf/vz69fq6/vl051iMWxXg8K6It6/ic/+fbVOH3+gXNK/qG45B8uooGOWsk/FEh6dPMx819t3XGvl2MD+sr1H4qrXf4nOvvTATjnHuZ/sPnwD1AY7v+huOQfiutw/gGAYqkN5v0EMpCXvOcfAAAAAAAAAAAAAAAAAADguLWhrYWDT79q/vtzxN5bEVFuV7/UfGXBU42vw3eSerNMLYkk69aVj1/s8gBd+j3np6/Hrudb/78X8qs93lxWv4uI6XL5+O9f0vrKjNauJ3r6hO9XPu30SGfjzQ/yrX9/Pd/6s9sR/9Tnn+l2808azzWWbeaf7P+nRaXL+l95iQoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMC58SAAAP//pYNujg==") mkdirat(0xffffffffffffff9c, &(0x7f000000acc0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f000000ad00)='./debug\x00', &(0x7f000000ad40)='debugfs\x00', 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_open_dev$dvb_demux(&(0x7f000000b240), 0x0, 0x0) ioctl$DVB_DEMUX_DMX_SET_BUFFER_SIZE(r0, 0x6f2d, 0x2000) r1 = openat(0xffffffffffffff9c, &(0x7f000000b280)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f000000b2c0)='10000\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f000000b300)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f000000b340)='5', 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f000000b380)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f000000b3c0)='1', 0x1) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$xfs(&(0x7f000000b500), &(0x7f000000b540)='./file0\x00', 0x200800, &(0x7f000000b580)={[{@ikeep}, {@ikeep}, {@filestreams}, {@uqnoenforce}, {@uquota}]}, 0x8, 0x9606, &(0x7f000000b5c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) 12m46.495142677s ago: executing program 2 (id=60): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/class/video4linux/video0/dev_debug\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='3', 0x1) r1 = openat$vimc0(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r1, 0xc0205649, &(0x7f0000000200)={0x9b0000, 0x9, 0xffffffff, r0, 0x0, &(0x7f0000000240)={0x9a0910, 0x7, '\x00', @ptr=0x400}}) 12m45.547984774s ago: executing program 2 (id=62): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000380)=""/195, 0xc3}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0xf3f}], 0x2, 0x40002041, 0x0) 12m45.393732599s ago: executing program 2 (id=64): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) open(&(0x7f0000000ac0)='./bus\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000a980)='./file1\x00', 0x101042, 0x155) pwrite64(r0, &(0x7f000000a9c0)="02", 0x1, 0x20c00) 12m44.394714182s ago: executing program 2 (id=68): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000480), 0x2, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000040)={0x28, 0x2, r1, r1, 0x31440e, 0x2, 0x0, 0x1fbecb}) ioctl(r0, 0x3b8e, 0x0) 12m42.730896541s ago: executing program 2 (id=71): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000380)=""/195, 0xc3}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0xf3f}], 0x2, 0x40002041, 0x0) 12m42.247343931s ago: executing program 33 (id=71): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000140)="a92e81d0991808e33c2330164cf023df", 0xfffffc81}], 0x1, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000004a00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000240)=""/102, 0x66}, {&(0x7f0000000380)=""/195, 0xc3}], 0x2}, 0x6}, {{0x0, 0x0, 0x0}, 0xf3f}], 0x2, 0x40002041, 0x0) 12m41.839944763s ago: executing program 0 (id=74): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0xc4042, 0x17f) madvise(&(0x7f0000000000/0x900000)=nil, 0x900000, 0x15) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f0000000640)) 12m41.498793367s ago: executing program 0 (id=76): syz_emit_ethernet(0x52, &(0x7f00000002c0)=ANY=[], 0x0) 12m40.674785531s ago: executing program 0 (id=78): r0 = socket$nl_generic(0x10, 0x3, 0x10) creat(0x0, 0x4) syz_mount_image$ext4(&(0x7f0000000a80)='ext4\x00', &(0x7f0000000ac0)='./file1\x00', 0x2004000, &(0x7f0000000b00)={[{@dioread_nolock}, {@min_batch_time={'min_batch_time', 0x3d, 0x1}}, {@usrjquota}]}, 0xfe, 0x563, &(0x7f0000000b40)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001200)={0x11, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) mount$tmpfs(0x0, 0x0, 0x0, 0x8000, 0x0) syslog(0x2, &(0x7f000000aac0)=""/229, 0xe5) rename(&(0x7f00000010c0)='./file0/file1\x00', &(0x7f0000001100)='./file1\x00') sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x42804}, 0x84) 12m39.435931568s ago: executing program 0 (id=79): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x8004, &(0x7f00000000c0)={[{@discard}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@norecovery}]}, 0x1, 0x7b9, &(0x7f00000001c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000980)='./file1\x00', 0x42, 0x0) creat(&(0x7f0000000a00)='./bus\x00', 0x0) mount(&(0x7f0000000a40)=@loop={'/dev/loop', 0x0}, &(0x7f0000000a80)='./bus\x00', 0x0, 0x5000, 0x0) ioctl$LOOP_SET_STATUS64(0xffffffffffffffff, 0x4c04, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x3]}) r0 = openat(0xffffffffffffff9c, &(0x7f000000a980)='./file1\x00', 0x101042, 0x155) pwrite64(r0, &(0x7f000000a9c0)="02", 0x1, 0x20c00) 12m38.105604334s ago: executing program 0 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x14}}, 0x0) recvmmsg(r0, &(0x7f000000ee00)=[{{0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000001900)=""/268, 0x10c}, {&(0x7f0000001a40)=""/4099, 0x1003}, {&(0x7f0000002c40)=""/167, 0xa7}, {&(0x7f0000002a80)=""/170, 0xaa}], 0x4}, 0x3}, {{0x0, 0x0, 0x0}, 0xfffff800}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x10002, 0x0) 12m36.960061821s ago: executing program 0 (id=84): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x4800, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback, 0xfffffffe}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 12m36.398954638s ago: executing program 34 (id=84): r0 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0xffff, 0x4) sendto$inet6(r0, &(0x7f0000000040)="800037bbfa9ba1ce", 0x8, 0x4800, &(0x7f0000000080)={0xa, 0x0, 0x4, @loopback, 0xfffffffe}, 0x1c) recvmmsg(r0, &(0x7f00000000c0)=[{{0x0, 0x0, 0x0}, 0x5}], 0x1, 0x20, 0x0) 10m3.821210676s ago: executing program 1 (id=896): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=ANY=[@ANYBLOB], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 10m3.745293014s ago: executing program 1 (id=897): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x2108, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000180), 0x10, &(0x7f00000001c0)={&(0x7f0000000200)=@can={{0x2, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "e9f0ac92a64fc34e"}, 0x10}, 0x1, 0x0, 0x0, 0x2400c015}, 0x4000851) 10m3.596045999s ago: executing program 1 (id=898): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="50000000090601020000000000006ce6016000000900020073797a31000000000500010007000000280007800c00018008000140640101010c00148008000140ac1414bb0c00028008000140"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097e585"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 10m3.430150056s ago: executing program 1 (id=900): syz_mount_image$nilfs2(&(0x7f0000000240), &(0x7f0000000280)='./file2\x00', 0x0, &(0x7f00000002c0)=ANY=[], 0x1, 0xaf1, &(0x7f00000005c0)="$eJzs3V+IXFf9APBzd3c2u2n7y6a/RNc0tonVtmq7aTZrrAZNSoJgaIr4Uii+hDStwRjBCmopmOTJN1tKCj75B5/6UqoIFkRCn3wp2EAR8lQFfWiIWPChRpORnbln5t6Tmdydze7cnd3PB+6eufecO99zZ+/cuf/OPQHYsMZafxcWZrMQLrz5ypH3H/j79OKUg50SM62/E4WxRgghy8cnkvd7b7ydXv/gxRO90izMt/7G8fDk1c68d4QQzoZd4WKYCTsuXHr57fknjp07en73O68duLI6Sw8AABvL1y4eWNj+lz/ds/Xa6/ceCps60+P++UycMNXe7z+U7/jH/f+xUB5fTLdeToJ037Z03LA4jE2Xi473KFeM00jKTfSIvzhMJlVo9Cm3Kdw6/nhhWq/lhlEW1+OZkI3NhRA2d8bHxubm2sfkoXVcP5nNnTl1+tnna6oosOL+dV8IYVdhOHy+PL7WhoNroA7LHJproA4jORwaXqxrzbbal3lIQ3NL3VsggLb0euFNzmYrGq/zbhNLi3/18bHe88MKGPb6P1D8yZviTw81fqh5+ddA/F+ds8Vh5azXtSkuV/we3ZmPp9cR0vuXXv19eb6u9EpHeWp6PaKxxHr2u44wKtcX+tVzfMj1WK5+9U/Xi/XqS3kaP4cvl3LvK31/0v/pqPyPgd4+TM//GwyrODz2fv11GPkhlMYbt/NezZq3P8Dald4314zXR3OTFfmbKvKnKvKnK/I3V+TfUZEPG9lvvveT8FLWPd+VHtMPej48nme7K0//b8D6pOcjB42f3vc7qNuNn95PDGvZ744/dfKxZ56+1L7/P+us/zfy9T0ebszk362LeYF4vjA9rx7vq+82HCjnp+XuTupzV4/yrdfbyuWybd33CYXtzE31mC3Pt6VfuZ3lcjNJuel8mErqm+6fbE7mi/sfcbsaP6+JZHkbyXJMJvWI25WteZrWA5Yjro+t+/8LF63i/f9x/ZwNjezZU6dPPpqPx/X0j+ONTYvT9w6z0sCKSNv/dMfL7X9mQ7n9z52d6Y2x4nZhS3d61t4uvJG/X3n6fCdOYXrhRy3+zn1zfLpVfu7Ed04/s8LLDhvd8z984VvHT58++V0vlv3iK2ujGoO8iIcta6U+Xgz6Ytdqh6h5wwSsuj0/au8EPHLq28efO/ncyTP79u/fNz+//wv7Fva09uv3FPfui87WUFtgJXV/9OuuCQAAAAAAAAAAALBU3z965NK7b33+crv9f7f9X2z/H+/8je3/f5y0/0/bycd28LEd4NYe+a0yyQNWJ5NyjXz4/6S+25I425P5PpKnnX788vb/MVz6XNdYn48m0xt9RpPHCdz0vJTJ5BkkaX+Bn8jT83n6ywA1yno/wj9db3s83zr7sLCux+dTFJrwNj0feHTE/1trbSg80ii2/+75XKce7bUZLcNosVj3MgK9/WNDPf/7n90FH2C+h2uv90YbJoYb76eDrxPrZWj23Utfag82ACuj7v4//xbaceP5zzN/+OrU4hCLXX28vL1Mn18Kg/jzu+Xxtd7/5GrHT/vtG3b8upd/2P1/dvq/y7d/cbvXf/uX9Jg3s7y4//7ZlcuFsGHHUuOnyx+fA71tsPjX8vhxaR4MS4vf/EUSP70gtET/SeJvXmL8m5Z/5/Li/zePHz+2h+5favx2jbOxcj2mk+WI1//S88bR9WT547M9bxH/6y/0Wv5ldtR4I48PG9mo9DM7qGQ/orPTXtX/76C//7fb/2+nslm5Mul9GJ/Lx+OGON7nkPZ3Mmj94/0V8Xdge/L+WcXvm/5/R9sX87Tq+xD7/43r40z+k18Yb32WcbzR47Ndr9saGFXvbajrf8MarrQPg5Y3/1T99TcMMDTHlzFfp5+4muvfbDZX94RWhVqDU/vnX/dxQt3x6/78q6T9/6b78Gn/v2l+2v9vmp/2/5vmT+f/oX75af+/6eeZ9v+bpRVP3jftH3i2Iv9jFfk7eud3ot9TMf/OivyPV+Tv7uQfLJWI+ffecv5uuX7vf3dF/v0V+Z+syP9URf4DFfkPFfKLfUDH/E8n82dJ/noX26P0+/yA9Sttn+f7DxtHvP7T7/u/rZs/WSwy3FoCq+HV1/cefvrX35hpt/+f7JwPidfxDuXjjfzY6Af5eHrdOxTGF/Peysf/muSv9fMdsJGkz89If/8frMgHRle8z8v3GzagbKr35Dytem5Vv/18Rstn8vSzefpwnj6Sp3N5uidP9+bp/JDqx+o4/MZvD7yUdY/3tyT5S72fPG0PVHpOVAhh3xLrk54fGPR+9vQ5foO63fjLbA4GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQm7HW34WF2SyEC2++cuSpY6f2LE452Ckx0/o7URhrdOYL4dE8Hc/Tn+cvrn/w4olieiNPszAfspB1pocnr3Yi3RFCOBt2hYthJuy4cOnlt+efOHbu6Pnd77x24MrqfQIAAACw/v0vAAD//8AFCcQ=") syz_mount_image$fuse(0x0, &(0x7f000001abc0)='./file4\x00', 0x1018000, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f000001ac00)='./file0\x00', &(0x7f000001ac40), 0x10000, &(0x7f000001ac80)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file4'}}], [], 0x2c}) chdir(&(0x7f0000020440)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000020480)='./file1\x00', 0x22043, 0x69) 10m2.619286429s ago: executing program 1 (id=906): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x2108, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r1, 0x0, 0x4000851) 10m0.999313094s ago: executing program 4 (id=910): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="58000000020601080000000000000000030000000900020073797a3100000000050001000700000005000500020000000c000780080006400000040111000300686173683a6e65742c6e657400000000050004"], 0x58}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000070605000000000000000000010000020500010097e585"], 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) 10m0.64672741s ago: executing program 4 (id=911): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000000c0)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./dev/rfcomm0\x00', 0x802, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x5402, 0x0) 10m0.491488066s ago: executing program 4 (id=912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x5, 0x8}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x0, 0x3, {0x5, 0x2, 0x6}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000880) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'syzkaller0\x00'}) close(r1) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r8, 0x0, 0x0, 0x4010045, &(0x7f0000000140)={0x11, 0xf6, r7, 0x1, 0x80}, 0x14) 10m0.481715947s ago: executing program 1 (id=913): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f00000001c0)=0x0) mount(0x0, &(0x7f00000004c0)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000380), 0x20000044}]) 10m0.130838883s ago: executing program 35 (id=913): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) close(r0) io_setup(0x7, &(0x7f00000001c0)=0x0) mount(0x0, &(0x7f00000004c0)='./config\x00', &(0x7f0000000500)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000340)={0x4c5, 0x0, 0x0, 0x800000000001, 0x0, r0, &(0x7f0000000380), 0x20000044}]) 10m0.055843721s ago: executing program 4 (id=917): r0 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x0, &(0x7f0000000340)={[{@noflush_merge}, {@four_active_logs}, {@block_mode}, {@resuid}, {@inline_xattr}, {@nocheckpoint_merge}, {@discard}, {@nouser_xattr}, {@jqfmt_vfsv1}, {}, {@fsync_mode_strict}, {@age_extent_cache}, {@nocheckpoint_merge}, {@resuid}]}, 0x1, 0x552b, &(0x7f0000005a40)="$eJzs3M2LG2UYAPAn2W6/rYt48NaBIuxCE5rtB3qr2uIHtpSqB0+aTdKQNsksmzRde1HBo3jw7D8hCp48in+CB8/exIPiTahk3ol2q0Jx000/fj+YPDPvvHnyvGEJeWaWBPDEWsl+/7USx+JQRCxFxNGIYr9SboXzKTwXEccjonrXVinH/xrYHxGHI+LYNHnKWSlPfX5ycuLsL2/89u0PB/Yd+fKbHxe3amDRno+IwWbav1UpPm2qs3PXy/HmpFfEwZlJGdOJwY3yOE/xVmdjUMTmbF6ziKe7aX6+eXM0jdf6zdY0dnvXivHNYbeIo0l3lqd4wvXmVnHc7mwUsTfKi9i9neravp0+226PxilPu8z3QZE+xuNZTOOd7U5az+aNIraG43I85c3bne1pnJSxfLlo5f12UcfGbt7ph9ubveHN7WzS2Rr18mF2tt54od44V2ts5e3OuHOm1hy0z53JVrv96bTauNMcnO/mebffqbfywVq22m21ao1Gtnqhs9FrDrNGo366fqp2dq3cO5m9evmdrN/OVqfx5d7w5rjXH2XX8q0sPWMtW6+ffnEtO9HI3rp0Jbty9eLFS1fefu/Cu5dfuvT6K+Wkf5SVra6fWl+vNU7V1htrj+L6q/G/1v9JWXS2+sX3aW/X64ddSV9U7yQfLroagEfCffX/Jf0/MC87+v9Binlqw3fZ/29djXjw/X/o/+dC/7+A9X/88KwfduXeL6oAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwxflr+6rViZyUdHynHnyqHnimPKxFRjYg7/2Ip9u/IuVTmWf6P+cv31PBdJYoM09c4UG6HI+J8uf3x9IN+FwAAAODx9fVHxz9L3Xp6WFl0QeyldNGmevT9OeWrRMTyys9zyladPjw7p2TF3/e+2J5TtuIC1sE5JUuX3PbNK9t9WdoRDt4VKilU97QcAABgT+zsBPa2CwEAAGAvfbroAliMSsxuZc7uBRf/ef/3DcFDO44AAACAR1Bl0QUAAAAAD1zR//v9PwAAAHi8pd//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2bmf28SBKA7AzwYv7D8tWu19W9kblLEl7HGPEQWkCQrIgbSQBqiB3FJCBBEeh0DEIZLHthJ9n+RMxjI/3iA4zIw0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAECX7qv14vbq93XbnN2+nTyjAQAAAC7ZVutF/c8s9b829783t342/SIiyoi4NHcfxaezzFGTU708f3P6fPWqhruIOuHwHpPm+hIRf5rr8UfXnwIAAAB8XJvlap5m6+nPbOiC6FNatCm//c2UV0RENXvIlFYe8n5lCqu/3+P4nymtXsCaZgpLS27jXGlvUv/cj6t205OmSE158WXHIrONHQAA6NHorOl3FgIAAECf/g1dAMMo4nkr87gVOElNs733+awHAAAAvEPF0AUAAAAAnavn/z2d/7d3/h8AAAAMI53/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQJe21XqxWa7mbXN2+3byjAYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAntifdxQIgTAIg73rO5O5/2GlQVNTkyoQPv7GYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgze/+8n9iapxJ5l4bS88jydqpsXVq7J0bR38YX78GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgYn/uTiAEgiAM9v3t6Zts/sFKi8YgQhUIHzOMsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMATvc4v7ys+jS3Jt9PGr+OZZHTV+HfVWHrQWHswj1+Oe18EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAzs79vMZRxQEAfzOzs7VVcY2yh4goeNCL3W5ra2/iQQke/BOEkG5r7NYfbQ62FDEXb5JzL6JHEUGJt/4PPbfQS731sIcKnpU3O5OdJgFXpTOb5POBN++7wzDv+14g5DtvsgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQDR5dxZn8dCbxml57u6jm2uxv7erj25v3V+OLcZJk0kfDC/XPyT99hIBAADg6Miq+j6E8CDfXol92ivq/7y6Jtb83z87jat6fnfdX/VV7R/bb78+fHFnoN50nHjTi+vj0am9qXSe3CwX23P/eEWnWPni2UtW/EDSDzZfmOTFeibf3rnzXrcIjzWRLQDwX5ys+jKo/h6K/bDNxAA4Mjq1wruq/7NeuzkBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANGGyGZ6u4iSEsNyZxdG9RzfX9utvb91frtq5W7e2wteze8Zb5CGEi+vj0alGZ7PYrl2/cXl1PB5dbT54JYTQ1ujvlNO//NEcF4fQyvoc9CAt17j1fKpEFmNZDkrQ0i8kAAAOrbxssa5/kG+vxHPJUgh//fB4/f96LQ5z1v8PPz53tz5Wvf4fNjbDxTfYuPL54Nr1G2+uX1m9NLo0+vSt08O3h2fOnz17flA8Kxl4YgIAAMD/0y1bvf5Pl/bu/5+oxWHO+v+L74Zf1cfK1P/7mm36tZ0JAADA0fb8q3/+kexzPul2w5erGxtXh9PjzufT02MLqf5rx8pWr/+zpbazAgAAAJow2Uwe2/+/UIvDnPv/z/z40s/1e2YhhOPl/v/Jtc/GF5qbzkJr4t+J254jAAAA7Tpetvr+f168/5/uvPKQhhDeeG0al18DOFf9n73/zU/1serv/59pbooLKe1P16Po+yF0+m1nBAAAwGH2VNlisf97vr3yyS8nPux6/x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACgaX8HAAD//6zHQEI=") read$FUSE(0xffffffffffffffff, &(0x7f0000000b40)={0x2020}, 0x2034) syz_usb_connect(0x0, 0x2e, &(0x7f0000002b80)=ANY=[@ANYBLOB="12010002000000404406478000010102030109021c00010100bb94aedc030000f20000000a240100010a00020102"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002bc0)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000002c00)='./debug\x00', &(0x7f0000002c40)='debugfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002c80)='./debug/failslab/times\x00', 0x2, 0x0) write(r1, &(0x7f0000002cc0)='10000\x00', 0x5) close(r1) close(0xffffffffffffffff) r2 = openat(0xffffffffffffff9c, &(0x7f0000002d00)='./debug/failslab/probability\x00', 0x2, 0x0) write(r2, &(0x7f0000002d40)='5', 0x1) r3 = openat$make_it_fail(0xffffffffffffff9c, &(0x7f0000002d80)='/proc/thread-self/make-it-fail\x00', 0x1, 0x0) write(r3, &(0x7f0000002dc0)='1', 0x1) r4 = syz_open_dev$dvb_demux(&(0x7f0000002e00), 0x0, 0x2) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r4, 0x40146f2c, 0x0) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000002e80)=@base={0x1, 0x4, 0x4, 0xa, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000002f00)=@base={0x11, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x6}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002f80)={0x1, 0x9, &(0x7f0000003040)=@raw=[@map_fd={0x18, 0x1, 0x1, 0x0, r5}, @ldst={0x2, 0x0, 0x3, 0xa, 0x0, 0xfffc}, @alu={0x7, 0x1, 0xb, 0x2, 0xa}, @alu={0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc}, @exit, @exit, @ldst={0x1, 0x0, 0x3, 0x1}, @exit], &(0x7f00000030c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$DVB_DEMUX_DMX_START(r4, 0x6f29) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000003100)={'batadv_slave_0\x00'}) ioctl$OCFS2_IOC_GROUP_ADD(r5, 0x40186f02, 0x0) add_key(&(0x7f0000018540)='asymmetric\x00', 0x0, &(0x7f0000018580)="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", 0x554, 0xfffffffffffffffd) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f0000018c40), 0x0, 0x0) 9m56.63201115s ago: executing program 4 (id=929): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f00000000c0)=0x2108, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$can_raw(r1, 0x0, 0x4000851) 9m55.100156427s ago: executing program 4 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a00000005000100070000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 9m54.532085125s ago: executing program 36 (id=933): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000002440)=ANY=[@ANYBLOB="5c00000002060104000000000000000005000003050005000a00000005000100070000000500"], 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x40c0) 7m39.402760897s ago: executing program 7 (id=2229): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b7040000000000008500000057000000"], 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) 7m39.332367984s ago: executing program 7 (id=2231): socket$inet6_icmp(0xa, 0x2, 0x3a) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0xf, 0x4, 0x4, 0x4, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x10, 0x6, &(0x7f00000004c0)=@raw=[@map_fd={0x18, 0x2, 0x1, 0x0, r0}, @generic={0xbf, 0x3, 0xa}, @generic={0xb7, 0x4}, @generic={0x85, 0x0, 0x0, 0x0, 0x3c}, @generic={0x95}], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg=0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) socket(0x2, 0x80805, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0x0, {0x60, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xfff2, 0xe}, {0xffff, 0xfff2}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x2000c8d1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0x0, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000ff070000000000000300000018110000", @ANYRES32, @ANYBLOB="fffffffffffffff6b702040001"], 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='devices.list\x00', 0x26e1, 0x0) close(r1) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) 7m39.199285827s ago: executing program 7 (id=2234): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000700)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000740)={'syzkaller1\x00', @link_local}) socket$nl_route(0x10, 0x3, 0x0) write$tun(r0, &(0x7f0000000980)={@val={0x0, 0x86dd}, @val={0x0, 0x0, 0x11, 0x800}, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "ec9700", 0xf88, 0x2c, 0x0, @local, @mcast2, {[@fragment={0x11}], @pkt_toobig={0x2, 0x0, 0x0, 0x1ff000, {0xf, 0x6, '*zc', 0x3ff, 0x0, 0xff, @dev={0xfe, 0x80, '\x00', 0x3c}, @loopback, [@routing={0x11, 0x14, 0x0, 0xa3, 0x0, [@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private2, @empty, @remote, @loopback, @remote, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x40}}]}, @hopopts={0x3a, 0x1d2, '\x00', [@generic={0x7, 0xe91, "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"}]}], "ab0924172f9c2a1d"}}}}}}, 0xfbe) 7m38.850086393s ago: executing program 7 (id=2238): mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0a000000080102000800000005"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000001440)={r0, 0x0, 0x0, 0x11}, 0x20) 7m38.78667224s ago: executing program 7 (id=2239): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000800)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r2, r1, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00', 0x30, 0x3a, 0x0, @private0, @mcast2, {[], @dest_unreach={0x1, 0x4, 0x0, 0x0, '\x00', {0xd, 0x6, "310300", 0xf4e, 0x0, 0x1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, @private2={0xfc, 0x2, '\x00', 0x1}}}}}}}}, 0x0) 7m38.617716957s ago: executing program 7 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xe8}}, 0x0) unshare(0xa020480) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0xa, 0x2, 0x0, 0x5, 0x1, 0x8dab, [{0xd, 0x4, 0xb}, {0x8, 0x4, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x5}}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x2e, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/4096, 0x6a, 0x1000, 0x1, 0x6}, 0x28) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xd693, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000001640), 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x80000000, 0x8006, 0xe, 0x7}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001680)=r5, 0x4) listen(r6, 0xd3) 7m23.385270319s ago: executing program 37 (id=2241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[], 0xe8}}, 0x0) unshare(0xa020480) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_int(r1, 0x0, 0x6, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000180)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000015c0)={&(0x7f0000000540)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@union={0xa, 0x2, 0x0, 0x5, 0x1, 0x8dab, [{0xd, 0x4, 0xb}, {0x8, 0x4, 0x6}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5, 0x5}}, @volatile={0x5, 0x0, 0x0, 0x9, 0x1}]}, {0x0, [0x2e, 0x2e, 0x2e, 0x2e, 0x61, 0x5f, 0x2e, 0x2e]}}, &(0x7f00000005c0)=""/4096, 0x6a, 0x1000, 0x1, 0x6}, 0x28) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001600)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0xd693, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, 0x0, &(0x7f0000000340)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r2, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x68}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000001640), 0x8) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, &(0x7f0000000140)={0x80000000, 0x8006, 0xe, 0x7}, 0x10) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r6, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f0000001680)=r5, 0x4) listen(r6, 0xd3) 8.688613045s ago: executing program 8 (id=4646): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000010f3044d0700000000000109022400010000200009040103020300020009210000401322180009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x0}, 0x0) 7.85167533s ago: executing program 6 (id=4648): r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000600)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c81aeb42796189eb0936a2c547a5c4d6351ed786c75beb926118fb7af49ecc00b545fe2563bd4294a982980afed3f9cf390f304611db4c6d7b64d64f38db5fde5cf7cadb29c697013b710e0218660671d0051ddd7fb7f5eb72a34f469b2e20600000091817eb5b952af43d1a40f4770e7220fcdfe25d3e9747e2af76ece5922724840afdba6f6f9e1d11db8561e8e836413ee04d6e084700ec1ac0e00569f0e4d4844f4710299aabbef615c33e276544669ce074528938ec0cc6d2af1ce7a47a64ad676f08507aa08d4210f979ef4aacfa4d524c9952d4743d65c3c527302942a8880116ce7ebc6c84778346f02c806bb466db7d313d7ebc7ea87823d4a8de0b697929fb3277012327827801f75ca3c5776d1a81acb160007f73148dfaf05ab7eed5a0e603ac468eb2bcd9de5f140758e74c20a9931187e0cbc857aa62a4cec8a62f7e31af3a78cdb8608551cdd68e83aebb3c9e05519184ff996c336553fa6bf16865cd6c4eacf1e360b029cdae41070f569a15bfd30f671c0a2fd183ea0eaae427505d56994ccfd0737aae3abbc45f56710d2e3f2662bf4514044f7fa03cde28fa1783970d3c676cb23cb1923a9feb233267ef663936ccf25f7597a2270724527bf468d22786d0548b25582180b72c51742c4e5c373a1008dd4cfba508e8f3f8ec35e6f1375a11b1fbe2dc09e9fe609e80112c8f5c895c922cd547def707b7252d7afa0030d008b1dd10fd4a56e30237a6e0229fb4562cb8df3d4e64b28e15c075e59554e9d61a6065d49c1e765a49195cf5d6b1e2b6192447817fedfe41fcdf9a4fc5af567906e4b6453da7b97eac255cc253d7bceba09f67da4815438583c6843366b76d9e9277558e48681e9cfa920b47aea0e5c46ef86ea7f1ef534cf7565b24b833ba2cbfe60e6271614850dd68f2a8a6be4f315b83abb8e2699ed8e2a4b3506f9dacbb180c4deeef7489f49faf34cdf4e91a402956564f854d71c892e4aada1c91647ce45d4834d000e8d5be1773ecae388e511228977a69d4cc67fbab60ee1555a219e41eebc31807a87d9cbe88a8b05959e1a988f6ea6ed73a6ac1ec2f3d74d73eaa91a39308e008b7fa1ecc2a020d950a777c0d8d131416ef55a4ec041113df65ba4aea92fcb3e2268510f316bd17f04993b6473338fe7c08fd9874e743a31582162232c7d6c614e7b3513abcc0feb99b2c9111300004fe291f5bd682c039183e61c1fdac90b2a015939a8d10b07a05e99e5772b4b9329275cef8de2b066d4e4d421e4a0a69cdd8f674b12f5b3fa764e4b1e9f4d767e252e37577813a03f18da16d598fddcf4be590d9f65f64c647cb2f330a614fe688d3d80182ed8aa59905a1cb0d3f034d927e070d71f56ee8e5c5bdf23c4f85c7a17834467bd6cf58218868fe53e3675c130bbe44bea271fa67999a0dc3dbf7c40dbba6e7d6cc0936bd8d466a1f041883c093a3a60743d0549b1a989a2fa41ff978388014434909053e279a21e7866bd4efb4a9f46b7a8b0d1d84d83020e9e68936ca3de030269784aa29a3e25146cd5b03d21ca82f961be925c9ad487fb24b1e35c2d043ee4b6a4aaf811c4308a6ced6b4c45e7513a3f0e1421cb3b0fd8571a7085c9a4b454e4ee8b44767428666cd108b78369b871ab32f36943e24976f4bb6bd4068cc19585a2de791e3f950d220b28f4ba268d8c9dbccc1a705b1b1c30881babdbc8cc4cf97b801e4d410fd7c61b34b1f1265b9d114c99fb469914a213bb289c5bdf5af3835d089a2300"/1504, 0x5e0}, {&(0x7f0000001140)="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", 0x117}, {&(0x7f0000000d00)="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", 0x17c}, {&(0x7f0000000ec0)="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", 0x142}, {&(0x7f0000001040)="15c84609b06c6d85a5ca6f3a9a242f214aee4e7093161b717090c0c852a05393abd8992d91576f57bbd3488e85d8456d6c6c09de5c5228ee18819665861f01a2823a7cfa8e9260a5fe3921638db2dc5156149f86916810f913a944e1c8cd7fccb63f37900c5b287016e512b050ca214125b2217260c9ce3019e88b80985402ff7ca34be1", 0x84}], 0x5, &(0x7f0000001100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}, 0x0) 7.800212495s ago: executing program 6 (id=4649): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x9, {[@global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 7.094996027s ago: executing program 8 (id=4651): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000180)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff00000006004015002400", 0x22}, {&(0x7f00000001c0)="0010e100000000000068169fce80554262374f2300b66d4e0cd8a517f72294e236263a171fed", 0x26}], 0x2}, 0x64000) 6.913721346s ago: executing program 8 (id=4654): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\"D'], 0x0}, 0x0) 6.103429578s ago: executing program 6 (id=4660): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 4.085911744s ago: executing program 5 (id=4666): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.992191623s ago: executing program 5 (id=4667): syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12013f00000000407f04ffff00000000000109022400010000000009040000"], 0x0) 3.798937733s ago: executing program 8 (id=4668): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x28de, 0x1102, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x78, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x7ffd, 0xfc, 0x1, {0x22, 0xeb}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000100)=ANY=[], 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x9, {[@global=@item_012={0x1, 0x1, 0x9, "f5"}, @global=@item_012={0x1, 0x1, 0x7, "84"}, @main=@item_4={0x3, 0x0, 0xb, "4070f43f"}]}}, 0x0}, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) 3.038628971s ago: executing program 6 (id=4669): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a00230040"], 0x17) 2.734406492s ago: executing program 5 (id=4672): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xf, &(0x7f00000005c0)=ANY=[@ANYBLOB="7a0af8ff000000007a0af0ff000000007a0ae8ff000000007a0ae0ff000000007a0ad8ff000000007a0ad0ff000000007a0ac8ff000000007a0ac0ff00000000bfa100000000000007010000d8ffffffbfa200000000000007020000c0ffffff85000000cf000000b70000000200000095"], &(0x7f0000000640)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$kcm(0x10, 0x2, 0x0) socket(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x1f, 0x15, &(0x7f0000000a00)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000230000207b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002000000850000008600000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b00)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2.604158315s ago: executing program 5 (id=4673): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)="6c300c82a1c64250797164e826be124616b335950d0b", 0x16}], 0x1, 0x0, 0x0, 0x2000001}, 0x8000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='R'], 0x97) 2.480324537s ago: executing program 6 (id=4674): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x8}]}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4f20, 0x1, @ipv4={'\x00', '\xff\xff', @remote}, 0x5}, 0x1c) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000100)={0x0, &(0x7f0000000140)}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000480)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0xfffffffffffffffc, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.420403783s ago: executing program 5 (id=4675): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 2.300065566s ago: executing program 5 (id=4676): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000200000040d80402c000000000000109022200010100803209040000010300000009211101000122"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000700)={0x24, 0x0, 0x0, &(0x7f0000000740)=ANY=[@ANYBLOB='\x00\"D'], 0x0}, 0x0) 2.299857346s ago: executing program 6 (id=4677): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[], 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000540)={0x1c, &(0x7f0000000380)={0x40, 0xc}, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.085976038s ago: executing program 8 (id=4678): openat$kvm(0xffffff9c, &(0x7f00000001c0), 0x800, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0x80a0000, 0x2000, &(0x7f0000000000/0x2000)=nil}) 2.036087933s ago: executing program 8 (id=4679): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000300)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 976.224251ms ago: executing program 9 (id=4680): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000680)='memory.swap.current\x00', 0x26e1, 0x0) close(r0) r1 = socket$kcm(0xa, 0x1, 0x0) sendmsg$kcm(r1, &(0x7f00000006c0)={&(0x7f0000000700)=@in6={0xa, 0x4001, 0x0, @empty}, 0x80, 0x0}, 0x20000001) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0xe, 0x4, &(0x7f0000000840)=ANY=[@ANYBLOB="b4050000fdff7f006110a40000000000c60000000000000095000000000000009f33ef60916e6e713f1e6b0b725ad99b817fd98cd824498949714e32f21dcc4ae5437aca55f21f3ca9e822d182054d54d53cd2b6da714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed00000000000000000000000000000000000000006c63b40e0c00000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f79829c90bd2114252581567acae715cbe1b57d5cda432c5b9443999f7d24195405f2e76ba88454cc9227069ccb7b37b41215c000000003be991e5e897284cdd6043058cec00000000000000"], &(0x7f00000009c0)='GPL\x00', 0x4, 0xfd90, &(0x7f0000000a00)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000b00), 0x366, 0x10, &(0x7f0000000b40), 0x1dd}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x50) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000bc0)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='&'], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) recvmsg$unix(r0, &(0x7f00000031c0)={0x0, 0x0, &(0x7f00000030c0)=[{&(0x7f0000000fc0)=""/4096, 0x1000}], 0x1}, 0x40010003) 948.672734ms ago: executing program 9 (id=4681): ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448c9, 0x0) 893.864359ms ago: executing program 9 (id=4682): syz_emit_vhci(&(0x7f0000000180)=ANY=[@ANYBLOB="02c92012000e00050014010a00230040"], 0x17) 319.580908ms ago: executing program 9 (id=4683): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000001c0)={'syzkaller0\x00', 0x1}) sendmsg$unix(0xffffffffffffffff, &(0x7f00000023c0)={0x0, 0x0, &(0x7f0000001880)=[{&(0x7f0000000780)="6c300c82a1c64250797164e826be124616b335950d0b", 0x16}], 0x1, 0x0, 0x0, 0x2000001}, 0x8000) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000200), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f0000000740)=ANY=[@ANYBLOB='R'], 0x97) 123.451668ms ago: executing program 9 (id=4684): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000600)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [], {0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}}, 0x28}, 0x1, 0x0, 0x0, 0x24040010}, 0x20000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 0s ago: executing program 9 (id=4685): mkdirat(0xffffffffffffff9c, &(0x7f0000001940)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000001980)='./proc\x00', &(0x7f00000019c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000001a40)='100', 0x3) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x84) write(r1, &(0x7f0000000180)="000000000902190001010080320904000001ff000000070581024000000902190001010080320904000001ff00000007058102000200120100020000004034127856000100000001", 0x48) openat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget/ep1in-bulk\x00', 0x24000, 0x60) mkdirat(0xffffffffffffff9c, 0x0, 0x1c8) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file2\x00', 0x2c3) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_delete(0x0) mount$overlay(0x0, &(0x7f0000000500)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): son: 3 [ 808.769253][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.776228][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.783178][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.790121][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.797041][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.803943][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.810921][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.817863][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.824778][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.831700][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.838631][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.845532][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.852464][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.859428][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.866358][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.874496][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.881425][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.888369][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.895267][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.902384][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.909322][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.916244][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.923150][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.930158][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.937084][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.943990][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.950914][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.957921][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.964869][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.973412][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.980388][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.987346][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 808.994256][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.001177][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.008097][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.015000][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.021937][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.028858][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.035756][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.042695][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.049627][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.056573][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.063467][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.070397][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.078567][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.085473][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.092410][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.099343][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.106288][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.113191][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.120111][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.127202][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.134105][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.141018][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.147935][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.154842][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.161734][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.168709][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.175598][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.183784][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.190730][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.197666][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.204570][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.211617][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.218558][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.225468][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.232577][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.239524][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.246464][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.253389][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.260310][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.267243][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.274156][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.282313][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.289308][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.296289][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.303561][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.310498][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.317545][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.324466][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.331434][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.338359][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.345258][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.352216][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.359162][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.366064][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.373636][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.381750][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.388689][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.395598][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.402522][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.409449][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.416431][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.423358][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.430282][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.437251][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.444169][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.451126][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.458049][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.464949][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.471879][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.478794][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.487063][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.493986][T21455] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 809.936031][ T5889] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 810.061847][ T5889] cx231xx 6-1:0.1: Failed to read PCB config [ 810.124503][ T5889] cx231xx: probe of 6-1:0.1 failed with error -71 [ 810.218115][ T5889] usb 6-1: USB disconnect, device number 74 [ 810.546358][T11041] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 810.659146][ T5889] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 810.748906][T11041] usb 7-1: Using ep0 maxpacket: 32 [ 810.770240][T11041] usb 7-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 810.794151][T11041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.820301][T11041] usb 7-1: config 0 descriptor?? [ 810.832760][T21481] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4460'. [ 810.873595][T11041] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 810.880941][ T5889] usb 6-1: Using ep0 maxpacket: 8 [ 810.939953][ T5889] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 810.958672][T21481] bridge6: entered allmulticast mode [ 810.976235][ T5889] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 810.992259][T21481] bond6: (slave bridge6): Enslaving as an active interface with an up link [ 811.001310][ T5889] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 811.044772][ T5889] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 811.056572][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.056709][T21481] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4460'. [ 811.099753][ T5889] hub 6-1:1.0: bad descriptor, ignoring hub [ 811.114602][ T5889] hub: probe of 6-1:1.0 failed with error -5 [ 811.118580][ T5855] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 811.128270][ C1] net_ratelimit: 62 callbacks suppressed [ 811.153756][ T5889] cdc_wdm 6-1:1.0: skipping garbage [ 811.169504][ T5889] cdc_wdm 6-1:1.0: skipping garbage [ 811.174888][ T5889] cdc_wdm 6-1:1.0: skipping garbage [ 811.181015][ T5889] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 811.379339][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 811.390696][ T5855] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 811.399949][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 811.417003][ T5855] usb 9-1: config 0 descriptor?? [ 811.437913][ T23] usb 6-1: USB disconnect, device number 75 [ 811.648653][ T5855] usbhid 9-1:0.0: can't add hid device: -71 [ 811.660169][ T5855] usbhid: probe of 9-1:0.0 failed with error -71 [ 811.684888][ T5855] usb 9-1: USB disconnect, device number 68 [ 811.898772][T21495] loop9: detected capacity change from 0 to 40427 [ 811.937206][T21495] F2FS-fs (loop9): invalid crc value [ 811.951557][T21495] F2FS-fs (loop9): Found nat_bits in checkpoint [ 812.047217][T21495] F2FS-fs (loop9): Start checkpoint disabled! [ 812.106466][T21495] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 812.366482][ T5855] usb 9-1: new full-speed USB device number 69 using dummy_hcd [ 812.446363][ T23] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 812.472955][T11041] gspca_vc032x: reg_w err -71 [ 812.480582][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.485916][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.485930][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.503330][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.509424][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.514856][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.533656][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.543376][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.554201][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.563373][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.584220][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 812.585000][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.601142][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.615225][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.620934][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.626352][ T5855] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 812.626427][ T5855] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 812.626451][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.651165][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.674649][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.680350][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.685846][T11041] gspca_vc032x: I2c Bus Busy Wait 00 [ 812.693645][ T5855] usb 9-1: config 0 descriptor?? [ 812.699918][ T23] usb 6-1: New USB device found, idVendor=0525, idProduct=1080, bcdDevice= 1.00 [ 812.709110][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.722269][T11041] gspca_vc032x: Unknown sensor... [ 812.728083][T21483] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 812.743508][T11041] vc032x: probe of 7-1:0.0 failed with error -22 [ 812.764411][T11041] usb 7-1: USB disconnect, device number 61 [ 813.032626][ T23] net1080 6-1:1.0 usb0: register 'net1080' at usb-dummy_hcd.5-1, NetChip TurboCONNECT, 82:0d:2e:8e:a5:47 [ 813.154916][ T5855] usbhid 9-1:0.0: can't add hid device: -71 [ 813.173402][ T5855] usbhid: probe of 9-1:0.0 failed with error -71 [ 813.194707][ T5855] usb 9-1: USB disconnect, device number 69 [ 813.486413][T11041] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 813.682634][T11041] usb 7-1: Using ep0 maxpacket: 32 [ 813.699927][T11041] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 813.728757][T11041] usb 7-1: config 0 has no interface number 0 [ 813.734921][T11041] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 813.786615][T11041] usb 7-1: config 0 interface 1 has no altsetting 0 [ 813.799199][T11041] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 813.822521][T11041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 813.836291][T11041] usb 7-1: Product: syz [ 813.840494][T11041] usb 7-1: Manufacturer: syz [ 813.845096][T11041] usb 7-1: SerialNumber: syz [ 813.870746][T11041] usb 7-1: config 0 descriptor?? [ 813.945319][ T8] usb 6-1: USB disconnect, device number 76 [ 813.962891][ T8] net1080 6-1:1.0 usb0: unregister 'net1080' usb-dummy_hcd.5-1, NetChip TurboCONNECT [ 814.101926][T11041] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 814.161168][T11041] cx231xx 7-1:0.1: Failed to read PCB config [ 814.167666][T11041] cx231xx: probe of 7-1:0.1 failed with error -71 [ 814.187091][T11041] usb 7-1: USB disconnect, device number 62 [ 814.576343][ T5855] usb 9-1: new full-speed USB device number 70 using dummy_hcd [ 814.696507][T11041] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 814.788661][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 814.806280][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 814.836259][ T5855] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 814.857951][ T5855] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 814.876312][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 814.884333][ T5855] usb 9-1: SerialNumber: syz [ 814.896962][T11041] usb 7-1: Using ep0 maxpacket: 32 [ 814.905820][T11041] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 814.924603][T21530] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 814.932856][T11041] usb 7-1: config 0 has no interface number 0 [ 814.936413][T21530] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 814.939518][T17649] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 814.974127][T11041] usb 7-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 814.992919][T11041] usb 7-1: config 0 interface 1 has no altsetting 0 [ 815.014144][T11041] usb 7-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 815.032939][T11041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.041506][T11041] usb 7-1: Product: syz [ 815.045690][T11041] usb 7-1: Manufacturer: syz [ 815.051400][T11041] usb 7-1: SerialNumber: syz [ 815.072742][T11041] usb 7-1: config 0 descriptor?? [ 815.146437][T17649] usb 6-1: device descriptor read/64, error -71 [ 815.162171][T21530] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 815.176549][T21530] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 815.302694][T11041] cx231xx 7-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 815.327540][T11041] cx231xx 7-1:0.1: Failed to read PCB config [ 815.333623][T11041] cx231xx: probe of 7-1:0.1 failed with error -71 [ 815.360962][T11041] usb 7-1: USB disconnect, device number 63 [ 815.375950][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 815.386274][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 815.426275][T17649] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 815.494359][ T1149] kworker/u4:7: attempt to access beyond end of device [ 815.494359][ T1149] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 815.509369][ T1149] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 815.517478][ T1149] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 815.604521][T17649] usb 6-1: device descriptor read/64, error -71 [ 815.727033][T17649] usb usb6-port1: attempt power cycle [ 815.743282][ T5855] cdc_ether: probe of 9-1:1.0 failed with error -71 [ 815.762095][ T5855] usb 9-1: USB disconnect, device number 70 [ 815.895034][T21548] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4469'. [ 816.001918][T21553] bridge7: entered allmulticast mode [ 816.012322][T21553] bond7: (slave bridge7): Enslaving as an active interface with an up link [ 816.059929][T21548] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4469'. [ 816.146334][T17649] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 816.187604][T17649] usb 6-1: device descriptor read/8, error -71 [ 816.406380][ C0] net_ratelimit: 63 callbacks suppressed [ 816.464686][T21555] loop6: detected capacity change from 0 to 40427 [ 816.476322][T17649] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 816.484950][T21555] F2FS-fs (loop6): invalid crc value [ 816.517239][T17649] usb 6-1: device descriptor read/8, error -71 [ 816.526145][T21555] F2FS-fs (loop6): Found nat_bits in checkpoint [ 816.566337][ T5855] usb 10-1: new high-speed USB device number 64 using dummy_hcd [ 816.587999][T21555] F2FS-fs (loop6): Start checkpoint disabled! [ 816.636534][T21555] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 816.644820][T17649] usb usb6-port1: unable to enumerate USB device [ 816.686567][ T5916] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 816.766273][ T5855] usb 10-1: Using ep0 maxpacket: 32 [ 816.781621][ T5855] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 816.806454][ T5855] usb 10-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 816.831511][ T5855] usb 10-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 816.846556][ T5855] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.866389][ T5855] usb 10-1: Product: syz [ 816.870661][ T5855] usb 10-1: Manufacturer: syz [ 816.875328][ T5855] usb 10-1: SerialNumber: syz [ 816.896296][ T5916] usb 9-1: Using ep0 maxpacket: 32 [ 816.904284][ T5855] usb 10-1: config 0 descriptor?? [ 816.910853][ T5916] usb 9-1: config 0 has no interfaces? [ 816.929022][T21559] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 816.936662][ T5916] usb 9-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 816.950910][ T5916] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 816.965501][ T5916] usb 9-1: Product: syz [ 816.969847][ T5916] usb 9-1: Manufacturer: syz [ 816.974457][ T5916] usb 9-1: SerialNumber: syz [ 816.984057][ T5916] usb 9-1: config 0 descriptor?? [ 817.169814][ T5916] usb 10-1: USB disconnect, device number 64 [ 817.215047][ T5855] usb 9-1: USB disconnect, device number 71 [ 817.954265][T21580] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4480'. [ 818.133600][T21583] bridge8: entered allmulticast mode [ 818.140908][T17649] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 818.164720][T21583] bond8: (slave bridge8): Enslaving as an active interface with an up link [ 818.190639][T21580] netlink: 16 bytes leftover after parsing attributes in process `syz.9.4480'. [ 818.326556][T17649] usb 9-1: Using ep0 maxpacket: 32 [ 818.343104][T17649] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 818.359762][T17649] usb 9-1: config 0 has no interface number 0 [ 818.370491][T17649] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 818.381627][T17649] usb 9-1: config 0 interface 1 has no altsetting 0 [ 818.393759][T17649] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 818.433842][T17649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 818.443507][T17649] usb 9-1: Product: syz [ 818.457724][T17649] usb 9-1: Manufacturer: syz [ 818.462365][T17649] usb 9-1: SerialNumber: syz [ 818.489031][T17649] usb 9-1: config 0 descriptor?? [ 818.676287][ T5855] usb 10-1: new full-speed USB device number 65 using dummy_hcd [ 818.676625][ T5889] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 818.720627][T17649] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 818.742857][T17649] cx231xx 9-1:0.1: Failed to read PCB config [ 818.751305][T17649] cx231xx: probe of 9-1:0.1 failed with error -71 [ 818.767894][T17649] usb 9-1: USB disconnect, device number 72 [ 818.878371][ T5855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 818.904276][ T5855] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 818.920740][ T5889] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 818.931013][ T5855] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 818.934290][ T5889] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 818.965543][ T5889] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 818.978187][ T5889] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 818.999642][ T5855] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 819.014165][ T5889] usb 6-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 819.024873][ T5889] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 819.035249][ T5889] usb 6-1: config 2 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 819.045763][ T5889] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 819.047813][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 819.072230][ T5889] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 819.078193][ T5855] usb 10-1: SerialNumber: syz [ 819.090070][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.104105][ T5889] usb 6-1: Product: syz [ 819.110251][ T5889] usb 6-1: Manufacturer: syz [ 819.114878][ T5889] usb 6-1: SerialNumber: syz [ 819.121911][T21585] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 819.135945][ T5889] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 819.144865][T21585] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 819.161698][ T5889] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 819.180352][ T5889] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 819.265710][ T11] kworker/u4:0: attempt to access beyond end of device [ 819.265710][ T11] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 819.280386][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 819.291122][ T11] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 819.352606][T21587] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 819.375600][ T5889] usb 6-1: USB disconnect, device number 81 [ 819.381762][T17649] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 819.404830][ T5889] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 819.415638][T21585] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 819.438155][T21585] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 819.451712][ T5889] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 819.477394][ T5889] ti_usb_3410_5052 6-1:2.0: device disconnected [ 819.576358][T17649] usb 9-1: Using ep0 maxpacket: 32 [ 819.588290][T17649] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 819.603490][T17649] usb 9-1: config 0 has no interface number 0 [ 819.610305][T17649] usb 9-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 819.628002][T17649] usb 9-1: config 0 interface 1 has no altsetting 0 [ 819.640158][T17649] usb 9-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 819.656221][T17649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 819.668476][T17649] usb 9-1: Product: syz [ 819.672688][T17649] usb 9-1: Manufacturer: syz [ 819.677839][T17649] usb 9-1: SerialNumber: syz [ 819.687792][T17649] usb 9-1: config 0 descriptor?? [ 819.881627][ T5855] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 819.945250][T17649] cx231xx 9-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 819.976570][T17649] cx231xx 9-1:0.1: Failed to read PCB config [ 819.982643][T17649] cx231xx: probe of 9-1:0.1 failed with error -71 [ 820.020956][T17649] usb 9-1: USB disconnect, device number 73 [ 820.026396][ T5793] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 820.109695][ T5855] usb 10-1: USB disconnect, device number 65 [ 820.150356][ T5855] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 820.216981][ T5793] usb 7-1: device descriptor read/64, error -71 [ 820.487464][ T5793] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 820.628870][T21609] xt_hashlimit: size too large, truncated to 1048576 [ 820.666331][ T5793] usb 7-1: device descriptor read/64, error -71 [ 820.787139][ T5793] usb usb7-port1: attempt power cycle [ 821.208012][ T5793] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 821.281836][ T5793] usb 7-1: device descriptor read/8, error -71 [ 821.556609][T17649] usb 10-1: new high-speed USB device number 66 using dummy_hcd [ 821.576326][ T5793] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 821.606234][ C0] net_ratelimit: 54 callbacks suppressed [ 821.637080][ T5793] usb 7-1: device descriptor read/8, error -71 [ 821.760925][ T5793] usb usb7-port1: unable to enumerate USB device [ 821.776728][T17649] usb 10-1: Using ep0 maxpacket: 8 [ 821.802666][T17649] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 821.833715][T17649] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 821.872756][T17649] usb 10-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x76, skipping [ 821.915683][T17649] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 821.925556][T17649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.959544][T17649] hub 10-1:1.0: bad descriptor, ignoring hub [ 821.991646][T17649] hub: probe of 10-1:1.0 failed with error -5 [ 822.011748][T17649] cdc_wdm 10-1:1.0: skipping garbage [ 822.037174][T17649] cdc_wdm 10-1:1.0: skipping garbage [ 822.042528][T17649] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 822.256326][ T5793] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 822.277184][T17649] usb 10-1: USB disconnect, device number 66 [ 822.440606][ T5793] usb 6-1: New USB device found, idVendor=0cf2, idProduct=6250, bcdDevice= 0.00 [ 822.466210][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.474232][ T5793] usb 6-1: Product: syz [ 822.486248][ T5793] usb 6-1: Manufacturer: syz [ 822.491283][ T5793] usb 6-1: SerialNumber: syz [ 822.517326][ T5793] ums_eneub6250 6-1:1.0: USB Mass Storage device detected [ 822.556383][ T5793] scsi host1: usb-storage 6-1:1.0 [ 822.976426][ T5793] ums_eneub6250: probe of 6-1:1.0 failed with error 3 [ 823.138045][T17649] usb 6-1: USB disconnect, device number 82 [ 823.286564][ T5889] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 823.446709][ T5889] usb 7-1: device descriptor read/64, error -71 [ 823.736443][ T5889] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 823.906484][ T5889] usb 7-1: device descriptor read/64, error -71 [ 824.048155][T11041] usb 10-1: new full-speed USB device number 67 using dummy_hcd [ 824.056692][ T5889] usb usb7-port1: attempt power cycle [ 824.066441][ T5793] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 824.249789][T11041] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 824.273511][ T5793] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.280584][T11041] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 824.294750][T11041] usb 10-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 824.299669][ T5793] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 824.319447][T11041] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 824.329932][T11041] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 824.340184][T11041] usb 10-1: SerialNumber: syz [ 824.349219][T21651] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 824.363966][T21651] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 824.366384][ T5793] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 824.418034][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.466627][ T5793] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 824.476506][ T5889] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 824.507648][ T5889] usb 7-1: device descriptor read/8, error -71 [ 824.588841][T21651] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 824.596456][T21651] raw-gadget.1 gadget.9: fail, usb_ep_enable returned -22 [ 824.776815][ T5889] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 824.836473][ T5889] usb 7-1: device descriptor read/8, error -71 [ 824.976941][ T5889] usb usb7-port1: unable to enumerate USB device [ 825.023603][T11041] cdc_ether 10-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.9-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 825.245428][T11041] usb 10-1: USB disconnect, device number 67 [ 825.265182][T11041] cdc_ether 10-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.9-1, CDC Ethernet Device [ 825.694437][ T5855] usb 6-1: USB disconnect, device number 83 [ 825.717591][ T5855] idmouse 6-1:1.0: disconnected [ 825.778796][ T23] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 825.981245][ T23] usb 9-1: config 254 has an invalid interface number: 94 but max is 0 [ 826.007355][ T23] usb 9-1: config 254 has no interface number 0 [ 826.013696][ T23] usb 9-1: config 254 interface 94 altsetting 16 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 826.044840][ T23] usb 9-1: config 254 interface 94 has no altsetting 0 [ 826.055170][ T23] usb 9-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 826.066236][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.078126][T21688] fuse: Bad value for 'group_id' [ 826.089807][ T23] usb 9-1: Product: syz [ 826.096756][ T23] usb 9-1: Manufacturer: syz [ 826.104199][ T23] usb 9-1: SerialNumber: syz [ 826.396462][ T23] usb 9-1: USB disconnect, device number 74 [ 826.816233][ C0] net_ratelimit: 53 callbacks suppressed [ 827.286424][ T5889] usb 6-1: new full-speed USB device number 84 using dummy_hcd [ 827.492809][ T5889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 827.519222][ T5889] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 827.545750][T21710] loop8: detected capacity change from 0 to 40427 [ 827.554235][ T5889] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 827.584012][T21710] F2FS-fs (loop8): invalid crc value [ 827.598440][ T5889] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 827.599057][T21710] F2FS-fs (loop8): Found nat_bits in checkpoint [ 827.637833][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 827.668581][ T5889] usb 6-1: SerialNumber: syz [ 827.683587][T21711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 827.697930][T21711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 827.733380][T21710] F2FS-fs (loop8): Start checkpoint disabled! [ 827.788481][T21710] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e6 [ 827.999997][T21711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 828.046504][T21711] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 828.075571][T21713] loop9: detected capacity change from 0 to 40427 [ 828.365105][T21713] F2FS-fs (loop9): invalid crc value [ 828.412791][T21713] F2FS-fs (loop9): Found nat_bits in checkpoint [ 828.600713][T21713] F2FS-fs (loop9): Start checkpoint disabled! [ 828.668558][T21713] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e6 [ 829.748686][ T5889] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 829.916639][ T5793] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 829.959758][ T29] kworker/u4:2: attempt to access beyond end of device [ 829.959758][ T29] loop8: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 829.996397][ T29] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 830.003663][ T29] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 830.034635][ T5889] usb 6-1: USB disconnect, device number 84 [ 830.052188][ T5889] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 830.110658][ T5793] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 830.137527][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.410820][ T5793] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 830.698702][T21739] fuse: Bad value for 'group_id' [ 831.137915][ T5862] usb 9-1: new full-speed USB device number 75 using dummy_hcd [ 831.348460][ T5862] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 831.378851][ T5862] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.409180][ T5862] usb 9-1: Product: syz [ 831.413412][ T5862] usb 9-1: Manufacturer: syz [ 831.446394][ T5862] usb 9-1: SerialNumber: syz [ 831.456367][ T5793] usb 6-1: new high-speed USB device number 85 using dummy_hcd [ 831.470027][ T5862] usb 9-1: config 0 descriptor?? [ 831.679274][ T5793] usb 6-1: config 254 has an invalid interface number: 94 but max is 0 [ 831.697268][ T5793] usb 6-1: config 254 has no interface number 0 [ 831.713242][ T5793] usb 6-1: config 254 interface 94 altsetting 16 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 831.724828][ T5862] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 831.755780][ T5793] usb 6-1: config 254 interface 94 has no altsetting 0 [ 831.769995][ T5793] usb 6-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice=f1.7e [ 831.786238][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 831.804711][ T5793] usb 6-1: Product: syz [ 831.814665][ T5793] usb 6-1: Manufacturer: syz [ 831.830921][ T5793] usb 6-1: SerialNumber: syz [ 831.846261][ C1] net_ratelimit: 60 callbacks suppressed [ 832.109710][ T5793] usb 6-1: USB disconnect, device number 85 [ 832.922491][ T2956] kworker/u4:8: attempt to access beyond end of device [ 832.922491][ T2956] loop9: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 832.944586][ T2956] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 832.952520][ T2956] F2FS-fs (loop9): Stopped filesystem due to reason: 3 [ 833.006481][ T5793] usb 6-1: new high-speed USB device number 86 using dummy_hcd [ 833.194389][ T5793] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 833.223629][ T5793] usb 6-1: config 2 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 5 [ 833.243501][ T5793] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 833.263995][ T5793] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.272348][ T5793] usb 6-1: Product: syz [ 833.276765][ T5793] usb 6-1: Manufacturer: syz [ 833.281418][ T5793] usb 6-1: SerialNumber: syz [ 833.320419][ T5793] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 833.349628][ T5793] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 833.364408][ T5793] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 833.563680][T21766] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 833.574585][ T8] usb 6-1: USB disconnect, device number 86 [ 833.607043][ T8] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 833.624701][ T5862] dvb_usb_rtl28xxu: probe of 9-1:0.0 failed with error -32 [ 833.654566][ T5862] usb 9-1: USB disconnect, device number 75 [ 833.665304][ T8] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 833.705687][ T8] ti_usb_3410_5052 6-1:2.0: device disconnected [ 834.556415][ T5855] usb 9-1: new full-speed USB device number 76 using dummy_hcd [ 834.752147][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 834.763173][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 834.774257][ T5855] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 834.789632][ T5855] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 834.796439][ T8] usb 6-1: new full-speed USB device number 87 using dummy_hcd [ 834.799075][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 834.814518][ T5855] usb 9-1: SerialNumber: syz [ 834.827200][T21774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 834.835366][T21774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 834.998649][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 835.010982][ T8] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 835.021906][ T8] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 835.041409][ T8] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 835.051095][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 835.059526][ T8] usb 6-1: SerialNumber: syz [ 835.066653][T21774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 835.074334][T21774] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 835.084830][T21778] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.102706][T21778] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.325160][T21778] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.332686][T21778] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 835.518684][ T5855] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 835.816741][ T8] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 835.851390][ T8] usb 6-1: USB disconnect, device number 87 [ 835.957176][ T5855] usb 9-1: USB disconnect, device number 76 [ 835.983427][ T5855] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 836.261938][ T5862] usb 7-1: USB disconnect, device number 72 [ 836.896265][ C0] net_ratelimit: 51 callbacks suppressed [ 836.999575][T11041] hid_parser_main: 432 callbacks suppressed [ 836.999594][T11041] hid-generic 0000:0000:0000.000B: unknown main item tag 0x0 [ 837.065912][T11041] hid-generic 0000:0000:0000.000B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 837.086282][ T23] usb 10-1: new high-speed USB device number 68 using dummy_hcd [ 837.334959][ T23] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 837.358644][ T23] usb 10-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 837.389514][ T23] usb 10-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 837.403130][ T23] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 837.421617][ T23] usb 10-1: Product: syz [ 837.425906][ T23] usb 10-1: Manufacturer: syz [ 837.447007][ T23] usb 10-1: SerialNumber: syz [ 837.466571][ T23] ti_usb_3410_5052 10-1:2.0: TI USB 5052 2 port adapter converter detected [ 837.489758][ T23] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 837.507039][T11041] usb 6-1: new full-speed USB device number 88 using dummy_hcd [ 837.531699][ T23] usb 10-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 837.546380][ T5855] usb 9-1: new full-speed USB device number 77 using dummy_hcd [ 837.697019][T21809] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 837.716322][T11041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 837.735484][ T8] usb 10-1: USB disconnect, device number 68 [ 837.746752][T11041] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 837.779356][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 837.791312][ T8] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 837.807831][ T5855] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 837.813131][T11041] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 837.839922][ T8] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 837.860791][T11041] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.870664][T11041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 837.876346][ T5855] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 837.893190][T11041] usb 6-1: SerialNumber: syz [ 837.910455][ T8] ti_usb_3410_5052 10-1:2.0: device disconnected [ 837.932961][ T5855] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.945753][T21824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 837.962851][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 837.971136][T21824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 837.990557][ T5855] usb 9-1: SerialNumber: syz [ 838.024763][T21822] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 838.036454][T21822] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 838.211850][T21824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 838.236475][T21824] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 838.277497][T21822] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 838.284769][T21822] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 838.675846][T11041] cdc_ether 6-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.5-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 838.734115][ T5855] cdc_ether 9-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 838.954999][ T23] usb 9-1: USB disconnect, device number 77 [ 838.964850][ T23] cdc_ether 9-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 839.086950][ T8] usb 6-1: USB disconnect, device number 88 [ 839.118445][ T8] cdc_ether 6-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.5-1, CDC Ethernet Device [ 839.567186][T21879] netlink: 16 bytes leftover after parsing attributes in process `syz.6.4547'. [ 839.876420][ T23] usb 9-1: new high-speed USB device number 78 using dummy_hcd [ 840.071196][ T23] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 840.094404][ T23] usb 9-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 840.117230][ T5793] usb 6-1: new high-speed USB device number 89 using dummy_hcd [ 840.133683][ T23] usb 9-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 840.146700][ T23] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.154732][ T23] usb 9-1: Product: syz [ 840.159466][ T23] usb 9-1: Manufacturer: syz [ 840.164092][ T23] usb 9-1: SerialNumber: syz [ 840.182020][ T23] ti_usb_3410_5052 9-1:2.0: TI USB 5052 2 port adapter converter detected [ 840.210560][ T23] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 840.241176][ T23] usb 9-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 840.326572][ T5793] usb 6-1: Using ep0 maxpacket: 16 [ 840.334185][ T5793] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 840.362609][ T5793] usb 6-1: config 0 has no interface number 0 [ 840.385880][ T5793] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.404905][T21881] ti_usb_3410_5052_2 ttyUSB0: ti_open - no interrupt urb [ 840.413042][ T5793] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 840.434505][ T23] usb 9-1: USB disconnect, device number 78 [ 840.443775][T21885] loop6: detected capacity change from 0 to 40427 [ 840.466271][ T5793] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 840.483651][ T5793] usb 6-1: config 0 interface 1 has no altsetting 0 [ 840.508893][T21885] F2FS-fs (loop6): invalid crc value [ 840.530617][ T5793] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 840.541941][T21885] F2FS-fs (loop6): Found nat_bits in checkpoint [ 840.549278][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 840.575677][ T5793] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.602943][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 840.615143][ T5793] usb 6-1: config 0 descriptor?? [ 840.630574][ T5793] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 840.644328][ T23] ti_usb_3410_5052 9-1:2.0: device disconnected [ 840.762179][T21885] F2FS-fs (loop6): Start checkpoint disabled! [ 840.816937][T21885] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 841.079539][T21885] syz.6.4549: attempt to access beyond end of device [ 841.079539][T21885] loop6: rw=2049, sector=53248, nr_sectors = 1056 limit=40427 [ 841.093731][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.100749][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.107702][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.114603][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.121596][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.121627][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.136074][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.143090][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.150122][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.157185][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.164060][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.171030][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.178063][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.178095][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.191859][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.198928][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.205793][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.205825][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.219855][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226818][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226850][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226877][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226904][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226931][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.226957][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227428][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227456][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227482][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227508][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227534][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227560][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227594][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227621][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227647][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227673][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227698][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227724][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227747][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227772][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.227793][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.242257][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.269724][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332538][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332571][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332598][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332623][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332649][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332676][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332702][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332728][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332755][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332780][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332806][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332832][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332857][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332884][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332910][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332935][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332959][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.332984][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.333009][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.333034][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.333067][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.333097][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.353823][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.367744][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.381322][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.437033][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.450554][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.519359][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.554498][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.582278][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.595982][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.596015][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.610212][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.617270][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.624136][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.631071][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.631100][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.645278][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.652289][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.659252][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.666142][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.673121][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.680101][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.687630][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.694528][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.702124][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.709115][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.715997][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.722970][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.730054][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.736975][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.744445][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.751419][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.751449][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.765221][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.772473][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.779448][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.786408][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.793296][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.800255][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.807235][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.814127][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.821096][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.828090][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.834955][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.842546][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.849530][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.856483][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.863365][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.870370][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.877306][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.884168][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891132][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891162][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891187][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891214][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891238][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891264][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891288][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891312][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891339][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891365][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891389][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891415][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891440][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891467][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891493][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.891518][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.933169][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 841.940181][ C0] net_ratelimit: 50 callbacks suppressed [ 841.947440][T21885] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 842.092165][ T5793] usbhid 6-1:0.1: can't add hid device: -71 [ 842.098603][ T5793] usbhid: probe of 6-1:0.1 failed with error -71 [ 842.117651][ T5793] usb 6-1: USB disconnect, device number 89 [ 842.197487][T21913] netlink: 'syz.5.4556': attribute type 1 has an invalid length. [ 842.205236][T21913] netlink: 'syz.5.4556': attribute type 2 has an invalid length. [ 842.688950][ T8] usb 10-1: new high-speed USB device number 69 using dummy_hcd [ 842.718334][T11041] usb 6-1: new full-speed USB device number 90 using dummy_hcd [ 842.878735][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 842.911186][ T8] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 842.933393][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 842.955476][T11041] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 842.976625][T11041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 842.984689][T11041] usb 6-1: Product: syz [ 842.984707][T11041] usb 6-1: Manufacturer: syz [ 843.006781][ T8] usb 10-1: config 0 descriptor?? [ 843.016504][T11041] usb 6-1: SerialNumber: syz [ 843.040866][T11041] usb 6-1: config 0 descriptor?? [ 843.096283][ T5793] usb 7-1: new full-speed USB device number 73 using dummy_hcd [ 843.260066][ T8] usbhid 10-1:0.0: can't add hid device: -71 [ 843.269798][T11041] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 843.291164][ T8] usbhid: probe of 10-1:0.0 failed with error -71 [ 843.320968][ T5793] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 843.356307][ T5793] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1056, setting to 64 [ 843.391955][ T8] usb 10-1: USB disconnect, device number 69 [ 843.422743][ T5793] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 843.461081][ T5793] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.479061][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 843.492172][ T5793] usb 7-1: SerialNumber: syz [ 843.540144][T21931] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 843.558351][T21931] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 843.793119][T21931] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 843.814134][T21931] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 843.896866][ T8] usb 10-1: new full-speed USB device number 70 using dummy_hcd [ 844.138745][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 844.158848][ T8] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 844.215218][ T8] usb 10-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 844.256608][ T8] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 844.297964][ T8] usb 10-1: config 0 descriptor?? [ 844.306528][T21922] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 844.343756][ T5793] cdc_ether 7-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.6-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 844.521833][ T5793] usb 7-1: USB disconnect, device number 73 [ 844.585440][ T5793] cdc_ether 7-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.6-1, CDC Ethernet Device [ 844.753256][ T8] usbhid 10-1:0.0: can't add hid device: -71 [ 844.783935][ T8] usbhid: probe of 10-1:0.0 failed with error -71 [ 844.847631][ T8] usb 10-1: USB disconnect, device number 70 [ 845.128588][T11041] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -32 [ 845.157537][T11041] usb 6-1: USB disconnect, device number 90 [ 845.467776][T21972] netlink: 12 bytes leftover after parsing attributes in process `syz.9.4565'. [ 845.536598][ T5793] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 845.746457][ T5793] usb 7-1: Using ep0 maxpacket: 16 [ 845.913279][ T5793] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 845.921553][ T5793] usb 7-1: config 0 has no interface number 0 [ 845.928691][ T5793] usb 7-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 845.940040][ T5793] usb 7-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 845.949869][ T5793] usb 7-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 845.962699][ T5793] usb 7-1: config 0 interface 1 has no altsetting 0 [ 845.969468][ T5793] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 846.512088][ T5793] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.523599][ T5793] usb 7-1: config 0 descriptor?? [ 846.535563][ T5793] usbhid 7-1:0.1: fixing wrong optional hid class descriptors count [ 846.789590][T21990] FAULT_INJECTION: forcing a failure. [ 846.789590][T21990] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 846.804129][T21990] CPU: 1 PID: 21990 Comm: syz.5.4571 Not tainted syzkaller #0 [ 846.811618][T21990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 846.821669][T21990] Call Trace: [ 846.824946][T21990] [ 846.827870][T21990] dump_stack_lvl+0x18c/0x250 [ 846.832550][T21990] ? show_regs_print_info+0x20/0x20 [ 846.837746][T21990] ? load_image+0x420/0x420 [ 846.842242][T21990] ? __might_fault+0xaa/0x120 [ 846.846934][T21990] ? __lock_acquire+0x7eb0/0x7eb0 [ 846.851975][T21990] should_fail_ex+0x394/0x4c0 [ 846.856649][T21990] _copy_from_user+0x2f/0xe0 [ 846.861241][T21990] __se_sys_mount+0x179/0x3d0 [ 846.861275][T21990] ? __x64_sys_mount+0xc0/0xc0 [ 846.870710][T21990] ? lockdep_hardirqs_on+0x98/0x150 [ 846.875906][T21990] ? __x64_sys_mount+0x20/0xc0 [ 846.880673][T21990] do_syscall_64+0x55/0xb0 [ 846.885093][T21990] ? clear_bhb_loop+0x40/0x90 [ 846.889772][T21990] ? clear_bhb_loop+0x40/0x90 [ 846.894455][T21990] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 846.900348][T21990] RIP: 0033:0x7f19ded9f559 [ 846.904762][T21990] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 846.924371][T21990] RSP: 002b:00007f19dcff6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 846.932781][T21990] RAX: ffffffffffffffda RBX: 00007f19df025fa0 RCX: 00007f19ded9f559 [ 846.940750][T21990] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 846.948712][T21990] RBP: 00007f19dee36b50 R08: 0000200000000940 R09: 0000000000000000 [ 846.956678][T21990] R10: 0000000000000080 R11: 0000000000000246 R12: 0000000000000000 [ 846.964647][T21990] R13: 00007f19df026038 R14: 00007f19df025fa0 R15: 00007ffe6470cb98 [ 846.972629][T21990] [ 847.044662][ T5793] usbhid 7-1:0.1: can't add hid device: -71 [ 847.053528][ T5793] usbhid: probe of 7-1:0.1 failed with error -71 [ 847.093095][ T5793] usb 7-1: USB disconnect, device number 74 [ 847.366275][ C0] net_ratelimit: 51 callbacks suppressed [ 847.426431][ T5862] usb 9-1: new high-speed USB device number 79 using dummy_hcd [ 847.527606][ T23] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 847.646369][ T5862] usb 9-1: Using ep0 maxpacket: 32 [ 847.669684][ T5862] usb 9-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 847.683609][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.718479][ T5862] usb 9-1: config 0 descriptor?? [ 847.727990][ T5862] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 847.749417][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 847.764432][ T23] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 847.780295][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 847.802141][ T23] usb 6-1: config 0 descriptor?? [ 847.938766][ T5862] gspca_vc032x: reg_r err -32 [ 847.957113][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 847.974550][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 847.990130][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.007689][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.041665][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.056258][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.063614][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 848.071637][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.078706][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 848.097811][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.103141][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.120444][ T23] usb 6-1: USB disconnect, device number 91 [ 848.136270][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.156270][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.161592][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.187599][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.197718][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.203124][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.226883][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.236529][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.264103][ T5862] gspca_vc032x: I2c Bus Busy Wait 00 [ 848.281709][ T5862] gspca_vc032x: Unknown sensor... [ 848.297865][ T5862] vc032x: probe of 9-1:0.0 failed with error -22 [ 848.626325][ T23] usb 6-1: new full-speed USB device number 92 using dummy_hcd [ 848.774677][T22025] loop6: detected capacity change from 0 to 40427 [ 848.793129][T22025] F2FS-fs (loop6): invalid crc value [ 848.813386][T22025] F2FS-fs (loop6): Found nat_bits in checkpoint [ 848.822876][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 848.843036][ T23] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 848.874047][T22025] F2FS-fs (loop6): Start checkpoint disabled! [ 848.885369][ T23] usb 6-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 848.905696][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 848.915552][T22025] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 848.936815][ T23] usb 6-1: config 0 descriptor?? [ 848.942524][T21999] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 849.154324][T22025] syz.6.4577: attempt to access beyond end of device [ 849.154324][T22025] loop6: rw=2049, sector=53248, nr_sectors = 1056 limit=40427 [ 849.168546][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.175455][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.182439][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.189398][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.196317][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.203207][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.210199][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.217521][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.224539][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.232130][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.239431][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.246397][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.253280][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.260249][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.267179][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.274043][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.280975][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.288583][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.295493][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.302429][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.309399][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.316345][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.323688][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.330656][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.337713][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.344571][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.351555][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.358558][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.365440][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.372439][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.379386][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.386327][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.393450][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.400416][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.407429][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.414296][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.414326][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.421693][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.434959][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.434990][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.448862][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.455750][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.462732][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.469742][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.476711][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.483594][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.490574][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.497530][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.504410][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.511372][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.518300][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.525672][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.532692][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.539631][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546579][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546610][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546637][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546662][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546687][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546722][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546748][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546773][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546797][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.546820][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.560597][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.581126][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.601822][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.622737][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.643890][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.650860][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.657781][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.665049][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.672002][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.678929][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.678959][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.678987][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.679012][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.679037][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.679064][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.679089][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.679115][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699752][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699782][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699807][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699832][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699858][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699883][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699910][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699935][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699960][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.699986][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700012][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700038][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700062][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700088][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700112][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700139][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700164][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700190][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700216][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700242][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700267][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700290][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700316][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700342][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700367][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700392][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700419][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700444][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700469][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700495][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700521][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700546][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700571][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700597][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700621][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700647][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700672][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700705][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700732][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700758][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.700782][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728831][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728863][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728890][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728917][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728942][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728968][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.728996][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.729021][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.729046][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.729072][T22025] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 849.943189][ C1] raw-gadget.1 gadget.5: ignoring, device is not running [ 850.096456][ T23] usbhid 6-1:0.0: can't add hid device: -71 [ 850.102493][ T23] usbhid: probe of 6-1:0.0 failed with error -71 [ 850.177082][ T23] usb 6-1: USB disconnect, device number 92 [ 850.234349][T17649] usb 9-1: USB disconnect, device number 79 [ 850.383101][T11041] usb 10-1: new high-speed USB device number 71 using dummy_hcd [ 850.576514][T11041] usb 10-1: Using ep0 maxpacket: 32 [ 850.606353][T11041] usb 10-1: config 0 has an invalid interface number: 85 but max is 0 [ 850.614560][T11041] usb 10-1: config 0 has no interface number 0 [ 850.666461][T11041] usb 10-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 850.706547][T11041] usb 10-1: config 0 interface 85 has no altsetting 0 [ 850.736308][T11041] usb 10-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 850.760818][T11041] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 850.781051][T11041] usb 10-1: Product: syz [ 850.786591][T11041] usb 10-1: Manufacturer: syz [ 850.806288][T11041] usb 10-1: SerialNumber: syz [ 850.827375][T11041] usb 10-1: config 0 descriptor?? [ 851.095730][T11041] appletouch 10-1:0.85: Failed to read mode from device. [ 851.114126][T11041] appletouch: probe of 10-1:0.85 failed with error -5 [ 851.321688][T11041] usb 10-1: USB disconnect, device number 71 [ 851.616670][ T5862] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 851.814949][ T5862] usb 6-1: Using ep0 maxpacket: 32 [ 851.829567][ T5862] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 851.862825][ T5862] usb 6-1: config 0 has no interface number 0 [ 851.886595][ T5862] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 851.941347][ T5862] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 851.965023][ T5862] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.992524][ T5862] usb 6-1: Product: syz [ 852.001412][ T5862] usb 6-1: Manufacturer: syz [ 852.006045][ T5862] usb 6-1: SerialNumber: syz [ 852.057760][ T5862] usb 6-1: config 0 descriptor?? [ 852.068802][T22085] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.226295][T17649] usb 10-1: new high-speed USB device number 72 using dummy_hcd [ 852.321250][T22085] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 852.438181][T17649] usb 10-1: Using ep0 maxpacket: 32 [ 852.445528][T17649] usb 10-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 852.462552][T17649] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.485567][T17649] usb 10-1: config 0 descriptor?? [ 852.490852][ T11] net_ratelimit: 58 callbacks suppressed [ 852.524849][T17649] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 852.596695][T11041] usb 9-1: new high-speed USB device number 80 using dummy_hcd [ 852.706651][ T5916] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 852.730203][T17649] gspca_vc032x: reg_r err -32 [ 852.734915][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.744147][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.750252][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.758578][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.763931][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.769456][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.774843][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.783316][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.791142][T11041] usb 9-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 852.802856][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.816303][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.822180][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.837033][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.845058][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.850907][T11041] usb 9-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 852.860860][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.867528][T11041] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.875643][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.885746][T11041] usb 9-1: Product: syz [ 852.890020][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.898913][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.905365][T17649] gspca_vc032x: I2c Bus Busy Wait 00 [ 852.910801][T11041] usb 9-1: Manufacturer: syz [ 852.915395][T11041] usb 9-1: SerialNumber: syz [ 852.923662][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.935782][T17649] gspca_vc032x: Unknown sensor... [ 852.945030][ T5916] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 852.946415][T17649] vc032x: probe of 10-1:0.0 failed with error -22 [ 852.975078][T11041] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 852.991487][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 853.000504][T11041] dvb-usb: bulk message failed: -22 (3/0) [ 853.017932][ T5916] usb 7-1: config 0 descriptor?? [ 853.099869][T11041] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 853.120502][T11041] dvbdev: DVB: registering new adapter (Hanftek UMT-010 DVB-T USB2.0) [ 853.130822][T11041] usb 9-1: media controller created [ 853.198049][T22108] dvb-usb: bulk message failed: -22 (4/0) [ 853.270316][ T5916] usbhid 7-1:0.0: can't add hid device: -71 [ 853.282312][T11041] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 853.290783][ T5916] usbhid: probe of 7-1:0.0 failed with error -71 [ 853.328872][ T5916] usb 7-1: USB disconnect, device number 75 [ 853.478300][T11041] DVB: Unable to find symbol mt352_attach() [ 853.484314][T11041] dvb-usb: no frontend was attached by 'Hanftek UMT-010 DVB-T USB2.0' [ 853.514402][T11041] dvb-usb: bulk message failed: -22 (3/0) [ 853.566312][T11041] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully initialized and connected. [ 853.614406][T11041] usb 9-1: USB disconnect, device number 80 [ 853.825696][T11041] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 successfully deinitialized and disconnected. [ 853.826412][ T5916] usb 7-1: new full-speed USB device number 76 using dummy_hcd [ 854.038782][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 854.050218][ T5916] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 854.065230][ T5916] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 854.074479][ T5916] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.103279][ T5916] usb 7-1: config 0 descriptor?? [ 854.109463][T22112] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 854.527581][ T5916] usbhid 7-1:0.0: can't add hid device: -71 [ 854.533659][ T5916] usbhid: probe of 7-1:0.0 failed with error -71 [ 854.570524][ T5916] usb 7-1: USB disconnect, device number 76 [ 854.960464][T11041] usb 10-1: USB disconnect, device number 72 [ 854.997949][ T5862] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 855.026904][ T5862] asix: probe of 6-1:0.188 failed with error -71 [ 855.044268][ T5862] usb 6-1: USB disconnect, device number 93 [ 855.616793][ T5862] usb 10-1: new high-speed USB device number 73 using dummy_hcd [ 855.820804][ T5862] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 855.845723][ T5862] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 855.882413][ T5862] usb 10-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 855.911308][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 855.956861][ T5862] idmouse 10-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 856.833907][T20287] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 856.850997][T20287] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 856.861326][T20287] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 856.881306][T20287] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 856.891437][T20287] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 856.900493][T20287] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 857.124132][T22192] rxe_eth0 speed is unknown, defaulting to 1000 [ 857.536400][ T5855] usb 9-1: new high-speed USB device number 81 using dummy_hcd [ 857.610095][ T2956] net_ratelimit: 50 callbacks suppressed [ 857.691370][ T5862] usb 10-1: USB disconnect, device number 73 [ 857.731432][ T5862] idmouse 10-1:1.0: disconnected [ 857.761268][ T5855] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 857.801874][ T5855] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 857.822563][ T5855] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 857.853325][ T5855] usb 9-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 857.863742][ T5855] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 857.871792][ T5855] usb 9-1: Product: syz [ 857.871810][ T5855] usb 9-1: Manufacturer: syz [ 857.901128][T22204] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 857.915353][ T5855] garmin_gps 9-1:1.0: Garmin GPS usb/tty converter detected [ 857.936095][ T5855] usb 9-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 858.056526][ T8] usb 7-1: new high-speed USB device number 77 using dummy_hcd [ 858.281376][ T8] usb 7-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 858.324839][ T8] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 858.342922][T22192] chnl_net:caif_netlink_parms(): no params data found [ 858.367031][ T8] usb 7-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 858.426945][ T8] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 858.466584][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.514176][ T8] usb 7-1: Quirk or no altest; falling back to MIDI 1.0 [ 858.547914][ T8] usb 7-1: invalid MIDI out EP 0 [ 858.805757][ T8] snd-usb-audio: probe of 7-1:27.0 failed with error -22 [ 858.840995][ T8] usb 7-1: USB disconnect, device number 77 [ 858.976654][ T5799] Bluetooth: hci1: command tx timeout [ 859.118333][T22192] bridge0: port 1(bridge_slave_0) entered blocking state [ 859.125463][T22192] bridge0: port 1(bridge_slave_0) entered disabled state [ 859.167284][T22192] bridge_slave_0: entered allmulticast mode [ 859.174813][T22192] bridge_slave_0: entered promiscuous mode [ 859.213464][T22192] bridge0: port 2(bridge_slave_1) entered blocking state [ 859.226310][T22192] bridge0: port 2(bridge_slave_1) entered disabled state [ 859.233612][T22192] bridge_slave_1: entered allmulticast mode [ 859.261868][T22192] bridge_slave_1: entered promiscuous mode [ 859.416056][T22192] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 859.464051][T22192] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 859.587640][ T5855] usb 9-1: USB disconnect, device number 81 [ 859.619426][ T5855] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 859.643200][T22192] team0: Port device team_slave_0 added [ 859.658270][ T5855] garmin_gps 9-1:1.0: device disconnected [ 859.675365][T22192] team0: Port device team_slave_1 added [ 859.766723][T11041] usb 7-1: new high-speed USB device number 78 using dummy_hcd [ 859.794722][T22192] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 859.809684][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.843424][T22192] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 859.873750][T22192] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 859.885128][T22192] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 859.943265][T22192] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 859.972487][T11041] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 859.998898][T11041] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.022921][T11041] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 860.046343][T11041] usb 7-1: config 2 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 860.089764][T11041] usb 7-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 860.125518][T11041] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.164936][T11041] usb 7-1: Product: syz [ 860.197624][T11041] usb 7-1: Manufacturer: syz [ 860.202262][T11041] usb 7-1: SerialNumber: syz [ 860.224445][T11041] ti_usb_3410_5052 7-1:2.0: TI USB 5052 2 port adapter converter detected [ 860.263984][T22192] hsr_slave_0: entered promiscuous mode [ 860.280377][T11041] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 860.328210][T22192] hsr_slave_1: entered promiscuous mode [ 860.352462][T11041] usb 7-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 860.361007][T22192] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 860.368983][T22192] Cannot create hsr debugfs directory [ 860.454616][T22223] ti_usb_3410_5052_2 ttyUSB0: ti_open - submit interrupt urb failed, -90 [ 860.477022][ T23] usb 7-1: USB disconnect, device number 78 [ 860.544739][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 860.621186][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 860.658820][ T23] ti_usb_3410_5052 7-1:2.0: device disconnected [ 861.049650][ T5799] Bluetooth: hci1: command tx timeout [ 861.143665][T22192] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.329806][T22192] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.459243][T17649] usb 7-1: new high-speed USB device number 79 using dummy_hcd [ 861.540185][T22192] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.670844][T17649] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 861.684113][T22192] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 861.692952][T17649] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 861.712058][T17649] usb 7-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 861.724569][T17649] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 861.762217][T17649] idmouse 7-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 861.976515][ T5862] usb 10-1: new high-speed USB device number 74 using dummy_hcd [ 861.994870][T22192] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 862.024116][T22192] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 862.051485][T22192] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 862.070911][T22192] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 862.137779][T11041] usb 9-1: new high-speed USB device number 82 using dummy_hcd [ 862.191794][ T5862] usb 10-1: unable to get BOS descriptor or descriptor too short [ 862.218609][ T5862] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 862.248722][ T5862] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 862.268337][ T5862] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.280613][ T5862] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 862.293582][ T5862] usb 10-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 862.305211][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 862.315848][ T5862] usb 10-1: Product: syz [ 862.320510][ T5862] usb 10-1: Manufacturer: syz [ 862.342436][T22192] 8021q: adding VLAN 0 to HW filter on device bond0 [ 862.354210][ T5862] usb 10-1: Found UVC 1.00 device syz (8086:0ad2) [ 862.363591][ T5862] usb 10-1: No streaming interface found for terminal 2. [ 862.379847][T11041] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 862.406618][T11041] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 862.431652][T22192] 8021q: adding VLAN 0 to HW filter on device team0 [ 862.433819][T11041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.460133][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 862.467297][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 862.488793][T21065] bridge0: port 2(bridge_slave_1) entered blocking state [ 862.495990][T21065] bridge0: port 2(bridge_slave_1) entered forwarding state [ 862.513689][T11041] usb 9-1: config 0 descriptor?? [ 862.775474][T11041] usbhid 9-1:0.0: can't add hid device: -71 [ 862.786791][T11041] usbhid: probe of 9-1:0.0 failed with error -71 [ 862.814455][T11041] usb 9-1: USB disconnect, device number 82 [ 863.014278][T22192] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 863.126310][ C0] net_ratelimit: 56 callbacks suppressed [ 863.126387][ T5799] Bluetooth: hci1: command tx timeout [ 863.505611][T22240] FAULT_INJECTION: forcing a failure. [ 863.505611][T22240] name failslab, interval 1, probability 5, space 0, times 9986 [ 863.540129][T11041] usb 7-1: USB disconnect, device number 79 [ 863.541771][T22240] CPU: 1 PID: 22240 Comm: syz.9.4615 Not tainted syzkaller #0 [ 863.553486][T22240] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 863.553500][T22240] Call Trace: [ 863.553509][T22240] [ 863.553518][T22240] dump_stack_lvl+0x18c/0x250 [ 863.553557][T22240] ? show_regs_print_info+0x20/0x20 [ 863.553581][T22240] ? load_image+0x420/0x420 [ 863.553604][T22240] ? __might_sleep+0xe0/0xe0 [ 863.553628][T22240] ? __lock_acquire+0x7eb0/0x7eb0 [ 863.553655][T22240] should_fail_ex+0x394/0x4c0 [ 863.553681][T22240] should_failslab+0x9/0x20 [ 863.553698][T22240] slab_pre_alloc_hook+0x59/0x300 [ 863.553722][T22240] kmem_cache_alloc+0x5a/0x2d0 [ 863.553738][T22240] ? new_userfaultfd+0x83/0x310 [ 863.553765][T22240] new_userfaultfd+0x83/0x310 [ 863.553786][T22240] ? __x64_sys_userfaultfd+0x60/0xa0 [ 863.553810][T22240] __x64_sys_userfaultfd+0x81/0xa0 [ 863.553831][T22240] do_syscall_64+0x55/0xb0 [ 863.553853][T22240] ? clear_bhb_loop+0x40/0x90 [ 863.553877][T22240] ? clear_bhb_loop+0x40/0x90 [ 863.553902][T22240] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 863.553926][T22240] RIP: 0033:0x7fd53c19f559 [ 863.553945][T22240] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 863.553961][T22240] RSP: 002b:00007fd53d0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000143 [ 863.553982][T22240] RAX: ffffffffffffffda RBX: 00007fd53c425fa0 RCX: 00007fd53c19f559 [ 863.553997][T22240] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080001 [ 863.554009][T22240] RBP: 00007fd53c236b50 R08: 0000000000000000 R09: 0000000000000000 [ 863.554022][T22240] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 863.554034][T22240] R13: 00007fd53c426038 R14: 00007fd53c425fa0 R15: 00007ffd7c108de8 [ 863.554062][T22240] [ 863.780292][T22192] veth0_vlan: entered promiscuous mode [ 863.801302][T11041] idmouse 7-1:1.0: disconnected [ 863.813635][T22192] veth1_vlan: entered promiscuous mode [ 863.898963][T22192] veth0_macvtap: entered promiscuous mode [ 863.909952][T22192] veth1_macvtap: entered promiscuous mode [ 863.955025][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 863.984103][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.003454][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.014136][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.024971][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.035516][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.045520][ T5862] usb 9-1: new high-speed USB device number 83 using dummy_hcd [ 864.053317][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.065001][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.078477][ T5886] usb 10-1: USB disconnect, device number 74 [ 864.080451][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 864.117698][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.130059][T22192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 864.160814][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.172318][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.172334][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.172348][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.172362][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.172375][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.172390][T22192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 864.172402][T22192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 864.249885][T22192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 864.277051][ T5862] usb 9-1: Using ep0 maxpacket: 16 [ 864.293768][ T5862] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 864.302471][ T5862] usb 9-1: config 0 has no interface number 0 [ 864.313750][T22192] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.322601][ T5862] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 864.333698][T22192] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.342622][ T5862] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 864.352493][T22192] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.361577][ T5862] usb 9-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 864.374992][T22192] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 864.387433][ T5862] usb 9-1: config 0 interface 1 has no altsetting 0 [ 864.402690][ T5862] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 864.423971][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 864.484393][ T5862] usb 9-1: config 0 descriptor?? [ 864.510904][ T5862] usbhid 9-1:0.1: fixing wrong optional hid class descriptors count [ 864.626524][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.657415][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.771933][ T1136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 864.784003][ T1136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 864.923170][ T5862] usbhid 9-1:0.1: can't add hid device: -71 [ 864.947032][ T5862] usbhid: probe of 9-1:0.1 failed with error -71 [ 864.971016][ T5862] usb 9-1: USB disconnect, device number 83 [ 865.207374][ T5799] Bluetooth: hci1: command tx timeout [ 865.234951][T22270] loop6: detected capacity change from 0 to 40427 [ 865.265375][T22270] F2FS-fs (loop6): invalid crc value [ 865.285457][T22270] F2FS-fs (loop6): Found nat_bits in checkpoint [ 865.357759][T22270] F2FS-fs (loop6): Start checkpoint disabled! [ 865.396597][T11041] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 865.416721][T22270] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6 [ 865.605667][T11041] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.624483][T11041] usb 6-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 865.659092][T11041] usb 6-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 865.679154][T11041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 865.701740][T11041] usb 6-1: Product: syz [ 865.705942][T11041] usb 6-1: Manufacturer: syz [ 865.733480][T11041] usb 6-1: SerialNumber: syz [ 865.759440][T11041] ti_usb_3410_5052 6-1:2.0: TI USB 5052 2 port adapter converter detected [ 865.801737][T11041] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 865.853608][T11041] usb 6-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 865.906422][ T5862] usb 9-1: new high-speed USB device number 84 using dummy_hcd [ 866.048649][ T23] usb 6-1: USB disconnect, device number 94 [ 866.104353][ T5862] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 866.181585][ T5862] usb 9-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 21 [ 866.227962][ T23] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 866.310879][ T5862] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 866.342102][ T23] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 866.383752][ T5862] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 866.455567][ T5862] usb 9-1: config 0 descriptor?? [ 866.462537][ T23] ti_usb_3410_5052 6-1:2.0: device disconnected [ 866.504122][ T5862] usbhid 9-1:0.0: couldn't find an input interrupt endpoint [ 866.666908][ T5855] usb 10-1: new high-speed USB device number 75 using dummy_hcd [ 866.733351][ T5862] usb 9-1: USB disconnect, device number 84 [ 866.899187][ T5855] usb 10-1: Using ep0 maxpacket: 8 [ 866.933300][ T5855] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.971500][ T5855] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 867.052380][ T5855] usb 10-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 867.078579][ T5855] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.138536][ T5855] kobil_sct 10-1:1.0: required endpoints missing [ 867.296344][ T5862] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 867.344767][ T5855] usb 10-1: USB disconnect, device number 75 [ 867.509790][ T5862] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 867.528259][ T5862] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 867.561657][ T5862] usb 6-1: New USB device found, idVendor=0681, idProduct=0005, bcdDevice= 1.00 [ 867.579271][ T5862] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 867.618943][ T5862] idmouse 6-1:1.0: Siemens ID Mouse FingerTIP Sensor Driver now attached [ 867.681716][ T29] kworker/u4:2: attempt to access beyond end of device [ 867.681716][ T29] loop6: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 867.725011][ T29] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 867.766696][ T29] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 868.006691][T11041] usb 9-1: new high-speed USB device number 85 using dummy_hcd [ 868.229659][T11041] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 868.249122][ C1] net_ratelimit: 88 callbacks suppressed [ 868.256783][T11041] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 868.303529][T11041] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 868.331269][T11041] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.407156][T11041] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 868.606358][ T9] usb 10-1: new high-speed USB device number 76 using dummy_hcd [ 868.786268][ T9] usb 10-1: Using ep0 maxpacket: 16 [ 868.793836][ T9] usb 10-1: config 0 has an invalid interface number: 1 but max is 0 [ 868.803462][ T9] usb 10-1: config 0 has no interface number 0 [ 868.812669][ T9] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 868.824114][ T9] usb 10-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 868.834322][ T9] usb 10-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 868.852604][ T9] usb 10-1: config 0 interface 1 has no altsetting 0 [ 868.859688][ T9] usb 10-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 868.869238][ T9] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.881886][ T9] usb 10-1: config 0 descriptor?? [ 868.903246][ T9] usbhid 10-1:0.1: fixing wrong optional hid class descriptors count [ 868.956272][T11041] usb 7-1: new high-speed USB device number 80 using dummy_hcd [ 869.158952][T11041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 869.170364][T11041] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 869.185800][T11041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 869.197396][T11041] usb 7-1: config 0 descriptor?? [ 869.316563][ T9] usbhid 10-1:0.1: can't add hid device: -71 [ 869.323021][ T9] usbhid: probe of 10-1:0.1 failed with error -71 [ 869.335241][ T9] usb 10-1: USB disconnect, device number 76 [ 869.370586][ T5862] usb 6-1: USB disconnect, device number 95 [ 869.395135][ T5862] idmouse 6-1:1.0: disconnected [ 869.419523][T22332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 869.446022][T22332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 869.662612][T11041] usbhid 7-1:0.0: can't add hid device: -71 [ 869.674964][T11041] usbhid: probe of 7-1:0.0 failed with error -71 [ 869.684993][T11041] usb 7-1: USB disconnect, device number 80 [ 870.156361][ T5862] usb 10-1: new high-speed USB device number 77 using dummy_hcd [ 870.226314][T11041] usb 6-1: new high-speed USB device number 96 using dummy_hcd [ 870.341882][ T5862] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 870.352316][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.418573][T11041] usb 6-1: Using ep0 maxpacket: 32 [ 870.431267][T11041] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 870.440164][T11041] usb 6-1: config 0 has no interface number 0 [ 870.448978][T11041] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 870.459729][T11041] usb 6-1: config 0 interface 1 has no altsetting 0 [ 870.469681][T11041] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 870.479651][T11041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.488244][T11041] usb 6-1: Product: syz [ 870.492426][T11041] usb 6-1: Manufacturer: syz [ 870.497873][T11041] usb 6-1: SerialNumber: syz [ 870.509467][T11041] usb 6-1: config 0 descriptor?? [ 870.572564][ T5862] cdc_acm 10-1:1.0: ttyACM0: USB ACM device [ 870.586355][ T9] usb 7-1: new high-speed USB device number 81 using dummy_hcd [ 870.740480][T11041] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 870.759530][T11041] cx231xx 6-1:0.1: Failed to read PCB config [ 870.765728][T11041] cx231xx: probe of 6-1:0.1 failed with error -71 [ 870.775613][ T5862] usb 9-1: USB disconnect, device number 85 [ 870.781754][ T9] usb 7-1: Using ep0 maxpacket: 8 [ 870.793735][ T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 870.807189][ T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 870.830756][ T9] usb 7-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 870.843716][T11041] usb 6-1: USB disconnect, device number 96 [ 870.863174][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.933926][ T9] kobil_sct 7-1:1.0: required endpoints missing [ 871.146302][ T5862] usb 7-1: USB disconnect, device number 81 [ 871.416874][T11041] usb 6-1: new high-speed USB device number 97 using dummy_hcd [ 871.556311][ T5855] usb 9-1: new high-speed USB device number 86 using dummy_hcd [ 871.616859][T11041] usb 6-1: Using ep0 maxpacket: 32 [ 871.625116][T11041] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.633198][T11041] usb 6-1: config 0 has no interface number 0 [ 871.641527][T11041] usb 6-1: config 0 interface 1 altsetting 9 has an invalid endpoint with address 0x0, skipping [ 871.652058][T11041] usb 6-1: config 0 interface 1 has no altsetting 0 [ 871.663385][T11041] usb 6-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a [ 871.676190][T11041] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.685984][T11041] usb 6-1: Product: syz [ 871.701574][T11041] usb 6-1: Manufacturer: syz [ 871.708032][T11041] usb 6-1: SerialNumber: syz [ 871.715352][T11041] usb 6-1: config 0 descriptor?? [ 871.766694][ T5855] usb 9-1: Using ep0 maxpacket: 16 [ 871.781202][ T5855] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 871.796424][ T5855] usb 9-1: config 0 has no interface number 0 [ 871.811697][ T5855] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 871.824222][ T5855] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 871.837938][ T5855] usb 9-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 871.853352][ T5855] usb 9-1: config 0 interface 1 has no altsetting 0 [ 871.860424][ T5855] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 871.860448][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 871.882911][ T5855] usb 9-1: config 0 descriptor?? [ 871.895255][ T5855] usbhid 9-1:0.1: fixing wrong optional hid class descriptors count [ 871.987442][T11041] cx231xx 6-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces [ 872.007219][T11041] cx231xx 6-1:0.1: bad scenario!!!!! [ 872.007219][T11041] config_info=0 [ 872.016287][T11041] cx231xx 6-1:0.1: Failed to read PCB config [ 872.242907][ T5862] usb 6-1: USB disconnect, device number 97 [ 872.312902][ T5855] usbhid 9-1:0.1: can't add hid device: -71 [ 872.319415][ T5855] usbhid: probe of 9-1:0.1 failed with error -71 [ 872.331977][ T5855] usb 9-1: USB disconnect, device number 86 [ 872.486695][T11041] usb 7-1: new high-speed USB device number 82 using dummy_hcd [ 872.679706][T11041] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 872.690840][T11041] usb 7-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 872.700353][T11041] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.711586][T11041] usb 7-1: config 0 descriptor?? [ 872.932183][T22361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.953886][ T5862] usb 10-1: USB disconnect, device number 77 [ 872.980330][T22361] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 873.155926][ T5799] Bluetooth: Wrong link type (-71) [ 873.261495][T11041] usbhid 7-1:0.0: can't add hid device: -71 [ 873.270759][T11041] usbhid: probe of 7-1:0.0 failed with error -71 [ 873.282399][T11041] usb 7-1: USB disconnect, device number 82 [ 873.402739][ T5855] usb 9-1: new high-speed USB device number 87 using dummy_hcd [ 873.536250][ C0] net_ratelimit: 58 callbacks suppressed [ 873.598832][ T5855] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 873.626280][ T5855] usb 9-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 873.656471][ T5855] usb 9-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 873.667916][ T5855] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 873.695657][ T5855] usbhid 9-1:1.0: couldn't find an input interrupt endpoint [ 874.086867][ T5855] usb 6-1: new high-speed USB device number 98 using dummy_hcd [ 874.156730][ T23] usb 7-1: new high-speed USB device number 83 using dummy_hcd [ 874.256484][ T5862] usb 10-1: new full-speed USB device number 78 using dummy_hcd [ 874.306436][ T23] usb 7-1: device descriptor read/64, error -71 [ 874.312925][ T5855] usb 6-1: Using ep0 maxpacket: 16 [ 874.323285][ T5855] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 874.333235][ T5855] usb 6-1: config 0 has no interface number 0 [ 874.339787][ T5855] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 874.351193][ T5855] usb 6-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 874.365129][ T5855] usb 6-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 874.378678][ T5855] usb 6-1: config 0 interface 1 has no altsetting 0 [ 874.385366][ T5855] usb 6-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 874.395710][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 874.415576][ T5855] usb 6-1: config 0 descriptor?? [ 874.438518][ T5855] usbhid 6-1:0.1: fixing wrong optional hid class descriptors count [ 874.462303][ T5862] usb 10-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 874.481468][ T5862] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 874.490158][ T5862] usb 10-1: Product: syz [ 874.494464][ T5862] usb 10-1: Manufacturer: syz [ 874.500710][ T5862] usb 10-1: SerialNumber: syz [ 874.521539][ T5862] usb 10-1: config 0 descriptor?? [ 874.596395][ T23] usb 7-1: new high-speed USB device number 84 using dummy_hcd [ 874.735706][ T5862] usb 10-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 874.746351][ T23] usb 7-1: device descriptor read/64, error -71 [ 874.862336][ T5855] usbhid 6-1:0.1: can't add hid device: -71 [ 874.869468][ T23] usb usb7-port1: attempt power cycle [ 874.877021][ T5855] usbhid: probe of 6-1:0.1 failed with error -71 [ 874.892626][ T5855] usb 6-1: USB disconnect, device number 98 [ 875.296355][ T23] usb 7-1: new high-speed USB device number 85 using dummy_hcd [ 875.327738][ T23] usb 7-1: device descriptor read/8, error -71 [ 875.600900][ T23] usb 7-1: new high-speed USB device number 86 using dummy_hcd [ 875.649044][ T23] usb 7-1: device descriptor read/8, error -71 [ 875.777606][ T23] usb usb7-port1: unable to enumerate USB device [ 876.135053][ T5793] usb 9-1: USB disconnect, device number 87 [ 876.216876][ T23] usb 6-1: new high-speed USB device number 99 using dummy_hcd [ 876.408822][ T23] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 876.419259][ T23] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 876.428397][ T23] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.445145][ T23] usb 6-1: config 0 descriptor?? [ 876.580926][ T5862] dvb_usb_rtl28xxu: probe of 10-1:0.0 failed with error -32 [ 876.594243][ T5793] usb 9-1: new high-speed USB device number 88 using dummy_hcd [ 876.605106][ T5862] usb 10-1: USB disconnect, device number 78 [ 876.669170][ T9] usb 6-1: USB disconnect, device number 99 [ 876.791317][ T5793] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 876.802818][ T5793] usb 9-1: New USB device found, idVendor=28de, idProduct=1102, bcdDevice= 0.00 [ 876.822698][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 876.829232][ T5793] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.829794][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 876.865848][ T5793] usb 9-1: config 0 descriptor?? [ 876.945112][ T5799] Bluetooth: Wrong link type (-71) [ 877.079212][T22432] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 877.089716][T22432] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 877.309835][ T5793] usbhid 9-1:0.0: can't add hid device: -71 [ 877.315926][ T5793] usbhid: probe of 9-1:0.0 failed with error -71 [ 877.347856][ T5793] usb 9-1: USB disconnect, device number 88 [ 877.516322][ T5862] usb 10-1: new high-speed USB device number 79 using dummy_hcd [ 877.729744][ T5862] usb 10-1: Using ep0 maxpacket: 8 [ 877.737637][ T5862] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 877.748933][ T5862] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 877.758711][ T5862] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 877.771990][ T5862] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 877.781271][ T5862] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.805325][ T5862] hub 10-1:1.0: bad descriptor, ignoring hub [ 877.812218][ T5862] hub: probe of 10-1:1.0 failed with error -5 [ 877.819505][ T5862] cdc_wdm: probe of 10-1:1.0 failed with error -22 [ 877.936316][T11041] usb 6-1: new high-speed USB device number 100 using dummy_hcd [ 877.946447][ T5793] usb 7-1: new high-speed USB device number 87 using dummy_hcd [ 878.106299][ T5793] usb 7-1: device descriptor read/64, error -71 [ 878.133905][T11041] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 878.144298][T11041] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 878.158327][T11041] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 878.167838][T11041] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.190894][T11041] usbhid 6-1:1.0: couldn't find an input interrupt endpoint [ 878.226329][T17649] usb 9-1: new full-speed USB device number 89 using dummy_hcd [ 878.337210][T11041] usb 10-1: USB disconnect, device number 79 [ 878.376569][ T5793] usb 7-1: new high-speed USB device number 88 using dummy_hcd [ 878.431646][T17649] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 878.441460][T17649] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.450012][T17649] usb 9-1: Product: syz [ 878.454229][T17649] usb 9-1: Manufacturer: syz [ 878.458917][T17649] usb 9-1: SerialNumber: syz [ 878.466432][T17649] usb 9-1: config 0 descriptor?? [ 878.546286][ T5793] usb 7-1: device descriptor read/64, error -71 [ 878.566457][ C0] net_ratelimit: 78 callbacks suppressed [ 878.672533][ T5793] usb usb7-port1: attempt power cycle [ 878.682690][T17649] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 879.085007][ T5799] Bluetooth: Wrong link type (-71) [ 879.086643][ T5793] usb 7-1: new high-speed USB device number 89 using dummy_hcd [ 879.127797][ T5793] usb 7-1: device descriptor read/8, error -71 [ 879.402593][ T5793] usb 7-1: new high-speed USB device number 90 using dummy_hcd [ 879.436918][ T5793] usb 7-1: device descriptor read/8, error -71 [ 879.559576][ T5793] usb usb7-port1: unable to enumerate USB device [ 879.998866][T22475] FAULT_INJECTION: forcing a failure. [ 879.998866][T22475] name failslab, interval 1, probability 5, space 0, times 9985 [ 880.022383][T22475] CPU: 1 PID: 22475 Comm: syz.9.4685 Not tainted syzkaller #0 [ 880.029899][T22475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 880.039979][T22475] Call Trace: [ 880.043282][T22475] [ 880.046234][T22475] dump_stack_lvl+0x18c/0x250 [ 880.050951][T22475] ? show_regs_print_info+0x20/0x20 [ 880.056184][T22475] ? load_image+0x420/0x420 [ 880.060721][T22475] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.065781][T22475] ? d_alloc_name+0x27f/0x320 [ 880.070489][T22475] should_fail_ex+0x394/0x4c0 [ 880.075202][T22475] should_failslab+0x9/0x20 [ 880.079734][T22475] slab_pre_alloc_hook+0x59/0x300 [ 880.084780][T22475] ? do_raw_spin_unlock+0x121/0x230 [ 880.090016][T22475] kmem_cache_alloc_lru+0x4d/0x2c0 [ 880.095147][T22475] ? new_inode_pseudo+0x82/0x1d0 [ 880.100133][T22475] new_inode_pseudo+0x82/0x1d0 [ 880.104931][T22475] new_inode+0x22/0x1d0 [ 880.109120][T22475] gadgetfs_create_file+0x6d/0x2a0 [ 880.114368][T22475] gadgetfs_bind+0x445/0x830 [ 880.118997][T22475] ? is_valid_config+0x1a0/0x1a0 [ 880.123962][T22475] gadget_bind_driver+0x2b3/0x770 [ 880.129135][T22475] ? gadget_match_driver+0x130/0x130 [ 880.134449][T22475] really_probe+0x24a/0xae0 [ 880.138989][T22475] ? pm_runtime_barrier+0x14b/0x1c0 [ 880.144218][T22475] __driver_probe_device+0x1f5/0x390 [ 880.149542][T22475] driver_probe_device+0x4f/0x420 [ 880.154605][T22475] __driver_attach+0x444/0x6d0 [ 880.159409][T22475] bus_for_each_dev+0x235/0x2b0 [ 880.164292][T22475] ? driver_attach+0x50/0x50 [ 880.168915][T22475] ? bus_remove_file+0x140/0x140 [ 880.173891][T22475] ? do_raw_spin_unlock+0x121/0x230 [ 880.179125][T22475] bus_add_driver+0x340/0x630 [ 880.183841][T22475] driver_register+0x23a/0x310 [ 880.188661][T22475] usb_gadget_register_driver_owner+0xf9/0x270 [ 880.194853][T22475] dev_config+0xe49/0x1260 [ 880.199317][T22475] ? rcu_read_lock_any_held+0xb4/0x140 [ 880.204807][T22475] ? rcu_read_lock_bh_held+0x100/0x100 [ 880.210301][T22475] ? ep0_read+0x1890/0x1890 [ 880.214850][T22475] ? ep0_read+0x1890/0x1890 [ 880.219391][T22475] vfs_write+0x299/0x9a0 [ 880.223674][T22475] ? file_end_write+0x250/0x250 [ 880.228584][T22475] ? __fget_files+0x28/0x460 [ 880.233207][T22475] ? __fget_files+0x3fc/0x460 [ 880.237940][T22475] ? __fdget_pos+0x2a3/0x330 [ 880.242568][T22475] ? ksys_write+0x74/0x260 [ 880.247019][T22475] ksys_write+0x151/0x260 [ 880.251413][T22475] ? __ia32_sys_read+0x90/0x90 [ 880.256208][T22475] ? lockdep_hardirqs_on+0x98/0x150 [ 880.261432][T22475] do_syscall_64+0x55/0xb0 [ 880.265881][T22475] ? clear_bhb_loop+0x40/0x90 [ 880.270590][T22475] ? clear_bhb_loop+0x40/0x90 [ 880.275304][T22475] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.281203][T22475] RIP: 0033:0x7fd53c19f559 [ 880.285644][T22475] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.285662][T22475] RSP: 002b:00007fd53d0a6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 880.313715][T22475] RAX: ffffffffffffffda RBX: 00007fd53c425fa0 RCX: 00007fd53c19f559 [ 880.322147][T22475] RDX: 0000000000000048 RSI: 0000200000000180 RDI: 0000000000000004 [ 880.330143][T22475] RBP: 00007fd53c236b50 R08: 0000000000000000 R09: 0000000000000000 [ 880.338145][T22475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 880.346136][T22475] R13: 00007fd53c426038 R14: 00007fd53c425fa0 R15: 00007ffd7c108de8 [ 880.354147][T22475] [ 880.403676][T22475] udc dummy_udc.0: failed to start USB Gadget filesystem: -12 [ 880.416870][T22487] ================================================================== [ 880.422289][T22475] gadgetfs: probe of gadget.0 failed with error -12 [ 880.424945][T22487] BUG: KASAN: slab-use-after-free in __lock_acquire+0x10d/0x7eb0 [ 880.424974][T22487] Read of size 8 at addr ffff88805db22420 by task syz.9.4685/22487 [ 880.439242][T22487] [ 880.439252][T22487] CPU: 0 PID: 22487 Comm: syz.9.4685 Not tainted syzkaller #0 [ 880.439272][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 880.439282][T22487] Call Trace: [ 880.439291][T22487] [ 880.439299][T22487] dump_stack_lvl+0x18c/0x250 [ 880.439327][T22487] ? __lock_acquire+0x7eb0/0x7eb0 [ 880.439349][T22487] ? show_regs_print_info+0x20/0x20 [ 880.439372][T22487] ? load_image+0x420/0x420 [ 880.439392][T22487] ? __virt_addr_valid+0x10c/0x380 [ 880.439424][T22487] ? __virt_addr_valid+0x10c/0x380 [ 880.439446][T22487] ? __virt_addr_valid+0x10c/0x380 [ 880.439469][T22487] print_report+0xa8/0x210 [ 880.439489][T22487] ? __lock_acquire+0x10d/0x7eb0 [ 880.439507][T22487] kasan_report+0x117/0x150 [ 880.439530][T22487] ? __lock_acquire+0x10d/0x7eb0 [ 880.439554][T22487] __lock_acquire+0x10d/0x7eb0 [ 880.439574][T22487] ? mark_lock+0x94/0x320 [ 880.439595][T22487] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 880.439617][T22487] ? read_lock_is_recursive+0x20/0x20 [ 880.439639][T22487] ? lock_chain_count+0x20/0x20 [ 880.439662][T22487] ? finish_task_switch+0x262/0x8f0 [ 880.458152][T22487] ? finish_task_switch+0x323/0x8f0 [ 880.471454][T22487] ? verify_lock_unused+0x140/0x140 [ 880.479026][T22487] ? __schedule+0x1577/0x4720 [ 880.489235][T22487] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 880.489264][T22487] lock_acquire+0x19e/0x420 [ 880.498834][T22487] ? __mutex_lock+0x3a6/0xce0 [ 880.509011][T22487] ? asan.module_dtor+0x20/0x20 [ 880.509038][T22487] ? read_lock_is_recursive+0x20/0x20 [ 880.509059][T22487] ? __mutex_trylock_common+0x8a/0x270 [ 880.509076][T22487] ? trace_raw_output_contention_end+0xd0/0xd0 [ 880.509094][T22487] ? tomoyo_check_open_permission+0x1cf/0x460 [ 880.536854][T22487] _raw_spin_lock+0x2e/0x40 [ 880.548190][T22487] ? __mutex_lock+0x3a6/0xce0 [ 880.548212][T22487] __mutex_lock+0x3a6/0xce0 [ 880.548226][T22487] ? end_current_label_crit_section+0x170/0x170 [ 880.548248][T22487] ? ep_open+0x4e/0x270 [ 880.558248][T22487] ? mutex_lock_nested+0x20/0x20 [ 880.558266][T22487] ? apparmor_file_open+0x5ab/0x760 [ 880.558291][T22487] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 880.558315][T22487] ? __rwlock_init+0x150/0x150 [ 880.558339][T22487] ep_open+0x4e/0x270 [ 880.568682][T22487] ? do_dentry_open+0x86f/0x14b0 [ 880.579493][T22487] do_dentry_open+0x880/0x14b0 [ 880.579520][T22487] ? ep_ioctl+0x1c0/0x1c0 [ 880.579539][T22487] path_openat+0x284f/0x3270 [ 880.588714][T22487] ? do_sys_openat2+0xda/0x1d0 [ 880.588737][T22487] ? __x64_sys_openat+0x139/0x160 [ 880.588759][T22487] ? verify_lock_unused+0x140/0x140 [ 880.698370][T22487] ? do_filp_open+0x430/0x430 [ 880.703059][T22487] do_filp_open+0x1f2/0x430 [ 880.707555][T22487] ? vfs_tmpfile+0x620/0x620 [ 880.712151][T22487] ? _raw_spin_unlock+0x28/0x40 [ 880.716997][T22487] ? alloc_fd+0x590/0x640 [ 880.721324][T22487] do_sys_openat2+0x134/0x1d0 [ 880.725995][T22487] ? do_sys_open+0xe0/0xe0 [ 880.730407][T22487] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 880.736379][T22487] ? rcu_is_watching+0x15/0xb0 [ 880.741143][T22487] ? lock_chain_count+0x20/0x20 [ 880.745983][T22487] __x64_sys_openat+0x139/0x160 [ 880.750829][T22487] do_syscall_64+0x55/0xb0 [ 880.755238][T22487] ? clear_bhb_loop+0x40/0x90 [ 880.759916][T22487] ? clear_bhb_loop+0x40/0x90 [ 880.764594][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.770481][T22487] RIP: 0033:0x7fd53c19f559 [ 880.774885][T22487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 880.794483][T22487] RSP: 002b:00007fd53d085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 880.802889][T22487] RAX: ffffffffffffffda RBX: 00007fd53c426090 RCX: 00007fd53c19f559 [ 880.810875][T22487] RDX: 0000000000024000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 880.818836][T22487] RBP: 00007fd53c236b50 R08: 0000000000000000 R09: 0000000000000000 [ 880.826795][T22487] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 880.834758][T22487] R13: 00007fd53c426128 R14: 00007fd53c426090 R15: 00007ffd7c108de8 [ 880.842727][T22487] [ 880.845733][T22487] [ 880.848045][T22487] Allocated by task 22475: [ 880.852442][T22487] kasan_set_track+0x4e/0x70 [ 880.857027][T22487] __kasan_kmalloc+0x8f/0xa0 [ 880.861609][T22487] gadgetfs_bind+0x25f/0x830 [ 880.866189][T22487] gadget_bind_driver+0x2b3/0x770 [ 880.871216][T22487] really_probe+0x24a/0xae0 [ 880.875712][T22487] __driver_probe_device+0x1f5/0x390 [ 880.880987][T22487] driver_probe_device+0x4f/0x420 [ 880.886002][T22487] __driver_attach+0x444/0x6d0 [ 880.890759][T22487] bus_for_each_dev+0x235/0x2b0 [ 880.895600][T22487] bus_add_driver+0x340/0x630 [ 880.900268][T22487] driver_register+0x23a/0x310 [ 880.905027][T22487] usb_gadget_register_driver_owner+0xf9/0x270 [ 880.911176][T22487] dev_config+0xe49/0x1260 [ 880.915584][T22487] vfs_write+0x299/0x9a0 [ 880.919819][T22487] ksys_write+0x151/0x260 [ 880.924137][T22487] do_syscall_64+0x55/0xb0 [ 880.928544][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 880.934428][T22487] [ 880.936737][T22487] Freed by task 22475: [ 880.940788][T22487] kasan_set_track+0x4e/0x70 [ 880.945365][T22487] kasan_save_free_info+0x28/0x40 [ 880.950400][T22487] ____kasan_slab_free+0x126/0x1f0 [ 880.955504][T22487] slab_free_freelist_hook+0x154/0x240 [ 880.960952][T22487] __kmem_cache_free+0xba/0x1f0 [ 880.965789][T22487] destroy_ep_files+0x282/0x330 [ 880.970625][T22487] gadgetfs_bind+0x6cc/0x830 [ 880.975204][T22487] gadget_bind_driver+0x2b3/0x770 [ 880.980218][T22487] really_probe+0x24a/0xae0 [ 880.984718][T22487] __driver_probe_device+0x1f5/0x390 [ 880.989992][T22487] driver_probe_device+0x4f/0x420 [ 880.995008][T22487] __driver_attach+0x444/0x6d0 [ 880.999761][T22487] bus_for_each_dev+0x235/0x2b0 [ 881.004600][T22487] bus_add_driver+0x340/0x630 [ 881.009268][T22487] driver_register+0x23a/0x310 [ 881.014023][T22487] usb_gadget_register_driver_owner+0xf9/0x270 [ 881.020171][T22487] dev_config+0xe49/0x1260 [ 881.024580][T22487] vfs_write+0x299/0x9a0 [ 881.028817][T22487] ksys_write+0x151/0x260 [ 881.033155][T22487] do_syscall_64+0x55/0xb0 [ 881.037582][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.043482][T22487] [ 881.045798][T22487] Last potentially related work creation: [ 881.051502][T22487] kasan_save_stack+0x3e/0x60 [ 881.056177][T22487] __kasan_record_aux_stack+0xaf/0xc0 [ 881.061555][T22487] call_rcu+0x153/0x900 [ 881.065706][T22487] fib6_del+0x1163/0x1590 [ 881.070041][T22487] fib6_clean_node+0x290/0x540 [ 881.074796][T22487] fib6_walk_continue+0x67f/0x8d0 [ 881.079814][T22487] fib6_walk+0x149/0x260 [ 881.084045][T22487] __fib6_clean_all+0x27e/0x3e0 [ 881.088886][T22487] rt6_disable_ip+0x12a/0x860 [ 881.093557][T22487] addrconf_ifdown+0x160/0x18a0 [ 881.098401][T22487] addrconf_notify+0x6c6/0x1010 [ 881.103238][T22487] notifier_call_chain+0x18f/0x380 [ 881.108344][T22487] dev_close_many+0x2a6/0x410 [ 881.113013][T22487] unregister_netdevice_many_notify+0x4bf/0x1910 [ 881.119330][T22487] unregister_netdevice_queue+0x2e9/0x330 [ 881.125035][T22487] nsim_destroy+0x4d/0x180 [ 881.129445][T22487] __nsim_dev_port_del+0x14d/0x1b0 [ 881.134543][T22487] nsim_dev_reload_destroy+0x283/0x480 [ 881.139988][T22487] nsim_drv_remove+0x58/0x170 [ 881.144651][T22487] device_release_driver_internal+0x408/0x6f0 [ 881.150712][T22487] bus_remove_device+0x43b/0x520 [ 881.155637][T22487] device_del+0x51f/0x910 [ 881.160035][T22487] device_unregister+0x20/0xc0 [ 881.164802][T22487] del_device_store+0x2b6/0x370 [ 881.169659][T22487] kernfs_fop_write_iter+0x3a4/0x520 [ 881.174944][T22487] vfs_write+0x474/0x9a0 [ 881.179180][T22487] ksys_write+0x151/0x260 [ 881.183505][T22487] do_syscall_64+0x55/0xb0 [ 881.187917][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.193817][T22487] [ 881.196134][T22487] Second to last potentially related work creation: [ 881.202708][T22487] kasan_save_stack+0x3e/0x60 [ 881.207384][T22487] __kasan_record_aux_stack+0xaf/0xc0 [ 881.212754][T22487] insert_work+0x3d/0x310 [ 881.217088][T22487] __queue_work+0xcfd/0xfe0 [ 881.221588][T22487] call_timer_fn+0x189/0x540 [ 881.226178][T22487] __run_timers+0x59c/0x810 [ 881.230679][T22487] run_timer_softirq+0x67/0xf0 [ 881.235428][T22487] handle_softirqs+0x27d/0x820 [ 881.240181][T22487] do_softirq+0xfa/0x1a0 [ 881.244408][T22487] __local_bh_enable_ip+0x184/0x1c0 [ 881.249593][T22487] bpf_test_run+0x3dd/0x870 [ 881.254161][T22487] bpf_prog_test_run_skb+0xdbb/0x18f0 [ 881.259525][T22487] bpf_prog_test_run+0x31f/0x390 [ 881.264454][T22487] __sys_bpf+0x49d/0x890 [ 881.268689][T22487] __x64_sys_bpf+0x7c/0x90 [ 881.273095][T22487] do_syscall_64+0x55/0xb0 [ 881.277504][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.283417][T22487] [ 881.285746][T22487] The buggy address belongs to the object at ffff88805db22400 [ 881.285746][T22487] which belongs to the cache kmalloc-512 of size 512 [ 881.299793][T22487] The buggy address is located 32 bytes inside of [ 881.299793][T22487] freed 512-byte region [ffff88805db22400, ffff88805db22600) [ 881.313493][T22487] [ 881.315807][T22487] The buggy address belongs to the physical page: [ 881.322283][T22487] page:ffffea000176c800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5db20 [ 881.332437][T22487] head:ffffea000176c800 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 881.341359][T22487] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 881.349324][T22487] page_type: 0xffffffff() [ 881.353642][T22487] raw: 00fff00000000840 ffff888018c41c80 ffffea0001a03b00 dead000000000002 [ 881.362211][T22487] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 881.370767][T22487] page dumped because: kasan: bad access detected [ 881.370790][T22487] page_owner tracks the page as allocated [ 881.370797][T22487] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5790, tgid 5790 (syz-executor), ts 91451752406, free_ts 37727058535 [ 881.382884][T22487] post_alloc_hook+0x1c1/0x200 [ 881.408985][T22487] get_page_from_freelist+0x2181/0x22a0 [ 881.414529][T22487] __alloc_pages+0x1f0/0x460 [ 881.419129][T22487] alloc_slab_page+0x5d/0x180 [ 881.423795][T22487] new_slab+0x87/0x2d0 [ 881.427851][T22487] ___slab_alloc+0xc5c/0x12f0 [ 881.432514][T22487] __kmem_cache_alloc_node+0x122/0x260 [ 881.437967][T22487] __kmalloc+0xa7/0x240 [ 881.442121][T22487] fib6_info_alloc+0x30/0xf0 [ 881.446702][T22487] ip6_route_info_create+0x455/0x1260 [ 881.452067][T22487] addrconf_f6i_alloc+0x1fa/0x440 [ 881.457081][T22487] ipv6_add_addr+0x5a4/0x10d0 [ 881.461744][T22487] add_addr+0x8c/0x2c0 [ 881.465798][T22487] add_v4_addrs+0x78b/0xca0 [ 881.470292][T22487] addrconf_init_auto_addrs+0x793/0xac0 [ 881.475856][T22487] addrconf_notify+0xb62/0x1010 [ 881.480698][T22487] page last free stack trace: [ 881.485357][T22487] free_unref_page_prepare+0x7d7/0x8f0 [ 881.490805][T22487] free_unref_page+0x32/0x2e0 [ 881.495469][T22487] free_contig_range+0xa1/0x150 [ 881.500309][T22487] destroy_args+0x7d/0x840 [ 881.504780][T22487] debug_vm_pgtable+0x411/0x440 [ 881.509623][T22487] do_one_initcall+0x242/0x790 [ 881.514378][T22487] do_initcall_level+0x13d/0x1f0 [ 881.519321][T22487] do_initcalls+0x69/0xd0 [ 881.523639][T22487] kernel_init_freeable+0x3d9/0x560 [ 881.528825][T22487] kernel_init+0x1d/0x1c0 [ 881.533144][T22487] ret_from_fork+0x48/0x80 [ 881.537553][T22487] ret_from_fork_asm+0x11/0x20 [ 881.542329][T22487] [ 881.544639][T22487] Memory state around the buggy address: [ 881.550255][T22487] ffff88805db22300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 881.558303][T22487] ffff88805db22380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 881.566360][T22487] >ffff88805db22400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.574406][T22487] ^ [ 881.579502][T22487] ffff88805db22480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.587551][T22487] ffff88805db22500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 881.595595][T22487] ================================================================== [ 881.603658][T22487] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 881.610837][T22487] CPU: 0 PID: 22487 Comm: syz.9.4685 Not tainted syzkaller #0 [ 881.618297][T22487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 881.628341][T22487] Call Trace: [ 881.631610][T22487] [ 881.634531][T22487] dump_stack_lvl+0x18c/0x250 [ 881.639210][T22487] ? show_regs_print_info+0x20/0x20 [ 881.644404][T22487] ? load_image+0x420/0x420 [ 881.648903][T22487] panic+0x2ca/0x720 [ 881.652789][T22487] ? bpf_jit_dump+0xd0/0xd0 [ 881.657281][T22487] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 881.663166][T22487] ? _raw_spin_unlock+0x40/0x40 [ 881.668004][T22487] ? print_memory_metadata+0x314/0x400 [ 881.673456][T22487] ? __lock_acquire+0x10d/0x7eb0 [ 881.678389][T22487] check_panic_on_warn+0x84/0xa0 [ 881.683322][T22487] ? __lock_acquire+0x10d/0x7eb0 [ 881.688250][T22487] end_report+0x6f/0x130 [ 881.692486][T22487] kasan_report+0x128/0x150 [ 881.696983][T22487] ? __lock_acquire+0x10d/0x7eb0 [ 881.701914][T22487] __lock_acquire+0x10d/0x7eb0 [ 881.706678][T22487] ? mark_lock+0x94/0x320 [ 881.710999][T22487] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 881.716971][T22487] ? read_lock_is_recursive+0x20/0x20 [ 881.722334][T22487] ? lock_chain_count+0x20/0x20 [ 881.727178][T22487] ? finish_task_switch+0x262/0x8f0 [ 881.732377][T22487] ? finish_task_switch+0x323/0x8f0 [ 881.737568][T22487] ? verify_lock_unused+0x140/0x140 [ 881.742761][T22487] ? __schedule+0x1577/0x4720 [ 881.747436][T22487] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 881.753603][T22487] lock_acquire+0x19e/0x420 [ 881.758113][T22487] ? __mutex_lock+0x3a6/0xce0 [ 881.762782][T22487] ? asan.module_dtor+0x20/0x20 [ 881.767626][T22487] ? read_lock_is_recursive+0x20/0x20 [ 881.772988][T22487] ? __mutex_trylock_common+0x8a/0x270 [ 881.778438][T22487] ? trace_raw_output_contention_end+0xd0/0xd0 [ 881.784583][T22487] ? tomoyo_check_open_permission+0x1cf/0x460 [ 881.790648][T22487] _raw_spin_lock+0x2e/0x40 [ 881.795143][T22487] ? __mutex_lock+0x3a6/0xce0 [ 881.799805][T22487] __mutex_lock+0x3a6/0xce0 [ 881.804294][T22487] ? end_current_label_crit_section+0x170/0x170 [ 881.810527][T22487] ? ep_open+0x4e/0x270 [ 881.814672][T22487] ? mutex_lock_nested+0x20/0x20 [ 881.819600][T22487] ? apparmor_file_open+0x5ab/0x760 [ 881.824800][T22487] ? apparmor_inode_getattr+0x2c0/0x2c0 [ 881.830336][T22487] ? __rwlock_init+0x150/0x150 [ 881.835097][T22487] ep_open+0x4e/0x270 [ 881.839070][T22487] ? do_dentry_open+0x86f/0x14b0 [ 881.844000][T22487] do_dentry_open+0x880/0x14b0 [ 881.848757][T22487] ? ep_ioctl+0x1c0/0x1c0 [ 881.853077][T22487] path_openat+0x284f/0x3270 [ 881.857665][T22487] ? do_sys_openat2+0xda/0x1d0 [ 881.862449][T22487] ? __x64_sys_openat+0x139/0x160 [ 881.867467][T22487] ? verify_lock_unused+0x140/0x140 [ 881.872657][T22487] ? do_filp_open+0x430/0x430 [ 881.877332][T22487] do_filp_open+0x1f2/0x430 [ 881.881828][T22487] ? vfs_tmpfile+0x620/0x620 [ 881.886416][T22487] ? _raw_spin_unlock+0x28/0x40 [ 881.891258][T22487] ? alloc_fd+0x590/0x640 [ 881.895586][T22487] do_sys_openat2+0x134/0x1d0 [ 881.900260][T22487] ? do_sys_open+0xe0/0xe0 [ 881.904694][T22487] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 881.910669][T22487] ? rcu_is_watching+0x15/0xb0 [ 881.915432][T22487] ? lock_chain_count+0x20/0x20 [ 881.920277][T22487] __x64_sys_openat+0x139/0x160 [ 881.925144][T22487] do_syscall_64+0x55/0xb0 [ 881.926281][ C1] bridge1: toggle option: 9 state: 1 -> 1 [ 881.935282][T22487] ? clear_bhb_loop+0x40/0x90 [ 881.936406][ C1] nf_nat: Already setup manip DST for ct ffff888064fecd80 (status bits 0x188) [ 881.936512][ C1] nf_nat: Already setup manip SRC for ct ffff888064fecd80 (status bits 0x188) [ 881.957616][T22487] ? clear_bhb_loop+0x40/0x90 [ 881.962303][T22487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 881.968225][T22487] RIP: 0033:0x7fd53c19f559 [ 881.972632][T22487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 881.992234][T22487] RSP: 002b:00007fd53d085028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 882.000655][T22487] RAX: ffffffffffffffda RBX: 00007fd53c426090 RCX: 00007fd53c19f559 [ 882.008629][T22487] RDX: 0000000000024000 RSI: 0000200000000200 RDI: ffffffffffffff9c [ 882.016600][T22487] RBP: 00007fd53c236b50 R08: 0000000000000000 R09: 0000000000000000 [ 882.024566][T22487] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 882.032527][T22487] R13: 00007fd53c426128 R14: 00007fd53c426090 R15: 00007ffd7c108de8 [ 882.040499][T22487] [ 882.043756][T22487] Kernel Offset: disabled [ 882.048070][T22487] Rebooting in 86400 seconds..