last executing test programs: 9m23.375801161s ago: executing program 3 (id=701): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) io_setup(0x1, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) 9m22.004448119s ago: executing program 3 (id=702): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = socket$unix(0x1, 0x2, 0x0) ppoll(&(0x7f0000000300)=[{r1, 0x4236}], 0x1, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000300), 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x5, @remote, 0xa097}, {0xa, 0x4ea5, 0x2000009, @mcast1, 0xb}, 0xffffffffffffffff, 0x8001}}, 0x48) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$eJzs3U1vHVf9B/DfffC147RpVP1V5R+xcFMeWkrznEB5asqCBSxAQl2TyHWrlBRQEhCtIuLKC8QGeAmw6YZFJV4BL6CvASGxJVLSVReUQWOf44xvrn3tJp659vl8pJuZ35w7vmfyveOZ65m5EwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PznXi4irv04Tjkc8FYOIfsSRul6KeuRKfv4wIk7EenM8FxGD+Yh6/vV/nom4GBEfH4u4/+DOcj35/C77cens7Zuf/fB7//jdH9dOvPPmTz8cb//x/1346Pd3I47/6NWPPrv7ZJYdAAAASlFVVdVLH/NPps/3/a47BQC0Im//qyRPV6vVavUTrf/Q38vznzradX/Vh7Ruqia72ywiYrU5T73P4HA8ABwwq/Fp112gQ/Iv2jAijnbdCWCm9bruAPvi/oM7y72Ub6+5PVjaaM9/p9yS/2pv8/qO7YbTjJ9j0tb7ay0G8ew2/TnSUh9mSc6/P57/1Y32UXrefufflu3yH21c+lScnP9gPP8xW/L/U0Qc2Pz7E/MvVc5/uJf8VwcHeP2XPwAAAAAAh1/++//xjo//zj/+ouzKTsd/l1rqAwAAAAAAAAA8aY97/79N7v8HAAAAM6v+rF7787GH07b7LrZ6+hu9iKfHng8UZqnx5YAAAAAAAAAAAAAAQDuGEYvpvP65iHh6cbGqqvrRNF7v1ePOf9CVvvxQsq5/yQMAwIaPj41dy9+LWIiIN9J3/c0tLi5W1VxELFZH5vP+7Gh+oTrS+Fybh/W0+dEudoiHo6r+YQuN+ZqmfV6e1j7+8+rXGlWDXXSsHR0GDgARsbE1um+LdMhU1TPR9V4OB4P1//Cx/rMbXb9PAQAAgP1XVVXVS1/nfTId8+933SkAoBV5+z9+XECtVquLqT/ZmDgz/VGr97Fuqia72ywiYrU5T73P4Hb8AHDArManXXeBDsm/aMOIONF1J4CZ1uu6A+yL+w/uLPdSvr3m9mBpoz2fC7Il/9Xe+nx5/knDacbPMWnr/bUWg3h2m/4811IfZknOvz+e/9WN9nyL/818FvYn/7Zsl3+9nMc76E/Xcv6D8fzH7Pf635a16E/Mv1Q5/+Ge8h/IHwAAAAAAZlj++/9xx3/zIgMAAAAAAADAgXP/wZ3lfN1rPv7/hQnP6zXHXP95aOT8e7vO3/W/h0nOvz+e/9gJOYPG+L3XH+b/yYM7yx/e/vf/5+HM5z83GNWvPdfrD4bpnJ9q7q24HjdiJc4+8vzhlvZzj7TPbWk/P6X9wiPto7r9SG4/Hcvxi7gRb262z085MWphSns1pT3nP7D+FynnP2w86vwXU3tvbFi790H/kfW+OZz0Olf++p8vP7p2tWG4pVqLweayNRyr/znVWp8eWv8/OTqKX91auXn6N9du3755LtJgy9TzkQZPWM5/Lj1y/i++sNGef+8319d7H4z2nP+sWIvhpPzX398vNMbr5X2p5b51Iec/So+cf94CTV7/D3L+E9f/9eV7uYP+AAAAAAAAAAAAAAAAwE6qqlq/RPRKRFxO1/90dW0mANCuvP2vkjxdre6g/tffZqs/arVavbXuzVh/PkfdVE32WrOIiL8356n3GX476YcBALPsvxHxz647QWfkX7D8fX/18ItddwZo1a333v/ZtRs3Vm7e6ronAAAAAAAAAMDnle//udS4//P6eUBj943ecv/X12PpwN7/sz8arN/rPC3Q87Hz/b9Pxc73/x5Oeb25Ke2jKe3zU9oXprRPvNCjIef/fMo4538yLVhJ9399sYP+dC3nfyrd6znn/5Wx5zXzr/5ykPPvb8n/zO13f3nm1nvvv3L93Wtvr7y98vNzZy9fvHDp4oVLl868df3GytmNfzvs8f7K+ed7XzsPtCw5/5y5/MuS8/9SquVflpT/5m6o/MuS1/+8vyf/suT882cf+Zcl5/9SquVflpz/V1Mt/7Lk/F9OtfzLkvP/WqrlX5ac/yupln9Zcv6nUy3/suT8z6Ra/mXJ+ecjXPIvS84/n9kg/7Lk/M+nWv5lyflfSLX8y5Lzv5hq+Zcl538p1fIvS87/cqrlX5ac/9dTLf+y5Py/kWr5lyXn/2qq5V+WnP83Uy3/suT8v5Vq+Zcl5//tVO+U/zst9ot25Py/k2rrf1ly/t9NtfzLkvN/LdXyL8vD7/83sueRxdnoRpsjVRUxA90wsu8jXf9mAgAAAAAAAAAAAADGtXE6cdfLCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwP/YgQMBAAAAACD/10aoqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwg4cCAAAAAAA+b82QlVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVRX27jVGrrO+H/izV6+TQPwnIYQQiO1cMGST3fUtMcFgrv809JIGQksLdYy9dgy+1buGBKFmaWgLAqmR2hf0RSkgQEhtlahCKpUoilSk9k1VXhVFlVArIdWVoDIRVKICtjpznufZmdnZmV3vrj1zzueD4p+9M2fmmTNnZve76DsHAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABotuNts380FEIo/mv8sS2E64q/bw2Hin8u7L/aKwQAAADW6+eNP//q+vyFQ6vYqOk6//iaf/n64uLiYvjgixd/8SeLi/mC7SGMbAmhcVnyTz/9yWLzdaKnw8TQcNO/h3vc/UiPy0d7XD7W4/LxHpdv6XH5RI/Ll+2AZbaWv49p3Ngdjb9uK3dpuDGMNS67o8NWTw9tGR5Ov8tpGGpsszh2PJwMp8JsmF62zVDjfyF8c0dxXw+GdF/DTfd1awjh0o8+fjStYSju4ztCy501ND93P3xL2P7ijz5+9KvzP3hlp9lzNyxbaQi7dhbr/GQIS7+uCkNhS94naZ3DTeu8tcM6R1rWOdTYrvh7+zovrXKd6XFPxHV+p8s6b41fe+L2EMJCWPE67Z4Ow+GatnvN+3uiPCKK2yieypeF0TUdJztWcZwU23z/9tbjpP2YTPt/R9wnoyusofnp+OEnxpft98s9TopH3Q/HanHbDxd3OjHR/KvVlmO1uM7H71z5GOj43HU4BvKx3HQM7Ox1DAyPjzSOgeGlNe9sOQZmlm0zHIYa93Xxzu7HwNT86XNTc09+7J6Tp4+cmD0xe2Zmev/ePfv27tm3b+r4yVOz0+Wfa9ulA+SaMJyPwZ3xvSYdg69tu27zIbn4xY17HUz0yeugeOzvuatY0HXDYYVjvLjOJ3et/3WQv+83vQ5Gm14HHd9TO7wORlfxOiiuc2nX6r5njjb912kNm/VeuK3pGLia3w+L+3z/61Z+L7w1rutTr1/r98ORZcdAelhD8bVXfCX/vDdxf9wvy4+LW4oLrh0PF+Zmz9/7xJH5+fMzIY4r4oam56r9eLmm6TGFZcfL8JqPl0N/+bO7bunw9W1xX03cvfRcjXd4Horr7J3s/lw13t0778+Wr+4OcWywK70/O303K/ZnzhJdjv3iOp+8Z/0/C+Zc0vT+N9br/W9kbLR8/xvJe2Os5f1v+VMz0lhZCJfuWd3731j870q//93YJ+9/xb56/73dj4HiOp+aWusxMNr1/e/2OIfiel4XE8NEU+7/RePyhfIwbXouex43o6Nj8bgZTffYetzsWbZNcWvFfe+avrzjZtftrc9Vy88tFTxuin31p9Pdj5viOs/PrP+9Y2v6a9N7x3ivY2BsZLxY71g+CMr3u8Wt6Ri4NxwNZ8OpcCxvUzzLxX1N7l7dMTAe/7vS7x0398kxUOyrz+3ufgwU1/n2no392WlX/Eq+TtPPTu2/X1gp898yunR77bttozN/sc637+3+u6HiOj/Yu9ac0X0/3R2/cm2H/dT++lnpmD4Wrsx+ujmu89S+7r+bKq5z4/5VHk+HQggvzLzQ+H1X/P3u31z416+3/N630++UX5h54aGpR767lvUDAHD5ftH4c2G8/Fmz6f+xXs3//w8AAAAMhJT7h+PM5H8AAACojJT7R+LM5H8AAACojJT7R+PMapL/H7//wLM/fyrkTwNcjNLlaTc8/KbyeqnjvRD/vX1xSfH1t3557NlPP7W6+x4OIfzsoVd1vP7jb0rrKp1L63xD69eXufm2Vd3/Y48uXa/58xMuHShvPz2e1R4Gqav8zandjdvd/uRMYz7/UGjMRxY+9XR5++W/0/Uv7imv/+fxQ0sOHR9q2X5XXM8dcW6Pnynz8KGl/VDMtN2zt77mH25479L9pe2Gdr608TA/93vl7abPiHrmhvL66XGvtP6//8zXni2u/8Sdndf/1HDn9V+Mt/v9OH96sLx+8z7/dNP6/yCuP91f2u7eL32r4/qfe0V5/eficfGFONvX/5Y/fvXPOz1f6X4OPVBul+5/+n/2NrZLt5duv339E0/NtOyP9tt//sXydg5+5McjzddPX0/3kzz2QOvxPRSf35YeeQjha38YWvZzeGO53d+1rT/d3rkHOq//7rZ1nhu6rbH90uPZ1vK4Pv+V3R0fb1rPob/e1vJ4nnlH3H8vTn27uN2Lj8TjMV7+v98pb6/9s0yfe0fr+026/he2la/bdHtTbet/pm39C7cV+673+h98sVz/c2/e0rL+Q++Mx9OD5ey1/hN/cX3L9l/8avl8nP/o5JmzcxdOHosPZlvb63jLxNZrrr3uJS+9Pr6Xtv/78Nn5x2fPb5/ePh3C9gH8yMDNXv+X4vzvcixs/D2Uvvvj8rj77LvK71uv/Un572fi1x+Lz2f6/vj5PxtrOV7bn/eFN5dzvet/fVzHar3iM/9xW4cv/+eyz/y9+IFvXvjb3/9B+88F6fGce/lE4/F9bsdNjcuGni8vb3+/6uXfX976uv7e6HRjfiPu18X4ycw7byrvr/3202eTfPbd5es3/SSXtg9tnyeybaT1cax3/d+LP8d86+bW9790fHzjqbZPc94WhoolLMT3h7BQXp6ulfb3Zy/d1PH+0ufwhIVXrmWZK5p7cm7q1MkzF56Ymp+dm5+ae/Jjh0+fvXBm/nDjs0sPf6jX9kuv72sar+9js/v3hsar/Ww5NtnVXv+5R48eu2/6rmOzx49cOD7/6LnZ8yeOzs0dnT02d9eR48dnP9pr+5PHDs7sPrDnvt2TJ04eO3j/gQN7DkyePHO2WEa5qB72T3948sz5w41N5g7uPTCzb9/e6cnTZ4/NHrxvenryQq/tG9+bJoutPzJ5fvbUkfmTp2cn505+bPbgzIH9+3f3/PTH0+eOz22fOn/hzNSFudnzU+Vj2T7f+HLxva/X9tTD3Nn4ftdmKP50/r679+fPxy18+RMr3lR5ldYfT8MP42dBpe9vvf6dcv9YnFlN8j8AAADUQcr98YP/ly6Q/wEAAKAyUu7fEmcm/wMAAEBlpNw/EWdWk/yv/6//r/+v/6//fwX7/0H/f6Pp/29I/385/f9V0f/X/9f/1/+nu37r/6fcvzWEWuZ/AAAAqIOU+6+JM5P/AQAAoDJS7r82zkz+BwAAgMpIuf+6OLN65P+x9r/q/+v/6/839//TdfX/g/6//v9l0v/X/+9G/1//f5DX34f9/636//Sbfuv/p9z/kjizeuR/AAAAqIWU+18aZyb/AwAAQGWk3H99nJn8DwAAAJWRcv+2OLOa5P8NPP//Z+JF+v/6/4Pe/z+djmPn/9f/1/9fP/1//f9u9P/1/wd5/X3Y/3f+f/pOv/X/U+7/f3FmNcn/AAAAUAcp978szkz+BwAAgMpIuf+GODP5HwAAACoj5f4b48xqkv83sP/v/P/6/1Xp/zed/1//v5n+v/7/5dD/1//vRv9f/3/j1z8Uf0zQ/++1vf4/V0K/9f9T7n95nFlN8j8AAADUQcr9N8WZyf8AAABQGSn3vyLOTP4HAACAyki5/+Y4s5rkf/1//X/9f/1//X/9/82k/6//343+v/7/IK9f/1//n976rf+fcv8r48xqkv8BAACgDlLuvyXOTP4HAACAyki5/1VxZvI/AAAAVEbK/bfGmdUk/+v/91X//8mg/7+8/z+s/6//X1pr/79hoff69f8312D1/4dXvET/v6T/30r/X/9f/1//n+76rf+fcv+r48xqkv8BAACgDlLuf02cmfwPAAAAlZFy/21xZvI/AAAAVEbK/dvjzGqS//X/+6r/7/z/zv+v/+/8/0v9//kh/f9VcP5//f+g/3/ZrnZ/ftDXr/+v/09v/db/T7l/R5xZTfI/AAAA1EHK/TvjzOR/AAAAqIyU+2+PM5P/AQAAoDJS7r8jzqwm+V///zL7/1tb/6n/33n9+v/6//r/zv+v/6//343+v/7/IK9f/391/f/xXjdEpfVb/z/l/jvjzGqS/wEAAKAOUu6/K85M/gcAAIDKSLn/tXFm8j8AAABURsr9u+LMapL/9f+d/1//X/9f/1//fzPp/6+6/7/1cta1Kf3/9Car/9+T/r/+/6D0/yc6bO/8/1wJ/db/T7n/dXFmNcn/AAAAUAcp978+zkz+BwAAgMpIuf/uODP5HwAAACoj5f7JOLOa5H/9f/1//X/9f/1//f/NVNX+f34fdf5//X/9f/3/Te7/f2WF7Qfl/P/UW7/1/1PuvyfOrCb5HwAAAOog5f5748zkfwAAAKiMlPun4szkfwAAAKiMlPun48xqkv+r3/9vbxaX9P9L+v/6/0H/X/9/k1W1/99+/v8Qgv6//n+m/6//32/n/+9E/58rYf39//G8SePPdfb/U+6fiTOrSf4HAACAOki5f3ecmfwPAAAAlZFy/544M/kfAAAAKiPl/r1xZjXJ/9Xv/3em/1/S/9f/D/r/+v+brC79f+f/Ly/X/y/p/+v/6//r/9fRcIevrb//v7RJ48919v9T7t8XZ1aT/A8AAAB1kHL//jgz+R8AAAAqI+X+++LM5H8AAACojJT7748zq0n+1//X/9f/1//v3/5/6/1vXv//v/T/N5H+v/5/N/r/+v+DvH79f/1/etvY/v/16+7/p9x/IM6sJvkfAAAA6iDl/jfEmcn/AAAAUBkp9z8QZyb/AwAAwEDpdB7CJOX+N8aZ1ST/6/9Xvf+/uEX/X/9/cPv/rfvT+f/1/zuJb5/6/6tUr/7/1mX3p//f6mr35wd9/fr/+v/0trH9/2U/nq65/59y/8E4s5rkfwAAAKiDlPvfFGcm/wMAAEBlpNz/5jgz+R8AAAAqI+X+Q3FmNcn/+v9V7//33/n/h8Lg9v9H9f/1//X/18z5//X/u3H+/8Hs/6fP3dD/75/+f3EM6f/Tj/qt/59y/1vizGqS/wEAAKAOUu5/a5yZ/A8AAACVkXL/2+LM5H8AAACojJT73x5nVpP8r/+v/+/8/87/r/+v/7+Z9P/1/7vR/x/M/n+i/98//X/n/6df9Vv/P+X+d8SZ1ST/AwAAQB2k3P/OODP5HwAAACoj5f7/H2cm/wMAAEBlpNz/YJxZTfJ/hfr/Y3Hq/+v/6//r/zfo//cH/X/9/270//X/B3n9+v/6//TWb/3/lPt/Kc6sJvkfAAAA6iDl/ofizOR/AAAAqIyU+98VZyb/AwAAQGWk3P/LcWY1yf8V6v+X+vT8/8P59vX/9f/1//X/9f830oD2/yf0/0v6//r/g7x+/X/9f3rrt/5/yv2/EmdWk/wPAAAAdZBy/6/Gmcn/AAAAUBkp9/9anJn8DwAAAJWRcv/DcWY1yf/6/87/r/+v/9+3/f/R1v2p/6//38mA9v+d/z/S/9f/H+T16//r/9Nbv/X/U+7/9TizmuR/AAAAqIOU+x+JM5P/AQAAoDJS7n93nJn8DwAAAJWRcv974sxqkv/1//X/9f/1//u2/9+2P/X/+7X//29dL9X/1//vRv9f/3+Q16//r/9Pb/3W/0+5/9E4s5rkfwAAAKiDlPvfG2cm/wMAAEBlpNz/G3Fm8j8AAABURsr9vxlnNpj5f3itG+j/6//r/+v/r7r/vxBC0P/X/18j/f/l/f/iPexq9v/HV3NF/f9V0f/X/9f/1/+nu37r/6fc/744s8HM/wAAAEAHKff/VpyZ/A8AAACVkXL/b8eZyf8AAABQGSn3vz/OrCb5X/9f/1//X//f+f/1/zeT/n+9zv8/HvT/g/6//r/+v/4/Wb/1/1Pu/0CcWU3yPwAAANRByv2/E2cm/wMAAEBlpNx/OM5M/gcAAIDKSLn/sTizmuR//f+r1P/fWl5f/1//vzr9/0X9f/3/jvT/69X/d/7/kv6//r/+v/4/pX7r/6fcfyTOrCb5HwAAAOog5f4PxpnJ/wAAAFAZKfcfjTOT/wEAAKAyUu4/FmdWk/yv/+/8//r/+v/O/6//v5n0//X/u9H/1/8f5PXr/+v/01u/9f9T7p+NM6tJ/gcAAIA6SLn/eJyZ/A8AAACVkXL/iTgz+R8AAAAqI+X+x+PMapL/9f/1/1fV/x8L+v/6//r/+v+XRf9f/78b/X/9/0Fev/6//j+9bVz//583pP+fcv/JOLOa5H8AAACog5T7PxRnJv8DAABAZaTc/+E4M/kfAAAAKiPl/lNxZjXJ//r/+v/O/1/B/v+o/n/Q/+8b+v/6/93o/+v/D/L69f/1/+ltKGxU/z9sSP8/5f7TcWY1yf8AAABQByn3n4kzk/8BAACgMlLuPxtnJv8DAABAZaTcfy7OrCb5X/9f/1//v4L9f+f/b9D/7w/6//r/3ej/6/8P8vr1//X/6W3jzv+/Mf3/lPt/N86sJvkfAAAA6iDl/v9j7z6a5LyrPY63riWPVK5bd3X3vAV27OAd+DWwYUuRc44GTE4m55yTiSbnnIPJORlMBkOVKWvOOfZIPd2t0fT08/zP57PgMGaseayhxvUr1beee8ct9j8AAAAMI3f/feIW+x8AAACGkbv/vnFLk/2v/9f/6//1//p//f826f/1/6vo/+fT/59Z8vfr//X/+n/WmVr/n7v/fnFLk/0PAAAAHeTuv3/cYv8DAADAMHL3PyBusf8BAABgGLn7Hxi3NNn/+n/9v/5/Mv3/fuen/9f/6/8vif5f/7/Ydf9/Lj4YvP9fRv+v/9f/s87U+v/c/Q+KW5rsfwAAAOggd/+D4xb7HwAAAIaRu/8hcYv9DwAAAMPI3f/QuKXJ/tf/6//H7f/35tb/e/9/fl9H7P9P3f5l9f/HS/+v/1/suv9v8v7/ZfT/+n/9P+tMrf/P3f+wuKXJ/gcAAIAOcvc/PG6x/wEAAGAYufsfEbfY/wAAADCM3P2PjFua7H/9v/5/3P5/du//1//n93WI/v9c/Tre/6//1/8fTv+v/5/z8+v/9f+sN7X+P3f/o+KWJvsfAAAAOsjd/+i4xf4HAACAYeTuf0zcYv8DAADAMHL3PzZuabL/9f/6f/2//l//fwLv/9f/6//1/0vp//X/c35+/b/+n/Wm1v/n7n9c3NJk/wMAAEAHufsfH7fY/wAAADCM3P1PiFvsfwAAABhG7v4nxi1N9v+l9f+n9P+H0P8vf379v/5f/6//1//r/1fR/+v/5/z8+n/9P+ttvf+/+przd9P+P3f/NXFLk/0PAAAAHeTuf1LcYv8DAADAMHL3Pzlusf8BAABgGLn7nxK3NNn/S/r/KxYzfv//2c2+tP4/vv7B/v/WU/p//f80+/9b4qeM/l//f7F59/9n9f876//39P8r+/nNfif0//p//T/rbL3/X9P7X/hx7v5r45Ym+x8AAAA6yN3/1LjF/gcAAIBh5O5/Wtxi/wMAAMAwcvc/PW5psv8v7f3/0+//vf9/t+//z193C/3/mWXPr//v0v/v8/5//f8y8+7/vf9/i/3/PfI30/v/D7frfn7uz7+q/7/rBs+v/6eDqfX/ufufEbc02f8AAADQQe7+Z8Yt9j8AAAAMI3f/s+IW+x8AAACGkbv/2XFLg/1/Wv9fz5H0/97/v1H/f27/79f/H3we/b/+fxn9v/5/ld29/1//v5hAPz/35/f+//X9/1XrfhGGN7X+P3f/c+KWBvsfAAAAusjd/9y4xf4HAACAYeTuf17cYv8DAADAMHL3Pz9uabL/9f/6f/2/9/9fVv9/xTb6/9NLfz/1//r/ZfT/+v+F/v/Idt3Pz/359f/e/896U+v/c/dfF7fU8Dt9hH9KAAAAYEpy978gbmny5/8AAADQQe7+F8Yt9j8AAAAMI3f/i+KWJvtf/6//1//r/73/X/+/Tfr/4fr/U/r/2+n/9f/6f/0/q02t/8/d/+K4pcn+BwAAgA5y978kbrH/AQAAYBi5+18at9j/AAAAMIzc/S+LW5rsf/2//l//r//X/+v/t0n/P1z/7/3/d6D/1//r//X/rDa1/j93/8vjlib7HwAAADrI3f+KuMX+BwAAgGHk7n9l3GL/AwAAwDBy978qbpnd/r+woN2M/l//r//X/+v/9f/bNP3+/8xGn6X/36f/P2hb/f/ZQ76e/n9az388/X9+9/X/jGkC/f/d7vhx7v5Xxy2z2/8AAADAYXL3vyZusf8BAABgGLn7Xxu32P8AAAAwjNz9r4tbmuz/w/r/m6/a/9/X9P/5G6b/j6v/1/8v9P9F/6//X8yi/9+M/n+f/v8g7//X/3v/v/6f1SbQ/x/4OHf/6+OWJvsfAAAAOsjd/4a4xf4HAACAYeTuf2PcYv8DAADAMHL3vyluabL/vf9f/6//1//r//X/26T/1/+vMqP+f2/ZX9T/6//1//p/Vpta/5+7/81xS5P9DwAAAB3k7n9L3GL/AwAAwDBy9781brH/AQAAYBi5+98WtzTZ//p//f/O+///GbL/P/+I+n/9v/5f/6//X21G/f9S+n/9v/5f/89qU+v/c/e/PW5psv8BAACgg9z974hb7H8AAAAYRu7+d8Yt9j8AAAAMI3f/u+KWJvtf/6//33n/7/3/Rf8f31f9v/7/Euj/9f8L/f+R7bqfn/vz6//1/6w3tf4/d/+745Ym+x8AAAA6yN3/nrjF/gcAAIBh5O6/Pm6x/wEAAGAYufvfG7c02f/6f/2//l//r//X/2+T/l//v8rJ9v/X3qz/P2jX/fzcn1//r/9nvan1/7n73xe3NNn/AAAA0EHu/vfHLfY/AAAADCN3/wfiFvsfAAAAhpG7/4NxS5P9r/+fe/9/95viCabW/+en6P/1/yv7/73FxfT/+v9Lof/X/y+28v7/C39SLKf/1//r//X/rHZi/f89r77XXW77L2v6/9z9H4pbmux/AAAA6CB3/w1xi/0PAAAAw8jd/+G4xf4HAACAYeTu/0jc0mT/9+j/z1z0aeP0/97/r/+fdP+fP1S9/1//r//X/y813f5/M/p//b/+X//PalN7/3/u/o/GLU32PwAAAHSQu/9jcYv9DwAAAMPI3f/xuMX+BwAAgGHk7v9E3NJk//fo/y+m/9937P3/rf+n/9f/l03e/6//1/9fLv2//n+h/z+yXffzc3/+ofv/Uwv9P8diav1/7v5Pxi1N9j8AAAB0kLv/U3GL/Q8AAADDyN3/6bjF/gcAAIBh5O7/TNxw5//d3SOdKP2//t/7//X/+n/9/zbp/4/Q/586vfFz6f/36f+PZtf9/Nyff+j+3/v/OSZT6/9z9382bvHn/wAAADCM3P2fi1vsfwAAABhG7v7Pxy32PwAAAAxgv3fP3f+FuKXJ/l/T/+/l5x25/z93+NfW/+v/F/p//b/+X/9/mYbs/y+B/n+f/v9odt3Pz/35Z9f/X3/wQ/0/J2FJ/3/+J/Gu+v/c/V+MW5rsfwAAAOggd/+X4hb7HwAAAIaRu//LcYv9DwAAAMPI3f+VuKXJ/l/a/+95/7/+X/+v/1/o//X/x0L/r/9fRf+v/5/z88+u/7+A/p+TMLX3/+fu/2rc0mT/AwAAQAe5+78Wt9j/AAAAMIzc/V+PW+x/AAAAGEbu/m/ELU32/5r3/+v/N/tH0f/r/5f+/0H/r//fsP8/s9D/H5n+X/+/0P8f2a77+bk//+X0/+f0/zQxtf4/d/8345Ym+x8AAAA6yN3/rbjF/gcAAIBh5O7/dtxi/wMAAMAwcvd/J25psv9H7v9XfZr+f5/+X/+/0P9Pof/3/v/LoP/X/y/0/0e2635+7s/v/f/6f9abWv+fu/+7cUuT/Q8AAAAd5O7/Xtxi/wMAAMAwcvffuFjcYP8DAADAmG48/59nF9+PW5rs/5H7/1X0//v0//r/hf5f/79l+n/9/yr6f/3/nJ9f/6//Z72p9f+5+38QtzTZ/wAAANBB7v4fxi32PwAAAAwjd/+P4hb7HwAAAIaRu//HcUuT/a//1//r//X/+n/9/zbp//X/q+j/9f9zfn79v/6f9abW/+fu/0nc0mT/AwAAQAe5+38at9j/AAAAMIzc/T+LW+x/AAAAGEbu/p/HLU32v/5f/6//1//r//X/26T/1/+vov/X/8/5+fX/+n/Wm1r/n7v/F3FLk/0PAAAAHeTu/2XcYv8DAADAMHL3/ypusf8BAABgGLn7fx23NNn/+v/bnuNc/XX9v/5f/6//T/r/49G2/7/tX6v6/7X0//r/OT+//l//z3pT6/9z9/8mbmmy/wEAAKCD3P2/jVvsfwAAABhG7v7fxS32PwAAAAwjd//v45Ym+1//7/3/+n/9/zz6/yv1//r/pSbb/3v//0b0//r/OT+//l//z3pT6/9z998UtzTZ/wAAANBB7v4/xC32PwAAAAwjd/8f4xb7HwAAAIaRu//muKXJ/tf/6/+H7P/39P/j9f/e/z/L/v9O+n/9/2r6f/3/nJ9f/6//Z72p9f+5+/8UtzTZ/wAAANBB7v4/xy32PwAAAAwjd/9f4hb7HwAAAIaRu/+vcUuT/a//1/8P2f97/7/+X/8/Gfp//f8q+n/9/5yfX/+v/2e9qfX/ufv/Frc02f8AAADQQe7+v8ct9j8AAAAMI3f/P+IW+x8AAACGkbv/n3FLk/2v/9f/6//1//p//f826f/n2/9fuThC/3/dQv+v/9f/6//1/5Sp9f+5+/8VtzTZ/wAAANBB7v5b4pal+///T+ipAAAAgOOUu//fcYs//wcAAIBh5O7/T9zSZP/r//X/+n/9v/5f/79N+v/59v/e/7+e/l//r//X/7Pa1Pr/3P3/DQAA///E7/7M") r2 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SET_MM_MAP(0x23, 0xe, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r3, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r3, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0xe, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x1403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x6, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000009, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]}) 9m20.196627928s ago: executing program 3 (id=704): mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) timer_create(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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") r0 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000b00)=0x6) io_setup(0x7, &(0x7f0000000280)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f0000000580)={{0x5, 0x3, 0x3, 0xfffffffe, '\x00', 0x2}, 0x1, [0xd44, 0x7fffffffffffffff, 0x0, 0x2, 0x4, 0x4, 0x7ff, 0x2, 0x2, 0x101, 0x2, 0x9, 0xf, 0x8, 0x1, 0x7, 0x4, 0x2, 0x2, 0x9, 0x0, 0xfffffffffefffffe, 0xfe7, 0xe, 0x2, 0x8, 0x7ff, 0x9, 0xfffffffffffffffa, 0x2, 0xfffffffffffffff7, 0x5, 0x7, 0x1403, 0x2, 0x10000, 0xe, 0x5, 0x8, 0x88, 0x2, 0x6, 0x4, 0xffffffff, 0x0, 0x9, 0x7, 0x6, 0xa, 0x4, 0x7fff, 0x6, 0x8001, 0xffa1, 0x6, 0x8, 0x1, 0xfffffffbfffff800, 0x244, 0xffffffffffffffff, 0x20, 0xc, 0xffffffffffffffff, 0xffffffffffffffff, 0x8f, 0x5, 0x1, 0x4, 0x4, 0x4, 0xf, 0xae9, 0x3, 0xfffffffffffffffe, 0x6, 0x9, 0x7, 0x4000000000000000, 0x0, 0x7ff, 0x4, 0x7, 0x205d, 0x9, 0x63, 0x3, 0x3, 0x6, 0xf8, 0xfffffffffffffff9, 0xfffffffffffffffb, 0xfff, 0x93, 0x6, 0x4, 0x8000000000000000, 0x800000000009, 0x2, 0x7ff, 0x7, 0x8, 0x1ff, 0x0, 0x6, 0x4, 0x5, 0x796a, 0xb0b, 0x9, 0x7, 0x4, 0x4, 0x0, 0x8, 0x4, 0x2dd, 0x4, 0x4, 0x8, 0x10000, 0x1da0, 0x38, 0x7, 0x5, 0x5, 0x8000000000000001, 0xfffffffffeffffff, 0x7]}) 9m18.048339534s ago: executing program 3 (id=710): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0402, 0x0) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000040)={0x1, {"40a568bf607c2094e9c6a0c0f550f7f8", "241e6a0b37e28869f574458eb6417d55", "a34d3bcc4817356e5c266b26fe399bde"}, 0x7, 0x4}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000240)={0x3, {"771c2e09a6afc168243d3e8ca34e208f", "45d5c22cb6cd3148b85d5dbf5f9e3413", "a9929074e915d4b883a44cd492a341be"}, 0x1, 0x4}) 9m16.09834941s ago: executing program 3 (id=713): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x4) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x40408d1) shutdown(0xffffffffffffffff, 0x1) setsockopt(0xffffffffffffffff, 0x84, 0x7f, &(0x7f00000001c0), 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000001380)) getdents(r1, &(0x7f0000001000)=""/4085, 0xff5) 9m9.465640537s ago: executing program 3 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 8m53.815530958s ago: executing program 32 (id=726): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000180)) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r5, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r4, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) 14.980636897s ago: executing program 2 (id=1887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) getpid() sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r2, 0x0) 13.120097279s ago: executing program 2 (id=1891): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x42403) 11.716533269s ago: executing program 4 (id=1893): set_mempolicy(0x8004, &(0x7f0000003ac0)=0x9, 0x5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x2, &(0x7f0000000000)=0x8, 0x4) bind$can_raw(r3, 0x0, 0x0) close(r3) 10.384553434s ago: executing program 4 (id=1895): socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101, 0x2, 0x5, [@loopback, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @multicast1]}, 0x24) 9.67444049s ago: executing program 4 (id=1897): ftruncate(0xffffffffffffffff, 0x2000000) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_io_uring_setup(0x117, &(0x7f0000000400)={0x0, 0x0, 0x10, 0x0, 0x3a2}, &(0x7f00000001c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x18}, 0x0, 0x40000, 0x1}) io_uring_enter(r1, 0x47f6, 0x80ffff, 0x0, 0x0, 0x0) 9.340559327s ago: executing program 2 (id=1898): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2, 0x50b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x4000}, 0x10) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r1 = socket$inet6(0xa, 0x80002, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000700)=[{&(0x7f0000000280)="64b81bda58bf7cc372cece7a68bba1c3df52476738f9", 0x16}, {&(0x7f0000000ac0)="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", 0xcfa}, {&(0x7f0000000600)="1dc5f9d8193fb0c033a70a246ab32927e314f58a0fea503e365368f038218151fb4afb035e18991bd0cd3a7c24bc9a326e48706e13c6b5af0536b19d9c559b688f133c53bf0365fd2be7ce7bc19e55666a5d8f18673ea66c31efb25404f24da912e5330c6074d0e00946dc659cf772185ab4e49a9423e7a8329433e85fc17e40dd0240d2d3c91aca64bf3d3a808af0a71bd7290afbeabeafce9777ac5e9b0aeb4eb0d2e66bdc38a34def6cb5770e7e18b1e2976a9d89a93e549741b7e4659a89dc0c72e8", 0xc4}, {&(0x7f0000000380)}], 0x4, 0x0, 0x0, 0x5) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) bind$llc(0xffffffffffffffff, 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000440)={'pcl724\x00', [0x3dc0, 0x8001, 0x802, 0x40300000, 0xe4, 0xc, 0x8, 0x8, 0x1009f, 0xfffffff7, 0xcd6, 0xb, 0x1db, 0x2, 0x7, 0xfe, 0x10002, 0xf, 0x0, 0x0, 0x2, 0x7, 0xf21, 0x0, 0xb, 0xc00, 0x3f, 0x9, 0x6, 0x1, 0xfffffffc]}) 8.842219372s ago: executing program 0 (id=1899): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[], 0x2c}}, 0x60040050) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x101e01, 0x0) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x7, 0x0, &(0x7f0000000200)="63eced8e46dc3f", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TIOCSETD(r2, 0x5423, 0x0) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = epoll_create1(0x0) r5 = epoll_create1(0x0) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000000)={0x20000002}) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x2d}, 0x2c) ioctl$RTC_PIE_OFF(r3, 0x7006) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f00000000c0)={0x2000}) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="14010000350001000000000000000000010100800c0001000000000000000000140003002001000000000000000000000000000050bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000ae621a5ca6fc2b644d88e9fa2f3cd9de143c58c72797c2244f98146bd97ae5fd5c03a7e1197f81e043549626863a172f49b9121768d9654943746b45a2ea7916fba5f4850f0f77bec3762af6417fd9ac1d882dc78025f4f90b9ee7b3345a3ec2488c480baf563142eb9df50897a88282a1a85bb1dc6fc2e497fa86a7e87c70266e38b04bd95c0e6434b847790803a059d57cc206de1371c5813fab17ef2cd2f408927bf5adb7591e98aa2be8b12533f62fe59bff89fc48b28af9804ae43cd66a58942a172719e07c08f7300301afbb65c8c419f8f7569ecea6341267a24a37a2155752ec914afb8f8c"], 0x114}], 0x1}, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 8.816539383s ago: executing program 1 (id=1900): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x7ad3db81}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setregid(0x0, 0x0) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/comedi4\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x13, r2, 0x0) 8.444474371s ago: executing program 2 (id=1901): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x42403) 7.744653796s ago: executing program 0 (id=1902): syz_open_dev$tty1(0xc, 0x4, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setrlimit(0xc, &(0x7f0000000200)={0x3, 0x4}) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 6.904954147s ago: executing program 4 (id=1903): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, 0x0, 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0xfd, 0x1f8, &(0x7f0000000580)="$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") 6.691704148s ago: executing program 1 (id=1904): openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) syz_emit_vhci(0x0, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) r0 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000500)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000400000000000000080003851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50afdff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xa}, 0x94) 3.717259276s ago: executing program 2 (id=1905): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f00000008c0)={0x1c, &(0x7f0000000780)={0x0, 0x30, 0x2, "fd75"}, 0x0, 0x0}) 3.560178963s ago: executing program 4 (id=1906): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x42403) 3.550497954s ago: executing program 1 (id=1907): writev(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) setresgid(0xee00, 0xee01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) 3.076815087s ago: executing program 1 (id=1908): socket$packet(0x11, 0x2, 0x300) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24048014}, 0x4040000) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x6, 0x0, 0x0) r1 = socket(0xa, 0x5, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000280)={@dev={0xac, 0x14, 0x14, 0x2c}, @private=0xa010101, 0x2, 0x5, [@loopback, @rand_addr=0x64010100, @remote, @rand_addr=0x64010101, @multicast1]}, 0x24) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = io_uring_setup(0x25e, &(0x7f0000000080)) io_uring_register$IORING_UNREGISTER_RING_FDS(r3, 0x24, 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0x11) ioctl$TCFLSH(0xffffffffffffffff, 0x400455c8, 0x1) mount$9p_fd(0x0, 0x0, &(0x7f0000000240), 0x40, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x20000, 0x0) syz_open_procfs(0x0, 0x0) 2.2322s ago: executing program 0 (id=1909): ftruncate(0xffffffffffffffff, 0x2007ffc) prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000000)='./file0\x00', 0x2000898, &(0x7f00000003c0), 0x1, 0x55ae, &(0x7f000000abc0)="$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") read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0) msgctl$IPC_RMID(0x0, 0x0) 2.157011773s ago: executing program 1 (id=1910): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000100)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) move_pages(0x0, 0x16, &(0x7f0000000000)=[&(0x7f0000ff4000/0x1000)=nil], &(0x7f0000000240), 0xffffffffffffffff, 0x2) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000200)='.\x00', 0x10000a0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000600000095000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000000)=0x4, 0x4) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf1c) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000019380)={0xc, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={0xffffffffffffffff, 0x2000012, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000"], 0x9c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x1}, 0x28) landlock_add_rule$LANDLOCK_RULE_NET_PORT(0xffffffffffffffff, 0x2, &(0x7f0000000280)={0x3, 0x2000003}, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount(&(0x7f00000002c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000080)='./cgroup\x00', &(0x7f00000000c0)='ext4\x00', 0x8010, 0x0) 1.023508259s ago: executing program 0 (id=1911): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001000010400000000000000ffff0000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e"], 0x54}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.01001101s ago: executing program 1 (id=1912): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000010d804dd00000000000001090224000100000000090400000103000000092105000001220500090581030002"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="000008000000080482"], 0x0, 0x0, 0x0, 0x0}, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) 862.344198ms ago: executing program 0 (id=1913): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08000340000000045400"], 0xec}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 638.520389ms ago: executing program 0 (id=1914): r0 = syz_usb_connect(0x5, 0x24, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r1, 0x0, 0x0, 0x720, 0x0, 0x0) shutdown(r1, 0x1) openat$ptp0(0xffffffffffffff9c, 0x0, 0x40001, 0x0) syz_open_dev$I2C(0x0, 0x1, 0x42403) 396.960971ms ago: executing program 2 (id=1915): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x1000000, 0x3032, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, 0x0, 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) socket$nl_route(0x10, 0x3, 0x0) add_key$keyring(&(0x7f0000000340), &(0x7f0000000380)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1, &(0x7f0000000080)=ANY=[@ANYRES32=0x0, @ANYRES16=0x0], 0xfd, 0x1f8, &(0x7f0000000580)="$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") 0s ago: executing program 4 (id=1916): writev(0xffffffffffffffff, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80202, 0x0) setresgid(0xee00, 0xee01, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r0, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) ppoll(&(0x7f00000000c0)=[{r0, 0x60}], 0x1, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): =4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1039" name="file2" dev="loop4" ino=3 res=0 errno=0 [ 583.069257][ T9772] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 584.889388][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 585.312793][ T9801] Option ' ' to dns_resolver key: bad/missing value [ 586.041684][ T9803] loop2: detected capacity change from 0 to 8 [ 586.090512][ T9803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 586.098667][ T9803] SQUASHFS error: Failed to read block 0x0: -5 [ 586.105028][ T9803] SQUASHFS error: Failed to read block 0xff: -5 [ 586.111450][ T9803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 586.119453][ T9803] SQUASHFS error: Failed to read block 0x0: -5 [ 586.126497][ T28] audit: type=1800 audit(1774108987.796:65): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1048" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 586.147640][ T9803] SQUASHFS error: lzo decompression failed, data probably corrupt [ 586.155759][ T9803] SQUASHFS error: Failed to read block 0x0: -5 [ 586.164618][ T9803] SQUASHFS error: Failed to read block 0x6a4: -5 [ 586.171010][ T9803] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 586.179379][ T9803] SQUASHFS error: read_indexes: reading block [6a2:0] [ 586.183791][ T28] audit: type=1800 audit(1774108987.826:66): pid=9803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1048" name="file2" dev="loop2" ino=3 res=0 errno=0 [ 586.186269][ T9803] SQUASHFS error: Failed to read block 0x0: -5 [ 586.211960][ T9803] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 586.219340][ T9803] SQUASHFS error: read_indexes: reading block [6a2:0] [ 586.226718][ T9803] SQUASHFS error: Failed to read block 0x0: -5 [ 588.190577][ T9820] kvm: pic: level sensitive irq not supported [ 588.191381][ T9820] kvm: pic: single mode not supported [ 588.248876][ T9820] kvm: pic: single mode not supported [ 588.547842][ T9824] syzkaller0: entered promiscuous mode [ 588.754367][ T9824] syzkaller0: entered allmulticast mode [ 590.116931][ T9840] loop1: detected capacity change from 0 to 8 [ 590.263169][ T9840] SQUASHFS error: lzo decompression failed, data probably corrupt [ 590.271294][ T9840] SQUASHFS error: Failed to read block 0x0: -5 [ 590.277835][ T9840] SQUASHFS error: Failed to read block 0xff: -5 [ 590.284536][ T9840] SQUASHFS error: lzo decompression failed, data probably corrupt [ 590.292415][ T9840] SQUASHFS error: Failed to read block 0x0: -5 [ 590.298849][ T28] audit: type=1800 audit(1774108991.976:67): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1057" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 590.320369][ T9840] SQUASHFS error: lzo decompression failed, data probably corrupt [ 590.329507][ T9840] SQUASHFS error: Failed to read block 0x0: -5 [ 590.337804][ T9840] SQUASHFS error: Failed to read block 0x6a4: -5 [ 590.344219][ T9840] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 590.351532][ T9840] SQUASHFS error: read_indexes: reading block [6a2:0] [ 590.358433][ T9840] SQUASHFS error: Failed to read block 0x0: -5 [ 590.364763][ T9840] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 590.372061][ T9840] SQUASHFS error: read_indexes: reading block [6a2:0] [ 590.378920][ T9840] SQUASHFS error: Failed to read block 0x0: -5 [ 590.425242][ T28] audit: type=1800 audit(1774108992.006:68): pid=9840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1057" name="file2" dev="loop1" ino=3 res=0 errno=0 [ 592.450583][ T9834] loop4: detected capacity change from 0 to 32768 [ 592.748241][ T9834] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 592.760724][ T9834] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 593.798158][ T9834] BTRFS info (device loop4): setting nodatasum [ 593.805851][ T9834] BTRFS info (device loop4): force zlib compression, level 3 [ 593.813319][ T9834] BTRFS info (device loop4): use zlib compression, level 3 [ 593.820988][ T9834] BTRFS info (device loop4): turning on flush-on-commit [ 594.013261][ T9834] BTRFS info (device loop4): max_inline at 4096 [ 594.039069][ T9834] BTRFS info (device loop4): using free space tree [ 594.046433][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 594.061151][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 594.072420][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 594.094429][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 594.118281][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 594.132324][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 594.205294][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 594.217486][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 594.234205][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 594.277931][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 594.353440][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 594.412045][ T9869] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1063'. [ 594.434070][ T9834] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 594.860539][ T9834] BTRFS error (device loop4): open_ctree failed: -12 [ 597.713897][ T9906] Option ' ' to dns_resolver key: bad/missing value [ 598.938356][ T9913] loop2: detected capacity change from 0 to 8 [ 599.453843][ T9918] syzkaller0: entered promiscuous mode [ 599.481802][ T9918] syzkaller0: entered allmulticast mode [ 600.666022][ T9126] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 600.873650][ T9126] usb 3-1: Using ep0 maxpacket: 8 [ 600.905007][ T9126] usb 3-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 600.933361][ T9126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 600.948334][ T9126] usb 3-1: Product: syz [ 600.952680][ T9126] usb 3-1: Manufacturer: syz [ 600.957531][ T9136] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 600.971775][ T9126] usb 3-1: SerialNumber: syz [ 600.984453][ T9126] usb 3-1: config 0 descriptor?? [ 601.006737][ T9126] gspca_main: sq905-2.14.0 probing 2770:9120 [ 601.153822][ T9136] usb 2-1: Using ep0 maxpacket: 16 [ 601.172188][ T9136] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 601.191868][ T9136] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 601.219691][ T9136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.237670][ T9136] usb 2-1: config 0 descriptor?? [ 601.881628][ T9136] usbhid 2-1:0.0: can't add hid device: -71 [ 601.891205][ T9136] usbhid: probe of 2-1:0.0 failed with error -71 [ 601.935422][ T9136] usb 2-1: USB disconnect, device number 34 [ 602.031414][ T9126] gspca_sq905: sq905_read_data: usb_control_msg failed (-71) [ 602.064405][ T9126] sq905: probe of 3-1:0.0 failed with error -71 [ 602.527338][ T9126] usb 3-1: USB disconnect, device number 36 [ 602.540879][ T9950] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1082'. [ 609.503813][ T5095] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 609.729104][ T5095] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 609.738457][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 609.750827][ T5095] usb 5-1: Product: syz [ 609.757804][ T5095] usb 5-1: Manufacturer: syz [ 609.763664][ T5095] usb 5-1: SerialNumber: syz [ 610.063912][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 610.128855][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 612.077958][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 612.097934][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 612.111516][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 612.159486][ T5095] lan78xx: probe of 5-1:1.0 failed with error -71 [ 612.306006][ T5095] usb 5-1: USB disconnect, device number 26 [ 612.593056][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 613.903734][ T5781] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 614.277345][ T5781] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 614.289138][ T5781] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 614.300496][ T5781] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 614.309691][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.435315][T10059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.483988][T10059] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 614.517811][ T5781] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 614.744358][ T5781] usb 5-1: USB disconnect, device number 27 [ 615.331772][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1123'. [ 616.693572][ T5095] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 616.907234][ T5095] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 616.922198][ T5095] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.951605][ T5095] usb 2-1: Product: syz [ 616.977879][ T5095] usb 2-1: Manufacturer: syz [ 616.987984][ T5095] usb 2-1: SerialNumber: syz [ 617.001549][T10091] kvm: pic: level sensitive irq not supported [ 617.002228][T10091] kvm: pic: single mode not supported [ 617.020864][T10091] kvm: pic: single mode not supported [ 617.234987][ T5095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 617.305979][ T5095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 619.161592][ T5095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000400. ret = -71 [ 619.192083][ T5095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 619.211275][ T5095] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 619.222439][ T5095] lan78xx: probe of 2-1:1.0 failed with error -71 [ 619.238342][ T5095] usb 2-1: USB disconnect, device number 35 [ 619.390510][T10111] Option ' ' to dns_resolver key: bad/missing value [ 619.397651][ T9136] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 619.756317][ T9136] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 619.960790][ T9136] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 620.089632][ T9136] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 620.099419][T10115] loop1: detected capacity change from 0 to 16 [ 620.121468][T10115] erofs: (device loop1): erofs_read_inode: unsupported datalayout 6 of nid 36 [ 620.130013][ T9136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 620.170912][T10106] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.181443][T10106] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 620.236909][ T9136] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 621.351393][ T9136] usb 5-1: USB disconnect, device number 28 [ 624.657822][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.665983][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.293621][T10153] Option ' ' to dns_resolver key: bad/missing value [ 626.901486][T10159] loop4: detected capacity change from 0 to 32768 [ 627.725719][ T9136] IPVS: starting estimator thread 0... [ 627.946810][T10169] IPVS: using max 16 ests per chain, 38400 per kthread [ 628.433130][T10177] loop4: detected capacity change from 0 to 1024 [ 628.691159][ T28] audit: type=1800 audit(1774109030.356:69): pid=10177 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1150" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 628.732414][ T9136] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 628.934309][ T9136] usb 1-1: Using ep0 maxpacket: 16 [ 628.960892][T10157] loop1: detected capacity change from 0 to 40427 [ 628.961436][ T9136] usb 1-1: unable to get BOS descriptor or descriptor too short [ 628.982827][T10157] F2FS-fs (loop1): invalid crc value [ 629.016737][ T9136] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 629.018571][T10157] F2FS-fs (loop1): Found nat_bits in checkpoint [ 629.082617][T10157] F2FS-fs (loop1): Start checkpoint disabled! [ 629.095896][ T9136] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 629.097981][T10157] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 629.149659][ T9136] usb 1-1: New USB device found, idVendor=08e4, idProduct=0163, bcdDevice= 0.40 [ 629.175614][ T9136] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 629.221105][ T9136] usb 1-1: Product: syz [ 629.233345][ T9136] usb 1-1: Manufacturer: syz [ 629.243526][ T9136] usb 1-1: SerialNumber: syz [ 629.619725][ T9136] snd-usb-audio: probe of 1-1:1.0 failed with error -71 [ 629.658937][ T9136] usb 1-1: USB disconnect, device number 28 [ 629.680274][ T12] kworker/u4:1: attempt to access beyond end of device [ 629.680274][ T12] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 629.735429][ T5780] udevd[5780]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 630.081780][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 630.180328][ T12] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 631.479796][T10204] Option ' ' to dns_resolver key: bad/missing value [ 632.495240][T10211] loop2: detected capacity change from 0 to 512 [ 632.607521][T10215] syz.4.1160 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 632.621510][T10215] ubi31: attaching mtd0 [ 632.629988][T10215] ubi31: scanning is finished [ 632.634821][T10215] ubi31: empty MTD device detected [ 633.316356][T10215] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 633.670430][T10211] EXT4-fs (loop2): DAX unsupported by block device. [ 633.810290][ T8132] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 636.162040][T10239] syzkaller0: entered promiscuous mode [ 636.167903][T10239] syzkaller0: entered allmulticast mode [ 636.861604][T10248] Option ' ' to dns_resolver key: bad/missing value [ 639.854782][T10258] loop4: detected capacity change from 0 to 32768 [ 639.955408][T10258] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by syz.4.1169 (10258) [ 640.145989][T10258] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 640.157029][T10258] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 640.166156][T10258] BTRFS info (device loop4): using free space tree [ 640.175513][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 640.176306][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 640.187901][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 640.198162][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 640.208598][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 640.218128][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 640.227638][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 640.237153][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 640.247128][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 640.256529][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 640.266794][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 640.277267][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 640.287659][T10258] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 640.787834][T10258] BTRFS error (device loop4): open_ctree failed: -12 [ 640.817029][ T5780] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 scanned by udevd (5780) [ 644.230635][T10306] Option ' ' to dns_resolver key: bad/missing value [ 646.138859][T10311] loop2: detected capacity change from 0 to 32768 [ 646.389687][T10311] (syz.2.1181,10311,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 646.456876][T10311] (syz.2.1181,10311,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 646.784935][T10331] loop1: detected capacity change from 0 to 32768 [ 646.885971][T10311] JBD2: Ignoring recovery information on journal [ 647.241817][T10311] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 648.211137][T10342] process 'syz.0.1188' launched './file0' with NULL argv: empty string added [ 648.239877][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 650.213199][T10339] lo speed is unknown, defaulting to 1000 [ 655.783983][T10391] lo speed is unknown, defaulting to 1000 [ 655.973670][ T787] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 656.035505][T10385] loop1: detected capacity change from 0 to 32768 [ 656.173767][ T787] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 656.207942][ T787] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 656.251113][T10385] (syz.1.1198,10385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.264964][ T787] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.294289][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.337219][T10385] (syz.1.1198,10385,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 656.380088][T10390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.413765][T10390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 656.425385][ T787] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 656.733832][T10385] JBD2: Ignoring recovery information on journal [ 657.622856][T10385] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 658.936754][ T5095] usb 3-1: USB disconnect, device number 37 [ 658.944016][ T5768] ocfs2: Unmounting device (7,1) on (node local) [ 661.059602][T10430] loop2: detected capacity change from 0 to 8 [ 661.070449][T10430] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 662.344122][ T9126] IPVS: starting estimator thread 0... [ 662.664090][T10439] IPVS: using max 32 ests per chain, 76800 per kthread [ 663.917449][T10451] loop4: detected capacity change from 0 to 1024 [ 664.138821][ T28] audit: type=1800 audit(1774109065.806:70): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1220" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 665.817994][T10473] loop1: detected capacity change from 0 to 32768 [ 667.533902][ T5781] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 667.893809][ T5781] usb 2-1: device descriptor read/64, error -71 [ 668.493638][ T5781] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 668.666970][ T5781] usb 2-1: device descriptor read/64, error -71 [ 669.017570][ T5781] usb usb2-port1: attempt power cycle [ 669.419872][T10501] loop4: detected capacity change from 0 to 1024 [ 669.454021][ T5781] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 669.489138][ T5781] usb 2-1: device descriptor read/8, error -71 [ 669.626726][ T28] audit: type=1800 audit(1774109071.276:71): pid=10499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1234" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 669.942070][T10506] loop2: detected capacity change from 0 to 32768 [ 669.950202][ T5781] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 669.984800][ T5781] usb 2-1: device descriptor read/8, error -71 [ 670.116224][ T5781] usb usb2-port1: unable to enumerate USB device [ 671.283696][T10517] loop2: detected capacity change from 0 to 1024 [ 671.639353][T10521] siw: device registration error -23 [ 671.649556][T10521] loop4: detected capacity change from 0 to 512 [ 671.967337][ T28] audit: type=1800 audit(1774109073.636:72): pid=10528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1239" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 673.959561][ T9136] usb 1-1: new full-speed USB device number 29 using dummy_hcd [ 674.420344][ T9136] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 674.472392][ T9136] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 674.497355][ T9136] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 674.509710][ T9136] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 674.541327][T10539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.560921][T10539] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 674.588669][ T9136] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 676.189188][T10546] loop2: detected capacity change from 0 to 32768 [ 676.394230][ T9136] usb 1-1: USB disconnect, device number 29 [ 676.612816][T10549] loop4: detected capacity change from 0 to 4096 [ 676.678544][T10549] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 676.889561][T10549] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 676.898129][T10558] siw: device registration error -23 [ 676.913873][T10558] loop1: detected capacity change from 0 to 512 [ 676.928290][T10549] ntfs3: loop4: Failed to load $Extend (-22). [ 676.962091][T10549] ntfs3: loop4: Failed to initialize $Extend. [ 679.177416][T10578] loop4: detected capacity change from 0 to 1024 [ 680.358378][T10557] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 680.732930][T10580] loop1: detected capacity change from 0 to 512 [ 680.768088][T10580] EXT4-fs (loop1): DAX unsupported by block device. [ 680.950546][T10587] comedi comedi3: comedi_test: 4 microvolt, 1 microsecond waveform attached [ 682.273839][ T5781] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 682.375715][T10586] loop4: detected capacity change from 0 to 32768 [ 682.443764][ T5781] usb 1-1: device descriptor read/64, error -71 [ 682.630397][T10597] loop2: detected capacity change from 0 to 32768 [ 682.670256][T10597] (syz.2.1262,10597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 682.723614][ T5781] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 682.732960][T10597] (syz.2.1262,10597,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 682.886365][T10597] JBD2: Ignoring recovery information on journal [ 682.943604][ T5781] usb 1-1: device descriptor read/64, error -71 [ 683.074577][ T5781] usb usb1-port1: attempt power cycle [ 683.580009][T10597] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 683.591985][ T5781] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 683.674636][ T5781] usb 1-1: device descriptor read/8, error -71 [ 684.180679][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 684.302261][ T5781] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 684.344165][ T5781] usb 1-1: device descriptor read/8, error -71 [ 684.369253][T10609] siw: device registration error -23 [ 684.384594][T10609] loop4: detected capacity change from 0 to 512 [ 684.473784][ T5781] usb usb1-port1: unable to enumerate USB device [ 685.603643][ T5781] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 685.823343][ T5781] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 685.845149][ T5781] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 685.923728][ T5781] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 685.965536][ T5781] usb 5-1: config 0 descriptor?? [ 686.004012][ T5781] pwc: Askey VC010 type 2 USB webcam detected. [ 686.301354][T10632] loop1: detected capacity change from 0 to 32768 [ 686.310221][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.322089][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.826483][ T5781] pwc: recv_control_msg error -71 req 02 val 2700 [ 686.846489][ T5781] pwc: recv_control_msg error -71 req 02 val 2c00 [ 686.857128][ T5781] pwc: recv_control_msg error -71 req 04 val 1000 [ 686.865725][ T5781] pwc: recv_control_msg error -71 req 04 val 1300 [ 687.632795][ T5781] pwc: recv_control_msg error -71 req 04 val 1400 [ 687.660993][ T5781] pwc: recv_control_msg error -71 req 02 val 2000 [ 687.686948][ T5781] pwc: recv_control_msg error -71 req 02 val 2100 [ 687.715292][ T5781] pwc: recv_control_msg error -71 req 04 val 1500 [ 687.724422][ T5781] pwc: recv_control_msg error -71 req 02 val 2500 [ 687.733963][ T5781] pwc: recv_control_msg error -71 req 02 val 2400 [ 687.743107][ T5781] pwc: recv_control_msg error -71 req 02 val 2600 [ 687.755116][ T5781] pwc: recv_control_msg error -71 req 02 val 2900 [ 687.764511][ T5781] pwc: recv_control_msg error -71 req 02 val 2800 [ 687.778357][ T5781] pwc: recv_control_msg error -71 req 04 val 1100 [ 687.794894][ T5781] pwc: recv_control_msg error -71 req 04 val 1200 [ 687.840560][ T5781] pwc: Registered as video103. [ 687.859074][ T5781] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 687.991650][ T5781] usb 5-1: USB disconnect, device number 29 [ 689.378511][T10655] siw: device registration error -23 [ 689.389827][T10655] loop4: detected capacity change from 0 to 512 [ 690.290242][T10667] loop4: detected capacity change from 0 to 32768 [ 692.033538][ T9136] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 692.236658][ T9136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 692.261712][ T9136] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 692.290005][ T9136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 692.332236][ T9136] usb 2-1: config 0 descriptor?? [ 692.348155][ T9136] pwc: Askey VC010 type 2 USB webcam detected. [ 693.091995][T10690] input: syz1 as /devices/virtual/input/input6 [ 693.293755][ T9136] pwc: recv_control_msg error -71 req 02 val 2b00 [ 693.333577][ T9136] pwc: recv_control_msg error -71 req 02 val 2700 [ 693.356285][ T9136] pwc: recv_control_msg error -71 req 02 val 2c00 [ 693.367032][ T9136] pwc: recv_control_msg error -71 req 04 val 1000 [ 693.377339][ T9136] pwc: recv_control_msg error -71 req 04 val 1300 [ 693.389309][ T9136] pwc: recv_control_msg error -71 req 04 val 1400 [ 693.396835][ T9136] pwc: recv_control_msg error -71 req 02 val 2000 [ 693.404088][ T9136] pwc: recv_control_msg error -71 req 02 val 2100 [ 693.411106][ T9136] pwc: recv_control_msg error -71 req 04 val 1500 [ 693.420495][ T9136] pwc: recv_control_msg error -71 req 02 val 2500 [ 693.427949][ T9136] pwc: recv_control_msg error -71 req 02 val 2400 [ 693.436317][ T9136] pwc: recv_control_msg error -71 req 02 val 2600 [ 693.448056][ T9136] pwc: recv_control_msg error -71 req 02 val 2900 [ 693.456680][ T9136] pwc: recv_control_msg error -71 req 02 val 2800 [ 693.463986][ T9136] pwc: recv_control_msg error -71 req 04 val 1100 [ 693.474172][ T9136] pwc: recv_control_msg error -71 req 04 val 1200 [ 693.486330][ T9136] pwc: Registered as video103. [ 693.493362][ T9136] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input7 [ 693.539139][ T9136] usb 2-1: USB disconnect, device number 40 [ 695.596400][T10708] loop1: detected capacity change from 0 to 32768 [ 697.326561][T10727] loop1: detected capacity change from 0 to 1024 [ 698.119466][ T28] audit: type=1800 audit(1774109099.416:73): pid=10728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1297" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 698.850580][T10734] siw: device registration error -23 [ 698.864149][T10734] loop2: detected capacity change from 0 to 512 [ 701.761410][T10742] input: syz1 as /devices/virtual/input/input8 [ 702.173814][ T9136] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 702.355381][ T9136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 702.370819][ T9136] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 702.404149][ T9136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 702.457762][ T9136] usb 2-1: config 0 descriptor?? [ 702.643347][T10748] loop2: detected capacity change from 0 to 32768 [ 702.696331][ T9136] pwc: Askey VC010 type 2 USB webcam detected. [ 703.540650][ T9136] pwc: recv_control_msg error -71 req 02 val 2b00 [ 703.558337][ T9136] pwc: recv_control_msg error -71 req 02 val 2700 [ 703.603594][ T9136] pwc: recv_control_msg error -71 req 02 val 2c00 [ 703.627009][ T9136] pwc: recv_control_msg error -71 req 04 val 1000 [ 703.635247][ T9136] pwc: recv_control_msg error -71 req 04 val 1300 [ 703.643029][ T9136] pwc: recv_control_msg error -71 req 04 val 1400 [ 703.651912][ T9136] pwc: recv_control_msg error -71 req 02 val 2000 [ 703.659878][ T9136] pwc: recv_control_msg error -71 req 02 val 2100 [ 703.672263][ T9136] pwc: recv_control_msg error -71 req 04 val 1500 [ 703.691473][ T9136] pwc: recv_control_msg error -71 req 02 val 2500 [ 703.717649][ T9136] pwc: recv_control_msg error -71 req 02 val 2400 [ 703.773535][ T9136] pwc: recv_control_msg error -71 req 02 val 2600 [ 703.871632][T10762] syz.4.1308: attempt to access beyond end of device [ 703.871632][T10762] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 703.888359][T10762] EXT4-fs (nbd4): unable to read superblock [ 704.041210][ T9136] pwc: recv_control_msg error -71 req 02 val 2900 [ 704.164361][ T9136] pwc: recv_control_msg error -71 req 02 val 2800 [ 704.322316][ T9136] pwc: recv_control_msg error -71 req 04 val 1100 [ 704.385028][ T9136] pwc: recv_control_msg error -71 req 04 val 1200 [ 704.414710][ T9136] pwc: Registered as video103. [ 704.454664][ T9136] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9 [ 704.676052][ T9136] usb 2-1: USB disconnect, device number 41 [ 704.746372][T10769] siw: device registration error -23 [ 705.992457][T10769] loop2: detected capacity change from 0 to 512 [ 706.678114][T10780] input: syz1 as /devices/virtual/input/input10 [ 707.351832][T10782] loop4: detected capacity change from 0 to 32768 [ 710.673733][ T5095] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 710.893573][ T5095] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 710.904777][ T5095] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 710.916184][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 710.951593][ T5095] usb 1-1: config 0 descriptor?? [ 710.994459][ T5095] pwc: Askey VC010 type 2 USB webcam detected. [ 711.387160][ T5095] pwc: recv_control_msg error -71 req 02 val 2b00 [ 711.407617][ T5095] pwc: recv_control_msg error -71 req 02 val 2700 [ 711.426232][ T5095] pwc: recv_control_msg error -71 req 02 val 2c00 [ 711.444039][ T5095] pwc: recv_control_msg error -71 req 04 val 1000 [ 711.461955][ T5095] pwc: recv_control_msg error -71 req 04 val 1300 [ 711.478178][ T5095] pwc: recv_control_msg error -71 req 04 val 1400 [ 711.492688][ T5095] pwc: recv_control_msg error -71 req 02 val 2000 [ 711.622974][ T5095] pwc: recv_control_msg error -71 req 02 val 2100 [ 711.640940][ T5095] pwc: recv_control_msg error -71 req 04 val 1500 [ 711.655430][ T5095] pwc: recv_control_msg error -71 req 02 val 2500 [ 711.668446][ T5095] pwc: recv_control_msg error -71 req 02 val 2400 [ 711.681077][ T5095] pwc: recv_control_msg error -71 req 02 val 2600 [ 711.688394][T10801] siw: device registration error -23 [ 711.702623][T10801] loop4: detected capacity change from 0 to 512 [ 711.711739][ T5095] pwc: recv_control_msg error -71 req 02 val 2900 [ 711.719105][ T5095] pwc: recv_control_msg error -71 req 02 val 2800 [ 711.729140][ T5095] pwc: recv_control_msg error -71 req 04 val 1100 [ 711.737889][ T5095] pwc: recv_control_msg error -71 req 04 val 1200 [ 711.759458][ T5095] pwc: Registered as video103. [ 711.783082][ T5095] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 711.820881][ T5095] usb 1-1: USB disconnect, device number 34 [ 712.413313][T10811] loop2: detected capacity change from 0 to 32768 [ 713.133941][ T5781] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 713.494472][ T5781] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 713.553543][ T5781] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 713.583708][ T5781] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 713.593079][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 713.625749][T10819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 713.683798][T10819] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 713.717019][ T5781] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 716.190698][ T5781] usb 3-1: USB disconnect, device number 38 [ 716.213933][T10835] netlink: 'syz.1.1331': attribute type 4 has an invalid length. [ 716.933714][T10845] siw: device registration error -23 [ 716.943932][T10845] loop2: detected capacity change from 0 to 512 [ 717.476881][T10847] loop4: detected capacity change from 0 to 32768 [ 717.814810][T10855] input: syz1 as /devices/virtual/input/input12 [ 718.874198][T10862] loop4: detected capacity change from 0 to 4096 [ 718.947400][T10862] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 719.137696][T10871] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.1339: corrupted inode contents [ 719.186449][T10871] EXT4-fs error (device loop4): ext4_dirty_inode:6124: inode #15: comm syz.4.1339: mark_inode_dirty error [ 719.229355][T10871] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.1339: corrupted inode contents [ 719.258646][T10871] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1339: mark_inode_dirty error [ 719.280707][T10871] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.1339: corrupted inode contents [ 719.331629][T10871] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1339: mark_inode_dirty error [ 719.371739][T10871] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.1339: corrupted inode contents [ 719.419885][T10871] EXT4-fs error (device loop4): ext4_truncate:4294: inode #15: comm syz.4.1339: mark_inode_dirty error [ 719.468326][T10862] EXT4-fs error (device loop4): ext4_do_update_inode:5248: inode #15: comm syz.4.1339: corrupted inode contents [ 719.513836][T10871] EXT4-fs error (device loop4) in ext4_setattr:5663: Corrupt filesystem [ 719.574802][ T28] audit: type=1800 audit(1774109121.236:74): pid=10862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1339" name="file1" dev="loop4" ino=15 res=0 errno=0 [ 719.788238][ T8506] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.076368][T10883] siw: device registration error -23 [ 720.090543][T10883] loop2: detected capacity change from 0 to 512 [ 721.066474][T10893] loop2: detected capacity change from 0 to 4096 [ 721.177123][T10896] input: syz1 as /devices/virtual/input/input13 [ 721.415653][T10898] loop1: detected capacity change from 0 to 512 [ 721.453558][T10898] EXT4-fs (loop1): DAX unsupported by block device. [ 722.587938][T10910] syz.1.1353: attempt to access beyond end of device [ 722.587938][T10910] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 722.636671][T10910] EXT4-fs (nbd1): unable to read superblock [ 722.815309][T10916] loop2: detected capacity change from 0 to 1024 [ 722.960906][ T6617] hfsplus: b-tree write err: -5, ino 25 [ 722.973865][ T6617] hfsplus: b-tree write err: -5, ino 4 [ 722.985667][ T6617] hfsplus: b-tree write err: -5, ino 2 [ 723.009929][ T6617] hfsplus: b-tree write err: -5, ino 17 [ 723.291022][T10919] loop4: detected capacity change from 0 to 32768 [ 725.207305][T10927] loop2: detected capacity change from 0 to 512 [ 725.773943][ T787] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 725.781889][T10934] loop2: detected capacity change from 0 to 512 [ 725.830377][T10934] EXT4-fs (loop2): DAX unsupported by block device. [ 725.981819][ T787] usb 5-1: config 0 has no interfaces? [ 725.997023][ T787] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=6a.b1 [ 726.023462][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 726.054116][ T787] usb 5-1: Product: syz [ 726.058360][ T787] usb 5-1: Manufacturer: syz [ 726.074529][ T787] usb 5-1: SerialNumber: syz [ 726.093740][ T787] usb 5-1: config 0 descriptor?? [ 726.822895][ T787] usb 5-1: USB disconnect, device number 30 [ 727.324480][T10942] random: crng reseeded on system resumption [ 728.191564][T10951] loop4: detected capacity change from 0 to 1024 [ 728.234015][T10953] syz.0.1366: attempt to access beyond end of device [ 728.234015][T10953] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 728.257324][T10953] EXT4-fs (nbd0): unable to read superblock [ 728.394531][ T28] audit: type=1800 audit(1774109130.046:75): pid=10954 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1365" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 731.124659][ T787] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 731.343822][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 731.355318][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 731.392596][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 731.450189][ T787] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 731.505067][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 731.688726][T10983] loop1: detected capacity change from 0 to 32768 [ 732.274994][ T787] usb 5-1: config 0 descriptor?? [ 732.293065][ T787] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 733.637843][T10997] CUSE: DEVNAME unspecified [ 735.393131][ T9136] usb 5-1: USB disconnect, device number 31 [ 735.979242][T11005] syzkaller0: entered promiscuous mode [ 736.020284][T11005] syzkaller0: entered allmulticast mode [ 736.553777][ T787] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 736.773660][ T787] usb 5-1: Using ep0 maxpacket: 16 [ 736.787696][ T787] usb 5-1: config 127 has an invalid interface number: 124 but max is 0 [ 736.821494][ T787] usb 5-1: config 127 has no interface number 0 [ 736.848539][ T787] usb 5-1: config 127 interface 124 has no altsetting 0 [ 736.882089][ T787] usb 5-1: New USB device found, idVendor=0cf3, idProduct=1010, bcdDevice=36.87 [ 736.933713][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.962335][ T787] usb 5-1: Product: syz [ 736.983615][ T787] usb 5-1: Manufacturer: syz [ 737.003414][ T787] usb 5-1: SerialNumber: syz [ 737.697081][T11023] loop1: detected capacity change from 0 to 32768 [ 738.231655][ T787] usb 5-1: USB disconnect, device number 32 [ 738.440304][T11028] loop4: detected capacity change from 0 to 1024 [ 738.679548][ T28] audit: type=1800 audit(1774109140.336:76): pid=11029 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1389" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 739.475653][T11032] random: crng reseeded on system resumption [ 740.250313][T11047] loop4: detected capacity change from 0 to 512 [ 741.895085][T11054] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1394'. [ 747.426786][T11103] syzkaller0: entered promiscuous mode [ 747.445693][T11103] syzkaller0: entered allmulticast mode [ 747.537861][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.544936][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.198244][T11114] loop4: detected capacity change from 0 to 1024 [ 748.554684][ T28] audit: type=1800 audit(1774109149.976:77): pid=11116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1412" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 748.990031][T11113] loop1: detected capacity change from 0 to 4096 [ 749.301778][T11126] random: crng reseeded on system resumption [ 752.238181][T11144] syzkaller0: entered promiscuous mode [ 752.313868][T11144] syzkaller0: entered allmulticast mode [ 754.483234][T11174] loop1: detected capacity change from 0 to 32768 [ 754.511225][T11169] loop2: detected capacity change from 0 to 4096 [ 755.515307][T11180] loop4: detected capacity change from 0 to 1024 [ 755.642495][T11187] syzkaller0: entered promiscuous mode [ 755.660071][T11187] syzkaller0: entered allmulticast mode [ 756.207124][ T28] audit: type=1800 audit(1774109157.856:78): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1431" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 756.931057][T11199] 0xfffffffffffffffd-0x000000020000 : "" [ 756.945185][T11199] mtd: partition "" is out of reach -- disabled [ 757.417303][T11211] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1439'. [ 758.032879][T11199] ftl_cs: FTL header not found. [ 758.256881][T11216] loop2: detected capacity change from 0 to 32768 [ 759.182931][T11226] loop4: detected capacity change from 0 to 256 [ 759.291908][T11226] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 759.318280][T11228] syzkaller0: entered promiscuous mode [ 759.353977][T11228] syzkaller0: entered allmulticast mode [ 759.730764][T11235] loop1: detected capacity change from 0 to 1024 [ 760.790475][ T28] audit: type=1800 audit(1774109162.456:79): pid=11235 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1446" name="file1" dev="loop1" ino=20 res=0 errno=0 [ 760.889465][T11237] loop4: detected capacity change from 0 to 4096 [ 761.637902][T11254] loop1: detected capacity change from 0 to 32768 [ 761.938729][T11253] loop2: detected capacity change from 0 to 32768 [ 763.087134][ T9136] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 763.320119][ T9136] usb 2-1: Using ep0 maxpacket: 16 [ 763.567594][ T9136] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 763.667836][ T9136] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 763.848003][ T9136] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 763.884940][ T9136] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.064767][ T9136] usb 2-1: config 0 descriptor?? [ 764.099900][ T9136] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 765.429492][T11271] loop2: detected capacity change from 0 to 512 [ 766.020087][T11288] loop2: detected capacity change from 0 to 1024 [ 766.258045][ T28] audit: type=1800 audit(1774109167.926:80): pid=11294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1461" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 767.320364][T11301] loop4: detected capacity change from 0 to 32768 [ 767.418753][ T27] usb 2-1: USB disconnect, device number 42 [ 768.377448][T11308] loop1: detected capacity change from 0 to 4096 [ 768.934329][T11318] loop2: detected capacity change from 0 to 512 [ 772.243663][T11336] loop4: detected capacity change from 0 to 32768 [ 772.403920][ T27] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 772.603561][ T27] usb 2-1: Using ep0 maxpacket: 16 [ 772.614618][ T27] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.636210][ T27] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 772.655803][ T27] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.683926][ T27] usb 2-1: config 0 descriptor?? [ 772.700568][ T27] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 772.893517][ T9126] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 773.090585][ T9126] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 773.103026][ T9126] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 773.118721][ T9126] usb 5-1: Product: syz [ 773.123183][ T9126] usb 5-1: Manufacturer: syz [ 773.128303][ T9126] usb 5-1: SerialNumber: syz [ 773.345760][T11349] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1478'. [ 773.590077][ T9126] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 773.723216][T11351] loop2: detected capacity change from 0 to 32768 [ 773.739402][T11351] (syz.2.1479,11351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 773.760307][T11351] (syz.2.1479,11351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 773.812484][T11351] JBD2: Ignoring recovery information on journal [ 773.904909][T11351] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 774.412773][ T9126] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 774.443461][ T9126] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 774.453285][ T9126] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 774.482962][ T9126] lan78xx: probe of 5-1:1.0 failed with error -32 [ 774.932155][ T5766] ocfs2: Unmounting device (7,2) on (node local) [ 774.987264][ T27] usb 2-1: USB disconnect, device number 43 [ 775.281421][T11364] loop1: detected capacity change from 0 to 32768 [ 775.944588][ T9136] usb 5-1: USB disconnect, device number 33 [ 776.573694][ T9136] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 777.697698][T11370] syz.2.1482: attempt to access beyond end of device [ 777.697698][T11370] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 777.701115][ T9136] usb 5-1: device descriptor read/64, error -71 [ 777.723763][T11370] EXT4-fs (nbd2): unable to read superblock [ 778.957647][ T9136] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 779.152193][T11385] loop2: detected capacity change from 0 to 32768 [ 782.031195][T11397] loop2: detected capacity change from 0 to 32768 [ 782.103841][ T9136] usb 5-1: device descriptor read/64, error -71 [ 782.313701][ T9136] usb usb5-port1: attempt power cycle [ 782.873486][ T9136] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 782.915379][ T9136] usb 5-1: Using ep0 maxpacket: 16 [ 782.923231][ T9136] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.948739][ T9136] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 782.973487][ T9136] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 783.014119][ T9136] usb 5-1: config 0 descriptor?? [ 783.035668][ T9136] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 784.706173][ T9136] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 784.751805][T11422] syzkaller0: entered promiscuous mode [ 784.757764][T11422] syzkaller0: entered allmulticast mode [ 784.915134][ T9136] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 784.924660][ T9136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 784.933159][ T9136] usb 2-1: Product: syz [ 784.933559][ T5781] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 784.954740][ T9136] usb 2-1: Manufacturer: syz [ 784.960844][ T9136] usb 2-1: SerialNumber: syz [ 785.103524][ T5781] usb 3-1: device descriptor read/64, error -71 [ 785.122381][ T9126] usb 5-1: USB disconnect, device number 36 [ 785.489834][T11427] loop4: detected capacity change from 0 to 32768 [ 785.509240][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 785.563682][ T5781] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 785.733611][ T5781] usb 3-1: device descriptor read/64, error -71 [ 786.145873][ T5781] usb usb3-port1: attempt power cycle [ 786.574097][ T5781] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 786.634852][ T5781] usb 3-1: device descriptor read/8, error -71 [ 786.679158][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 786.693811][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 786.704159][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 786.721051][ T9136] lan78xx: probe of 2-1:1.0 failed with error -32 [ 786.913573][ T5781] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 786.975003][ T5781] usb 3-1: device descriptor read/8, error -71 [ 787.161857][ T5781] usb usb3-port1: unable to enumerate USB device [ 788.072261][ T787] usb 2-1: USB disconnect, device number 44 [ 788.249594][T11450] syzkaller0: entered promiscuous mode [ 788.263618][T11450] syzkaller0: entered allmulticast mode [ 789.299762][T11452] loop4: detected capacity change from 0 to 32768 [ 790.233757][ T787] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 790.513941][ T787] usb 1-1: Using ep0 maxpacket: 16 [ 790.545274][ T787] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.204486][ T787] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 791.233565][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.267901][ T787] usb 1-1: config 0 descriptor?? [ 791.327966][ T787] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 791.605369][ T787] IPVS: starting estimator thread 0... [ 791.713643][T11478] IPVS: using max 32 ests per chain, 76800 per kthread [ 792.903684][ T787] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 792.993470][ T9136] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 793.120687][ T787] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 793.149679][ T787] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.188060][ T9136] usb 3-1: device descriptor read/64, error -71 [ 793.196304][ T787] usb 2-1: Product: syz [ 793.200606][ T787] usb 2-1: Manufacturer: syz [ 793.223232][ T787] usb 2-1: SerialNumber: syz [ 793.342361][ T27] usb 1-1: USB disconnect, device number 35 [ 793.493462][ T9136] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 793.683578][ T9136] usb 3-1: device descriptor read/64, error -71 [ 793.699749][ T787] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 794.025423][ T9136] usb usb3-port1: attempt power cycle [ 794.495205][T11494] loop4: detected capacity change from 0 to 32768 [ 794.611908][ T9136] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 795.063631][ T787] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 795.103956][ T787] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 795.119187][ T787] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 795.133892][ T9136] usb 3-1: device descriptor read/8, error -71 [ 795.145537][ T787] lan78xx: probe of 2-1:1.0 failed with error -32 [ 795.413559][ T9136] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 795.467511][ T9136] usb 3-1: device descriptor read/8, error -71 [ 795.621391][ T9136] usb usb3-port1: unable to enumerate USB device [ 796.808334][ T787] usb 2-1: USB disconnect, device number 45 [ 796.838562][T11503] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1526'. [ 796.891189][T11503] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1526'. [ 798.843885][T11519] syz.2.1530: attempt to access beyond end of device [ 798.843885][T11519] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 798.857377][T11519] EXT4-fs (nbd2): unable to read superblock [ 799.393194][T11522] loop4: detected capacity change from 0 to 32768 [ 800.613969][ T27] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 800.913846][ T27] usb 5-1: device descriptor read/64, error -71 [ 801.123574][ T5095] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 801.183623][ T27] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 801.367164][ T27] usb 5-1: device descriptor read/64, error -71 [ 801.410913][ T5095] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 801.429152][ T5095] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.441067][ T5095] usb 3-1: Product: syz [ 801.450404][ T5095] usb 3-1: Manufacturer: syz [ 801.457151][ T5095] usb 3-1: SerialNumber: syz [ 801.503725][ T27] usb usb5-port1: attempt power cycle [ 801.661105][T11535] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1536'. [ 801.938659][ T5095] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 801.953627][ T27] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 801.994317][ T27] usb 5-1: device descriptor read/8, error -71 [ 802.283844][ T27] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 802.324476][ T27] usb 5-1: device descriptor read/8, error -71 [ 802.406793][T11547] program syz.1.1539 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 802.500626][ T27] usb usb5-port1: unable to enumerate USB device [ 802.813167][ T5095] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x0000011c. ret = -32 [ 802.893217][ T5095] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 802.985237][ T5095] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 803.105058][ T5095] lan78xx: probe of 3-1:1.0 failed with error -32 [ 803.596366][T11554] loop1: detected capacity change from 0 to 32768 [ 804.325949][ T787] usb 3-1: USB disconnect, device number 47 [ 805.804125][ T5095] IPVS: starting estimator thread 0... [ 805.915401][T11568] IPVS: using max 15 ests per chain, 36000 per kthread [ 806.089551][T11557] loop4: detected capacity change from 0 to 32768 [ 806.135710][T11557] (syz.4.1542,11557,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 806.177668][T11557] (syz.4.1542,11557,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 806.247456][T11557] JBD2: Ignoring recovery information on journal [ 806.307081][T11557] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 807.145859][ T8506] ocfs2: Unmounting device (7,4) on (node local) [ 807.423071][T11586] program syz.4.1549 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 808.733648][ T5095] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 808.955272][ T5095] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 808.978133][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.987859][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.007242][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 809.031349][ T5095] usb 5-1: Product: syz [ 809.036123][ T5095] usb 5-1: Manufacturer: syz [ 809.041982][ T5095] usb 5-1: SerialNumber: syz [ 809.169167][T11597] syz.0.1553: attempt to access beyond end of device [ 809.169167][T11597] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 809.182542][T11597] EXT4-fs (nbd0): unable to read superblock [ 809.701049][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 809.875957][T11600] loop2: detected capacity change from 0 to 1024 [ 810.125965][ T28] audit: type=1800 audit(1774109211.766:81): pid=11600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1554" name="file1" dev="loop2" ino=20 res=0 errno=0 [ 811.131872][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 811.155815][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 811.179113][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 811.201602][ T5095] lan78xx: probe of 5-1:1.0 failed with error -32 [ 811.315208][T11616] program syz.2.1559 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 812.185541][ T9136] usb 5-1: USB disconnect, device number 41 [ 812.714718][T11629] syzkaller0: entered promiscuous mode [ 812.743028][T11629] syzkaller0: entered allmulticast mode [ 814.638889][T11659] program syz.1.1571 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 814.653544][ T5095] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 815.373277][T11662] syzkaller0: entered promiscuous mode [ 815.402017][T11662] syzkaller0: entered allmulticast mode [ 815.595261][T11666] loop1: detected capacity change from 0 to 4096 [ 815.660816][ T5095] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 815.676339][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.685445][ T5095] usb 5-1: Product: syz [ 815.691434][ T5095] usb 5-1: Manufacturer: syz [ 815.711555][ T5095] usb 5-1: SerialNumber: syz [ 816.360337][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 817.594152][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 817.619875][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 817.647737][ T5095] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 817.678947][ T5095] lan78xx: probe of 5-1:1.0 failed with error -32 [ 818.189701][T11692] program syz.1.1581 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 819.049943][ T787] usb 5-1: USB disconnect, device number 42 [ 819.263177][T11702] syz.4.1584: attempt to access beyond end of device [ 819.263177][T11702] nbd4: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 819.276484][T11702] EXT4-fs (nbd4): unable to read superblock [ 819.727625][T11703] input: syz1 as /devices/virtual/input/input14 [ 820.332614][T11698] syzkaller0: entered promiscuous mode [ 820.407564][T11698] syzkaller0: entered allmulticast mode [ 820.615610][T11710] loop2: detected capacity change from 0 to 1024 [ 820.864520][ T27] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 821.092469][ T27] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 821.105484][ T27] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 821.119994][ T27] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 821.131935][ T27] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.220178][T11714] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.230264][T11714] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 821.269092][ T27] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 821.706759][ T5773] usb 5-1: USB disconnect, device number 43 [ 823.243472][ T27] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 824.245569][ T27] usb 5-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 824.259615][ T27] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 824.267789][ T27] usb 5-1: Product: syz [ 824.272461][ T27] usb 5-1: Manufacturer: syz [ 824.278392][ T27] usb 5-1: SerialNumber: syz [ 824.761753][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 825.963633][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 825.975872][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 825.994668][ T27] lan78xx 5-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 826.029555][ T27] lan78xx: probe of 5-1:1.0 failed with error -32 [ 827.280555][ T9136] usb 5-1: USB disconnect, device number 44 [ 829.831613][T11774] loop4: detected capacity change from 0 to 1024 [ 830.143582][ T5781] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 830.438471][ T28] audit: type=1800 audit(1774109232.086:82): pid=11780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1604" name="file1" dev="loop4" ino=1 res=0 errno=0 [ 830.481818][T11781] loop2: detected capacity change from 0 to 1024 [ 830.627965][ T5781] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 830.675506][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 830.685695][ T5781] usb 2-1: Product: syz [ 830.693774][ T5781] usb 2-1: Manufacturer: syz [ 830.699762][ T5781] usb 2-1: SerialNumber: syz [ 831.196680][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 831.512810][T11797] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1611'. [ 832.253159][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 832.275514][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 832.444147][ T5781] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 833.260701][ T5781] lan78xx: probe of 2-1:1.0 failed with error -32 [ 833.362777][ T5781] usb 2-1: USB disconnect, device number 46 [ 834.205089][T11816] loop1: detected capacity change from 0 to 16 [ 835.263607][ T5780] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 835.402767][T11814] loop4: detected capacity change from 0 to 1024 [ 835.550522][ T28] audit: type=1800 audit(1774109237.206:83): pid=11814 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1617" name="file1" dev="loop4" ino=20 res=0 errno=0 [ 838.667413][ T9136] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 839.006598][T11845] loop2: detected capacity change from 0 to 32768 [ 839.177826][ T9136] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 839.207732][ T9136] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.227617][ T9136] usb 2-1: Product: syz [ 839.231844][ T9136] usb 2-1: Manufacturer: syz [ 839.253448][ T9136] usb 2-1: SerialNumber: syz [ 839.701950][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 840.229986][ T9126] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 840.653968][ T9126] usb 3-1: Using ep0 maxpacket: 16 [ 840.900794][ T9126] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 840.915203][ T9126] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 840.926013][ T9126] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.937461][ T9126] usb 3-1: config 0 descriptor?? [ 841.098850][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 841.111502][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 841.123212][ T9136] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 841.136574][ T9136] lan78xx: probe of 2-1:1.0 failed with error -32 [ 841.560767][ T9126] usbhid 3-1:0.0: can't add hid device: -71 [ 841.581148][ T9126] usbhid: probe of 3-1:0.0 failed with error -71 [ 841.591953][ T9126] usb 3-1: USB disconnect, device number 48 [ 842.213959][ T9126] usb 2-1: USB disconnect, device number 47 [ 844.037939][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1641'. [ 844.062490][T11884] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1641'. [ 844.372003][T11894] program syz.4.1644 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 844.674044][ T5830] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 845.020587][ T5830] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 845.089766][ T5830] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 845.150898][ T5830] usb 1-1: Product: syz [ 845.169080][ T5830] usb 1-1: Manufacturer: syz [ 845.185869][ T5830] usb 1-1: SerialNumber: syz [ 845.703127][T11903] siw: device registration error -23 [ 845.760337][T11903] loop4: detected capacity change from 0 to 512 [ 846.043933][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 847.293894][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000118. ret = -32 [ 847.320983][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 847.551042][T11916] loop2: detected capacity change from 0 to 32768 [ 847.582915][ T5830] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 847.617764][ T5830] lan78xx: probe of 1-1:1.0 failed with error -32 [ 848.096896][T11923] syz.1.1652: attempt to access beyond end of device [ 848.096896][T11923] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 848.111387][T11923] EXT4-fs (nbd1): unable to read superblock [ 848.546422][ T787] usb 1-1: USB disconnect, device number 36 [ 849.456621][T11934] program syz.2.1654 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 850.097846][T11942] loop1: detected capacity change from 0 to 32768 [ 851.463405][ T9126] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 851.661247][ T9126] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 852.644510][ T9126] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 852.663797][ T9126] usb 3-1: Product: syz [ 852.668246][ T9126] usb 3-1: Manufacturer: syz [ 852.754553][ T9126] usb 3-1: SerialNumber: syz [ 853.235518][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32 [ 853.869898][T11972] siw: device registration error -23 [ 853.899020][T11972] loop1: detected capacity change from 0 to 512 [ 854.113798][ T5830] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 854.344053][ T5830] usb 1-1: Using ep0 maxpacket: 8 [ 854.659139][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -32 [ 854.694643][ T5830] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 854.702301][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000040. ret = -71 [ 854.704392][ T5830] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 854.739804][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400 [ 854.747765][ T5830] pvrusb2: ********** [ 854.752246][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 854.764880][ T5830] pvrusb2: Important functionality might not be entirely working. [ 854.769981][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001000. ret = -71 [ 854.773074][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 854.791138][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001004. ret = -71 [ 854.809457][ T5830] pvrusb2: ********** [ 854.824504][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001008. ret = -71 [ 854.842235][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001020. ret = -71 [ 854.854851][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -71 [ 854.855061][T11974] loop1: detected capacity change from 0 to 512 [ 854.867167][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001030. ret = -71 [ 854.886690][T11974] EXT4-fs (loop1): DAX unsupported by block device. [ 854.921648][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00001018. ret = -71 [ 854.949396][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED.... [ 854.962149][ T9126] lan78xx 3-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED [ 855.021136][ T9126] lan78xx: probe of 3-1:1.0 failed with error -71 [ 855.059443][ T9126] usb 3-1: USB disconnect, device number 49 [ 855.134832][ T2318] pvrusb2: Invalid write control endpoint [ 856.044461][ T5781] usb 1-1: USB disconnect, device number 37 [ 856.052015][ T2318] pvrusb2: Invalid write control endpoint [ 856.077456][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 856.092358][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 856.106412][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 856.193449][ T2318] pvrusb2: Device being rendered inoperable [ 856.221632][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 856.245576][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 856.279130][ T2318] pvrusb2: Attached sub-driver cx25840 [ 856.315288][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 856.342894][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 856.535438][T11983] loop1: detected capacity change from 0 to 32768 [ 858.955683][T11995] syz.2.1675: attempt to access beyond end of device [ 858.955683][T11995] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 858.969008][T11995] EXT4-fs (nbd2): unable to read superblock [ 860.126051][T12002] loop4: detected capacity change from 0 to 512 [ 860.148067][T12002] EXT4-fs (loop4): DAX unsupported by block device. [ 863.344497][T12028] loop1: detected capacity change from 0 to 32768 [ 864.232972][T12033] program syz.0.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 866.957461][T12055] siw: device registration error -23 [ 867.027549][T12055] loop2: detected capacity change from 0 to 512 [ 869.285308][T12065] loop2: detected capacity change from 0 to 1024 [ 869.604922][ T28] audit: type=1800 audit(1774109271.266:84): pid=12065 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1694" name="file1" dev="loop2" ino=1 res=0 errno=0 [ 870.430792][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.438183][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.719599][T12074] syzkaller0: entered promiscuous mode [ 870.743928][T12074] syzkaller0: entered allmulticast mode [ 870.926540][T12079] program syz.0.1698 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 872.896483][T12091] input: syz1 as /devices/virtual/input/input15 [ 874.796231][ T5095] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 874.990861][T12102] syz.1.1705: attempt to access beyond end of device [ 874.990861][T12102] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 875.006408][T12102] EXT4-fs (nbd1): unable to read superblock [ 875.033894][ T5095] usb 5-1: Using ep0 maxpacket: 8 [ 875.047651][ T5095] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 875.057031][ T5095] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.112872][ T5095] pvrusb2: Hardware description: Terratec Grabster AV400 [ 875.120312][ T5095] pvrusb2: ********** [ 875.131495][ T5095] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 875.144173][ T5095] pvrusb2: Important functionality might not be entirely working. [ 875.152207][ T5095] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 875.167030][ T5095] pvrusb2: ********** [ 875.394293][ T2318] pvrusb2: Invalid write control endpoint [ 875.694782][ T787] usb 5-1: USB disconnect, device number 45 [ 875.760605][ T2318] pvrusb2: Invalid write control endpoint [ 875.771708][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 875.781632][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 875.810678][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 875.831288][ T2318] pvrusb2: Device being rendered inoperable [ 875.854050][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 875.861375][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b) [ 875.891868][ T2318] pvrusb2: Attached sub-driver cx25840 [ 875.903367][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 876.087563][T12105] loop1: detected capacity change from 0 to 32768 [ 876.104281][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 878.183548][ T787] usb 5-1: new full-speed USB device number 46 using dummy_hcd [ 878.383853][ T787] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 878.395414][ T787] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 878.431780][ T787] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 878.441881][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 878.471539][T12117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.487779][T12117] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 878.510976][ T787] usb 5-1: Quirk or no altest; falling back to MIDI 1.0 [ 879.572977][T12085] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1700'. [ 879.943581][ T787] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 880.072731][T12131] loop1: detected capacity change from 0 to 1024 [ 880.111775][ T28] audit: type=1800 audit(1774109281.776:85): pid=12131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1713" name="file1" dev="loop1" ino=1 res=0 errno=0 [ 880.146554][ T787] usb 1-1: Using ep0 maxpacket: 8 [ 880.163257][ T787] usb 1-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 880.183379][ T787] usb 1-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 880.192595][ T787] usb 1-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 880.222080][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 880.959094][ T5095] usb 5-1: USB disconnect, device number 46 [ 881.367118][T12140] loop4: detected capacity change from 0 to 32768 [ 882.313099][T12145] loop1: detected capacity change from 0 to 32768 [ 882.338877][T12145] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 scanned by syz.1.1717 (12145) [ 882.422906][T12145] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 882.433454][T12145] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 882.442331][T12145] BTRFS info (device loop1): using free space tree [ 882.593407][T12145] BTRFS info (device loop1): enabling ssd optimizations [ 882.600422][T12145] BTRFS info (device loop1): auto enabling async discard [ 883.337581][ T5095] usb 1-1: USB disconnect, device number 38 [ 883.596609][ T5768] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 884.006931][T12178] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1719'. [ 887.161940][T12198] loop2: detected capacity change from 0 to 32768 [ 887.169803][ T5095] usb 1-1: new full-speed USB device number 39 using dummy_hcd [ 887.516066][ T5095] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 887.533474][ T5095] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 887.663590][ T5095] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 887.672875][ T5095] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 887.733407][T12192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 887.740870][T12192] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 887.758451][ T5095] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 887.992072][T12202] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1728'. [ 888.054245][T12202] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1728'. [ 888.363678][ T9136] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 888.553500][ T9136] usb 3-1: Using ep0 maxpacket: 8 [ 888.560909][ T9136] usb 3-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 888.571311][ T9136] usb 3-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 888.581027][ T9136] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 888.590141][ T9136] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.663543][ T9126] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 888.843435][ T9126] usb 5-1: Using ep0 maxpacket: 8 [ 888.850832][ T9126] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 888.862126][ T9126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 888.886679][ T9126] pvrusb2: Hardware description: Terratec Grabster AV400 [ 888.894083][ T9126] pvrusb2: ********** [ 888.898102][ T9126] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 888.908279][ T9126] pvrusb2: Important functionality might not be entirely working. [ 888.916925][ T9126] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 888.929618][ T9126] pvrusb2: ********** [ 889.090372][ T2318] pvrusb2: Invalid write control endpoint [ 889.141971][ T2318] pvrusb2: Invalid write control endpoint [ 889.148522][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 889.162368][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 889.170498][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 889.180563][ T2318] pvrusb2: Device being rendered inoperable [ 889.188934][T12211] pvrusb2: Attempted to execute control transfer when device not ok [ 889.199877][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 889.208062][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 889.218773][ T2318] pvrusb2: Attached sub-driver cx25840 [ 889.227100][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 889.237667][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 889.293698][ T9126] usb 5-1: USB disconnect, device number 47 [ 889.677738][ T5095] usb 1-1: USB disconnect, device number 39 [ 890.056107][T12216] random: crng reseeded on system resumption [ 891.477143][ T9136] usb 3-1: USB disconnect, device number 50 [ 892.201094][T12233] loop2: detected capacity change from 0 to 32768 [ 893.434767][ T5773] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 893.623668][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 893.645279][ T5773] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 893.675160][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 893.692946][T12253] input: syz1 as /devices/virtual/input/input16 [ 893.708887][ T5773] pvrusb2: Hardware description: Terratec Grabster AV400 [ 893.725652][ T5773] pvrusb2: ********** [ 893.750261][ T5773] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 893.805658][ T5773] pvrusb2: Important functionality might not be entirely working. [ 893.833431][ T5773] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 893.873382][ T5773] pvrusb2: ********** [ 893.923731][ T2318] pvrusb2: Invalid write control endpoint [ 894.021109][ T2318] pvrusb2: Invalid write control endpoint [ 894.046358][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 894.061703][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 894.069627][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 894.120961][ T5773] usb 5-1: USB disconnect, device number 48 [ 894.139651][ T2318] pvrusb2: Device being rendered inoperable [ 894.151019][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 894.162450][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 894.173015][ T2318] pvrusb2: Attached sub-driver cx25840 [ 894.182896][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 894.283807][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 895.181987][T12262] bridge_slave_0: left allmulticast mode [ 895.215206][T12262] bridge_slave_0: left promiscuous mode [ 895.221061][T12262] bridge0: port 1(bridge_slave_0) entered disabled state [ 895.296589][T12262] bridge_slave_1: left allmulticast mode [ 895.311591][T12262] bridge_slave_1: left promiscuous mode [ 895.345108][T12262] bridge0: port 2(bridge_slave_1) entered disabled state [ 895.509335][T12262] bond0: (slave bond_slave_0): Releasing backup interface [ 895.623596][ T5095] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 895.655078][T12262] bond0: (slave bond_slave_1): Releasing backup interface [ 895.843567][ T5095] usb 1-1: Using ep0 maxpacket: 32 [ 895.865711][ T5095] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 895.874788][ T5095] usb 1-1: config 0 has no interface number 0 [ 895.910224][T12262] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 895.941314][ T5095] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 895.952020][ T5095] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 895.956422][T12262] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 895.961629][ T5095] usb 1-1: Product: syz [ 895.978043][ T5095] usb 1-1: Manufacturer: syz [ 896.012307][ T5095] usb 1-1: SerialNumber: syz [ 896.057656][ T5095] usb 1-1: config 0 descriptor?? [ 896.496974][T12271] loop1: detected capacity change from 0 to 32768 [ 896.507680][T12262] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.517774][ T5095] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 896.554350][T12262] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 896.911159][ T5095] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 896.916182][T12262] batman_adv: batadv0: Removing interface: gretap1 [ 897.000877][ T5095] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 898.087572][ C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 898.088012][ T5773] usb 1-1: USB disconnect, device number 40 [ 898.170636][ T5773] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 898.183183][T12294] loop2: detected capacity change from 0 to 512 [ 898.211272][T12294] EXT4-fs (loop2): DAX unsupported by block device. [ 898.238899][ T5773] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 898.279777][ T5773] quatech2 1-1:0.51: device disconnected [ 900.213789][ T5773] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 900.998367][T12312] loop2: detected capacity change from 0 to 32768 [ 901.010744][ T5773] usb 5-1: Using ep0 maxpacket: 8 [ 901.132898][ T5773] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 901.143438][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 901.158055][ T5773] pvrusb2: Hardware description: Terratec Grabster AV400 [ 901.166175][ T5773] pvrusb2: ********** [ 901.170543][ T5773] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 901.193492][ T5773] pvrusb2: Important functionality might not be entirely working. [ 901.201474][ T5773] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 902.601849][ T5773] pvrusb2: ********** [ 903.125244][ T2318] pvrusb2: Invalid write control endpoint [ 903.369166][ T27] usb 5-1: USB disconnect, device number 49 [ 903.401038][ T2318] pvrusb2: Invalid write control endpoint [ 903.401097][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 903.401130][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 903.401139][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 903.401150][ T2318] pvrusb2: Device being rendered inoperable [ 903.401197][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 903.401263][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 903.402193][ T2318] pvrusb2: Attached sub-driver cx25840 [ 903.402228][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 903.402238][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 903.584513][T12323] input: syz1 as /devices/virtual/input/input17 [ 903.612967][T12325] loop2: detected capacity change from 0 to 512 [ 903.622090][T12325] EXT4-fs (loop2): DAX unsupported by block device. [ 904.016373][T12330] bridge_slave_0: left allmulticast mode [ 904.022101][T12330] bridge_slave_0: left promiscuous mode [ 904.028334][T12330] bridge0: port 1(bridge_slave_0) entered disabled state [ 904.044714][T12330] bridge_slave_1: left allmulticast mode [ 904.050564][T12330] bridge_slave_1: left promiscuous mode [ 904.064357][T12330] bridge0: port 2(bridge_slave_1) entered disabled state [ 904.084324][ T5773] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 904.111659][T12330] bond0: (slave bond_slave_0): Releasing backup interface [ 904.145662][T12330] bond0: (slave bond_slave_1): Releasing backup interface [ 904.172835][T12330] team0: Port device team_slave_0 removed [ 904.203693][T12330] team0: Port device team_slave_1 removed [ 904.219589][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 904.227438][T12330] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 904.242845][T12330] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 904.251848][T12330] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 904.280084][ T5773] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 904.301918][ T5773] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 904.316893][ T5773] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 904.328944][ T5773] usb 2-1: config 0 descriptor?? [ 904.338995][ T5773] pwc: Askey VC010 type 2 USB webcam detected. [ 904.363372][ T5095] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 904.543653][ T5095] usb 5-1: Using ep0 maxpacket: 32 [ 904.551284][ T5095] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 904.559991][ T5095] usb 5-1: config 0 has no interface number 0 [ 904.569210][ T5095] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 904.579046][ T5095] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 904.603383][ T5095] usb 5-1: Product: syz [ 904.607620][ T5095] usb 5-1: Manufacturer: syz [ 904.612242][ T5095] usb 5-1: SerialNumber: syz [ 904.649688][ T5095] usb 5-1: config 0 descriptor?? [ 904.665364][ T5095] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 904.763044][ T5773] pwc: recv_control_msg error -32 req 02 val 2b00 [ 904.780792][ T5773] pwc: recv_control_msg error -71 req 02 val 2700 [ 904.793808][ T5773] pwc: recv_control_msg error -71 req 02 val 2c00 [ 904.814077][ T5773] pwc: recv_control_msg error -71 req 04 val 1000 [ 904.844721][ T5773] pwc: recv_control_msg error -71 req 04 val 1300 [ 904.857998][ T5773] pwc: recv_control_msg error -71 req 04 val 1400 [ 904.879838][ T5773] pwc: recv_control_msg error -71 req 02 val 2000 [ 904.890572][ T5773] pwc: recv_control_msg error -71 req 02 val 2100 [ 904.900817][ T5773] pwc: recv_control_msg error -71 req 04 val 1500 [ 904.913208][ T5095] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 904.925620][ T5773] pwc: recv_control_msg error -71 req 02 val 2500 [ 904.937867][ T5773] pwc: recv_control_msg error -71 req 02 val 2400 [ 904.949481][ T5773] pwc: recv_control_msg error -71 req 02 val 2600 [ 904.965702][ T5773] pwc: recv_control_msg error -71 req 02 val 2900 [ 904.976364][ T5095] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 904.982876][ T5773] pwc: recv_control_msg error -71 req 02 val 2800 [ 904.993989][ T5773] pwc: recv_control_msg error -71 req 04 val 1100 [ 905.035358][ T5773] pwc: recv_control_msg error -71 req 04 val 1200 [ 905.083983][ T5773] pwc: Registered as video103. [ 905.095402][ T5773] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 905.209007][ T5773] usb 2-1: USB disconnect, device number 48 [ 905.381717][T12330] team0: Mode changed to "loadbalance" [ 905.450896][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 905.452354][ T787] usb 5-1: USB disconnect, device number 50 [ 905.508587][ T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 905.553231][ T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 906.040631][T12348] syz.1.1765: attempt to access beyond end of device [ 906.040631][T12348] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 906.054458][T12348] EXT4-fs (nbd1): unable to read superblock [ 906.196848][ T787] quatech2 5-1:0.51: device disconnected [ 907.667007][T12356] loop4: detected capacity change from 0 to 32768 [ 910.974608][T12376] loop4: detected capacity change from 0 to 1024 [ 912.898866][T12389] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1780'. [ 913.201681][T12393] loop1: detected capacity change from 0 to 32768 [ 913.353643][ T5830] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 913.543733][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 913.578735][ T5830] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 913.593545][ T5830] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 913.617405][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 915.932111][ T787] usb 5-1: USB disconnect, device number 51 [ 916.446178][T12423] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1789'. [ 917.349379][T12427] loop2: detected capacity change from 0 to 32768 [ 918.563581][ T5773] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 918.765951][ T5773] usb 3-1: device descriptor read/64, error -71 [ 919.015295][T12440] Option ' ' to dns_resolver key: bad/missing value [ 919.125174][ T5773] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 919.293842][ T5773] usb 3-1: device descriptor read/64, error -71 [ 920.910117][ T5773] usb usb3-port1: attempt power cycle [ 921.385130][ T5773] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 921.698150][T12463] loop1: detected capacity change from 0 to 32768 [ 921.705822][ T5773] usb 3-1: device not accepting address 53, error -71 [ 924.333661][ T5773] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 924.553669][ T5773] usb 5-1: Using ep0 maxpacket: 16 [ 924.618234][ T5773] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 924.654061][ T5773] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 924.664472][ T5773] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 925.071464][ T5773] usb 5-1: config 0 descriptor?? [ 925.514334][ T5773] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 925.534598][ T5773] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 925.541813][ T5773] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 925.558148][ T5773] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 925.588417][ T5773] mcp2221 0003:04D8:00DD.0010: unknown main item tag 0x0 [ 925.607160][ T5773] mcp2221 0003:04D8:00DD.0010: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 925.740378][ C0] usb 5-1: input irq status -75 received [ 925.750281][T12497] Option ' ' to dns_resolver key: bad/missing value [ 925.843579][ T787] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 926.154387][ T787] usb 3-1: Using ep0 maxpacket: 8 [ 926.284985][ T787] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 926.332394][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 926.343057][ T5773] usb 5-1: USB disconnect, device number 52 [ 926.412863][ T787] pvrusb2: Hardware description: Terratec Grabster AV400 [ 926.443608][ T787] pvrusb2: ********** [ 926.449349][ T787] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 926.460214][ T787] pvrusb2: Important functionality might not be entirely working. [ 926.468413][ T787] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 926.487611][ T787] pvrusb2: ********** [ 926.620785][ T2318] pvrusb2: Invalid write control endpoint [ 926.676181][ T5830] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 926.722317][ T2318] pvrusb2: Invalid write control endpoint [ 926.728605][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 926.739759][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 926.749112][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 926.759615][ T2318] pvrusb2: Device being rendered inoperable [ 926.768303][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 926.775643][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 926.785618][ T2318] pvrusb2: Attached sub-driver cx25840 [ 926.791226][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 926.801768][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 926.827525][ T5773] usb 3-1: USB disconnect, device number 55 [ 926.885146][ T5830] usb 2-1: Using ep0 maxpacket: 8 [ 926.895482][ T5830] usb 2-1: config index 0 descriptor too short (expected 260, got 27) [ 926.914193][ T5830] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 926.926211][ T5830] usb 2-1: config 2 has 0 interfaces, different from the descriptor's value: 1 [ 926.938718][ T5830] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 926.951294][ T5830] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.130366][T12505] loop4: detected capacity change from 0 to 32768 [ 927.459076][ T5830] usb 2-1: string descriptor 0 read error: -71 [ 927.481309][ T5830] usb 2-1: USB disconnect, device number 49 [ 929.743347][ T5773] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 929.845027][T12529] Option ' ' to dns_resolver key: bad/missing value [ 929.983402][ T5773] usb 3-1: Using ep0 maxpacket: 8 [ 930.546597][ T5773] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 930.600375][ T5773] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 930.640078][ T5773] pvrusb2: Hardware description: Terratec Grabster AV400 [ 930.671412][ T5773] pvrusb2: ********** [ 930.679442][ T5773] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 930.694550][ T5773] pvrusb2: Important functionality might not be entirely working. [ 930.708037][ T5773] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 930.740176][ T5773] pvrusb2: ********** [ 930.858482][ T2318] pvrusb2: Invalid write control endpoint [ 931.013013][ T2318] pvrusb2: Invalid write control endpoint [ 931.023289][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 931.053175][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 931.069422][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 931.081618][ T5830] usb 3-1: USB disconnect, device number 56 [ 931.113553][ T2318] pvrusb2: Device being rendered inoperable [ 931.139998][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 931.173496][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 931.204691][ T2318] pvrusb2: Attached sub-driver cx25840 [ 931.231281][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 931.261750][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 931.859639][ T1284] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.873854][ T1284] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.323850][ T787] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 932.546826][ T787] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 932.883878][ T5830] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 932.924147][ T787] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 932.933409][ T787] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.093321][ T787] usb 3-1: config 0 descriptor?? [ 933.093423][ T5830] usb 5-1: Using ep0 maxpacket: 8 [ 933.192612][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 933.195039][ T5830] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 933.209177][ T5830] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.278579][ T5830] pvrusb2: Hardware description: Terratec Grabster AV400 [ 933.322852][ T5830] pvrusb2: ********** [ 933.379036][ T5830] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 933.442170][ T5830] pvrusb2: Important functionality might not be entirely working. [ 933.483572][ T5830] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 933.499005][ T5830] pvrusb2: ********** [ 933.505269][ T2318] pvrusb2: Invalid write control endpoint [ 933.609347][ T2318] pvrusb2: Invalid write control endpoint [ 933.629391][ T2318] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 933.652526][ T2318] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 933.660637][ T2318] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 933.674016][ T2318] pvrusb2: Device being rendered inoperable [ 933.680459][ T2318] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 933.687918][ T2318] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_c) [ 933.742286][ T2318] pvrusb2: Attached sub-driver cx25840 [ 933.800812][ T787] pwc: recv_control_msg error -71 req 02 val 2700 [ 933.802764][ T2318] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 933.810265][ T787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 933.818944][ T5095] usb 5-1: USB disconnect, device number 53 [ 933.902682][ T2318] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 933.906274][T12553] input: syz1 as /devices/virtual/input/input19 [ 933.932361][ T787] pwc: recv_control_msg error -71 req 04 val 1000 [ 934.099992][ T787] pwc: recv_control_msg error -71 req 04 val 1300 [ 934.134963][ T787] pwc: recv_control_msg error -71 req 04 val 1400 [ 934.243979][ T787] pwc: recv_control_msg error -71 req 02 val 2000 [ 934.420990][ T787] pwc: recv_control_msg error -71 req 02 val 2100 [ 934.441590][ T787] pwc: recv_control_msg error -71 req 04 val 1500 [ 934.462266][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 934.469939][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 934.480139][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 934.504024][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 934.526034][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 934.548555][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 934.570315][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 934.586862][ T787] pwc: Registered as video103. [ 934.668808][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input20 [ 934.753194][ T787] usb 3-1: USB disconnect, device number 57 [ 935.630364][T12568] Option ' ' to dns_resolver key: bad/missing value [ 936.310922][T12575] loop2: detected capacity change from 0 to 16 [ 938.631428][ T5780] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 940.244177][T12585] input: syz1 as /devices/virtual/input/input21 [ 941.014327][T12597] Option ' ' to dns_resolver key: bad/missing value [ 941.773401][ T5095] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 942.375338][T12593] syz.0.1837: attempt to access beyond end of device [ 942.375338][T12593] nbd0: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 942.404333][T12593] EXT4-fs (nbd0): unable to read superblock [ 942.405504][ T5095] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 942.434187][ T5095] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 942.443504][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.512625][ T5095] usb 2-1: config 0 descriptor?? [ 942.531949][ T5095] pwc: Askey VC010 type 2 USB webcam detected. [ 943.155082][ T5095] pwc: recv_control_msg error -71 req 02 val 2700 [ 943.194029][ T5095] pwc: recv_control_msg error -71 req 02 val 2c00 [ 943.222358][ T5095] pwc: recv_control_msg error -71 req 04 val 1000 [ 943.251182][ T5095] pwc: recv_control_msg error -71 req 04 val 1300 [ 943.281352][ T5095] pwc: recv_control_msg error -71 req 04 val 1400 [ 943.301914][ T5095] pwc: recv_control_msg error -71 req 02 val 2000 [ 943.335815][ T5095] pwc: recv_control_msg error -71 req 02 val 2100 [ 943.359197][ T5095] pwc: recv_control_msg error -71 req 04 val 1500 [ 943.402737][ T5095] pwc: recv_control_msg error -71 req 02 val 2500 [ 943.454127][ T5095] pwc: recv_control_msg error -71 req 02 val 2400 [ 943.474122][ T5095] pwc: recv_control_msg error -71 req 02 val 2600 [ 943.519734][ T5095] pwc: recv_control_msg error -71 req 02 val 2900 [ 943.539641][ T5095] pwc: recv_control_msg error -71 req 02 val 2800 [ 943.569166][ T5095] pwc: recv_control_msg error -71 req 04 val 1100 [ 943.594033][ T5095] pwc: recv_control_msg error -71 req 04 val 1200 [ 943.643692][ T5095] pwc: Registered as video103. [ 943.683871][ T5095] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input22 [ 943.750205][ T5095] usb 2-1: USB disconnect, device number 50 [ 945.568732][T12622] can0: slcan on ptm0. [ 945.845729][T12619] can0 (unregistered): slcan off ptm0. [ 946.763372][T12637] syz.2.1849: attempt to access beyond end of device [ 946.763372][T12637] nbd2: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 946.779575][T12637] EXT4-fs (nbd2): unable to read superblock [ 947.453595][ T787] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 947.815122][T12650] can0: slcan on ptm0. [ 948.138799][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 948.207762][ T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 948.229937][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 948.270498][ T787] usb 1-1: config 0 descriptor?? [ 948.298482][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 948.354105][T12646] can0 (unregistered): slcan off ptm0. [ 948.856116][T12657] loop2: detected capacity change from 0 to 32768 [ 948.880455][T12657] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 scanned by syz.2.1853 (12657) [ 948.914123][T12657] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 948.924593][T12657] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 948.933780][T12657] BTRFS info (device loop2): using free space tree [ 949.027335][T12657] BTRFS info (device loop2): enabling ssd optimizations [ 949.034698][T12657] BTRFS info (device loop2): auto enabling async discard [ 949.065733][ T787] pwc: recv_control_msg error -71 req 02 val 2700 [ 949.103876][ T787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 949.180881][ T787] pwc: recv_control_msg error -71 req 04 val 1000 [ 949.204181][ T787] pwc: recv_control_msg error -71 req 04 val 1300 [ 949.720855][ T787] pwc: recv_control_msg error -71 req 04 val 1400 [ 949.737893][ T787] pwc: recv_control_msg error -71 req 02 val 2000 [ 949.758627][ T787] pwc: recv_control_msg error -71 req 02 val 2100 [ 949.784730][ T787] pwc: recv_control_msg error -71 req 04 val 1500 [ 949.806328][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 949.826095][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 949.837180][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 949.874837][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 949.903656][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 949.957058][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 949.982941][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 950.033658][ T787] pwc: Registered as video103. [ 950.067345][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input23 [ 950.149962][ T787] usb 1-1: USB disconnect, device number 41 [ 950.159367][ T5766] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 953.481013][T12731] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1862'. [ 954.026296][T12735] loop4: detected capacity change from 0 to 32768 [ 954.034173][ T787] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 954.052585][T12735] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.1864 (12735) [ 954.076271][T12735] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 954.086721][T12735] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 954.095475][T12735] BTRFS info (device loop4): using free space tree [ 954.134218][T12735] BTRFS info (device loop4): enabling ssd optimizations [ 954.141722][T12735] BTRFS info (device loop4): auto enabling async discard [ 954.519558][ T787] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.815795][ T787] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 954.908911][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 954.932104][ T787] usb 2-1: config 0 descriptor?? [ 954.954635][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 955.126412][ T8506] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 955.316937][T12759] input: syz1 as /devices/virtual/input/input24 [ 955.573280][ T787] pwc: recv_control_msg error -71 req 02 val 2700 [ 955.606607][ T787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 955.655931][ T787] pwc: recv_control_msg error -71 req 04 val 1000 [ 955.663070][ T787] pwc: recv_control_msg error -71 req 04 val 1300 [ 955.674070][ T787] pwc: recv_control_msg error -71 req 04 val 1400 [ 955.725865][ T787] pwc: recv_control_msg error -71 req 02 val 2000 [ 955.734204][ T787] pwc: recv_control_msg error -71 req 02 val 2100 [ 955.755249][ T787] pwc: recv_control_msg error -71 req 04 val 1500 [ 955.784529][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 955.817247][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 955.850268][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 955.865907][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 955.881001][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 955.897929][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 955.908648][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 955.951790][ T787] pwc: Registered as video103. [ 956.441561][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input25 [ 956.587802][ T787] usb 2-1: USB disconnect, device number 51 [ 957.153763][ T787] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 957.343414][ T787] usb 2-1: Using ep0 maxpacket: 16 [ 957.368748][ T787] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 957.383518][ T787] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 957.392785][ T787] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 957.414284][ T787] usb 2-1: config 0 descriptor?? [ 957.849324][ T787] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 957.856686][ T787] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 957.867960][ T787] mcp2221 0003:04D8:00DD.0011: unknown main item tag 0x0 [ 957.876675][ T787] mcp2221 0003:04D8:00DD.0011: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 958.075723][ C0] usb 2-1: input irq status -75 received [ 958.091383][T12780] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1871'. [ 958.334599][ T787] usb 2-1: USB disconnect, device number 52 [ 960.283530][ T5095] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 960.504490][ T5095] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 960.560696][ T5095] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 960.653159][ T5095] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 960.883779][ T5095] usb 3-1: config 0 descriptor?? [ 960.931699][ T5095] pwc: Askey VC010 type 2 USB webcam detected. [ 961.388748][T12809] input: syz1 as /devices/virtual/input/input26 [ 963.310523][ T5095] pwc: recv_control_msg error -71 req 02 val 2700 [ 963.367027][ T5095] pwc: recv_control_msg error -71 req 02 val 2c00 [ 963.398384][ T5095] pwc: recv_control_msg error -71 req 04 val 1000 [ 963.436234][ T5095] pwc: recv_control_msg error -71 req 04 val 1300 [ 963.451711][ T5095] pwc: recv_control_msg error -71 req 04 val 1400 [ 963.488094][ T5095] pwc: recv_control_msg error -71 req 02 val 2000 [ 963.534875][ T5095] pwc: recv_control_msg error -71 req 02 val 2100 [ 963.571619][ T5095] pwc: recv_control_msg error -71 req 04 val 1500 [ 963.595112][ T5095] pwc: recv_control_msg error -71 req 02 val 2500 [ 963.611875][ T5095] pwc: recv_control_msg error -71 req 02 val 2400 [ 963.630158][ T5095] pwc: recv_control_msg error -71 req 02 val 2600 [ 963.652306][ T5095] pwc: recv_control_msg error -71 req 02 val 2900 [ 963.682220][ T5095] pwc: recv_control_msg error -71 req 02 val 2800 [ 963.819628][ T5095] pwc: recv_control_msg error -71 req 04 val 1100 [ 963.853590][ T5095] pwc: recv_control_msg error -71 req 04 val 1200 [ 963.915763][ T5095] pwc: Registered as video103. [ 963.950864][ T5095] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input27 [ 964.098601][ T5095] usb 3-1: USB disconnect, device number 58 [ 966.440088][T12838] loop4: detected capacity change from 0 to 64 [ 969.203426][ T787] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 969.293313][T12860] loop1: detected capacity change from 0 to 16 [ 969.636869][ T787] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 969.651636][ T787] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 969.669709][ T787] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 969.840456][ T787] usb 1-1: config 0 descriptor?? [ 969.860973][ T787] pwc: Askey VC010 type 2 USB webcam detected. [ 971.457120][ T787] pwc: recv_control_msg error -71 req 02 val 2700 [ 971.464603][ T787] pwc: recv_control_msg error -71 req 02 val 2c00 [ 971.471660][ T787] pwc: recv_control_msg error -71 req 04 val 1000 [ 971.479709][ T787] pwc: recv_control_msg error -71 req 04 val 1300 [ 971.486788][ T787] pwc: recv_control_msg error -71 req 04 val 1400 [ 971.494850][ T787] pwc: recv_control_msg error -71 req 02 val 2000 [ 971.504132][ T787] pwc: recv_control_msg error -71 req 02 val 2100 [ 971.511091][ T787] pwc: recv_control_msg error -71 req 04 val 1500 [ 971.521086][ T787] pwc: recv_control_msg error -71 req 02 val 2500 [ 971.528173][ T787] pwc: recv_control_msg error -71 req 02 val 2400 [ 971.535381][ T787] pwc: recv_control_msg error -71 req 02 val 2600 [ 971.542318][ T787] pwc: recv_control_msg error -71 req 02 val 2900 [ 971.549365][ T787] pwc: recv_control_msg error -71 req 02 val 2800 [ 971.560040][ T787] pwc: recv_control_msg error -71 req 04 val 1100 [ 971.567174][ T787] pwc: recv_control_msg error -71 req 04 val 1200 [ 971.575454][ T787] pwc: Registered as video103. [ 971.582096][ T787] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input28 [ 971.612895][ T787] usb 1-1: USB disconnect, device number 42 [ 972.270153][ T5782] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201' [ 972.282011][ T5782] CPU: 1 PID: 5782 Comm: kworker/u5:5 Not tainted syzkaller #0 [ 972.289632][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 972.299752][ T5782] Workqueue: hci1 hci_rx_work [ 972.304586][ T5782] Call Trace: [ 972.307947][ T5782] [ 972.310904][ T5782] dump_stack_lvl+0x18c/0x250 [ 972.315623][ T5782] ? show_regs_print_info+0x20/0x20 [ 972.320865][ T5782] ? load_image+0x400/0x400 [ 972.325525][ T5782] sysfs_create_dir_ns+0x26e/0x2a0 [ 972.330688][ T5782] ? sysfs_warn_dup+0xa0/0xa0 [ 972.335397][ T5782] ? do_raw_spin_unlock+0x121/0x230 [ 972.340630][ T5782] kobject_add_internal+0x61c/0xcc0 [ 972.345989][ T5782] kobject_add+0x164/0x240 [ 972.350426][ T5782] ? __rwlock_init+0x150/0x150 [ 972.355231][ T5782] ? kobject_init+0x1e0/0x1e0 [ 972.359950][ T5782] ? _raw_spin_unlock+0x28/0x40 [ 972.364866][ T5782] ? get_device_parent+0x366/0x390 [ 972.370008][ T5782] device_add+0x408/0xc20 [ 972.374362][ T5782] hci_conn_add_sysfs+0xd5/0x1e0 [ 972.379499][ T5782] le_conn_complete_evt+0xf5d/0x1540 [ 972.384811][ T5782] ? hci_event_packet+0x4cb/0x1270 [ 972.389944][ T5782] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 972.396249][ T5782] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 972.401901][ T5782] ? skb_pull_data+0xfb/0x200 [ 972.406606][ T5782] hci_le_conn_complete_evt+0x187/0x440 [ 972.412348][ T5782] ? hci_remote_host_features_evt+0x150/0x150 [ 972.418427][ T5782] hci_event_packet+0x7ba/0x1270 [ 972.423390][ T5782] ? bis_list+0x290/0x290 [ 972.427787][ T5782] ? lockdep_hardirqs_on+0x98/0x150 [ 972.433004][ T5782] ? hci_send_to_monitor+0xd7/0x4f0 [ 972.438225][ T5782] hci_rx_work+0x43a/0xd60 [ 972.442673][ T5782] ? process_scheduled_works+0x96f/0x15d0 [ 972.448413][ T5782] process_scheduled_works+0xa5d/0x15d0 [ 972.454012][ T5782] ? worker_attach_to_pool+0x380/0x380 [ 972.459490][ T5782] ? assign_work+0x3d2/0x5d0 [ 972.464123][ T5782] worker_thread+0xa55/0xfc0 [ 972.468795][ T5782] kthread+0x2fa/0x390 [ 972.472900][ T5782] ? pr_cont_work+0x560/0x560 [ 972.477615][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 972.482336][ T5782] ret_from_fork+0x48/0x80 [ 972.486779][ T5782] ? kthread_blkcg+0xd0/0xd0 [ 972.491395][ T5782] ret_from_fork_asm+0x11/0x20 [ 972.496192][ T5782] [ 972.511873][ T5782] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 972.526430][ T5782] Bluetooth: hci1: failed to register connection device [ 975.342706][T12901] loop4: detected capacity change from 0 to 16 [ 978.192995][ T8132] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 978.477546][T12878] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 978.487542][T12878] CPU: 0 PID: 12878 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 978.495200][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 978.505307][T12878] Workqueue: hci3 hci_rx_work [ 978.510018][T12878] Call Trace: [ 978.513311][T12878] [ 978.516262][T12878] dump_stack_lvl+0x18c/0x250 [ 978.520955][T12878] ? show_regs_print_info+0x20/0x20 [ 978.526179][T12878] ? load_image+0x400/0x400 [ 978.530689][T12878] sysfs_create_dir_ns+0x26e/0x2a0 [ 978.535801][T12878] ? sysfs_warn_dup+0xa0/0xa0 [ 978.540495][T12878] ? do_raw_spin_unlock+0x121/0x230 [ 978.545741][T12878] kobject_add_internal+0x61c/0xcc0 [ 978.551135][T12878] kobject_add+0x164/0x240 [ 978.555560][T12878] ? kobject_init+0x1e0/0x1e0 [ 978.560252][T12878] ? _raw_spin_unlock+0x3a/0x40 [ 978.565103][T12878] ? get_device_parent+0x366/0x390 [ 978.570232][T12878] device_add+0x408/0xc20 [ 978.574570][T12878] hci_conn_add_sysfs+0xd5/0x1e0 [ 978.579509][T12878] le_conn_complete_evt+0xf5d/0x1540 [ 978.584797][T12878] ? hci_event_packet+0x4cb/0x1270 [ 978.589946][T12878] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 978.596189][T12878] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 978.601914][T12878] ? skb_pull_data+0xfb/0x200 [ 978.606722][T12878] hci_le_conn_complete_evt+0x187/0x440 [ 978.612308][T12878] ? hci_remote_host_features_evt+0x150/0x150 [ 978.618586][T12878] hci_event_packet+0x7ba/0x1270 [ 978.623556][T12878] ? bis_list+0x290/0x290 [ 978.627959][T12878] ? hci_rx_work+0x42f/0xd60 [ 978.632578][T12878] hci_rx_work+0x43a/0xd60 [ 978.637034][T12878] ? process_scheduled_works+0x96f/0x15d0 [ 978.642778][T12878] process_scheduled_works+0xa5d/0x15d0 [ 978.648462][T12878] ? worker_attach_to_pool+0x380/0x380 [ 978.653930][T12878] ? assign_work+0x3d2/0x5d0 [ 978.658531][T12878] worker_thread+0xa55/0xfc0 [ 978.663121][T12878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 978.669017][T12878] ? _raw_spin_unlock+0x40/0x40 [ 978.673879][T12878] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 978.679882][T12878] kthread+0x2fa/0x390 [ 978.684053][T12878] ? pr_cont_work+0x560/0x560 [ 978.689255][T12878] ? kthread_blkcg+0xd0/0xd0 [ 978.693842][T12878] ret_from_fork+0x48/0x80 [ 978.698308][T12878] ? kthread_blkcg+0xd0/0xd0 [ 978.702929][T12878] ret_from_fork_asm+0x11/0x20 [ 978.707741][T12878] [ 978.713822][T12878] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 978.733386][ T9696] Bluetooth: hci1: command 0x0406 tx timeout [ 978.733654][T12878] Bluetooth: hci3: failed to register connection device [ 978.923567][T12030] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 979.081336][T12913] can0: slcan on ptm0. [ 979.546382][T12030] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.571327][T12030] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 979.591279][T12911] can0 (unregistered): slcan off ptm0. [ 979.632444][T12030] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.675668][T12030] usb 3-1: config 0 descriptor?? [ 979.703191][T12030] pwc: Askey VC010 type 2 USB webcam detected. [ 980.204977][T12923] syz.1.1910: attempt to access beyond end of device [ 980.204977][T12923] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 980.218255][T12923] EXT4-fs (nbd1): unable to read superblock [ 980.564888][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 980.613908][T12030] pwc: recv_control_msg error -32 req 02 val 2700 [ 980.643552][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 980.663435][T12030] pwc: recv_control_msg error -32 req 02 val 2c00 [ 980.866236][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 980.884262][T12030] pwc: recv_control_msg error -32 req 04 val 1000 [ 980.895794][T12030] pwc: recv_control_msg error -71 req 04 val 1300 [ 980.931429][T12030] pwc: recv_control_msg error -71 req 04 val 1400 [ 980.956399][T12030] pwc: recv_control_msg error -71 req 02 val 2000 [ 980.957287][T12926] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1911'. [ 980.981416][T12030] pwc: recv_control_msg error -71 req 02 val 2100 [ 981.005797][T12030] pwc: recv_control_msg error -71 req 04 val 1500 [ 981.013497][T12030] pwc: recv_control_msg error -71 req 02 val 2500 [ 981.024538][T12030] pwc: recv_control_msg error -71 req 02 val 2400 [ 981.033037][T12030] pwc: recv_control_msg error -71 req 02 val 2600 [ 981.042201][T12030] pwc: recv_control_msg error -71 req 02 val 2900 [ 981.057732][T12030] pwc: recv_control_msg error -71 req 02 val 2800 [ 981.066594][T12030] pwc: recv_control_msg error -71 req 04 val 1100 [ 981.077883][T12030] pwc: recv_control_msg error -71 req 04 val 1200 [ 981.093169][T12030] pwc: Registered as video103. [ 981.123565][T12030] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input29 [ 981.158759][T12030] usb 3-1: USB disconnect, device number 59 [ 981.253518][ T5095] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 981.623971][ T5095] usb 2-1: Using ep0 maxpacket: 16 [ 981.838839][ T5095] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 981.868760][ T5095] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 981.878001][ T5095] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.898472][ T5095] usb 2-1: config 0 descriptor?? [ 981.958951][T12950] loop2: detected capacity change from 0 to 16 [ 982.665196][T12878] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci4/hci4:201' [ 982.677657][T12878] CPU: 0 PID: 12878 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 982.685349][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 982.695439][T12878] Workqueue: hci4 hci_rx_work [ 982.700168][T12878] Call Trace: [ 982.703476][T12878] [ 982.706441][T12878] dump_stack_lvl+0x18c/0x250 [ 982.711253][T12878] ? show_regs_print_info+0x20/0x20 [ 982.716580][T12878] ? load_image+0x400/0x400 [ 982.721141][T12878] sysfs_create_dir_ns+0x26e/0x2a0 [ 982.726293][T12878] ? sysfs_warn_dup+0xa0/0xa0 [ 982.731205][T12878] ? do_raw_spin_unlock+0x121/0x230 [ 982.736557][T12878] kobject_add_internal+0x61c/0xcc0 [ 982.741819][T12878] kobject_add+0x164/0x240 [ 982.746284][T12878] ? __rwlock_init+0x150/0x150 [ 982.751095][T12878] ? kobject_init+0x1e0/0x1e0 [ 982.755867][T12878] ? _raw_spin_unlock+0x28/0x40 [ 982.760847][T12878] ? get_device_parent+0x366/0x390 [ 982.766011][T12878] device_add+0x408/0xc20 [ 982.770386][T12878] hci_conn_add_sysfs+0xd5/0x1e0 [ 982.775369][T12878] le_conn_complete_evt+0xf5d/0x1540 [ 982.780803][T12878] ? hci_event_packet+0x4cb/0x1270 [ 982.785977][T12878] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 982.792351][T12878] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 982.798143][T12878] ? skb_pull_data+0xfb/0x200 [ 982.802900][T12878] hci_le_conn_complete_evt+0x187/0x440 [ 982.808522][T12878] ? hci_remote_host_features_evt+0x150/0x150 [ 982.814635][T12878] hci_event_packet+0x7ba/0x1270 [ 982.819625][T12878] ? bis_list+0x290/0x290 [ 982.824019][T12878] ? lockdep_hardirqs_on+0x98/0x150 [ 982.829258][T12878] ? hci_send_to_monitor+0xd7/0x4f0 [ 982.834489][T12878] hci_rx_work+0x43a/0xd60 [ 982.838963][T12878] ? process_scheduled_works+0x96f/0x15d0 [ 982.844733][T12878] process_scheduled_works+0xa5d/0x15d0 [ 982.850368][T12878] ? worker_attach_to_pool+0x380/0x380 [ 982.855884][T12878] ? assign_work+0x3d2/0x5d0 [ 982.860633][T12878] worker_thread+0xa55/0xfc0 [ 982.865290][T12878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 982.871413][T12878] ? _raw_spin_unlock+0x40/0x40 [ 982.876300][T12878] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 982.882260][T12878] kthread+0x2fa/0x390 [ 982.886463][T12878] ? pr_cont_work+0x560/0x560 [ 982.891185][T12878] ? kthread_blkcg+0xd0/0xd0 [ 982.895813][T12878] ret_from_fork+0x48/0x80 [ 982.900266][T12878] ? kthread_blkcg+0xd0/0xd0 [ 982.904891][T12878] ret_from_fork_asm+0x11/0x20 [ 982.909713][T12878] [ 982.937411][T12878] kobject: kobject_add_internal failed for hci4:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 982.953689][T12878] Bluetooth: hci4: failed to register connection device [ 982.971554][T12878] ================================================================== [ 982.979704][T12878] BUG: KASAN: slab-use-after-free in l2cap_connect_cfm+0x6df/0x1070 [ 982.987720][T12878] Read of size 8 at addr ffff88801c6e7480 by task kworker/u5:1/12878 [ 982.995811][T12878] [ 982.998154][T12878] CPU: 0 PID: 12878 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 983.005810][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.015977][T12878] Workqueue: hci4 hci_rx_work [ 983.020707][T12878] Call Trace: [ 983.024004][T12878] [ 983.026974][T12878] dump_stack_lvl+0x18c/0x250 [ 983.031694][T12878] ? __lock_acquire+0x7d40/0x7d40 [ 983.036768][T12878] ? show_regs_print_info+0x20/0x20 [ 983.041995][T12878] ? load_image+0x400/0x400 [ 983.046530][T12878] ? __virt_addr_valid+0x469/0x540 [ 983.051677][T12878] print_report+0xa8/0x210 [ 983.056121][T12878] ? l2cap_connect_cfm+0x6df/0x1070 [ 983.061358][T12878] kasan_report+0x117/0x150 [ 983.065885][T12878] ? l2cap_connect_cfm+0x6df/0x1070 [ 983.071111][T12878] l2cap_connect_cfm+0x6df/0x1070 [ 983.076201][T12878] ? l2cap_ertm_resend+0x1040/0x1040 [ 983.081522][T12878] ? l2cap_ertm_resend+0x1040/0x1040 [ 983.086919][T12878] hci_connect_cfm+0x8f/0x130 [ 983.091638][T12878] le_conn_complete_evt+0xfdc/0x1540 [ 983.096991][T12878] ? hci_event_packet+0x4cb/0x1270 [ 983.102133][T12878] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 983.108407][T12878] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 983.114162][T12878] ? skb_pull_data+0xfb/0x200 [ 983.118878][T12878] hci_le_conn_complete_evt+0x187/0x440 [ 983.124476][T12878] ? hci_remote_host_features_evt+0x150/0x150 [ 983.130584][T12878] hci_event_packet+0x7ba/0x1270 [ 983.135581][T12878] ? bis_list+0x290/0x290 [ 983.139948][T12878] ? lockdep_hardirqs_on+0x98/0x150 [ 983.145175][T12878] ? hci_send_to_monitor+0xd7/0x4f0 [ 983.150397][T12878] hci_rx_work+0x43a/0xd60 [ 983.154885][T12878] ? process_scheduled_works+0x96f/0x15d0 [ 983.160633][T12878] process_scheduled_works+0xa5d/0x15d0 [ 983.166223][T12878] ? worker_attach_to_pool+0x380/0x380 [ 983.171718][T12878] ? assign_work+0x3d2/0x5d0 [ 983.176431][T12878] worker_thread+0xa55/0xfc0 [ 983.181227][T12878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 983.187150][T12878] ? _raw_spin_unlock+0x40/0x40 [ 983.192027][T12878] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 983.197990][T12878] kthread+0x2fa/0x390 [ 983.202083][T12878] ? pr_cont_work+0x560/0x560 [ 983.206792][T12878] ? kthread_blkcg+0xd0/0xd0 [ 983.211420][T12878] ret_from_fork+0x48/0x80 [ 983.215875][T12878] ? kthread_blkcg+0xd0/0xd0 [ 983.220491][T12878] ret_from_fork_asm+0x11/0x20 [ 983.225298][T12878] [ 983.228334][T12878] [ 983.230691][T12878] Allocated by task 12878: [ 983.235137][T12878] kasan_set_track+0x4e/0x70 [ 983.239754][T12878] __kasan_kmalloc+0x8f/0xa0 [ 983.244373][T12878] l2cap_chan_create+0x50/0x760 [ 983.249250][T12878] l2cap_sock_new_connection_cb+0x182/0x2a0 [ 983.255190][T12878] l2cap_connect_cfm+0x375/0x1070 [ 983.260426][T12878] hci_connect_cfm+0x8f/0x130 [ 983.265135][T12878] le_conn_complete_evt+0xfdc/0x1540 [ 983.270457][T12878] hci_le_conn_complete_evt+0x187/0x440 [ 983.276043][T12878] hci_event_packet+0x7ba/0x1270 [ 983.281009][T12878] hci_rx_work+0x43a/0xd60 [ 983.285459][T12878] process_scheduled_works+0xa5d/0x15d0 [ 983.291129][T12878] worker_thread+0xa55/0xfc0 [ 983.295784][T12878] kthread+0x2fa/0x390 [ 983.299874][T12878] ret_from_fork+0x48/0x80 [ 983.304321][T12878] ret_from_fork_asm+0x11/0x20 [ 983.309148][T12878] [ 983.311487][T12878] Freed by task 12952: [ 983.315566][T12878] kasan_set_track+0x4e/0x70 [ 983.320183][T12878] kasan_save_free_info+0x2e/0x50 [ 983.325234][T12878] ____kasan_slab_free+0x126/0x1e0 [ 983.330374][T12878] slab_free_freelist_hook+0x130/0x1a0 [ 983.335883][T12878] __kmem_cache_free+0xba/0x1e0 [ 983.340764][T12878] l2cap_sock_cleanup_listen+0xea/0x3e0 [ 983.346357][T12878] l2cap_sock_release+0x6a/0x1e0 [ 983.351300][T12878] sock_close+0xbd/0x230 [ 983.355570][T12878] __fput+0x234/0x970 [ 983.359600][T12878] task_work_run+0x1d4/0x260 [ 983.364229][T12878] exit_to_user_mode_loop+0xe6/0x110 [ 983.369567][T12878] exit_to_user_mode_prepare+0xee/0x180 [ 983.375170][T12878] syscall_exit_to_user_mode+0x1a/0x50 [ 983.380869][T12878] do_syscall_64+0x61/0xa0 [ 983.385350][T12878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.391304][T12878] [ 983.393662][T12878] Last potentially related work creation: [ 983.399414][T12878] kasan_save_stack+0x3e/0x60 [ 983.404132][T12878] __kasan_record_aux_stack+0xaf/0xc0 [ 983.409704][T12878] call_rcu+0x153/0x950 [ 983.413917][T12878] netlink_release+0x1702/0x1ad0 [ 983.418903][T12878] sock_close+0xbd/0x230 [ 983.423184][T12878] __fput+0x234/0x970 [ 983.427220][T12878] task_work_run+0x1d4/0x260 [ 983.431871][T12878] exit_to_user_mode_loop+0xe6/0x110 [ 983.437311][T12878] exit_to_user_mode_prepare+0xee/0x180 [ 983.440403][ T5095] mcp2221 0003:04D8:00DD.0012: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0 [ 983.442888][T12878] syscall_exit_to_user_mode+0x1a/0x50 [ 983.458975][T12878] do_syscall_64+0x61/0xa0 [ 983.463413][T12878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.469311][T12878] [ 983.471638][T12878] Second to last potentially related work creation: [ 983.478215][T12878] kasan_save_stack+0x3e/0x60 [ 983.482893][T12878] __kasan_record_aux_stack+0xaf/0xc0 [ 983.488374][T12878] call_rcu+0x153/0x950 [ 983.492540][T12878] netlink_release+0x1702/0x1ad0 [ 983.497489][T12878] sock_close+0xbd/0x230 [ 983.501745][T12878] __fput+0x234/0x970 [ 983.505728][T12878] task_work_run+0x1d4/0x260 [ 983.510367][T12878] exit_to_user_mode_loop+0xe6/0x110 [ 983.515658][T12878] exit_to_user_mode_prepare+0xee/0x180 [ 983.521215][T12878] syscall_exit_to_user_mode+0x1a/0x50 [ 983.526686][T12878] do_syscall_64+0x61/0xa0 [ 983.531112][T12878] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 983.537022][T12878] [ 983.539356][T12878] The buggy address belongs to the object at ffff88801c6e7000 [ 983.539356][T12878] which belongs to the cache kmalloc-2k of size 2048 [ 983.553848][T12878] The buggy address is located 1152 bytes inside of [ 983.553848][T12878] freed 2048-byte region [ffff88801c6e7000, ffff88801c6e7800) [ 983.567841][T12878] [ 983.570275][T12878] The buggy address belongs to the physical page: [ 983.576722][T12878] page:ffffea000071b800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1c6e0 [ 983.586894][T12878] head:ffffea000071b800 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 983.595838][T12878] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 983.603825][T12878] page_type: 0xffffffff() [ 983.608163][T12878] raw: 00fff00000000840 ffff888017c42000 ffffea0001f9d000 dead000000000002 [ 983.616751][T12878] raw: 0000000000000000 0000000080080008 00000001ffffffff 0000000000000000 [ 983.625419][T12878] page dumped because: kasan: bad access detected [ 983.631828][T12878] page_owner tracks the page as allocated [ 983.637539][T12878] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 12511, tgid 12509 (syz.2.1813), ts 928688915300, free_ts 928665400511 [ 983.660879][T12878] post_alloc_hook+0x1c1/0x200 [ 983.665766][T12878] get_page_from_freelist+0x1951/0x19e0 [ 983.671320][T12878] __alloc_pages+0x1f0/0x460 [ 983.675919][T12878] alloc_slab_page+0x5d/0x160 [ 983.680613][T12878] new_slab+0x87/0x2d0 [ 983.684798][T12878] ___slab_alloc+0xc5d/0x12f0 [ 983.689497][T12878] __kmem_cache_alloc_node+0x19e/0x250 [ 983.695055][T12878] kmalloc_trace+0x2a/0xe0 [ 983.699578][T12878] copy_verifier_state+0x8b1/0xd20 [ 983.704713][T12878] push_stack+0x1b9/0x500 [ 983.709051][T12878] check_cond_jmp_op+0xdd0/0x2680 [ 983.714097][T12878] do_check+0x6746/0xdbf0 [ 983.718430][T12878] do_check_common+0xadb/0x13e0 [ 983.723306][T12878] bpf_check+0x658e/0xeba0 [ 983.727742][T12878] bpf_prog_load+0x1163/0x1670 [ 983.732519][T12878] __sys_bpf+0x5ba/0x890 [ 983.736770][T12878] page last free stack trace: [ 983.741444][T12878] free_unref_page_prepare+0x7b2/0x8c0 [ 983.746917][T12878] free_unref_page+0x32/0x2e0 [ 983.751616][T12878] __unfreeze_partials+0x1cf/0x210 [ 983.756835][T12878] put_cpu_partial+0x17c/0x250 [ 983.761697][T12878] __slab_free+0x319/0x400 [ 983.766142][T12878] qlist_free_all+0x75/0xd0 [ 983.770742][T12878] kasan_quarantine_reduce+0x143/0x160 [ 983.776209][T12878] __kasan_krealloc+0x91/0x190 [ 983.781065][T12878] krealloc+0xdd/0x120 [ 983.785162][T12878] realloc_array+0x75/0x120 [ 983.789705][T12878] check_stack_access_within_bounds+0x5a2/0x8f0 [ 983.795989][T12878] check_stack_range_initialized+0x24f/0x15b0 [ 983.802078][T12878] check_helper_mem_access+0x392/0xec0 [ 983.807564][T12878] check_mem_size_reg+0x1d8/0x220 [ 983.812596][T12878] check_helper_call+0x2509/0x6130 [ 983.817783][T12878] do_check+0x7813/0xdbf0 [ 983.822209][T12878] [ 983.824666][T12878] Memory state around the buggy address: [ 983.830299][T12878] ffff88801c6e7380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.838376][T12878] ffff88801c6e7400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.846439][T12878] >ffff88801c6e7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.854508][T12878] ^ [ 983.858575][T12878] ffff88801c6e7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.866723][T12878] ffff88801c6e7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 983.874796][T12878] ================================================================== [ 983.892525][T12878] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 983.899773][T12878] CPU: 0 PID: 12878 Comm: kworker/u5:1 Not tainted syzkaller #0 [ 983.907539][T12878] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 983.917635][T12878] Workqueue: hci4 hci_rx_work [ 983.922447][T12878] Call Trace: [ 983.925755][T12878] [ 983.928715][T12878] dump_stack_lvl+0x18c/0x250 [ 983.933439][T12878] ? show_regs_print_info+0x20/0x20 [ 983.938762][T12878] ? load_image+0x400/0x400 [ 983.943396][T12878] panic+0x2dc/0x730 [ 983.947336][T12878] ? bpf_jit_dump+0xd0/0xd0 [ 983.951880][T12878] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 983.957929][T12878] ? _raw_spin_unlock+0x40/0x40 [ 983.962902][T12878] ? print_memory_metadata+0x314/0x400 [ 983.968405][T12878] ? l2cap_connect_cfm+0x6df/0x1070 [ 983.973639][T12878] check_panic_on_warn+0x84/0xa0 [ 983.978797][T12878] ? l2cap_connect_cfm+0x6df/0x1070 [ 983.984034][T12878] end_report+0x6f/0x130 [ 983.988327][T12878] kasan_report+0x128/0x150 [ 983.992883][T12878] ? l2cap_connect_cfm+0x6df/0x1070 [ 983.998133][T12878] l2cap_connect_cfm+0x6df/0x1070 [ 984.003205][T12878] ? l2cap_ertm_resend+0x1040/0x1040 [ 984.008545][T12878] ? l2cap_ertm_resend+0x1040/0x1040 [ 984.013908][T12878] hci_connect_cfm+0x8f/0x130 [ 984.018634][T12878] le_conn_complete_evt+0xfdc/0x1540 [ 984.023976][T12878] ? hci_event_packet+0x4cb/0x1270 [ 984.029127][T12878] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 984.035425][T12878] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 984.041197][T12878] ? skb_pull_data+0xfb/0x200 [ 984.045921][T12878] hci_le_conn_complete_evt+0x187/0x440 [ 984.051613][T12878] ? hci_remote_host_features_evt+0x150/0x150 [ 984.057720][T12878] hci_event_packet+0x7ba/0x1270 [ 984.062699][T12878] ? bis_list+0x290/0x290 [ 984.067070][T12878] ? lockdep_hardirqs_on+0x98/0x150 [ 984.072304][T12878] ? hci_send_to_monitor+0xd7/0x4f0 [ 984.077547][T12878] hci_rx_work+0x43a/0xd60 [ 984.082011][T12878] ? process_scheduled_works+0x96f/0x15d0 [ 984.087769][T12878] process_scheduled_works+0xa5d/0x15d0 [ 984.093365][T12878] ? worker_attach_to_pool+0x380/0x380 [ 984.098868][T12878] ? assign_work+0x3d2/0x5d0 [ 984.103506][T12878] worker_thread+0xa55/0xfc0 [ 984.108143][T12878] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 984.114073][T12878] ? _raw_spin_unlock+0x40/0x40 [ 984.119042][T12878] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 984.125077][T12878] kthread+0x2fa/0x390 [ 984.129174][T12878] ? pr_cont_work+0x560/0x560 [ 984.133884][T12878] ? kthread_blkcg+0xd0/0xd0 [ 984.138518][T12878] ret_from_fork+0x48/0x80 [ 984.142975][T12878] ? kthread_blkcg+0xd0/0xd0 [ 984.147605][T12878] ret_from_fork_asm+0x11/0x20 [ 984.152416][T12878] [ 984.155952][T12878] Kernel Offset: disabled [ 984.160311][T12878] Rebooting in 86400 seconds..