last executing test programs: 11.917892396s ago: executing program 2 (id=1806): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 11.802383802s ago: executing program 3 (id=1807): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x64, 0x4, 0x8, 0xffffffff}]}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000280)=0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000ecff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) socket$nl_xfrm(0x10, 0x3, 0x6) 10.981209505s ago: executing program 3 (id=1809): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1c, &(0x7f0000002780)=ANY=[], 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x7, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x8, 0xd}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000fe666863533cca96bf0000", @ANYRES32, @ANYBLOB='\x00'/22], 0x50) shutdown(r3, 0x0) shutdown(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 9.698343372s ago: executing program 3 (id=1810): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 8.40795888s ago: executing program 0 (id=1813): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r3, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0x81}]}, 0x10) sendto(r3, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r3, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) 7.734246265s ago: executing program 2 (id=1814): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e22, 0x0, 0x4e21, 0xc85, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0x3, 0x4087623, 0x10001, 0x1, 0x66, 0x9, 0x8}, {0x5, 0x4000000000000, 0x0, 0xffffffff}, 0x10000, 0x6e6bbf, 0x1, 0xb0fd1ac0151e22a8, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x32}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0x8, 0x5, 0x42}}, 0xe8) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r0 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r0, 0x58, &(0x7f00000002c0)}, 0x10) 7.597421522s ago: executing program 3 (id=1815): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400000002020000052406000005240000000d"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) fsync(r0) cachestat(r1, &(0x7f0000000040), &(0x7f000009de80), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002540)={0x50, 0x0, r4, {0x7, 0x2d, 0x8, 0x41400100, 0x400, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x2, 0x1}}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x2400c040) syz_usb_connect$uac2(0x5, 0xf8, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x0, 0x10, 0xdb, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff7, 0xb, 0x1a}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x4, [0x3, 0x0, 0x0, 0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x85, 0x2, 0x1002, 0x0, 0x7, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x101, 0x20, 0xc}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0xc, 0x1, "a6"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x7, '1dc\n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x3, {0x8, 0x25, 0x1, 0x1, 0x30, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x40, 0x7, "0df182a4bfd6ab8c"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x8, 0x1, 0x4f, 0x97}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x25, 0x6, 0x5, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xffc0, 0x81, 0x0, "ba114c44ae"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe, 0x8, 0x7f, {0x8, 0x25, 0x1, 0x2, 0x30, 0xf, 0x40}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x5, 0x4, 0x20, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x47, &(0x7f00000025c0)=@string={0x47, 0x3, "9dc6550a6968d86bef0c9f7f126415449300f820739bdc57ff13bec9394bb0d12727f5d0ccac914975d034fce03f140799b62120bc06bb369392396e2e7de1f7c661b9d0fd"}}, {0x35, &(0x7f00000002c0)=@string={0x35, 0x3, "f846efa802891e60e83d47077ed9cc1d1b53cb06cca8c17c6f23d26e3a4e39cf9594701fcc545e18c51c8668ad774da27d47b4"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}]}) 7.561973374s ago: executing program 2 (id=1816): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x64, 0x4, 0x8, 0xffffffff}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000060000000400000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2]}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) socket$nl_xfrm(0x10, 0x3, 0x6) 7.459988639s ago: executing program 0 (id=1817): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x64, 0x4, 0x8, 0xffffffff}]}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000280)=0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000ecff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) socket$nl_xfrm(0x10, 0x3, 0x6) 6.705331889s ago: executing program 0 (id=1818): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1c, &(0x7f0000002780)=ANY=[], 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x7, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x8, 0xd}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000fe666863533cca96bf0000", @ANYRES32, @ANYBLOB='\x00'/24], 0x50) shutdown(r3, 0x0) shutdown(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 5.037510796s ago: executing program 0 (id=1819): r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000140)='.\x00', 0x40000132) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf}, 0x94) ioctl$XFS_IOC_ERROR_CLEARALL(r1, 0x40085875) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$FUSE(r5, &(0x7f0000000040)={0x2020}, 0x2020) 4.309963765s ago: executing program 1 (id=1822): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f00000002c0), 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000000c0)={0x28, 0x0, 0x0, @host}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)) syz_open_dev$vim2m(0x0, 0x8, 0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r3, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r4, 0xf21, 0x0, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000015}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r8, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r7}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) tkill(0x0, 0x13) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000100)) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r3) socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) 3.265259169s ago: executing program 3 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$tty1(0xc, 0x4, 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='net/fib_triestat\x00') preadv(r3, &(0x7f0000000640)=[{&(0x7f0000000140)=""/134, 0x86}], 0x1, 0x0, 0x0) 3.085691998s ago: executing program 2 (id=1824): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x18, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8b, 0x0, 0x0, 0x0, 0x80}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfeff}, {0x85, 0x0, 0x0, 0x86}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x5, 0x0, 0x5, 0x9, 0x0, 0x1, 0x80000000}}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x2a}, {0x7, 0x0, 0xb, 0x0, 0x0, 0x0, 0x500}}}, &(0x7f0000000000)='GPL\x00', 0x3, 0xfed, &(0x7f0000000780)=""/4077, 0x41000, 0x4b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8000d}, 0x94) 3.016995272s ago: executing program 1 (id=1825): setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@mcast1, @in6=@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x4e22, 0x0, 0x4e21, 0xc85, 0xa, 0x0, 0x0, 0x3c}, {0x0, 0x3, 0x4087623, 0x10001, 0x1, 0x66, 0x9, 0x8}, {0x5, 0x4000000000000, 0x0, 0xffffffff}, 0x10000, 0x6e6bbf, 0x1, 0xb0fd1ac0151e22a8, 0x3, 0x1}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x32}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0x8, 0x5, 0x42}}, 0xe8) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0x0, 0x1, 0x1}}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000002c0)}, 0x10) 2.888607979s ago: executing program 2 (id=1826): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x64, 0x4, 0x8, 0xffffffff}]}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x20000080) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000004040)=[{&(0x7f0000002e00)=""/156, 0x9c}], 0x1, 0x401, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(0xffffffffffffffff, 0x7a7, &(0x7f0000000280)=0x80000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES32=0x1, @ANYBLOB="0000000000000000ecff00"/20, @ANYRES32=0x0, @ANYRES32], 0x50) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) socket$nl_xfrm(0x10, 0x3, 0x6) 2.813529273s ago: executing program 1 (id=1827): bind$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x400000000001, 0x0, 0x1, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001a400)=""/102384, 0x18ff0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000005c0)={{0x1, 0x1, 0x18, r2}, './file0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000380)='clear_refs\x00') writev(r4, &(0x7f0000000100)=[{&(0x7f0000000000)='4', 0x1}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x1c, &(0x7f0000002780)=ANY=[], 0x0, 0x3fc, 0x0, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0x8, 0x7, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000000700)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4], &(0x7f0000000740)=[{0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x8, 0xd}], 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) listen(r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0xe, 0x4, &(0x7f00000000c0)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000fe666863533cca96bf0000", @ANYRES32, @ANYBLOB='\x00'/24], 0x50) shutdown(r3, 0x0) shutdown(r3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000c091}, 0x800) 1.755372758s ago: executing program 2 (id=1828): rmdir(0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0) getdents64(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1813000007000000eab40400000000", @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="55d70ae093d0891ce244f1d8790c86ccccf167a4142cd63ef266b06b9ca91631343bf66e25c88a3d310a164f4aa389cf164a19a9fecebd0cca28c933cc5a15c1777511845b76e8abf0857a56cccb314bbe4b52d4a4ef626c71a5f8b91215ff66d71549b042ce2eb4f1e619ee1703c517f3cf851b00bea53d04d2a08601693b8e2dec7a6d018806b4aa85be9be8ac716c47d3a2576c33a3697605695140fb11096b61267a69e210a317df701f16fad3686aa153"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x19, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x2, 0x8001], 0x0, 0x0, 0x2}}, 0x40) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4040810) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@discard_async}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0xff, 0x5122, &(0x7f0000006440)="$eJzs3U+IVWUfB/Dnzp1x5lVw7isEtsoikGrh4CYioqtMUFF0y8VgBE4tgnThJEi0EMQW/Vt4S4paWLOSWiSzMILauJDCCNyGhrlwoxhILtpp3HvOc+fe53jPvTONjennIzPnPOd3nuc893IW93udc04AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAEMJzv31ypKx++vr02fMz9d2Hts1cOTC94UwIlfb2Sl7ftf3pl17fsev5idhh9sVsWav1GzLreiFrrOnZ2OrX+/NqCGEsGaCaL59aVxi1e3VfccBSNy7tPbZlf33ziaPN6rXL504VXzotE6s9gdWSn1cXF8+levv3SLJHp9116lV6TtGsf3rC/SsvAgBYkqlGe9H5OJp/xO20D6b1pF1P2s2kHT8hNLsby5GNu6bfPDel9VWaZz2LCuN955nU8/e/026k/ZN2EjWWMM/eXfNIM9FvnnNJfbXmCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHA7eejN0QfK6qevT589P1PffWjbzJUD0xvOhFBrb69k5crad4/W//xm+/FDP2z98sTFZx+p5v3icrRr5/BrXHlsMoTXuioX47CX1ofQ6C20m+HzYuGN9sozsQAAAMCd5N7275FOO4uDYz3tSjtNVtr/oiws3ri099iW/fXNJ442q9cunzu1/PEafcar33S8Tru2+FPpCsYx/qbjLdbjrvsK45RLR0zz/KMXpv4q61/I/7Xy/B/fOfkfAACAf0L+T8cpNyj/f/vK7x+V9S/k/009hyzk/zjjmP9HwvLyPwAAANzObnX+rxfGKTco/4+/MPZVWf9C/p8aLv+Pdk87bvwlTnjPZAhTg6YOAAAA9BH/333xq4WY17NvDtK8/sTDh8+XjVfI//Xh8v9Y+GJ+RV8YAAAAsGzzn+18sKxeyP+N4fL/+C2dNQAAALAUb70/8V5ZvZD/Z4fL/2vzZX7lQ9bpx/hXCEcmQ5horcxlhZ9C88lOAQAAAFghMaf/8fHu78v2K+T/ufL7/8c7HcTr/3vu/1e4/r+rkN3173E3BgAAAOBuVLyeP94eP3tyQb/n7w97/f99/zv8ctnxC/n/4HD5v9q9XMnn/wEAAMAy/Nee/7ezME65Qff/v+eDt38u61/I/83h8n9crut+eScrlez9eWcyhI2tlfxugl/Hw+1JCgtjXYW2RtJjR+yRFxbGuwptc0mPrZMh3N9aOZgU/h8LzaRwdX1emE8KZ2IhPx86heNJ4WQ80z5dn083LXwXC/kFFgvxCop1nUsikh7X+vVoFW7a41zn4AAAAHeVGJ7zLDvW2wxplF2oDNph7aAdRgbtUB20w2iyQ7pjv+1htrcQtzfPbl7a8//nh8v/8a1Yky36Xf8f4vX/+XMNO9f/z8ZCLSksxEIjvWNAIx4jC7sfxmPUGnmPqxs7BQAAALijxe8Fqqs8DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgL/Zu9cYua76AOBnn+N9eHcTqAgpggXqGBe8XtvhoTYV6zRVUShlXVKiClFs7HVYvMHGdgqOADk2KEURNC2R4EOjOEKozoekFgkKNIniRsIoah4oVSOSKBFpnSCi0DSAQiESrmbuPbN3zt15+LGON/39JO+cmf953nl4zr13zgUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOD/hyNf+szftorf/9tLHn/q8qlP7t9w+fOfv+Tch0OYrj3elYW7Bq+9cernt1582/671t10x7FL396fl8vjYaj6pzu/88VY67HlIdzZFUJvGlg9nAX68vvDsb43DIdwTpgP1EvMDGYl0obD9wdCOBjmA/WqvjcQwnAhcNkj9937lWrihoEQVoQQKmkbT1ayNgbSwAX9WWAwDezozQK/Op6pB77bnQXglMU3Q/1Ff3i6McPYwuWavP76TlvHXlnp8HpiYqx5vp9tWOROFfSnD0yf0tNWqo5FUXp7HPFuWwLvttJ2vt7TVvwilX9DOT4fqoTurTPbNl81tyc+0h0mJnqa1bRIz/NjL35uy4mkl8zrMHZg7LS8Dr/60Ipbe1Z94ME7Vq949tA7Djx3qt38UWGTFtOLrRLy19ySeR6jKZ8nS+DtV/qWNO5LVwhh2yd+74Ot4qX5/1jr+X98Ocfb7obcsdaXR7K5eXxkOCZeGMnm5gAAALBkLIW9pjsm7nlPofhoJamvNP8f7+z4fzzkn0/ms9EeCWGqljgwGsJ5tcezwC2xuY+PhvDmWmq6MbAhCRwJ4fW1xKp6VUmJZbHEeBL4yUgemEoCR2NgOgl8KwauTwJfjIHDSWBLDBxJAhfHQJhtHMfvj+Tj6DgwEAObso14OJ6F8IuR2FqyrZ6oVwUAAHCa5LPDvsa7hXMdTjVDnF4eHmiXIZ6B3TRDJakhncHWp1VNa+htV0N3uxrq497Xevilmrva1Vw6DaOrMcONv/ybD4UWSvP/ydbz/8oCHekqHf8PYWPtb8zdnUfm6vFN0w0ZAAAAgFMw9L9Pf7NVvDT/n+rs/P+4T6SnkDk8EHdDbB8NYbIxkFX7h+VAdtR7KA8AAADAUlA/Hl8/Fj6b32anaKfz6XL+6RPMHw/8Ty2Yv//I3Zta9bc0/5/u7Pz/wcbbrBNHYy++NhrCskLgB7GX1UDNeAz8+L2NgXz8R+MGuC5WlZ+YUK/qulhiUwxMJoGDzUr8sF7ivMZA/mTVGz9QH8dsXqIQAAAAgDMu7g6Ix+Xj+f9v+c26z7QqV5r/bzqx8/9r8+DS6f1zQyGs6Q2hJ/1hwAOD2cKAMTDclSfuGczq6kmrumYwhIuqA0urejpf/783XWPwkYGsqhg47y2HXrygmvjmQAhrioFHP3LzO6uJPUmg3vhfDoTwpupo08a/syxrvC9t/OvLQnhjIVCv6uPLQqg21p9WdV8lv45BWtU/V0J4TSFQr+pdlRD2BgCWqPhf6dbig7v3Xr1989zczK5FTMR9+ANh2+zczMSWHXNbK036tDXpc8MyRteUx9TplW+eyJco+vDtG4c7Sdd/JzhZbCvfj186cTC/H78L9dXGua6v4e76dMhve2u5iVD4JtVsyN2LPOTBYiXzT2Kp/pi/PwyFZVftntk18dnNe/bsWpv97TT7uuxvPMyUbau16bYaXKhvHbw8mq6WlTjZbbWyWMmaPVfuXLN779WrZ6/cfMXMFTOfWvuudZMXTq6ffPeFa6qjmsz+thnqyoWqToZ6/OYOx3Uah3p+b6GSM/GpISEhsdQSO4ZWtvw/uTT/39l6/h8/deInf74+Q7Pj/2PxMH/2+Pxh/k0xcLDT4/9jzY7m108MGE8C+2Jgn8P8AAAAvDrESX7cmxn3Sv901XeebVWuNP/f19nv/0/T+v/1pesvbbbM/6pYYrLZ+v/pMv/19f/3NVv/P13mv77+/8FXYP3/q+qBZJP8wvr/AADAq8GZW/+/7fL+6QUCShnaLu+fXiCglKHtMv6dXiDghNf/f/I//+q/Qwul+f/1nc3/LdwPAAAAZ48v/NlnfqdVvDT/P9jZ/P/Mr/8Xmp3/P94sMN1sYUDr/wEAALBENVv/b+zawY+1Klea/x/ubP4fT7vobsgda315JFvTLqRr2r0wUv/JAAAAACwN3WFioq/DvA0ro244+TYfy5cCbZUuevpPjp3Y+f9HOpv/N/wu46sPrbi1Z9UHHnz5jtUrnj30jgPPzR//BwAAABZPp/slAAAAAAAAAAAAAACAV97T/7F/fat46ff/YWPt8Wa//4/X/Yu/L3htQ+5Ya/v1//L7l73/tr21JQsfGAnhrcXA9v3bzwn5tflXFgP3fnTV66qJ/WmJu5+6+Jlq4mNp4H2rz32pmrgoCWyKiyS+Pg3Eqyq+tDwJxOUV/z0NxO1xOA3054EvL8/G0ZVuq58OZ9uqK91Wjw+HMFoI1LfVncNZG13pAG9IAvUBfjoNxAH+eR7oTnt121DWqxgYjkVvGsp6BQDAWSt+C+wL22bnZibjV/h4e35v423UsGTZNeVquzps/ol8abIP375xuJN0T/pddP5a432hUh3C2tLX1WKWrtooT08tbTbda5sMud1qb91NyqVOdNP1Nx/RQDaiiS075rb2tR34+vZZ1vW2zbK2NNkpZumubdIOaumgLx2MqMNt00GX4/3uMDHRk+T6gxgcCw3avSI6/b1+cZ2/Zq+CYp5PHTvwq1b1leb/Y53N/yvFcb2UXwxgX7yy3t+NWuYfAAAAFteXN/z6G/Hfh669/9FWeUvz//HO5v9xD1Z+KDjb23EkXv//wGgItUvrj2WBW2JzHx8N4c211HQskV1Q/9JYYjIL3BJ3mKyKJTZNN1a1LAYOJ4GfjOSBI0ngaAzkeykOhXxXzt+PhPDOWmpjY4mdscRYEvhgDIwngYkYmEwCy2NgKgk8vzwPTCeBf4uBMNu4rW5fnm8rAACADtWu4ZbPs+Lx5zjtSud5h3vbZehql2GwXYbudhkqLTP0hcPNRhHvfztm6EtOXukqZOpLmx1IailliBfDb9rxtlu3fvj/h40504KlpuP5B/XzDboaM9z1nt5KaKE0/5/sbP4/2HibtX40zv/nr/+XBX4Qu/e1eOr4eAz8+L2NgXzHwNE42b2uXtV0XiKftF8XS0zFwHgS2BkDU0lg08Y8cPB1jYF8pl1v/EC98dm8RCEAAAAAZ1zcQRB308T5/027vzTUqlxp/j/V2fw/tjdUbOyLsdZjy0O4s2u+N/XA6uEsEPdjDMefx79hOIRzCjs46iVmBrMS/UnD4fsD2S/U+9OqvjeQ/fgg3r/skfvu/Uo1ccNACCsKe1/qbTxZydoYSAMX9GeBwTSwozcLxD0/9cB3u7MAnLL6XsH4gspPdakbW7hck9ffq+WaoOnwSvtAF8i30G+uFktph2u+T7XuxJ62lvtvOW1Kb48j3m1L8d025t1W/CKVf0M5Ph+qhO6tM9s2XzW3Jz5S/CVrySI9z8VfqXaSPg2vw30n39v2KmkHJpOPj8mFyy38OuyK1X31oRW39qz6wIN3rF7x7KF3HHiu4240EX8ofN/n/3X4R4XNu9gqIX/NLbnPk2mfJ0viv4Hk3T3uaQshbHz+69e1ipfm/9Odzf97k9uaX8eNuXs0hLcVNu4DcfP/8Wj2OVgIZJ+SrykHskPu/zXS9JMTAAAATrf67o76/oLZ/DY7ITydJ5fzT4dwfPQE8sf9FVML5u+034N//dEVreKl+f+m1vP/ZUk3Hf93/J9F4vj/gs72XdHL0gf2ndKu6FJ1LArH/xd0tr/bHP9fkOP/jv8vxPH/Nhz/X9DZ/rSVviXt9KUrhPDsH93zeKt4af6/s7P5v/X/Fl60r77+36Zm6//tbLb+3z7r/wEAAIuqyUJz6TyvtHpfKUO6el8pQ9sFAtsuMdh6/b8W6+y9atb/K23Uduv/PXP+k78JLZTm//s6m//Hl8NQsfWlsv7f+MYmVV0fAzstDAgAAMDZqNm+CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF5Zd/3D/2xtFb//t5c8/tTlU5/cv+Hy5z9/ybkPhzBbe7wrC3cNXnvj1M9vvfi2/Xetu+mOY5e+vZKX68tvf7chd6z15ZEQDhYeGY6JF0aqd+YDl73/tr291cQDIyG8NQsM55VsP6f691sjIawslrj3o6teV03sny+RBe5+6uJnqomPpYH3rT73pWriojzQlXb3H5dn3e1Ku/uV5SGMFgL17n5yeWNV9Tb+NA90p23803DWRgwMx6LfGM7aiIG5WGJ2WQhrekPoSau6v5JV1ZNW9S+VrKqetKovVEK4KITQm1b1VH9WVW868of7s6pi4Ly3HHrxgmriYH8Ia4qBRz9y8zuriU8ngXrjf9EfwpuqL5m08W/3ZY33pY3f0BfCG0MI/WmJX/ZmJfrTEk/3hvCaQqDe+Cd6Q9gbeFWIHz4Nn2i79169ffPc3MyuxUh8JEv0520NhG2zczMTW3bMba0kfWqmq5A+fs3Jj/2JFz+3pXr74ds3DneS7s3L9dW6vK6v4e76s733sV+DxUrmn5hS/TF/fxgKy67aPbNr4rOb9+zZtTb722n2ddnfnjyabau1S2VbrSxWsmbPlTvX7N579erZKzdfMXPFzKfWvmvd5IWT6yfffeGa6qgms7+nY6g3N4QGzsRQz+8tVLKoHwASEhJnILF2EWrubvh0mzzbP8hLX/TnO9oXKrUP6NK0opilqzbK0zHoDSc54pP5ntJ2RGtLE4dSlnULZLmmMcv60mRivpaBLEvte11pclhsrLu2SeP97jAx0dNsO4w13i1u3p+dwuZ9LN90naYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+D924EAAAAAAAMj/tRGqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsAMHAgAAAABA/q+NUFVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVYUdOBYAAAAAEOZvHUbPBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//t/8lBw==") r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x101142, 0xeaff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r3, &(0x7f0000002700)=""/102392, 0x18ff8) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000240), 0x0) write$binfmt_aout(r2, &(0x7f0000000200)=ANY=[], 0x29f) stat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000380)) 1.483804872s ago: executing program 1 (id=1829): r0 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x1, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macvtap0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000880)=@bridge_newneigh={0x1c, 0x1c, 0x1, 0x70bd28, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x10, 0x26, 0xa}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040040) r4 = socket(0x1, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x89fe, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000000)=@ethtool_coalesce={0xf, 0x0, 0x200, 0x2, 0x7, 0x9, 0x0, 0x5, 0x9, 0x2, 0xca1, 0x8, 0x1, 0x6, 0xff, 0x9, 0x3, 0x7, 0x7, 0xb, 0x64, 0x1000, 0xc}}) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040011) ioctl$RTC_AIE_OFF(r1, 0x7002) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000180)) ioctl$RTC_SET_TIME(r1, 0x4024700a, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000b80)={{0x7, 0x5, 0xc, 0xd, 'syz0\x00', 0x401}, 0x1, [0x2, 0x1, 0x2, 0x4, 0x2, 0x2, 0x4, 0x0, 0x7db6, 0xd, 0x2, 0x10, 0x6, 0xffff, 0x81, 0xc5e, 0x81, 0x1ff, 0xc5b, 0x1, 0x6, 0x4, 0x7, 0x6, 0x1, 0x0, 0x9, 0x10000, 0x4e0, 0x8, 0x1000, 0x844, 0x7, 0x0, 0x0, 0x10, 0x6, 0x0, 0x5, 0x3, 0x3, 0x80, 0x280, 0x100000000, 0x3, 0x81, 0xe, 0x5, 0x3, 0xffffffffffffffff, 0x3, 0x3ff, 0xd69, 0x9, 0x1, 0x4, 0xfffffffffffffff7, 0x3, 0x7, 0xa1, 0x6, 0x5, 0x2, 0x3, 0xce, 0x1, 0xf1d, 0x6, 0xa9, 0x1, 0x4, 0x0, 0x7, 0x7f, 0x2, 0xa6, 0x6, 0x1, 0x6, 0x80, 0x34a, 0xc, 0x7fffffffffffffff, 0xfffffffffffffff1, 0x6, 0xf, 0xb4c, 0xffffffff80000000, 0xb3, 0x1, 0xb, 0x7, 0x1ff, 0x9, 0x8, 0x0, 0x198, 0x53, 0x8, 0xffffffffffffffe2, 0x6, 0x3f800, 0x7, 0xfff, 0xb6, 0x5, 0x5, 0xffff, 0x8, 0xf, 0x7, 0x7, 0x8, 0x100000000, 0x7, 0x7ff, 0xfffffffffffffffe, 0x0, 0x4, 0x5, 0x7, 0x0, 0x8, 0x6f, 0x5, 0x7fff, 0x0, 0x9]}) 1.352802699s ago: executing program 1 (id=1830): setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000002c0)={0x38, 0x1, 0x1, 0xf03, 0x0, 0x0, {0x3, 0x0, 0x9}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_PROTOINFO={0x1c, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x18, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0xffff}, @CTA_PROTOINFO_DCCP_ROLE={0x5, 0x2, 0xf7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000000) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000d00), 0xffffffffffffffff) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000009000000010000050900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000050000000060a010400000000000000000100000008000b400000000028000480240001800b0001007470726f7879000014000280080003400000004808000140000000020900010073797a30"], 0xc4}}, 0x0) socket$rds(0x15, 0x5, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000000c0)={'macsec0\x00', 0x400}) ioctl$TUNSETSNDBUF(r2, 0x400454d4, 0x0) socket$alg(0x26, 0x5, 0x0) syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000400000000000000000000000000000e30000"], 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="04050400c900", @ANYRES32=r3], 0x7) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000140)=[{&(0x7f0000000300)}], 0x1) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, 0x0, 0x5d) 1.247717035s ago: executing program 1 (id=1831): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x20000000ec072, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000020000102505a1a4400000000101090248000101000000090400000002020000052406000005240000000d"], 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000004c0), 0x4) fsync(r0) cachestat(r1, &(0x7f0000000040), &(0x7f000009de80), 0x0) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r1, 0xc0189373, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) read$FUSE(r1, &(0x7f0000000500)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000002540)={0x50, 0x0, r4, {0x7, 0x2d, 0x8, 0x41400100, 0x400, 0x0, 0x4, 0xfffffff9, 0x0, 0x0, 0x2, 0x1}}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000280)) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) io_uring_setup(0x1b7b, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) sendmsg$TIPC_NL_MON_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3], 0x14}, 0x1, 0x0, 0x0, 0x20048000}, 0x2400c040) syz_usb_connect$uac2(0x5, 0xf8, &(0x7f00000000c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x40, 0x41e, 0x3000, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xe6, 0x3, 0x1, 0x0, 0x10, 0xdb, {0x8, 0xb, 0x0, 0x0, 0x1, 0x5, 0x20, 0x4}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0xfff7, 0xb, 0x1a}, [@processing_unit={0x11, 0x24, 0x8, 0x3, 0x4, [0x3, 0x0, 0x0, 0x2, 0x3, 0x0]}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@as_header={0x10, 0x24, 0x1, 0x5, 0x85, 0x2, 0x1002, 0x0, 0x7, 0x10}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0x101, 0x20, 0xc}, @format_type_i_discrete={0x9, 0x24, 0x2, 0x1, 0xc, 0x4, 0xc, 0x1, "a6"}, @format_type_i_discrete={0xc, 0x24, 0x2, 0x1, 0x0, 0x4, 0x0, 0x7, '1dc\n'}]}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0x2, 0x3, {0x8, 0x25, 0x1, 0x1, 0x30, 0x8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x7}, @format_type_ii_discrete={0x11, 0x24, 0x2, 0x2, 0x9, 0x40, 0x7, "0df182a4bfd6ab8c"}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x8, 0x8, 0x1, 0x4f, 0x97}, @format_type_i_ext={0x9, 0x24, 0x2, 0x1, 0x0, 0x25, 0x6, 0x5, 0x8}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x6}, @format_type_ii_discrete={0xe, 0x24, 0x2, 0x2, 0xffc0, 0x81, 0x0, "ba114c44ae"}]}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0xe, 0x8, 0x7f, {0x8, 0x25, 0x1, 0x2, 0x30, 0xf, 0x40}}}}}}}}]}}, &(0x7f0000000340)={0xa, &(0x7f00000001c0)={0xa, 0x6, 0x300, 0x8, 0x5, 0x4, 0x20, 0x8}, 0x5, &(0x7f0000000200)={0x5, 0xf, 0x5}, 0x4, [{0x4, &(0x7f0000000240)=@lang_id={0x4, 0x3, 0x415}}, {0x47, &(0x7f00000025c0)=@string={0x47, 0x3, "9dc6550a6968d86bef0c9f7f126415449300f820739bdc57ff13bec9394bb0d12727f5d0ccac914975d034fce03f140799b62120bc06bb369392396e2e7de1f7c661b9d0fd"}}, {0x35, &(0x7f00000002c0)=@string={0x35, 0x3, "f846efa802891e60e83d47077ed9cc1d1b53cb06cca8c17c6f23d26e3a4e39cf9594701fcc545e18c51c8668ad774da27d47b4"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x448}}]}) 694.624124ms ago: executing program 0 (id=1832): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi0\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000580)={'ni_at_a2150\x00', [0x8001, 0xa, 0x1, 0x4, 0x2, 0xcc7, 0x8, 0x7, 0x1, 0x7fff, 0x60, 0x1, 0x8, 0x40000002, 0x6, 0x9, 0x1, 0x9, 0x43, 0x40000003, 0x89, 0x10d, 0xf27, 0x4, 0x4, 0x8, 0x5, 0x40000009, 0x8006, 0x80000000, 0x800]}) 474.980315ms ago: executing program 0 (id=1833): socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000001940)={0x1, &(0x7f0000001980)=[{0x64, 0x4, 0x8, 0xffffffff}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)) prlimit64(0x0, 0xe, 0x0, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) close(0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x401, 0x0) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000800)='io.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000000000000060000000400000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001280)=[r2, r2]}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x20000, 0x4, 0x3, 0x141, r2}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000024c0), &(0x7f0000001280), 0x2, r3}, 0x27) socket$nl_xfrm(0x10, 0x3, 0x6) 0s ago: executing program 3 (id=1834): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x132, 0xffffffffffffffff, 0xffffd000) r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) kernel console output (not intermixed with test programs): 5991] ubi16: background thread "ubi_bgt16d" started, PID 5991 [ 118.556413][ T5724] pwc: recv_control_msg error -32 req 04 val 1400 [ 118.576218][ T5987] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 118.588927][ T9] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 118.596001][ T5724] pwc: recv_control_msg error -32 req 02 val 2000 [ 118.600001][ T5724] pwc: recv_control_msg error -32 req 02 val 2100 [ 118.653813][ T5724] pwc: recv_control_msg error -32 req 04 val 1500 [ 118.681149][ T5724] pwc: recv_control_msg error -32 req 02 val 2500 [ 118.716005][ T5724] pwc: recv_control_msg error -32 req 02 val 2400 [ 118.740515][ T5724] pwc: recv_control_msg error -32 req 02 val 2600 [ 118.763193][ T5724] pwc: recv_control_msg error -32 req 02 val 2900 [ 118.782214][ T5724] pwc: recv_control_msg error -71 req 02 val 2800 [ 118.816186][ T5724] pwc: recv_control_msg error -71 req 04 val 1100 [ 118.856463][ T5724] pwc: recv_control_msg error -71 req 04 val 1200 [ 118.943856][ T5724] pwc: Registered as video103. [ 119.013077][ T5724] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input7 [ 119.079003][ T5724] usb 1-1: USB disconnect, device number 4 [ 119.613304][ T5816] usb 3-1: USB disconnect, device number 6 [ 120.191001][ T6021] binder: 6019:6021 ioctl c0306201 200000000080 returned -14 [ 120.215667][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.273112][ T6021] binder: 6019:6021 ioctl c0306201 2000000003c0 returned -14 [ 120.304009][ T6021] binder_alloc: 6019: binder_alloc_buf, no vma [ 120.465923][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 120.488730][ T9] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 120.532486][ T9] usb 2-1: config 0 has no interface number 0 [ 120.966550][ T9] usb 2-1: config 0 interface 184 has no altsetting 0 [ 121.005857][ T2135] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 121.016082][ T9] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 121.025493][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.045522][ T9] usb 2-1: Product: syz [ 121.049774][ T9] usb 2-1: Manufacturer: syz [ 121.074754][ T9] usb 2-1: SerialNumber: syz [ 121.090216][ T9] usb 2-1: config 0 descriptor?? [ 121.103727][ T9] smsc75xx v1.0.0 [ 121.233827][ T2135] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 121.254263][ T2135] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 121.265474][ T2135] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 121.275005][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.465830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 123.243746][ T6028] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 123.279782][ T2135] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 123.314966][ T9] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 124.172129][ T9] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 124.239310][ T9] usb 2-1: USB disconnect, device number 2 [ 124.269213][ T2135] usb 3-1: USB disconnect, device number 7 [ 124.997550][ T5788] udevd[5788]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 125.212960][ T6063] binder: 6062:6063 ioctl c0306201 200000000080 returned -14 [ 125.233633][ T6063] binder: 6062:6063 ioctl c0306201 2000000003c0 returned -14 [ 125.287226][ T6063] binder_alloc: 6062: binder_alloc_buf, no vma [ 129.536329][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 129.771225][ T9] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 129.820093][ T9] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 129.845431][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 129.880172][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.909567][ T6083] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 129.929424][ T9] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 130.164882][ T5816] usb 1-1: USB disconnect, device number 5 [ 130.705998][ T6108] tmpfs: Bad value for 'mpol' [ 131.156271][ T6116] binder: 6115:6116 ioctl c0306201 200000000080 returned -14 [ 131.186102][ T6116] binder: BINDER_SET_CONTEXT_MGR already set [ 131.192481][ T6116] binder: 6115:6116 ioctl 4018620d 200000000040 returned -16 [ 131.223567][ T6116] binder: 6115:6116 ioctl c0306201 2000000003c0 returned -14 [ 132.858511][ T6128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.959482][ T6129] hfsplus: unable to find HFS+ superblock [ 133.257388][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.275911][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.063036][ T6132] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.912770][ T788] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 138.010299][ T6177] bridge_slave_0: left allmulticast mode [ 138.037961][ T6177] bridge_slave_0: left promiscuous mode [ 138.045863][ T6177] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.113551][ T6177] bridge_slave_1: left allmulticast mode [ 138.129610][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 138.147751][ T6177] bridge_slave_1: left promiscuous mode [ 138.159074][ T6177] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.166231][ T788] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 138.197623][ T6177] bond0: (slave bond_slave_0): Releasing backup interface [ 138.200764][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 138.225483][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.253525][ T6171] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 138.274017][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 138.323963][ T6179] tmpfs: Bad value for 'mpol' [ 138.394738][ T6177] bond0: (slave bond_slave_1): Releasing backup interface [ 138.791577][ T788] usb 4-1: USB disconnect, device number 5 [ 138.836947][ T6177] team0: Port device team_slave_0 removed [ 138.927345][ T6177] team0: Port device team_slave_1 removed [ 138.933860][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.982553][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.001721][ T6177] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.013830][ T6177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.925652][ T788] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 141.165615][ T788] usb 4-1: Using ep0 maxpacket: 32 [ 141.182493][ T788] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 141.262788][ T788] usb 4-1: config 0 has no interface number 0 [ 141.322529][ T788] usb 4-1: config 0 interface 184 has no altsetting 0 [ 141.336078][ T788] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 141.361938][ T788] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.397721][ T788] usb 4-1: Product: syz [ 141.410325][ T788] usb 4-1: Manufacturer: syz [ 141.434077][ T788] usb 4-1: SerialNumber: syz [ 141.456810][ T788] usb 4-1: config 0 descriptor?? [ 141.478964][ T788] smsc75xx v1.0.0 [ 142.027018][ T6215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 142.039608][ T6215] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 142.600578][ T788] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 142.648389][ T788] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 142.698926][ T788] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 142.787155][ T788] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 142.835242][ T788] usb 4-1: USB disconnect, device number 6 [ 145.505680][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 146.217279][ T2135] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 146.497397][ T2135] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 146.512372][ T2135] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 146.532726][ T2135] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 146.598633][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.652141][ T6233] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 146.718170][ T2135] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 147.010216][ T788] usb 3-1: USB disconnect, device number 8 [ 147.627149][ T788] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 148.065986][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 148.800380][ T788] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 148.849649][ T788] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 148.865400][ T788] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 148.884827][ T788] usb 3-1: Product: syz [ 148.895026][ T788] usb 3-1: Manufacturer: syz [ 148.900195][ T788] usb 3-1: SerialNumber: syz [ 149.228517][ T788] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 9 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 150.486417][ T9] usb 3-1: USB disconnect, device number 9 [ 150.529982][ T9] usblp0: removed [ 151.529172][ T6272] netlink: 52 bytes leftover after parsing attributes in process `syz.0.109'. [ 151.665660][ T5724] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 151.951183][ T5724] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 151.985414][ T5724] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 152.011572][ T5724] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 152.058171][ T5724] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.097883][ T6269] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 152.134181][ T5724] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 152.399658][ T9] usb 2-1: USB disconnect, device number 3 [ 153.792598][ T6292] netlink: 'syz.0.123': attribute type 10 has an invalid length. [ 154.131565][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.1.125'. [ 154.599757][ T6292] veth0_vlan: left promiscuous mode [ 154.637699][ T6292] veth0_vlan: entered promiscuous mode [ 154.700227][ T6292] team0: Device veth0_vlan failed to register rx_handler [ 155.314248][ T6292] syz.0.123 (6292) used greatest stack depth: 19496 bytes left [ 156.729669][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.128'. [ 158.355599][ T8] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 158.580194][ T8] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 158.605454][ T8] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 158.616733][ T8] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 158.626024][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.657565][ T6336] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 158.698054][ T8] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 159.584509][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 160.009892][ T23] usb 3-1: USB disconnect, device number 10 [ 160.180407][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz.0.134'. [ 160.555753][ T1323] Bluetooth: hci4: Frame reassembly failed (-90) [ 162.795572][ T5779] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 164.233147][ T6366] tmpfs: Bad value for 'mpol' [ 165.916201][ T788] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 167.430366][ T788] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 167.444885][ T788] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 167.458695][ T788] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 167.468323][ T788] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 167.489208][ T6385] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 167.506937][ T788] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 167.757707][ T5774] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 167.768482][ T5774] CPU: 0 PID: 5774 Comm: kworker/u5:2 Not tainted syzkaller #0 [ 167.776091][ T5774] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 167.786194][ T5774] Workqueue: hci0 hci_rx_work [ 167.790995][ T5774] Call Trace: [ 167.794341][ T5774] [ 167.797330][ T5774] dump_stack_lvl+0x18c/0x250 [ 167.802079][ T5774] ? show_regs_print_info+0x20/0x20 [ 167.807320][ T5774] ? load_image+0x420/0x420 [ 167.811871][ T5774] sysfs_create_dir_ns+0x26e/0x2a0 [ 167.817016][ T5774] ? sysfs_warn_dup+0xa0/0xa0 [ 167.821751][ T5774] ? do_raw_spin_unlock+0x121/0x230 [ 167.826987][ T5774] kobject_add_internal+0x61c/0xcc0 [ 167.832219][ T5774] kobject_add+0x164/0x240 [ 167.836664][ T5774] ? __rwlock_init+0x150/0x150 [ 167.841547][ T5774] ? kobject_init+0x1e0/0x1e0 [ 167.846249][ T5774] ? _raw_spin_unlock+0x28/0x40 [ 167.851210][ T5774] ? get_device_parent+0x366/0x390 [ 167.856488][ T5774] device_add+0x408/0xc20 [ 167.860911][ T5774] hci_conn_add_sysfs+0xd5/0x1e0 [ 167.865901][ T5774] le_conn_complete_evt+0xf5d/0x1540 [ 167.871212][ T5774] ? hci_event_packet+0x4cb/0x1270 [ 167.876376][ T5774] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 167.882655][ T5774] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 167.888316][ T5774] ? skb_pull_data+0xfb/0x200 [ 167.893036][ T5774] hci_le_conn_complete_evt+0x187/0x440 [ 167.898605][ T5774] ? hci_remote_host_features_evt+0x150/0x150 [ 167.904722][ T5774] hci_event_packet+0x7ba/0x1270 [ 167.909745][ T5774] ? bis_list+0x290/0x290 [ 167.914200][ T5774] ? lockdep_hardirqs_on+0x98/0x150 [ 167.919439][ T5774] ? hci_send_to_monitor+0xd7/0x4f0 [ 167.924665][ T5774] hci_rx_work+0x43a/0xd60 [ 167.929156][ T5774] ? process_scheduled_works+0x96f/0x15d0 [ 167.934910][ T5774] process_scheduled_works+0xa5d/0x15d0 [ 167.940505][ T5774] ? worker_attach_to_pool+0x380/0x380 [ 167.945995][ T5774] ? assign_work+0x3d2/0x5d0 [ 167.950632][ T5774] worker_thread+0xa55/0xfc0 [ 167.955244][ T5774] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 167.961226][ T5774] kthread+0x2fa/0x390 [ 167.965379][ T5774] ? pr_cont_work+0x560/0x560 [ 167.970108][ T5774] ? kthread_blkcg+0xd0/0xd0 [ 167.974751][ T5774] ret_from_fork+0x48/0x80 [ 167.979216][ T5774] ? kthread_blkcg+0xd0/0xd0 [ 167.983826][ T5774] ret_from_fork_asm+0x11/0x20 [ 167.988632][ T5774] [ 167.991702][ C0] vkms_vblank_simulate: vblank timer overrun [ 168.007993][ T5774] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 168.022989][ T5774] Bluetooth: hci0: failed to register connection device [ 168.637830][ T9] usb 4-1: USB disconnect, device number 7 [ 168.914275][ T6413] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 169.160712][ T5724] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 169.378750][ T5724] usb 1-1: Using ep0 maxpacket: 32 [ 169.413839][ T5724] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 169.426453][ T5724] usb 1-1: config 0 has no interface number 0 [ 169.432647][ T5724] usb 1-1: config 0 interface 184 has no altsetting 0 [ 169.476329][ T5724] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 169.495407][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.523248][ T5724] usb 1-1: Product: syz [ 169.535426][ T5724] usb 1-1: Manufacturer: syz [ 169.549723][ T5724] usb 1-1: SerialNumber: syz [ 169.561760][ T5724] usb 1-1: config 0 descriptor?? [ 169.582642][ T5724] smsc75xx v1.0.0 [ 170.457128][ T6426] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 170.479418][ T6426] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 170.725952][ T5724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 170.761223][ T5724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 170.778874][ T5724] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 170.807455][ T5724] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 170.848629][ T5724] usb 1-1: USB disconnect, device number 6 [ 174.815625][ T27] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 174.823604][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 175.037757][ T27] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 175.075506][ T27] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 175.095726][ T27] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 175.114122][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.137398][ T6451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 175.149931][ T27] usb 1-1: Quirk or no altest; falling back to MIDI 1.0 [ 175.315777][ T6458] ubi: mtd0 is already attached to ubi16 [ 175.980094][ T5724] usb 1-1: USB disconnect, device number 7 [ 178.473005][ T6478] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 178.481280][ T6478] ALSA: mixer_oss: invalid index 1374389 [ 181.919458][ T6503] process 'syz.3.178' launched './file0' with NULL argv: empty string added [ 182.080770][ T6507] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 182.715358][ T6519] tmpfs: Bad value for 'mpol' [ 185.188325][ T6505] binder: 6504:6505 ioctl c0306201 200000001a80 returned -14 [ 185.955646][ T5842] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 186.165554][ T5842] usb 2-1: Using ep0 maxpacket: 16 [ 186.204500][ T5842] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 186.244311][ T5842] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 186.265427][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 186.297728][ T5842] usb 2-1: SerialNumber: syz [ 186.333662][ T5842] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 186.376406][ T5842] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 186.393142][ T5842] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 186.579475][ T6542] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 186.598664][ T6542] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 186.754280][ T5842] usb 2-1: USB disconnect, device number 4 [ 186.876286][ T6545] netlink: 'syz.3.184': attribute type 39 has an invalid length. [ 189.676040][ T6568] binder: 6565:6568 ioctl 400c620e 0 returned -14 [ 189.687412][ T6568] IPv6: NLM_F_CREATE should be specified when creating new route [ 191.083767][ T6576] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 191.633943][ T1078] Bluetooth: hci4: Frame reassembly failed (-90) [ 193.696018][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 193.703948][ T5779] Bluetooth: hci4: command 0xfc11 tx timeout [ 194.730454][ T2135] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 194.737694][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.744485][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.045624][ T2135] usb 2-1: Using ep0 maxpacket: 32 [ 195.054002][ T2135] usb 2-1: unable to get BOS descriptor or descriptor too short [ 195.084443][ T2135] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 195.104710][ T2135] usb 2-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 195.119918][ T2135] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.128848][ T2135] usb 2-1: Product: syz [ 195.135692][ T2135] usb 2-1: Manufacturer: syz [ 195.141649][ T2135] usb 2-1: SerialNumber: syz [ 195.673262][ T2135] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 195.692920][ T2135] usb 2-1: unit 7 not found! [ 196.320177][ T2135] usb 2-1: USB disconnect, device number 5 [ 204.542060][ T6679] Bluetooth: MGMT ver 1.22 [ 204.855921][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xc880 [ 204.913572][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 204.955133][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xa088 [ 204.996166][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0xd1a8 [ 205.026760][ T6681] kvm: kvm [6680]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 206.167152][ T6701] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 207.987137][ T5842] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 208.156747][ T5842] usb 2-1: device descriptor read/64, error -71 [ 208.455421][ T5842] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 208.625437][ T5842] usb 2-1: device descriptor read/64, error -71 [ 208.775623][ T5842] usb usb2-port1: attempt power cycle [ 209.227775][ T5842] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 209.303074][ T5842] usb 2-1: device descriptor read/8, error -71 [ 212.099008][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 212.105155][ T5785] Bluetooth: hci0: command 0x0406 tx timeout [ 212.158863][ T5785] Bluetooth: hci2: command 0x0406 tx timeout [ 212.164974][ T5785] Bluetooth: hci3: command 0x0406 tx timeout [ 213.735542][ T5842] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 213.955549][ T5842] usb 3-1: Using ep0 maxpacket: 16 [ 213.974652][ T5842] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 214.040151][ T5842] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 214.070154][ T5842] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 214.100601][ T5842] usb 3-1: SerialNumber: syz [ 214.156712][ T5842] cdc_acm 3-1:1.0: skipping garbage [ 214.195772][ T5842] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 214.224110][ T5842] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 214.254658][ T5842] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 216.124690][ T5842] usb 3-1: USB disconnect, device number 11 [ 222.115414][ T788] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 222.315501][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 222.336674][ T788] usb 2-1: no configurations [ 222.341493][ T788] usb 2-1: can't read configurations, error -22 [ 222.895508][ T788] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 222.927042][ T6868] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 223.095637][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 223.121374][ T788] usb 2-1: no configurations [ 223.131429][ T788] usb 2-1: can't read configurations, error -22 [ 223.404453][ T788] usb usb2-port1: attempt power cycle [ 223.845535][ T788] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 223.901738][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 223.914286][ T788] usb 2-1: no configurations [ 223.945193][ T788] usb 2-1: can't read configurations, error -22 [ 224.185458][ T788] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 224.442306][ T788] usb 2-1: Using ep0 maxpacket: 32 [ 224.469443][ T788] usb 2-1: no configurations [ 224.495523][ T788] usb 2-1: can't read configurations, error -22 [ 224.515876][ T788] usb usb2-port1: unable to enumerate USB device [ 227.235399][ T5816] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 227.415661][ T5816] usb 3-1: Using ep0 maxpacket: 16 [ 227.469187][ T5816] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 227.500777][ T5816] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 227.520172][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 227.545975][ T5816] usb 3-1: SerialNumber: syz [ 227.569405][ T5816] cdc_acm 3-1:1.0: skipping garbage [ 227.574768][ T5816] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 227.594964][ T5816] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 227.664840][ T5816] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 227.802809][ T6894] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 227.814353][ T6894] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 227.844363][ T8] usb 3-1: USB disconnect, device number 12 [ 228.973555][ T6914] binder: 6913:6914 ioctl c0306201 200000000080 returned -14 [ 229.061827][ T6914] binder: 6913:6914 ioctl c0306201 2000000003c0 returned -14 [ 233.191537][ T6940] binder: 6938:6940 ioctl 4018620d 0 returned -22 [ 233.233670][ T6940] binder: 6938:6940 ioctl c0306201 200000000080 returned -14 [ 233.260164][ T6940] binder: 6938:6940 ioctl c0306201 2000000003c0 returned -14 [ 238.562746][ T5816] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 238.762100][ T5816] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 238.788590][ T5816] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 238.813906][ T5816] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 238.829856][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.863443][ T6969] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 238.898230][ T5816] usb 2-1: Quirk or no altest; falling back to MIDI 1.0 [ 239.159554][ T5816] usb 2-1: USB disconnect, device number 14 [ 256.100057][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.106672][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.546012][ T5842] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 264.745554][ T5842] usb 2-1: Using ep0 maxpacket: 8 [ 264.765879][ T5842] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 264.789188][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 264.819002][ T5842] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 265.940458][ T5842] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 265.953618][ T5842] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 265.995588][ T5842] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.266994][ T7169] binder: 7163:7169 ioctl 400c620e 0 returned -14 [ 267.076081][ T5842] usb 2-1: GET_CAPABILITIES returned 0 [ 267.082137][ T5842] usbtmc 2-1:16.0: can't read capabilities [ 267.641016][ T23] usb 2-1: USB disconnect, device number 15 [ 271.173885][ T5774] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 273.300964][ T7235] binder: 7232:7235 ioctl 400c620e 0 returned -14 [ 278.883680][ T6779] Bluetooth: hci4: Frame reassembly failed (-90) [ 281.005328][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 281.013969][ T5779] Bluetooth: hci4: command 0xfc11 tx timeout [ 284.120024][ T7321] binder: 7312:7321 ioctl 400c620e 0 returned -14 [ 287.190999][ T1145] Bluetooth: hci4: Frame reassembly failed (-90) [ 289.618807][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 290.615449][ T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 290.825425][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 290.837674][ T9] usb 4-1: config 0 has an invalid interface number: 251 but max is 0 [ 290.847550][ T9] usb 4-1: config 0 has no interface number 0 [ 290.853756][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16 [ 290.885613][ T9] usb 4-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 290.936950][ T9] usb 4-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 290.957414][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 290.995512][ T9] usb 4-1: Product: syz [ 291.000057][ T9] usb 4-1: Manufacturer: syz [ 291.004702][ T9] usb 4-1: SerialNumber: syz [ 291.032513][ T9] usb 4-1: config 0 descriptor?? [ 291.054678][ T7359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.070240][ T7359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.855912][ T7359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 291.867836][ T7359] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 292.192574][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 293.060500][ T9] asix 4-1:0.251 (unnamed net_device) (uninitialized): Failed to read MAC address: -71 [ 293.085677][ T9] asix: probe of 4-1:0.251 failed with error -5 [ 293.111794][ T9] usb 4-1: USB disconnect, device number 8 [ 293.796167][ T7387] binder: 7384:7387 ioctl 400c620e 0 returned -14 [ 298.972765][ T7429] binder: 7428:7429 ioctl c0306201 2000000003c0 returned -14 [ 299.375730][ T7436] binder: 7433:7436 ioctl 400c620e 0 returned -14 [ 305.813098][ T7478] binder: 7477:7478 ioctl c0306201 2000000003c0 returned -14 [ 306.328754][ T7490] binder: 7483:7490 ioctl 400c620e 0 returned -14 [ 308.818848][ T6791] Bluetooth: hci4: Frame reassembly failed (-90) [ 311.070333][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 311.079413][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 312.555180][ T7512] binder: 7511:7512 ioctl c0306201 2000000003c0 returned -14 [ 317.547970][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554824][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.695434][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 321.303711][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 321.322507][ T7564] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 321.561805][ T7564] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 321.777751][ T7564] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 321.856576][ T7564] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 321.864917][ T7564] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 321.951540][ T7564] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 321.965674][ T7564] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 321.994651][ T7564] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 322.009017][ T7564] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 323.648544][ T5084] Bluetooth: hci0: command 0x0406 tx timeout [ 324.531258][ T5084] Bluetooth: hci1: command 0x0406 tx timeout [ 324.539474][ T5084] Bluetooth: hci3: command 0x0406 tx timeout [ 324.545684][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 325.705598][ T5774] Bluetooth: hci0: command 0x0406 tx timeout [ 325.980174][ T7606] netlink: 8 bytes leftover after parsing attributes in process `syz.0.418'. [ 326.575397][ T5774] Bluetooth: hci2: command 0x0406 tx timeout [ 326.581565][ T5774] Bluetooth: hci3: command 0x0406 tx timeout [ 326.591286][ T5774] Bluetooth: hci1: command 0x0406 tx timeout [ 327.214703][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 327.222298][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 329.916472][ T7636] binder: 7634:7636 ioctl c0306201 200000000080 returned -14 [ 330.019501][ T7636] binder: 7634:7636 ioctl c0306201 2000000003c0 returned -14 [ 335.277426][ T7678] netlink: 220 bytes leftover after parsing attributes in process `syz.0.436'. [ 335.319846][ T7678] netlink: 8 bytes leftover after parsing attributes in process `syz.0.436'. [ 337.106981][ T7325] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 337.315402][ T7325] usb 3-1: Using ep0 maxpacket: 8 [ 337.338089][ T7325] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 337.359922][ T7325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 337.380640][ T7325] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 337.409389][ T7325] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 337.432934][ T7325] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 337.452846][ T7325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.683134][ T7325] usb 3-1: usb_control_msg returned -71 [ 337.755336][ T7325] usbtmc 3-1:16.0: can't read capabilities [ 338.561152][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 338.569359][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 338.966414][ T7325] usb 3-1: USB disconnect, device number 13 [ 340.406268][ T27] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 340.658386][ T27] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 340.692607][ T27] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 340.798649][ T27] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 340.815721][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 340.823959][ T27] usb 1-1: Product: syz [ 340.855811][ T27] usb 1-1: Manufacturer: syz [ 340.860570][ T27] usb 1-1: SerialNumber: syz [ 341.288220][ T7718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.216712][ T7718] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 342.611080][ T27] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 342.655423][ T27] cdc_ncm 1-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048 [ 342.681491][ T27] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 342.766493][ T7739] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 342.815711][ T27] cdc_ncm 1-1:1.0: setting tx_max = 184 [ 343.091544][ T27] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 343.139501][ T27] usb 1-1: USB disconnect, device number 8 [ 343.160882][ T27] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP) [ 343.456179][ T23] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 343.655345][ T23] usb 3-1: Using ep0 maxpacket: 8 [ 343.672129][ T23] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 343.700897][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 343.727053][ T23] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 343.762908][ T23] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 343.792359][ T23] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 343.803098][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.693156][ T23] usb 3-1: usb_control_msg returned -71 [ 344.721723][ T23] usbtmc 3-1:16.0: can't read capabilities [ 344.932782][ T23] usb 3-1: USB disconnect, device number 14 [ 346.075478][ T7775] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 348.501573][ T7805] binder: 7799:7805 ioctl c0306201 200000000080 returned -14 [ 348.604167][ T7805] binder: 7799:7805 ioctl 4018620d 0 returned -22 [ 348.643405][ T7805] binder: 7799:7805 ioctl c0306201 2000000003c0 returned -14 [ 350.255958][ T7821] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 350.555581][ T5816] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 350.805908][ T5816] usb 1-1: Using ep0 maxpacket: 8 [ 350.822728][ T5816] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 350.836081][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 350.847160][ T5816] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 350.861124][ T5816] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 351.066033][ T5816] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 351.795356][ T5816] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 352.044396][ T7836] binder: 7835:7836 ioctl c0306201 200000000080 returned -14 [ 352.068694][ T7836] binder: 7835:7836 ioctl c0306201 0 returned -14 [ 352.122294][ T5816] usb 1-1: usb_control_msg returned -71 [ 352.170772][ T5816] usbtmc 1-1:16.0: can't read capabilities [ 352.215707][ T5816] usb 1-1: USB disconnect, device number 9 [ 355.156133][ T7872] binder: 7871:7872 ioctl c0306201 200000000080 returned -14 [ 355.194157][ T7872] binder: 7871:7872 ioctl c0306201 0 returned -14 [ 358.206062][ T5780] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 358.416599][ T7916] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 358.653507][ T5780] usb 3-1: Using ep0 maxpacket: 8 [ 358.772197][ T5780] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 358.864238][ T5780] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 360.114060][ T5780] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 360.155597][ T5780] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 360.199238][ T5780] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 360.235346][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 361.412866][ T5780] usb 3-1: usb_control_msg returned -71 [ 361.418614][ T5780] usbtmc 3-1:16.0: can't read capabilities [ 361.429376][ T5780] usb 3-1: USB disconnect, device number 15 [ 364.389007][ T7980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.513'. [ 364.997477][ T5780] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 365.148231][ T6785] Bluetooth: hci4: Frame reassembly failed (-90) [ 365.185557][ T5780] usb 1-1: Using ep0 maxpacket: 16 [ 367.135409][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 367.180281][ T5780] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 367.214419][ T5780] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 367.229911][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 367.257181][ T5780] usb 1-1: SerialNumber: syz [ 367.293789][ T5780] cdc_acm 1-1:1.0: skipping garbage [ 367.330509][ T5780] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 367.396935][ T5780] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 367.421892][ T5780] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 367.460569][ T5780] usb 1-1: USB disconnect, device number 10 [ 370.048985][ T6800] Bluetooth: hci4: Frame reassembly failed (-84) [ 370.218369][ T5780] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 370.805185][ T5780] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 370.825242][ T5780] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.024991][ T5780] usb 3-1: config 0 descriptor?? [ 371.220029][ T5780] cp210x 3-1:0.0: cp210x converter detected [ 372.079919][ T5780] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 372.105327][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 372.214090][ T5780] usb 3-1: cp210x converter now attached to ttyUSB0 [ 372.420438][ T5872] usb 3-1: USB disconnect, device number 16 [ 372.599580][ T5872] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 372.802764][ T5872] cp210x 3-1:0.0: device disconnected [ 375.566529][ T8066] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 375.576183][ T8066] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 375.585815][ T8066] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 375.742624][ T28] audit: type=1800 audit(1776477067.730:2): pid=8066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.537" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 379.006107][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.016829][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.096461][ T8098] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 380.104666][ T8098] ALSA: mixer_oss: invalid index 1374389 [ 381.495996][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.552'. [ 382.177824][ T8133] netlink: 48 bytes leftover after parsing attributes in process `syz.3.556'. [ 390.266696][ T6789] Bluetooth: hci4: Frame reassembly failed (-84) [ 392.335627][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 397.804509][ T6811] Bluetooth: hci4: Frame reassembly failed (-84) [ 399.855770][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 399.862923][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 407.456244][ T8318] input: syz1 as /devices/virtual/input/input8 [ 411.561827][ T5774] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 411.569169][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 421.958053][ T5774] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 421.966072][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 425.166247][ T8435] binder: 8432:8435 ioctl 400c620e 0 returned -14 [ 425.238949][ T8437] IPv6: NLM_F_CREATE should be specified when creating new route [ 431.055315][ T5780] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 431.280783][ T5780] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 431.302870][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.349556][ T5780] usb 2-1: config 0 descriptor?? [ 431.374250][ T5780] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 431.921303][ T5780] gp8psk: usb in 128 operation failed. [ 432.214980][ T5780] gp8psk: usb in 146 operation failed. [ 432.272597][ T5780] gp8psk: failed to get FW version [ 432.323390][ T5780] gp8psk: usb in 149 operation failed. [ 432.330807][ T5780] gp8psk: failed to get FPGA version [ 432.545411][ T5780] gp8psk: usb in 138 operation failed. [ 432.561513][ T5780] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 432.600981][ T5780] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 432.647302][ T5780] usb 2-1: USB disconnect, device number 16 [ 432.840976][ T5774] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 432.848186][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 434.342949][ T8509] binder: 8506:8509 ioctl 400c620e 0 returned -14 [ 438.503625][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 438.511008][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 440.576688][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.583167][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 449.218114][ T8628] ptrace attach of "./syz-executor exec"[8629] was attempted by "./syz-executor exec"[8628] [ 454.792255][ T5780] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 456.155557][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 456.191984][ T5780] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 456.244177][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 456.284910][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 456.325222][ T5780] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 456.435280][ T5780] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 456.444460][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.534161][ T5780] usb 2-1: can't set config #16, error -71 [ 456.546842][ T5780] usb 2-1: USB disconnect, device number 17 [ 463.815597][ T5872] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 464.246005][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 464.634033][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 464.655524][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 464.665618][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 464.685366][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 464.705406][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 464.714530][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.079069][ T5872] usb 2-1: usb_control_msg returned -71 [ 465.099366][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 465.120848][ T5872] usb 2-1: USB disconnect, device number 18 [ 473.025309][ T5872] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 473.225268][ T5872] usb 2-1: Using ep0 maxpacket: 8 [ 473.233689][ T5872] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 474.972458][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 474.983051][ T5872] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 474.994131][ T5872] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 475.007580][ T5872] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 475.017011][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 475.231233][ T5872] usb 2-1: usb_control_msg returned -71 [ 475.239425][ T5872] usbtmc 2-1:16.0: can't read capabilities [ 475.263456][ T5872] usb 2-1: USB disconnect, device number 19 [ 479.375710][ T5872] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 479.591446][ T5872] usb 4-1: Using ep0 maxpacket: 16 [ 479.607466][ T5872] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 479.638037][ T5872] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 479.655381][ T5872] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 479.663487][ T5872] usb 4-1: SerialNumber: syz [ 479.702521][ T5872] cdc_acm 4-1:1.0: skipping garbage [ 479.727820][ T5872] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 479.745303][ T5872] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 479.756154][ T5872] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 482.065588][ T23] usb 4-1: USB disconnect, device number 9 [ 483.668554][ T8824] netlink: 8 bytes leftover after parsing attributes in process `syz.0.707'. [ 486.528945][ T1323] Bluetooth: hci4: Frame reassembly failed (-90) [ 487.309329][ T23] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 487.685451][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 487.718526][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 487.770338][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 487.779938][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 487.789925][ T23] usb 1-1: SerialNumber: syz [ 487.802707][ T23] cdc_acm 1-1:1.0: skipping garbage [ 487.808148][ T23] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 487.816189][ T23] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 487.822717][ T23] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 488.495402][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 488.701970][ T8840] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 488.775934][ T8840] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 488.847225][ T5872] usb 1-1: USB disconnect, device number 11 [ 489.286082][ T8859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.716'. [ 493.315250][ T2135] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 493.505305][ T2135] usb 3-1: Using ep0 maxpacket: 16 [ 493.523473][ T2135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 493.565494][ T2135] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 493.574699][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 493.615076][ T2135] usb 3-1: SerialNumber: syz [ 495.243464][ T2135] cdc_acm 3-1:1.0: skipping garbage [ 495.249351][ T2135] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 495.262578][ T2135] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 495.275269][ T2135] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 495.675393][ T8884] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 495.732827][ T8884] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 495.804257][ T7325] usb 3-1: USB disconnect, device number 17 [ 501.552773][ T11] Bluetooth: hci4: Frame reassembly failed (-90) [ 503.386100][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 503.392831][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.465496][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 503.472914][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 506.899466][ T5774] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 506.906674][ T5774] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 510.147945][ T6791] Bluetooth: hci4: Frame reassembly failed (-90) [ 512.185348][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 512.224507][ T9030] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 512.232125][ T9030] ALSA: mixer_oss: invalid index 1374389 [ 512.538339][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 512.545936][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 512.955303][ T27] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 513.215679][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 513.264947][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 513.455570][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 513.485566][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 513.505262][ T27] usb 4-1: SerialNumber: syz [ 513.533170][ T27] cdc_acm 4-1:1.0: skipping garbage [ 513.564536][ T27] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 513.625720][ T27] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 513.642270][ T27] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 513.797485][ T9040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 513.834725][ T9040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 513.871346][ T2135] usb 4-1: USB disconnect, device number 10 [ 513.880742][ T9061] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 513.888746][ T9061] ALSA: mixer_oss: invalid index 1374389 [ 514.767587][ T6791] Bluetooth: hci4: Frame reassembly failed (-90) [ 515.679864][ T9084] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 515.687689][ T9084] ALSA: mixer_oss: invalid index 1374389 [ 516.735492][ T5774] Bluetooth: hci4: command 0xfc11 tx timeout [ 516.778536][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 517.335543][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 517.342586][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 517.944410][ T9113] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 517.952394][ T9113] ALSA: mixer_oss: invalid index 1374389 [ 518.131688][ T9117] netlink: 8 bytes leftover after parsing attributes in process `syz.3.782'. [ 519.650466][ T11] Bluetooth: hci4: Frame reassembly failed (-90) [ 519.775309][ T7325] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 520.035279][ T7325] usb 3-1: device descriptor read/64, error -71 [ 521.801090][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 521.808974][ T5774] Bluetooth: hci4: command 0xfc11 tx timeout [ 521.875440][ T7325] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 522.125582][ T7325] usb 3-1: device descriptor read/64, error -71 [ 522.245648][ T7325] usb usb3-port1: attempt power cycle [ 522.649947][ T9140] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 522.681585][ T9140] ALSA: mixer_oss: invalid index 1374389 [ 522.695442][ T7325] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 522.915042][ T9146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.792'. [ 522.925053][ T7325] usb 3-1: device not accepting address 20, error -71 [ 526.845318][ T27] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 527.035262][ T27] usb 4-1: device descriptor read/64, error -71 [ 527.438362][ T27] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 527.464310][ T9179] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 527.497693][ T9179] ALSA: mixer_oss: invalid index 1374389 [ 527.595270][ T27] usb 4-1: device descriptor read/64, error -71 [ 527.715688][ T27] usb usb4-port1: attempt power cycle [ 528.255583][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 528.262696][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 528.745793][ T27] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 528.828404][ T27] usb 4-1: device descriptor read/8, error -71 [ 528.932441][ T9195] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 529.105422][ T27] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 529.149935][ T27] usb 4-1: device descriptor read/8, error -71 [ 529.285534][ T27] usb usb4-port1: unable to enumerate USB device [ 530.247958][ T9208] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 530.260945][ T9208] ALSA: mixer_oss: invalid index 1374389 [ 530.497807][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 530.504837][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 532.595401][ T23] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 532.762751][ T9256] overlayfs: failed to resolve './file1/file0': -2 [ 532.786048][ T23] usb 4-1: device descriptor read/64, error -71 [ 533.075860][ T23] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 533.533257][ T5084] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 533.615447][ T5084] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 533.615453][ T23] usb 4-1: device descriptor read/64, error -71 [ 533.758342][ T23] usb usb4-port1: attempt power cycle [ 534.195566][ T23] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 534.249705][ T23] usb 4-1: device descriptor read/8, error -71 [ 534.535596][ T23] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 534.577230][ T23] usb 4-1: device descriptor read/8, error -71 [ 534.718623][ T23] usb usb4-port1: unable to enumerate USB device [ 535.048370][ T9274] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 535.164208][ T9274] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 535.199881][ T9274] kvm: requested 13409 ns i8254 timer period limited to 200000 ns [ 535.209370][ T9274] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 535.222576][ T9274] kvm: requested 41904 ns i8254 timer period limited to 200000 ns [ 535.255710][ T9274] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 535.273953][ T9274] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 535.380354][ T9274] kvm: requested 100571 ns i8254 timer period limited to 200000 ns [ 535.416605][ T9274] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 535.424621][ T9274] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 535.905607][ T9287] ubi: mtd0 is already attached to ubi16 [ 536.708849][ T9294] overlayfs: failed to resolve './file1/file0': -2 [ 536.797238][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 536.804731][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 537.079161][ T6785] Bluetooth: hci4: Frame reassembly failed (-90) [ 537.678046][ T5774] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 537.685009][ T5774] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 539.135717][ T5774] Bluetooth: hci4: command 0xfc11 tx timeout [ 539.587439][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 540.975173][ T9331] ubi: mtd0 is already attached to ubi16 [ 541.504934][ T9336] overlayfs: failed to resolve './file1/file0': -2 [ 542.053986][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 542.061565][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 543.349933][ T9365] ubi: mtd0 is already attached to ubi16 [ 543.778843][ T9367] program syz.3.855 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 543.789594][ T9367] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 544.196986][ T23] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 544.395439][ T23] usb 2-1: device descriptor read/64, error -71 [ 544.855425][ T23] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 545.061770][ T23] usb 2-1: device descriptor read/64, error -71 [ 545.195453][ T23] usb usb2-port1: attempt power cycle [ 545.805366][ T23] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 546.226073][ T23] usb 2-1: device descriptor read/8, error -71 [ 546.303700][ T9398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.866'. [ 546.515293][ T23] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 546.557339][ T23] usb 2-1: device descriptor read/8, error -71 [ 546.818027][ T23] usb usb2-port1: unable to enumerate USB device [ 547.205903][ T9403] ubi: mtd0 is already attached to ubi16 [ 550.272823][ T9420] syz.2.871 (9420) used greatest stack depth: 17896 bytes left [ 557.361404][ T9452] ALSA: mixer_oss: invalid OSS volume 'PHlâ6žžqÓ†ØÈÌONEOUT' [ 557.381119][ T9452] ALSA: mixer_oss: invalid index 1374389 [ 558.901561][ T7325] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 559.155418][ T7325] usb 4-1: Using ep0 maxpacket: 16 [ 559.164894][ T7325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 559.182424][ T7325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 559.201678][ T7325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 559.224607][ T7325] usb 4-1: SerialNumber: syz [ 559.270527][ T7325] cdc_acm 4-1:1.0: skipping garbage [ 559.306201][ T7325] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 559.345072][ T7325] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 559.548709][ T7325] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 559.751926][ T9460] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 559.764934][ T9460] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 559.812381][ T788] usb 4-1: USB disconnect, device number 19 [ 561.339814][ T9486] capability: warning: `syz.2.888' uses 32-bit capabilities (legacy support in use) [ 563.318255][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.324675][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.035373][ T5872] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 565.255271][ T5872] usb 3-1: Using ep0 maxpacket: 16 [ 565.280567][ T5872] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 565.347569][ T5872] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 565.365403][ T5872] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 565.404291][ T5872] usb 3-1: SerialNumber: syz [ 565.431452][ T5872] cdc_acm 3-1:1.0: skipping garbage [ 565.490828][ T5872] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 565.514307][ T5872] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 565.558578][ T5872] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 565.706507][ T9519] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 565.776604][ T9519] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 565.816761][ T5872] usb 3-1: USB disconnect, device number 22 [ 569.517641][ T9543] ubi: mtd0 is already attached to ubi16 [ 570.596561][ T9554] syzkaller0: entered promiscuous mode [ 570.611004][ T9554] syzkaller0: entered allmulticast mode [ 572.386276][ T7325] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 572.810485][ T7325] usb 2-1: Using ep0 maxpacket: 16 [ 572.972761][ T7325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 573.226478][ T7325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 573.295515][ T7325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 573.325304][ T7325] usb 2-1: SerialNumber: syz [ 574.885394][ T23] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 575.885246][ T23] usb 4-1: Using ep0 maxpacket: 32 [ 575.952411][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.020325][ T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.074274][ T23] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 576.152873][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.175456][ T7325] usb 2-1: can't set config #1, error -71 [ 576.185315][ T7325] usb 2-1: USB disconnect, device number 24 [ 576.237521][ T23] usb 4-1: config 0 descriptor?? [ 576.400617][ T23] usbhid 4-1:0.0: can't add hid device: -71 [ 576.427338][ T23] usbhid: probe of 4-1:0.0 failed with error -71 [ 576.474220][ T23] usb 4-1: USB disconnect, device number 20 [ 576.583635][ T9584] ubi: mtd0 is already attached to ubi16 [ 578.539831][ T9601] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 583.468889][ T9630] ubi: mtd0 is already attached to ubi16 [ 583.962083][ T5084] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 583.972266][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 584.325334][ T5818] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 585.335337][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 585.352601][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.374816][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 585.385732][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 585.393782][ T5818] usb 2-1: SerialNumber: syz [ 585.435390][ T5818] cdc_acm 2-1:1.0: skipping garbage [ 585.440741][ T5818] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 585.461040][ T5818] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 585.481975][ T5818] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 585.806387][ T9629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 585.878977][ T9629] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 586.111273][ T5872] usb 2-1: USB disconnect, device number 25 [ 593.140650][ T9704] syzkaller0: entered promiscuous mode [ 593.193357][ T9704] syzkaller0: entered allmulticast mode [ 594.975369][ T788] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 594.986387][ T5084] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 594.993328][ T5084] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 595.178614][ T788] usb 4-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice= 9.00 [ 595.215312][ T788] usb 4-1: New USB device strings: Mfr=0, Product=16, SerialNumber=0 [ 595.233697][ T788] usb 4-1: Product: syz [ 595.249734][ T788] usb 4-1: config 0 descriptor?? [ 595.278056][ T788] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 595.296975][ T788] usb 4-1: Detected FT232H [ 597.463082][ T788] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 597.496872][ T788] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 597.545537][ T788] ftdi_sio 4-1:0.0: GPIO initialisation failed: -71 [ 597.577819][ T788] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 597.675461][ T788] usb 4-1: USB disconnect, device number 21 [ 597.705869][ T788] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 597.715917][ T788] ftdi_sio 4-1:0.0: device disconnected [ 604.411435][ T6787] Bluetooth: hci4: Frame reassembly failed (-90) [ 606.415689][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 606.424551][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 607.939940][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 607.947647][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 611.735379][ T23] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 611.942672][ T23] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.979848][ T23] usb 2-1: config 0 has no interfaces? [ 612.004800][ T23] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 612.025364][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.057082][ T23] usb 2-1: config 0 descriptor?? [ 614.615424][ T7325] usb 2-1: USB disconnect, device number 26 [ 620.871534][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 620.885229][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 625.915041][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.921609][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.806916][T10042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.995'. [ 629.915439][ T23] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 630.105354][ T23] usb 1-1: Using ep0 maxpacket: 16 [ 630.256023][ T23] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 630.268955][ T23] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 630.278113][ T23] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 630.286237][ T23] usb 1-1: SerialNumber: syz [ 630.373060][ T23] cdc_acm 1-1:1.0: skipping garbage [ 630.383095][ T23] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 630.406072][ T23] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 630.412567][ T23] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 630.675363][T10060] fuse: Bad value for 'fd' [ 631.419588][T10047] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 631.518894][T10047] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 631.584383][ T23] usb 1-1: USB disconnect, device number 12 [ 632.228379][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 632.235665][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 632.373661][ T5084] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 632.383078][ T5084] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 635.465239][ T7325] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 636.642421][ T6789] Bluetooth: hci4: Frame reassembly failed (-90) [ 636.670658][ T9812] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 636.678914][ T9812] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 637.355255][ T7325] usb 3-1: Using ep0 maxpacket: 16 [ 637.362940][ T7325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 637.382905][ T7325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 637.392258][ T7325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 637.403027][ T7325] usb 3-1: SerialNumber: syz [ 637.419778][ T7325] cdc_acm 3-1:1.0: skipping garbage [ 637.445257][ T7325] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 637.536337][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 637.544408][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 637.886050][ T7325] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 637.892554][ T7325] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 638.498760][T10107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.575681][T10107] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 638.717433][ T788] usb 3-1: USB disconnect, device number 23 [ 638.874728][ T5084] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 638.881899][ T5084] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 642.078682][ T5084] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 642.085797][ T5084] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 642.985194][ T1087] Bluetooth: hci4: Frame reassembly failed (-90) [ 644.975323][ T5084] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 645.454689][T10185] overlayfs: overlapping lowerdir path [ 648.935360][ T9812] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 648.942542][ T9812] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 651.500184][ T4523] Bluetooth: hci4: Frame reassembly failed (-90) [ 651.609797][ T6779] Bluetooth: hci4: Frame reassembly failed (-84) [ 653.602112][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 653.608704][ T9812] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 654.448442][ T9812] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 654.455554][ T9812] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 658.558863][ T9812] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 658.566149][ T9812] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 661.171807][ T6770] Bluetooth: hci4: Frame reassembly failed (-90) [ 661.331115][T10315] Cannot find del_set index 2 as target [ 662.306136][T10324] program syz.3.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.350788][ T5084] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 662.357806][ T5084] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 663.215250][ T9812] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 663.223092][ T5084] Bluetooth: hci4: command 0xfc11 tx timeout [ 665.823356][T10341] syzkaller0: entered promiscuous mode [ 665.888066][T10341] syzkaller0: entered allmulticast mode [ 668.230730][T10337] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 668.240786][T10337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 669.913446][T10381] syzkaller0: entered promiscuous mode [ 669.913519][T10381] syzkaller0: entered allmulticast mode [ 675.414650][T10424] syzkaller0: entered promiscuous mode [ 675.446472][T10424] syzkaller0: entered allmulticast mode [ 675.515454][T10337] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 675.522405][T10337] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 679.517833][T10434] ALSA: mixer_oss: invalid OSS volume '' [ 681.190281][T10337] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 681.197548][T10337] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 681.360152][T10464] ubi: mtd0 is already attached to ubi16 [ 683.125193][ T9] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 683.335435][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 683.368486][ T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 683.407594][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 683.437418][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 683.480623][ T9] usb 3-1: SerialNumber: syz [ 683.545561][ T9] cdc_acm 3-1:1.0: skipping garbage [ 683.574453][ T9] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 683.593336][ T9] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 683.600951][ T9] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 683.762674][T10466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 683.814946][T10466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 683.831934][ T9] usb 3-1: USB disconnect, device number 24 [ 684.069097][T10477] ALSA: mixer_oss: invalid OSS volume '' [ 684.497245][T10486] overlayfs: failed to resolve './file1/file0': -2 [ 686.138995][T10337] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 686.148559][T10337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 686.182227][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.188860][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.298230][T10500] ubi: mtd0 is already attached to ubi16 [ 689.491819][T10516] ALSA: mixer_oss: invalid OSS volume '' [ 689.888196][T10337] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 689.895450][T10337] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 693.230224][T10566] overlayfs: failed to resolve './file1/file0': -2 [ 693.545381][T10579] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1147'. [ 695.305687][ T7325] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 695.501080][T10568] ALSA: mixer_oss: invalid OSS volume '' [ 695.595370][ T7325] usb 1-1: device descriptor read/64, error -71 [ 695.905785][ T7325] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 695.945025][T10600] fuse: Unknown parameter 'user_id00000000000000000000' [ 696.040543][T10611] ubi: mtd0 is already attached to ubi16 [ 696.109448][ T7325] usb 1-1: device descriptor read/64, error -71 [ 696.291071][ T7325] usb usb1-port1: attempt power cycle [ 696.735399][ T7325] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 697.128214][ T7325] usb 1-1: device descriptor read/8, error -71 [ 698.163499][T10601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 698.244254][T10601] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.335220][ T7325] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 698.376084][ T7325] usb 1-1: device descriptor read/8, error -71 [ 698.508238][ T7325] usb usb1-port1: unable to enumerate USB device [ 700.868228][T10337] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 700.875284][T10337] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 701.760278][T10651] ubi: mtd0 is already attached to ubi16 [ 703.773106][T10645] ALSA: mixer_oss: invalid OSS volume '' [ 707.962442][T10688] ubi: mtd0 is already attached to ubi16 [ 710.346437][ T7325] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 710.815270][ T7325] usb 3-1: Using ep0 maxpacket: 16 [ 710.832393][ T7325] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 710.847486][ T7325] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 710.866618][ T7325] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 710.902431][ T7325] usb 3-1: SerialNumber: syz [ 710.926530][ T7325] cdc_acm 3-1:1.0: skipping garbage [ 710.934437][ T7325] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 710.946838][ T7325] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 710.953380][ T7325] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 711.057003][T10704] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1181'. [ 711.172622][T10692] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 711.185839][T10692] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 711.218013][ T9727] usb 3-1: USB disconnect, device number 25 [ 711.256348][T10708] syzkaller1: entered promiscuous mode [ 711.262040][T10708] syzkaller1: entered allmulticast mode [ 714.140957][T10734] fuse: Bad value for 'group_id' [ 714.399223][ T6772] Bluetooth: hci4: Frame reassembly failed (-84) [ 717.926289][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 717.934194][ T5774] Bluetooth: hci4: command 0xfc11 tx timeout [ 724.426248][ T5818] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 724.665307][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 724.681080][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 724.720501][ T5818] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 724.745804][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 724.775282][ T5818] usb 3-1: SerialNumber: syz [ 724.867930][ T5818] cdc_acm 3-1:1.0: skipping garbage [ 724.873363][ T5818] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 724.906884][ T5818] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 724.913888][ T5818] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 725.288486][T10791] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 725.314572][T10791] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 725.477224][ T9] usb 3-1: USB disconnect, device number 26 [ 729.700739][T10818] syz.0.1206 (10818): drop_caches: 2 [ 730.312619][T10816] netlink: 'syz.1.1214': attribute type 39 has an invalid length. [ 734.046214][ T5840] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 734.148092][ T4523] Bluetooth: hci4: Frame reassembly failed (-90) [ 734.239063][ T5840] usb 4-1: Using ep0 maxpacket: 16 [ 734.259663][ T5840] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 734.277722][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 734.277795][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 734.277853][ T5840] usb 4-1: SerialNumber: syz [ 734.428827][ T5840] cdc_acm 4-1:1.0: skipping garbage [ 734.428932][ T5840] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 734.428996][ T5840] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 734.429112][ T5840] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 734.947284][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1223'. [ 734.978822][T10837] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 735.037681][T10837] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 735.083673][ T5840] usb 4-1: USB disconnect, device number 22 [ 736.605289][ T5774] Bluetooth: hci4: command 0xfc11 tx timeout [ 736.612216][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 741.673246][T10885] binder: 10882:10885 ioctl 400c620e 0 returned -14 [ 744.999975][ T1078] Bluetooth: hci4: Frame reassembly failed (-90) [ 745.372533][T10903] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1238'. [ 746.133683][T10912] fuse: Unknown parameter 'grou00000000000000000000' [ 746.718887][T10921] binder: 10914:10921 ioctl 400c620e 0 returned -14 [ 747.060016][T10921] IPv6: NLM_F_CREATE should be specified when creating new route [ 747.081064][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 747.619812][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.626382][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.131320][T10929] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1244'. [ 751.085289][T10947] fuse: Unknown parameter 'grou00000000000000000000' [ 753.773553][ T7325] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 753.967945][ T7325] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 753.982798][T10987] fuse: Unknown parameter 'grou00000000000000000000' [ 754.205271][ T7325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 754.226759][ T7325] usb 4-1: config 0 descriptor?? [ 754.238318][ T7325] cp210x 4-1:0.0: cp210x converter detected [ 754.944181][ T7325] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 754.951978][ T7325] cp210x 4-1:0.0: querying part number failed [ 754.967421][ T7325] usb 4-1: cp210x converter now attached to ttyUSB0 [ 755.957193][T11004] can: request_module (can-proto-0) failed. [ 756.165582][T11008] futex_wake_op: syz.0.1262 tries to shift op by -1; fix this program [ 756.706521][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 756.719821][ T7325] usb 4-1: USB disconnect, device number 23 [ 756.728195][ T7325] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 756.738591][ T7325] cp210x 4-1:0.0: device disconnected [ 758.844812][T11028] fuse: Unknown parameter 'group_i00000000000000000000' [ 759.127652][T11038] binder: 11033:11038 ioctl 400c620e 0 returned -14 [ 759.205987][T11038] IPv6: NLM_F_CREATE should be specified when creating new route [ 759.476777][T11051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1275'. [ 761.828563][T11067] Cannot find del_set index 2 as target [ 768.511639][ T6787] Bluetooth: hci4: Frame reassembly failed (-90) [ 768.979090][T11138] Cannot find del_set index 2 as target [ 770.597414][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 772.501090][T11158] binder: 11152:11158 ioctl 400c620e 0 returned -14 [ 774.134247][T10337] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 774.142079][T10337] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 776.374760][T11186] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1305'. [ 778.856621][T10337] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 778.863480][T10337] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 780.854964][T11229] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1314'. [ 781.573972][T11255] binder: 11251:11255 ioctl 400c620e 0 returned -14 [ 782.535061][ C0] hrtimer: interrupt took 51238 ns [ 783.084092][T10337] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 783.101306][T10337] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 783.765560][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1325'. [ 786.512307][T11327] binder: 11298:11327 ioctl 400c620e 0 returned -14 [ 786.894991][T10337] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 786.902994][T10337] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 787.536541][ T6798] Bluetooth: hci4: Frame reassembly failed (-90) [ 788.185268][ T2135] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 788.442651][ T2135] usb 3-1: Using ep0 maxpacket: 16 [ 789.083953][ T2135] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 789.535242][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 789.605225][ T2135] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 789.614355][ T2135] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 789.670659][ T2135] usb 3-1: SerialNumber: syz [ 789.869074][ T2135] cdc_acm 3-1:1.0: skipping garbage [ 789.902666][ T2135] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 790.312184][ T2135] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 790.344004][ T2135] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 790.726592][T11340] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 790.941184][T11340] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 791.547626][ T5816] usb 3-1: USB disconnect, device number 27 [ 793.216408][ T5774] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 793.223546][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 793.271158][T11365] netlink: 'syz.1.1344': attribute type 39 has an invalid length. [ 793.392217][T11367] binder: 11364:11367 ioctl c0285840 200000000000 returned -22 [ 795.350326][T11384] binder: 11379:11384 ioctl 400c620e 0 returned -14 [ 798.543130][ T5774] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 798.550591][ T5774] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 799.518323][T11419] binder: 11414:11419 ioctl 400c620e 0 returned -14 [ 801.316186][ T5818] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 801.529306][ T5818] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 801.539847][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.582073][ T5818] usb 2-1: config 0 descriptor?? [ 801.611289][ T5818] cp210x 2-1:0.0: cp210x converter detected [ 801.880776][ T5818] usb 2-1: cp210x converter now attached to ttyUSB0 [ 802.309050][T11442] binder: 11437:11442 ioctl 400c620e 0 returned -14 [ 803.389893][ T5840] usb 2-1: USB disconnect, device number 27 [ 803.404848][ T5840] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 803.423839][ T5840] cp210x 2-1:0.0: device disconnected [ 803.511023][T11450] Cannot find del_set index 2 as target [ 803.728825][ T5774] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 803.736355][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 808.134432][T11476] binder: 11473:11476 ioctl 400c620e 0 returned -14 [ 809.063913][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.070784][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.290316][T11485] fuse: Bad value for 'fd' [ 809.930348][ T5774] Bluetooth: hci2: unexpected event for opcode 0x1002 [ 809.938431][ T5774] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 810.203559][T11498] syz.1.1385 (11498): drop_caches: 2 [ 811.640006][T11514] binder: 11509:11514 ioctl 400c620e 0 returned -14 [ 811.812159][T11516] fuse: Bad value for 'fd' [ 814.175384][T11531] syz.2.1395 (11531): drop_caches: 2 [ 816.732210][T11573] syz.2.1404 (11573): drop_caches: 2 [ 819.258021][T11609] fuse: Invalid rootmode [ 821.762777][T11625] binder: 11622:11625 ioctl 400c620e 0 returned -14 [ 822.535825][ T9] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 822.735198][T11637] fuse: Invalid rootmode [ 822.742151][ T9] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 822.755085][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.784430][ T9] usb 1-1: config 0 descriptor?? [ 822.815878][ T9] cp210x 1-1:0.0: cp210x converter detected [ 823.365141][ T9] cp210x 1-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 823.498118][ T9] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -32 [ 823.596838][ T9] cp210x 1-1:0.0: GPIO initialisation failed: -32 [ 823.746686][ T9] usb 1-1: cp210x converter now attached to ttyUSB0 [ 823.766879][ T9] usb 1-1: USB disconnect, device number 17 [ 823.793792][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 823.833946][ T9] cp210x 1-1:0.0: device disconnected [ 826.220846][T11671] fuse: Bad value for 'rootmode' [ 827.695067][T11685] binder: 11682:11685 ioctl 400c620e 0 returned -14 [ 834.386013][ T5774] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 834.399597][ T5774] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 836.329879][T11767] syzkaller0: entered promiscuous mode [ 836.349510][T11767] syzkaller0: entered allmulticast mode [ 836.415608][T11768] binder: 11766:11768 ioctl 400c620e 0 returned -14 [ 836.806145][T11776] fuse: Bad value for 'rootmode' [ 836.871347][ T1087] Bluetooth: hci4: Frame reassembly failed (-90) [ 837.683932][T11793] binder: 11791:11793 ioctl 400c620e 0 returned -14 [ 837.715147][ T5780] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 837.863778][T11795] syzkaller0: entered promiscuous mode [ 837.870407][T11795] syzkaller0: entered allmulticast mode [ 837.919365][ T5780] usb 4-1: Using ep0 maxpacket: 16 [ 837.930868][ T5780] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 837.947208][ T5780] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 837.958430][ T5780] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 837.967004][ T5780] usb 4-1: SerialNumber: syz [ 838.009219][ T5780] cdc_acm 4-1:1.0: skipping garbage [ 838.024563][ T5780] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 838.033537][ T5780] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 838.042548][ T5780] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 838.127017][T11797] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.1463'. [ 838.263897][T11785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 838.295662][T11785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 838.313657][ T5780] usb 4-1: USB disconnect, device number 24 [ 838.820744][ T5774] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 839.536196][T11805] fuse: Unknown parameter 'use00000000000000000000' [ 839.885489][ T5780] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 839.926290][T10337] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 839.933194][T10337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 840.095189][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 840.110556][ T5780] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 840.144066][ T5780] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 840.179341][ T5780] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 840.208422][ T5780] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 840.246337][ T5780] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 840.274736][ T5780] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 840.528881][ T5780] usb 1-1: usb_control_msg returned -71 [ 840.534614][ T5780] usbtmc 1-1:16.0: can't read capabilities [ 840.593774][ T5780] usb 1-1: USB disconnect, device number 18 [ 840.936649][T11822] binder: 11821:11822 ioctl 400c620e 0 returned -14 [ 841.043118][T11824] syzkaller0: entered promiscuous mode [ 841.049142][T11824] syzkaller0: entered allmulticast mode [ 841.274327][T11826] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1472'. [ 842.505160][ T6802] Bluetooth: hci4: Frame reassembly failed (-90) [ 842.690676][T11842] fuse: Unknown parameter 'use00000000000000000000' [ 842.951524][ T5818] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 843.300415][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 843.319743][ T5818] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 843.384352][ T5818] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 843.507480][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 843.515688][ T5818] usb 3-1: SerialNumber: syz [ 843.526434][ T5818] cdc_acm 3-1:1.0: skipping garbage [ 843.531727][ T5818] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 843.618055][ T5818] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 843.624858][ T5818] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 844.008292][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 844.041194][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 844.052886][ T9] usb 3-1: USB disconnect, device number 28 [ 844.141304][T11857] binder: 11852:11857 ioctl 400c620e 0 returned -14 [ 844.495546][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 844.503117][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 844.786399][T11864] syzkaller0: entered promiscuous mode [ 844.791957][T11864] syzkaller0: entered allmulticast mode [ 844.813056][T11868] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.1483'. [ 845.106182][ T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 845.135363][T10337] Bluetooth: hci3: command 0x0406 tx timeout [ 845.161078][T10337] Bluetooth: hci2: ACL packet for unknown connection handle 201 [ 845.295598][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 845.304209][ T9] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 845.315880][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 845.325953][ T9] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 845.335951][ T9] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 845.349099][ T9] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 845.359046][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.604413][ T9] usb 1-1: usb_control_msg returned -71 [ 845.637118][ T9] usbtmc 1-1:16.0: can't read capabilities [ 847.006260][T11873] sched: RT throttling activated [ 847.070840][ T9] usb 1-1: USB disconnect, device number 19 [ 847.330970][T11880] fuse: Unknown parameter 'use00000000000000000000' [ 848.461618][T11890] binder: 11885:11890 ioctl 400c620e 0 returned -14 [ 848.550402][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1491'. [ 848.747695][T11888] ip6gre1: entered promiscuous mode [ 849.204626][ T7325] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 849.271831][T11902] syzkaller0: entered promiscuous mode [ 849.289679][T11902] syzkaller0: entered allmulticast mode [ 849.425167][ T7325] usb 2-1: Using ep0 maxpacket: 16 [ 849.448425][ T7325] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 849.483533][ T7325] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 849.502475][ T7325] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 849.521033][ T7325] usb 2-1: SerialNumber: syz [ 849.545933][ T7325] cdc_acm 2-1:1.0: skipping garbage [ 849.556249][ T7325] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 849.582910][ T7325] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 849.595389][ T7325] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 850.060309][ T9812] Bluetooth: hci0: unexpected event for opcode 0x1002 [ 850.074226][ T9812] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 850.177731][T11897] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 850.227605][T11897] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 850.402416][ T9] usb 2-1: USB disconnect, device number 28 [ 850.726030][T11910] fuse: Unknown parameter 'user_i00000000000000000000' [ 851.055545][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 851.063491][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 851.375471][ T9] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 851.555071][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 851.567770][ T9] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 851.581220][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 851.591504][ T9] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 851.601703][ T9] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 851.617643][T11920] syzkaller0: entered promiscuous mode [ 851.629211][ T9] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 851.642328][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 851.659268][T11920] syzkaller0: entered allmulticast mode [ 851.833359][T11926] binder: 11923:11926 ioctl 400c620e 0 returned -14 [ 851.880091][ T9] usb 2-1: usb_control_msg returned -71 [ 851.910299][ T9] usbtmc 2-1:16.0: can't read capabilities [ 852.179696][ T9] usb 2-1: USB disconnect, device number 29 [ 852.988511][T10337] Bluetooth: hci3: unexpected event for opcode 0x1804 [ 853.110917][T11940] fuse: Unknown parameter 'user_i00000000000000000000' [ 853.535296][T10337] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 853.542704][T10337] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 854.105133][ T9] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 854.297582][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 854.322411][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 854.334334][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 854.344064][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 854.352429][ T9] usb 2-1: SerialNumber: syz [ 854.370080][ T9] cdc_acm 2-1:1.0: skipping garbage [ 854.375557][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 854.383543][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 854.403921][ T9] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 854.594950][T11953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 854.606008][T11953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 854.616243][ T9] usb 2-1: USB disconnect, device number 30 [ 854.892678][T11931] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1502'. [ 855.334747][T11964] binder: 11956:11964 ioctl 400c620e 0 returned -14 [ 856.104404][T11973] fuse: Unknown parameter 'user_i00000000000000000000' [ 856.405372][ T5818] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 856.451747][T10337] Bluetooth: hci3: unexpected event for opcode 0x1002 [ 856.459198][T10337] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 856.675286][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 856.693274][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 856.714465][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 856.759978][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 856.798936][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 856.812923][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 856.822594][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.089388][ T5818] usb 3-1: usb_control_msg returned -71 [ 857.114482][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 857.141492][T11985] syzkaller0: entered promiscuous mode [ 857.152181][ T5818] usb 3-1: USB disconnect, device number 29 [ 857.164258][T11985] syzkaller0: entered allmulticast mode [ 858.368720][T11999] binder: 11995:11999 ioctl 400c620e 0 returned -14 [ 859.151627][ T23] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 859.395818][ T23] usb 3-1: Using ep0 maxpacket: 16 [ 859.447601][ T23] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 859.560774][ T23] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 859.688935][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 859.808893][ T23] usb 3-1: SerialNumber: syz [ 860.112874][ T23] cdc_acm 3-1:1.0: skipping garbage [ 860.118735][ T23] cdc_acm 3-1:1.0: Control and data interfaces are not separated! [ 860.127411][ T23] cdc_acm 3-1:1.0: This needs exactly 3 endpoints [ 860.133894][ T23] cdc_acm: probe of 3-1:1.0 failed with error -22 [ 860.308264][T12016] bridge0: port 3(syz_tun) entered blocking state [ 860.315628][T12016] bridge0: port 3(syz_tun) entered disabled state [ 860.326227][T12016] syz_tun: entered allmulticast mode [ 860.341446][T12016] syz_tun: entered promiscuous mode [ 860.351227][T12016] bridge0: port 3(syz_tun) entered blocking state [ 860.358141][T12016] bridge0: port 3(syz_tun) entered forwarding state [ 861.126719][T12019] syzkaller0: entered promiscuous mode [ 861.132272][T12019] syzkaller0: entered allmulticast mode [ 861.179081][T12002] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.212646][T12002] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.234171][ T9] usb 3-1: USB disconnect, device number 30 [ 861.565330][ T5816] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 861.805181][ T5816] usb 2-1: Using ep0 maxpacket: 8 [ 861.902144][ T5816] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 862.218222][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 862.229044][ T5816] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 862.240548][ T5816] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 862.254005][ T5816] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 862.299266][ T5816] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 862.618619][ T5816] usb 2-1: usb_control_msg returned -71 [ 862.627596][ T5816] usbtmc 2-1:16.0: can't read capabilities [ 862.701051][ T5816] usb 2-1: USB disconnect, device number 31 [ 863.023246][T12038] binder: 12035:12038 ioctl 400c620e 0 returned -14 [ 863.525656][T10337] Bluetooth: hci1: unexpected event for opcode 0x1002 [ 863.533030][T10337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 864.343085][T12054] syzkaller0: entered promiscuous mode [ 864.365386][T12054] syzkaller0: entered allmulticast mode [ 865.745195][ T5818] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 865.955439][ T5818] usb 2-1: Using ep0 maxpacket: 16 [ 865.997566][ T5818] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 866.025096][ T5818] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 866.042808][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 866.055278][ T5818] usb 2-1: SerialNumber: syz [ 866.108458][ T5818] cdc_acm 2-1:1.0: skipping garbage [ 866.114119][ T5818] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 866.124763][ T5818] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 866.156966][ T5818] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 866.252168][T12075] binder: 12071:12075 ioctl 400c620e 0 returned -14 [ 866.439216][T12078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 866.458775][T12078] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 866.500473][ T5818] usb 2-1: USB disconnect, device number 32 [ 867.298662][ T5816] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 867.872604][ T5816] usb 3-1: Using ep0 maxpacket: 8 [ 867.879849][ T5816] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 867.903811][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 868.027641][ T5816] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 868.038181][ T5816] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 868.110292][ T5816] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 868.119546][ T5816] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 868.501511][ T5816] usb 3-1: usb_control_msg returned -71 [ 868.777993][ T5816] usbtmc 3-1:16.0: can't read capabilities [ 868.998023][ T5816] usb 3-1: USB disconnect, device number 31 [ 869.461359][T12099] syzkaller0: entered promiscuous mode [ 869.467292][T12099] syzkaller0: entered allmulticast mode [ 870.494102][T12114] binder: 12108:12114 ioctl 400c620e 0 returned -14 [ 870.508461][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.515219][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.673408][T12120] syzkaller0: entered promiscuous mode [ 870.679553][T12120] syzkaller0: entered allmulticast mode [ 871.605260][ T9] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 871.718360][T12129] netlink: 'syz.3.1564': attribute type 1 has an invalid length. [ 871.845846][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 871.900221][T12129] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 871.912148][ T9] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 871.975508][ T9] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 872.003236][T12129] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 872.005965][T12135] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1564'. [ 872.065508][ T5818] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 872.073622][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 872.125369][ T9] usb 1-1: SerialNumber: syz [ 872.250151][ T9] cdc_acm 1-1:1.0: skipping garbage [ 872.279384][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 872.304497][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 872.335596][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 872.347274][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 872.358699][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 872.359397][ T9] cdc_acm 1-1:1.0: Control and data interfaces are not separated! [ 872.372593][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 872.390058][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 872.480197][ T9] cdc_acm 1-1:1.0: This needs exactly 3 endpoints [ 872.491832][ T9] cdc_acm: probe of 1-1:1.0 failed with error -22 [ 872.496790][T12113] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 872.515781][T12113] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 872.550038][ T5816] usb 1-1: USB disconnect, device number 20 [ 872.622386][T12135] bond1: (slave gretap1): making interface the new active one [ 872.636511][T12135] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 872.654733][ T5818] usb 2-1: usb_control_msg returned -71 [ 872.666580][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 872.683844][ T5818] usb 2-1: USB disconnect, device number 33 [ 873.382828][ T6800] Bluetooth: hci4: Frame reassembly failed (-90) [ 873.919210][T12154] binder: 12152:12154 ioctl 400c620e 0 returned -14 [ 874.353783][T12160] syzkaller0: entered promiscuous mode [ 874.359726][T12160] syzkaller0: entered allmulticast mode [ 875.275129][ T9] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 875.521860][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 875.525745][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 875.657950][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 875.775672][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.843336][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 875.880069][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 875.910399][ T9] usb 2-1: SerialNumber: syz [ 875.922852][ T9] cdc_acm 2-1:1.0: skipping garbage [ 875.932017][ T9] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 875.965377][ T9] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 875.971957][ T9] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 876.152597][T12166] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 876.171719][T12166] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 876.191513][ T5816] usb 2-1: USB disconnect, device number 34 [ 876.645104][ T5818] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 876.835090][ T5818] usb 3-1: Using ep0 maxpacket: 8 [ 876.850347][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 876.876757][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 876.905801][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 876.940453][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 876.974218][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 876.991284][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 877.015725][T12182] syzkaller0: entered promiscuous mode [ 877.021397][T12182] syzkaller0: entered allmulticast mode [ 877.224711][ T5818] usb 3-1: usb_control_msg returned -71 [ 877.256699][ T5818] usbtmc 3-1:16.0: can't read capabilities [ 877.316482][ T5818] usb 3-1: USB disconnect, device number 32 [ 879.709139][ T6800] Bluetooth: hci4: Frame reassembly failed (-90) [ 879.735202][ T6800] Bluetooth: hci4: Frame reassembly failed (-84) [ 879.997463][T12210] syzkaller0: entered promiscuous mode [ 880.003832][T12210] syzkaller0: entered allmulticast mode [ 881.355351][ T23] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 881.555155][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 881.562919][ T23] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 881.580135][ T23] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 881.589704][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 881.598306][ T23] usb 2-1: SerialNumber: syz [ 881.615290][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 881.653974][ T23] cdc_acm 2-1:1.0: skipping garbage [ 881.660730][ T23] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 881.672166][ T23] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 881.681225][ T23] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 884.243618][ T5818] usb 2-1: USB disconnect, device number 35 [ 885.204852][T12236] syzkaller0: entered promiscuous mode [ 885.212902][T12236] syzkaller0: entered allmulticast mode [ 887.345550][ T7325] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 887.575381][ T7325] usb 4-1: Using ep0 maxpacket: 16 [ 887.647143][ T7325] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 887.701840][ T7325] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 887.725161][ T7325] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 887.763771][ T7325] usb 4-1: SerialNumber: syz [ 887.794572][ T7325] cdc_acm 4-1:1.0: skipping garbage [ 887.824635][ T7325] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 887.853321][ T7325] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 887.895140][ T7325] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 888.040345][T12248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 888.077408][T12248] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 888.136825][ T7325] usb 4-1: USB disconnect, device number 25 [ 888.375106][ T5780] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 888.565354][ T5780] usb 2-1: Using ep0 maxpacket: 8 [ 888.607948][ T5780] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 888.816681][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 888.957954][ T5780] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 889.026438][ T5780] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 889.185219][ T5780] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 889.194350][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.441445][ T5780] usb 2-1: usb_control_msg returned -71 [ 889.465395][ T5780] usbtmc 2-1:16.0: can't read capabilities [ 889.494494][ T5780] usb 2-1: USB disconnect, device number 36 [ 891.201897][T12273] fuse: Unknown parameter '0x0000000000000003' [ 891.229446][T12271] syzkaller0: entered promiscuous mode [ 891.257821][T12271] syzkaller0: entered allmulticast mode [ 895.476392][T12307] fuse: Unknown parameter '0x0000000000000003' [ 895.718004][T12316] syzkaller0: entered promiscuous mode [ 895.735180][T12316] syzkaller0: entered allmulticast mode [ 896.554121][ T5818] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 898.279592][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 898.287336][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 898.305318][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 898.327234][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 898.341020][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 898.354553][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 898.368480][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 898.459493][T12338] fuse: Unknown parameter '0x0000000000000003' [ 898.518181][ T5818] usb 2-1: usb_control_msg returned -71 [ 898.532631][ T5818] usbtmc 2-1:16.0: can't read capabilities [ 898.570087][ T5818] usb 2-1: USB disconnect, device number 37 [ 899.990605][T12340] ALSA: mixer_oss: invalid OSS volume '' [ 900.685406][T12355] syzkaller0: entered promiscuous mode [ 900.695694][T12355] syzkaller0: entered allmulticast mode [ 901.817854][T12369] fuse: Unknown parameter '0x0000000000000003' [ 903.123318][ T9] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 903.315083][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 903.322192][ T9] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 903.322236][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 903.322262][ T9] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 903.322286][ T9] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 903.322330][ T9] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 903.322360][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.545534][ T9] usb 4-1: usb_control_msg returned -71 [ 903.545584][ T9] usbtmc 4-1:16.0: can't read capabilities [ 903.550250][ T9] usb 4-1: USB disconnect, device number 26 [ 905.096411][T12399] syzkaller0: entered promiscuous mode [ 905.105194][T12399] syzkaller0: entered allmulticast mode [ 905.410583][T12403] fuse: Unknown parameter 'fd0x0000000000000003' [ 905.660553][T12409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1661'. [ 905.673498][T12409] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1661'. [ 905.730933][T12400] ALSA: mixer_oss: invalid OSS volume '' [ 906.269902][ T5818] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 906.451599][T12422] syzkaller0: entered promiscuous mode [ 906.509308][ T5818] usb 2-1: Using ep0 maxpacket: 8 [ 906.597645][T12422] syzkaller0: entered allmulticast mode [ 907.288805][ T5818] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 907.303866][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 907.335197][ T5818] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 907.444712][T12429] libceph: resolve '0..' (ret=-3): failed [ 907.495974][T12429] syz.0.1667: attempt to access beyond end of device [ 907.495974][T12429] nbd0: rw=4096, sector=128, nr_sectors = 8 limit=0 [ 907.509756][T12429] gfs2: error 10 reading superblock [ 907.743361][T12432] fuse: Unknown parameter 'fd0x0000000000000003' [ 909.191113][ T5818] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 909.934068][ T5818] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 909.943644][ T5818] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 909.956987][ T5818] usb 2-1: can't set config #16, error -71 [ 909.964614][ T5818] usb 2-1: USB disconnect, device number 38 [ 911.194078][T12453] syzkaller0: entered promiscuous mode [ 911.199966][T12453] syzkaller0: entered allmulticast mode [ 912.260548][ T5780] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 912.442524][T12444] ALSA: mixer_oss: invalid OSS volume '' [ 913.065615][ T5780] usb 2-1: Using ep0 maxpacket: 16 [ 913.077827][ T5780] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 913.112159][ T5780] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 913.125251][ T5780] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 913.134589][ T5780] usb 2-1: SerialNumber: syz [ 913.184610][ T5780] cdc_acm 2-1:1.0: skipping garbage [ 913.194791][ T5780] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 913.203635][ T5780] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 913.210940][ T5780] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 913.425590][T12450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 913.435923][T12450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 914.285375][ T5816] usb 2-1: USB disconnect, device number 39 [ 914.476734][T12484] syzkaller0: entered promiscuous mode [ 914.482301][T12484] syzkaller0: entered allmulticast mode [ 916.918577][T12508] syzkaller0: entered promiscuous mode [ 916.924143][T12508] syzkaller0: entered allmulticast mode [ 918.121912][T12495] ALSA: mixer_oss: invalid OSS volume '' [ 918.345183][ T5818] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 921.001640][ T5818] usb 3-1: Using ep0 maxpacket: 16 [ 921.287500][ T5818] usb 3-1: device descriptor read/all, error -71 [ 923.074691][T12565] syzkaller0: entered promiscuous mode [ 923.085125][T12565] syzkaller0: entered allmulticast mode [ 923.436829][T10337] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 926.381781][T12583] binder: 12576:12583 ioctl 400c620e 0 returned -14 [ 927.809350][ T1145] Bluetooth: hci4: Frame reassembly failed (-90) [ 928.073720][T12602] syzkaller0: entered promiscuous mode [ 928.089997][T12602] syzkaller0: entered allmulticast mode [ 929.502188][T12614] Cannot find del_set index 2 as target [ 929.616161][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 929.623701][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 930.034327][T12625] binder: 12616:12625 ioctl 400c620e 0 returned -14 [ 930.827235][T10337] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 931.939976][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 931.946789][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.037764][ T6772] Bluetooth: hci4: Frame reassembly failed (-90) [ 933.203692][T12650] Cannot find del_set index 2 as target [ 933.421098][T12654] binder: 12651:12654 ioctl 400c620e 0 returned -14 [ 934.579615][ T27] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 934.775248][ T27] usb 4-1: Using ep0 maxpacket: 16 [ 934.797875][ T27] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 934.827060][ T27] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 934.845120][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 934.868343][ T27] usb 4-1: SerialNumber: syz [ 934.959748][ T27] cdc_acm 4-1:1.0: skipping garbage [ 934.975180][ T27] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 934.983247][ T27] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 934.995049][ T27] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 935.055383][ T9812] Bluetooth: hci4: command 0xfc11 tx timeout [ 935.065493][T10337] Bluetooth: hci4: Entering manufacturer mode failed (-110) [ 935.117817][T12657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.157707][T12657] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 935.167557][ T5780] usb 4-1: USB disconnect, device number 27 [ 935.872355][T12674] syzkaller0: entered promiscuous mode [ 935.877953][T12674] syzkaller0: entered allmulticast mode [ 936.281496][T12685] binder: 12682:12685 ioctl 400c620e 0 returned -14 [ 937.751464][T12692] binder: 12691:12692 ioctl 80089418 2000000000c0 returned -22 [ 941.109807][T12727] binder: 12724:12727 ioctl 400c620e 0 returned -14 [ 941.117184][T12727] IPv6: NLM_F_CREATE should be specified when creating new route [ 947.373881][ T7325] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 947.685139][ T7325] usb 4-1: Using ep0 maxpacket: 8 [ 947.953370][ T7325] usb 4-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 948.048539][ T7325] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 948.126976][ T7325] usb 4-1: Product: syz [ 948.165918][ T7325] usb 4-1: Manufacturer: syz [ 948.170576][ T7325] usb 4-1: SerialNumber: syz [ 948.236349][ T7325] usb 4-1: config 0 descriptor?? [ 948.274102][ T7325] usb 4-1: can't set config #0, error -71 [ 948.295133][ T7325] usb 4-1: USB disconnect, device number 28 [ 948.484529][T12777] syzkaller0: entered promiscuous mode [ 948.484556][T12777] syzkaller0: entered allmulticast mode [ 950.639304][T12799] sp0: Synchronizing with TNC [ 953.508685][T12807] syzkaller0: entered promiscuous mode [ 953.555059][T12807] syzkaller0: entered allmulticast mode [ 955.782004][ T23] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 956.025844][ T23] usb 3-1: config 0 has an invalid interface number: 64 but max is 0 [ 956.065593][ T23] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 956.143975][ T23] usb 3-1: config 0 has no interface number 0 [ 956.539097][ T23] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48 [ 956.555007][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 956.585120][ T23] usb 3-1: Product: syz [ 956.589372][ T23] usb 3-1: Manufacturer: syz [ 956.620718][ T23] usb 3-1: SerialNumber: syz [ 956.686633][ T23] usb 3-1: config 0 descriptor?? [ 957.564637][ T23] usb 3-1: USB disconnect, device number 35 [ 958.301101][T12839] iommufd_mock iommufd_mock1: Adding to iommu group 0 [ 962.475222][ T9] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 962.665720][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 962.681109][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 962.702474][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 962.723950][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 962.733220][ T9] usb 4-1: SerialNumber: syz [ 962.753143][ T9] cdc_acm 4-1:1.0: skipping garbage [ 962.758956][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 962.768692][ T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 962.775541][ T9] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 962.995633][T12854] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 963.012305][T12854] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 963.068130][ T9] usb 4-1: USB disconnect, device number 29 [ 969.343829][ T9] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 969.565204][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 969.578870][ T9] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 971.189594][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 971.198985][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 971.207140][ T9] usb 4-1: SerialNumber: syz [ 971.239504][ T9] cdc_acm 4-1:1.0: skipping garbage [ 971.289497][ T9] cdc_acm 4-1:1.0: Control and data interfaces are not separated! [ 971.362195][ T9] cdc_acm 4-1:1.0: This needs exactly 3 endpoints [ 971.369209][ T9] cdc_acm: probe of 4-1:1.0 failed with error -22 [ 971.528948][T12906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 971.549640][T12906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 971.586047][ T27] usb 4-1: USB disconnect, device number 30 [ 975.315927][ T5872] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 975.565576][ T5872] usb 2-1: Using ep0 maxpacket: 16 [ 975.605498][ T5872] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 975.639617][ T5872] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 975.672496][ T5872] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 975.706735][ T5872] usb 2-1: SerialNumber: syz [ 975.762923][ T5872] cdc_acm 2-1:1.0: skipping garbage [ 975.783620][ T5872] cdc_acm 2-1:1.0: Control and data interfaces are not separated! [ 975.834561][ T5872] cdc_acm 2-1:1.0: This needs exactly 3 endpoints [ 975.851317][ T5872] cdc_acm: probe of 2-1:1.0 failed with error -22 [ 975.994469][T12962] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 976.081697][T12962] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 976.143196][ T5872] usb 2-1: USB disconnect, device number 40 [ 993.379420][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 1081.324941][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1081.331953][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P1145/1:b..l [ 1081.340314][ C0] rcu: (detected by 0, t=10502 jiffies, g=68501, q=85 ncpus=2) [ 1081.347967][ C0] task:kworker/u4:9 state:R running task stack:22536 pid:1145 ppid:2 flags:0x00004000 [ 1081.359770][ C0] Workqueue: bat_events batadv_nc_worker [ 1081.365571][ C0] Call Trace: [ 1081.368882][ C0] [ 1081.371827][ C0] __schedule+0x1553/0x45a0 [ 1081.376413][ C0] ? register_lock_class+0xc4/0x8a0 [ 1081.381692][ C0] ? mark_lock+0x70/0x320 [ 1081.386043][ C0] ? asan.module_dtor+0x20/0x20 [ 1081.390909][ C0] ? mark_lock+0x94/0x320 [ 1081.395253][ C0] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 1081.401328][ C0] ? preempt_schedule_irq+0xb4/0x150 [ 1081.406674][ C0] preempt_schedule_irq+0xbf/0x150 [ 1081.411809][ C0] ? preempt_schedule_notrace+0x110/0x110 [ 1081.417582][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1081.423470][ C0] irqentry_exit+0x67/0x70 [ 1081.428002][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1081.433549][ C0] RIP: 0010:lock_acquire+0x208/0x420 [ 1081.438859][ C0] Code: f7 84 24 80 00 00 00 00 02 00 00 43 c6 44 3c 04 f8 0f 85 f0 00 00 00 41 f7 c6 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 3c 00 00 00 00 43 c7 44 3c 08 00 00 00 00 65 48 8b 04 25 [ 1081.458513][ C0] RSP: 0018:ffffc9000495fa40 EFLAGS: 00000206 [ 1081.464605][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 180004e112bc4f00 [ 1081.472596][ C0] RDX: 0000000000000000 RSI: ffffffff8acadb60 RDI: ffffffff8b1c8e60 [ 1081.480581][ C0] RBP: ffffc9000495fb48 R08: dffffc0000000000 R09: 1ffffffff2238aa0 [ 1081.488562][ C0] R10: dffffc0000000000 R11: fffffbfff2238aa1 R12: 1ffff9200092bf54 [ 1081.496544][ C0] R13: ffffffff8d1320a0 R14: 0000000000000246 R15: dffffc0000000000 [ 1081.504550][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1081.509519][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1081.514939][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1081.520179][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1081.525137][ C0] batadv_nc_worker+0xef/0x610 [ 1081.530107][ C0] ? batadv_nc_worker+0xd2/0x610 [ 1081.535056][ C0] ? process_scheduled_works+0x96f/0x15d0 [ 1081.540825][ C0] process_scheduled_works+0xa5d/0x15d0 [ 1081.546405][ C0] ? worker_attach_to_pool+0x380/0x380 [ 1081.551891][ C0] ? assign_work+0x3d2/0x5d0 [ 1081.556501][ C0] worker_thread+0xa55/0xfc0 [ 1081.561110][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1081.567070][ C0] ? _raw_spin_unlock+0x40/0x40 [ 1081.571952][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1081.577871][ C0] kthread+0x2fa/0x390 [ 1081.581970][ C0] ? pr_cont_work+0x560/0x560 [ 1081.586673][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1081.591303][ C0] ret_from_fork+0x48/0x80 [ 1081.595848][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1081.600537][ C0] ret_from_fork_asm+0x11/0x20 [ 1081.605349][ C0] [ 1081.608379][ C0] rcu: rcu_preempt kthread starved for 10306 jiffies! g68501 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 1081.619580][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1081.629574][ C0] rcu: RCU grace-period kthread stack dump: [ 1081.635466][ C0] task:rcu_preempt state:R running task stack:26920 pid:17 ppid:2 flags:0x00004000 [ 1081.646246][ C0] Call Trace: [ 1081.649535][ C0] [ 1081.652479][ C0] __schedule+0x1553/0x45a0 [ 1081.657043][ C0] ? asan.module_dtor+0x20/0x20 [ 1081.661912][ C0] ? enqueue_timer+0x4cd/0x550 [ 1081.666710][ C0] ? __mod_timer+0x984/0xdb0 [ 1081.671324][ C0] schedule+0xbd/0x170 [ 1081.675411][ C0] schedule_timeout+0x188/0x2d0 [ 1081.680273][ C0] ? console_conditional_schedule+0x40/0x40 [ 1081.686193][ C0] ? _raw_spin_unlock_irqrestore+0x86/0x120 [ 1081.692105][ C0] ? update_process_times+0x1b0/0x1b0 [ 1081.697508][ C0] ? prepare_to_swait_event+0x339/0x360 [ 1081.703108][ C0] rcu_gp_fqs_loop+0x313/0x1590 [ 1081.707977][ C0] ? rcu_gp_init+0x1162/0x1560 [ 1081.712759][ C0] ? rcu_gp_kthread+0x3b0/0x3b0 [ 1081.717639][ C0] ? dyntick_save_progress_counter+0x2b0/0x2b0 [ 1081.723803][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 1081.729025][ C0] ? rcu_gp_init+0x1560/0x1560 [ 1081.733802][ C0] ? _raw_spin_unlock_irqrestore+0xc5/0x120 [ 1081.739716][ C0] ? finish_swait+0xc7/0x1d0 [ 1081.744324][ C0] rcu_gp_kthread+0x9d/0x3b0 [ 1081.748926][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1081.754042][ C0] ? __kthread_parkme+0x7a/0x1c0 [ 1081.759002][ C0] ? __kthread_parkme+0x162/0x1c0 [ 1081.764052][ C0] kthread+0x2fa/0x390 [ 1081.768139][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 1081.773376][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1081.778021][ C0] ret_from_fork+0x48/0x80 [ 1081.782469][ C0] ? kthread_blkcg+0xd0/0xd0 [ 1081.787072][ C0] ret_from_fork_asm+0x11/0x20 [ 1081.791867][ C0] [ 1081.794923][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1081.801297][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1081.806611][ C1] NMI backtrace for cpu 1 [ 1081.806623][ C1] CPU: 1 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 [ 1081.806639][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 1081.806648][ C1] RIP: 0010:pv_native_safe_halt+0xf/0x10 [ 1081.806674][ C1] Code: 29 21 02 c3 cc cc cc cc cc cc cc f3 0f 1e fa 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 f3 0f 1e fa 66 90 0f 00 2d 83 e3 41 00 fb f4 66 0f 1f 00 55 41 57 41 56 41 54 53 50 8b 2f eb 2e 41 89 de 80 [ 1081.806689][ C1] RSP: 0018:ffffc90000187de0 EFLAGS: 000002c6 [ 1081.806703][ C1] RAX: 4a3ff52fb44f3300 RBX: ffffffff8162a8f1 RCX: 4a3ff52fb44f3300 [ 1081.806716][ C1] RDX: 0000000000000001 RSI: ffffffff8acac9e0 RDI: ffffffff8b1c8e60 [ 1081.806728][ C1] RBP: ffffc90000187f20 R08: ffff8880b8f36b2b R09: 1ffff110171e6d65 [ 1081.806740][ C1] R10: dffffc0000000000 R11: ffffed10171e6d66 R12: 1ffff92000030fc8 [ 1081.806752][ C1] R13: dffffc0000000000 R14: 1ffff110036cd780 R15: 0000000000000000 [ 1081.806763][ C1] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1081.806776][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1081.806787][ C1] CR2: 00007f5d7f0c84c5 CR3: 0000000030cc2000 CR4: 00000000003506e0 [ 1081.806803][ C1] Call Trace: [ 1081.806810][ C1] [ 1081.806816][ C1] default_idle+0x13/0x20 [ 1081.806843][ C1] default_idle_call+0x6c/0xa0 [ 1081.806866][ C1] do_idle+0x221/0x590 [ 1081.806889][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 1081.806927][ C1] ? asm_sysvec_call_function_single+0x1a/0x20 [ 1081.806959][ C1] cpu_startup_entry+0x43/0x60 [ 1081.806979][ C1] start_secondary+0xee/0xf0 [ 1081.806997][ C1] secondary_startup_64_no_verify+0x179/0x17b [ 1081.807028][ C1]