last executing test programs: 7.595480343s ago: executing program 1 (id=2156): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 7.168506188s ago: executing program 1 (id=2162): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x17ef, 0x60ee, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0xf}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 5.787572929s ago: executing program 3 (id=2166): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x17, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000540)={0x84, &(0x7f0000000480)={0x20, 0x6, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000640)=ANY=[@ANYBLOB="001404"], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.999594936s ago: executing program 1 (id=2170): r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1fc, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xfa, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000004c0)={0x200, 0x1fb, 0x9}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) dup(r1) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.770452099s ago: executing program 1 (id=2173): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{0x0}], 0x1) 4.437178989s ago: executing program 1 (id=2178): bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{}, 0x0, &(0x7f00000001c0)}, 0x20) r0 = syz_io_uring_setup(0xa49, &(0x7f0000000480)={0x0, 0x28ad, 0x80, 0x9, 0x200}, &(0x7f0000000680)=0x0, &(0x7f0000000440)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2c, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x9, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x23456}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 4.376236832s ago: executing program 1 (id=2179): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x4) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000100)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000400)=0x7) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000180)=0xf8) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000080)=0x2) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000580)=0xfc) 1.996318552s ago: executing program 3 (id=2186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="018500000008000300"/19, @ANYRES32, @ANYBLOB="28003080240003001fa3e426ec11becbf9b7b342b24f6739cd7e1516bd54e60b130e5cb7eb7038d6"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r7, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000280)={r7, r7, 0x3, 0x4, &(0x7f0000000100)="81839c93", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 1.807672333s ago: executing program 4 (id=2187): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) r1 = syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) exit(0xffff) poll(&(0x7f0000000580)=[{r0, 0x4600}, {r0, 0x4000}], 0x2, 0xfffffffc) wait4(r1, 0x0, 0x8, 0x0) 1.607876165s ago: executing program 3 (id=2189): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x5c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x9, 0x1}, {0x4}, {0xe, 0xd}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x401}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x491, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x90}, 0x4000c00) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r3) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0706000000000000000027000000050031000400000008000200", @ANYRES32=r3], 0x24}, 0x1, 0x0, 0x0, 0x20004080}, 0x24060884) 1.330887551s ago: executing program 3 (id=2190): setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0xd0f, 0x70bd2b, 0x25dfdbfb, {0x60, 0x0, 0x0, 0x0, {}, {0xffe0, 0xa}, {0x1, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x55}, 0xc010) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000240)}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) capset(0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) 1.222583958s ago: executing program 3 (id=2192): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2000000002, 0x8, 0x0, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.102958385s ago: executing program 2 (id=2195): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x108, 0x0, 0x0, 0x0, 0x0, 0xfeff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000001c0), 0x0}, 0x20) 1.027608999s ago: executing program 0 (id=2196): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}}) chdir(&(0x7f0000000100)='./file0\x00') socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r3, &(0x7f00000000c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.02451811s ago: executing program 2 (id=2197): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) setsockopt$CAN_RAW_ERR_FILTER(r1, 0x65, 0x2, &(0x7f00000001c0)=0x688, 0x4) bind$can_raw(r1, &(0x7f0000000200)={0x1d, r2}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f00000000c0)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0x1}, {0xffff}, {0x1, 0x2}}}, 0x24}}, 0x80) 915.261376ms ago: executing program 3 (id=2198): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000004c0)={{0x12, 0x1, 0x0, 0xe3, 0xdd, 0xef, 0x20, 0x1d50, 0x60a1, 0xa14f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x9d, 0x14, 0x4e}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000002c0)={0x60, 0x5}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000007c0)={0x44, &(0x7f0000000540)={0x40, 0xb}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000009c0)={0x84, &(0x7f0000000500)={0x40, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 874.215778ms ago: executing program 0 (id=2199): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r2) sendmsg$IEEE802154_ADD_IFACE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x34, r3, 0x201, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="018500000008000300"/19, @ANYRES32, @ANYBLOB="28003080240003001fa3e426ec11becbf9b7b342b24f6739cd7e1516bd54e60b130e5cb7eb7038d6"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000280)={r6, r6, 0x3, 0x4, &(0x7f0000000100)="81839c93", 0x9, 0xb, 0x6, 0x5508, 0xc336, 0x1, 0xb, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r5, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) 873.857208ms ago: executing program 2 (id=2200): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 830.091051ms ago: executing program 2 (id=2201): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x40, 0x1, 0x70bd2a, 0x4, {0x1}}, 0x14}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) syz_emit_ethernet(0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb080045"], 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{}], 0x1) 651.578691ms ago: executing program 4 (id=2202): iopl(0x3) arch_prctl$ARCH_SET_GS(0x1001, 0xffffffffffffffff) 651.243181ms ago: executing program 4 (id=2203): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x1) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$qrtrtun(r0, &(0x7f00000003c0)="caf98025f2ae2e72f9b3ab9c585ff3bb8094deaecd75898b858442c825382d707b681ae6e2b60147258f4c58db567e0b259e0f1ac910d0050f5f062a86eed29c57d19ec577c422d31c7da3476698e1512222138c03b48970d9dbb0f22a", 0x5d) write$char_usb(r0, &(0x7f0000002600)="b56511e72c6cba780ce701ed0b2db27a336692892a6491e2488652ff00c468d353d809d5b20d8ee0f9fefa6cd7bd1036ed25f0e37053d291887c707a892884c2b4aa2ebac156ef8288264449eea05c4f51c3bb4355eb108744fe34e5d0e851d51a855854135f04dd5d854459226f090b6f0d6135e8f2824eed7469236cad2251116a381d8cd30bae59c1fe71e028a667cb910d523aa5d7208286755075ee8be937304cca20e234303df72ad4e2bdc71219456229460a7c6a2df61e8b21b4a4941dcba5c257b90bbf0a976a73973319258ad7f738c04dfbdee4ea0e1b77a909a154fd934f791ebea03db6f06c8f14bc40924e46cbb9b343f25d63f332f9b3f176601f842a4e40401cbc62ee7803c3a2d71f3878f61d8fb8cb5ee90a696b22fb97bbdfd36af05c2e34dfb3d380ae7bc701053b9009d654d84f04c851b311341efcec16ef3d5c8a7e8af494068dbad55bfa7b7bf4475ceb03a6f4ef11ce14652dc36f279671b7184586c7aab57d50ca23deaeeeaebc2ed024d91f399c84834e7802ad28b6ffec7ed089e8af35d15f2713e70ce55b3f60b9c002496e110c3a68e4c01faf901df4e39d007bf99f3a2d2e33c58b92b961937060a92ab6347995c09eb6a363092e3a45b68bd5e734d43b0bc98070d66c8d03490897a7d05e894da6d92c46cb1d961d11a7d1cd9d3c437c07e9f090690d2b344a93fdc5d7276b74231f1ad050024359e7a73ee913e9a7eba72f23482de94c572d07491328ca363762c44ddcdb1623ec6d639b368d407ffafbb265de19bd5e52ec86c12167dfe2a3de629af1d66612c3f313e07a301d8378fc6eb551196b51680d1194d682ff6cdbb0f811608d6321b41664108ef6dd1dfcc7df602901b0c0d549fb8d0c1aa9b542b99d76b6b8c360c9bcb01ed819a57441948465279d0b2652be1058065929bffae3e9c8923ba01c954f3c49298db8ffad96b73684daf2e608046be2ffb0de70237e044d4be3e6ccc1984ebd2f6e0f57e99fcb0ec30598f121bd93a4003e0ba0815e5ddbeba9f3f8600ef86258a5423fb1f30da5be531e573bf5322a5842eeb23107f02021dc332e0e687bd1f4f0ac09293c3638603279484dd552d534089e0b5b903c4ceeedef410662ec12e17e9b616950874e24d313d770e84b488544a8b829039d06637269367c108dc37712d46ef6601ef4e937a120c607e570446d6216366a72ced5d543ba92a929cef7c4fb03307e88174ad88381b16de1c3f9985f483ff75e9b40fc6ba11d037dda41df9a583009baa3b246c19ab5a20cb4e62accb7a86090717c17db68b0d14905ed0ce6e49555de65448782fc0899f631393b5ccd65da59265d1b4ba9ff4d8a328cb42d2e3a465db23cfa9f159ce5716df7ccf393a561a1783679048570f2467c5336106bc8954569c047e854b2211141d169b27ca796b42c544f70123bd9f6ae23f87d1be164cd7bb2da3dc79e6f12a687296942c9c8f2d99b6961b48e046028bd69dcda162510ad235b7bf28a0ff994e23f08e807437dcd1a426a31e818b918e5c28725bf12f42d6f719d9d81100e529b9f7e4891167aef44ec7afa086e46cf832d144ebe668dbafcbf229be799f33df6c1fb3365f4cb64f360fb70ee140818503a185a44f15d3db5fd5abe8ea3c59f4120c23d3792a4ac791959858dc88286e403ad45b31716e28be7684375c2651f88ed78c2948d673ef2a8a937136ca9842717585894453a83280edc21f3fadb974c36696fe7d8bd136a005a69d14d034a869c4035282ac7c91642a05743814b4cd57df50a4eb15dd7a561637ea4ef6b3bcf89695f125fcd390746357917a6bcf55e0268a09ae5b1195f99a7fe5fec2d4115978052e195d7b5df345b827121a86166c9095e387301fc561654db0183715239247eb9dc15e83c20389aa6271b42125bd475b82db032150aa39fab06fde1034347a8a884c74edb21be34c8cf5b437ad7223970defbb27ca8eb0029fdd4acd4bc92236584ed42f03706376c583a5c8e5cf9f2415ee1f8c1b01f34d7cf1b673db2158eb99d55878ee41b391f8d7339c6f3471ae4af25e5ecb8cea2fbed9f915ce483f1a9411ca5b21776295aa4f52fa31d875f9850f3e07b8093b0f92570d41d77e68e9a79a27b6f5a2c9a100cde02ea745353e996b99b43e0f1aa51288d863859bc618a602c17a15e285e6c189a21a4762b57ce396c852a5453f035c7a2d849a98c30a2e7f797ed13ffae44e4d15a240d092a25b4820e0d2fe3b9cb74b89efc977634d1f37eddc1433f6b06fd13c543bceca1254f91413d8b914bd67f1dca660ad8ef561dfb2ce5f0486b3e1a19a3682dad8a727177a1ea448273c3cd308300e3b4fc4f96efa8d6d723de8b38f7688e13c47b2aa801ba5c33a138208412524250e41eb253520f68324dbdb5e7de6e02dc315e20cf1844cc7a5f15428dd342bcf40895d94b3de0e1acdb698a94e0dd881edfb7569d0c81981213e7186eac0d80dd35e1a48aad319678db523e9cea10163e3924c52d1d4ff589b3b228d98e64e6ee22990600ac9b272b483520148dac0e26d27ef618c86b0a49075f71d8c21e49bbcf83eb1374f0ad393074e32fa33a257f13fb187ba40b02ee6e688092e81ce0c04e3e53507b4b244fcf3afd4dbf05747a8c81828351558223a7bd0ff6684e94cd264bb3841cca4983c10b627c3c13286872798a3bce148b7f9847cb2b485bb900ad006b08482c801e9f05e5e57591e9c9ed1235c397ebffec2bffdf0eaa4aa2b3927e583f913edb95ce47603bc725ad16c59c4b638668190bd1f9c4b2c9e1b14a85d9e3e81ef3668baf27e59dd14d1ade2d7873d4feb989cdac04675f40b59a1a41453b44e0fdb89f4a7f3f52cb3a6a79d0763f85826fe1b5acb3215a0328c32ccdf2c21bb4ab3310c2d33f9b1255582e0807492ce59953f6cd4422bfa5ea9192177bbf13bd7a83807362036708653bd01b67d3def4ef7041ea29995404c0b10b0eae74bbf614652f887f755e94d390341437d50cecbf2c16fa21638ad3f85f30db17e1af9bf2b4aa8113d6a9170dc4c024f484200a471e9c73f6d2055585bdb499156081d3bc288a2ddd2b9d856c69c22ad3b4ee16555c64d86b7a9d83722860fdbf06b3a1592f3e5832fdf2d3ee078e54b7cee981cec96de0a4c77e052d2f86061cba468f6c5861771014dd56320f5fd4f84b5a890838e9fe72f41620d131cfdb7d0e627dd490acab383d5fc8cfc95e966ced3dfe3d315ad76a0452a50e8b4e9882ca9294eaa12f73629affc90505f48aedc1da6081259226056012decf4a60c3e252860cc7452e6058d8029d2d0971496e19cc94558c96678bd1b074894271b2bff2810f8a684c9329c584641bfeeb2fd4db920aec9d18e1b05803c37bc1b3cd1b3782a713ea754b1a35f137e21e31afd230aa1ba53cbc0af2ec98c860c993441007f910b8814e115725753f7a05d0b0b290048dd6aa97f3ae6f14b9652db8017e23303a3aa52c9fd5b83aa3f8ecb5e280425709237cd6fc6728664168bb2dda083ceab3ca528a78432104912e96a2ff9057885b1aebf1a8423b5c390f32bc5f3f0093870a27d8eee3576aa70a9b1ee21041a64e7dc0bbac8b46e7aa6a825bddeeab7f7bdad2ffa238a6cc77532551ebe4e650faadf67328371563e17b508ace6ed5dfcec60cd4b90ca23260f8ae78d937b7503f9595f233c7b719b837484bb684b2f9ca4df4d716a7de9ceadf0212e7f24574f1f14015ffb583c9ad2747cbddf2f0903d3dfc60eb204c6b581ba9caba16471d1bfb09b8b96ddadadcc97435ad6fe5ed249e25b01e0d5af5fe0430e4fb18eefce981fa6c78abab2a35f186137f256d8719f2053316680c03e7499941efd68a0ff066519f4d02608c320228c8cdc42fde4abecefde9d2113f730529e0215f284732d267c6804a49778a4ee32fb860122b4584a519ced4dfc0c8a3d25d90142d16e9e36eff436881dbddd06b99dee8c4e2ff7dbc19edaa7e1ad5b1f9d713abd72d4e4547b3a46ab6acfaa7d92b6da52b75bd530f6d833d156b95f1da248219c85fe807af0a47ae22c20392c889f5e89a3524cf42412a70277fe98196deb7a4c2b136fba8cc411afa84ab762d9b95b284d95f9220b3789ab54dcfb21cd2b99fcd501263cf23654c332a3aa37c6dac0c9c54e5602a691192707708e53abea4c63b7943b1348d3cf0bdce7e4076e3a4ed9afe8651cd8e953e30104534dcb6e85ab77773b60be7e46f6cd07ea8fc675d27593223dadb9cba83f3976e5133d79afd6e4a83877bd8f0d56bd99f3d996df0295838ffb421781da6c088f18f1f94e149659f02f01b99c73de89826f65bd3dbb44468518e0f0dd5fca324d3c9864d192040cd067b54b8801610bf8391ded4df50968bf7a0d0c0f7c56f47da904ad9bcc52e8690a844b7b0be9a4e7bc8ae396382ad4f6910df9eee9f19cacd9fb0aa9a378ee8b2e58befcd7158d1ea6cdc73cc63233d8c09fb4a04e7e672d7d0c7187f7b027e87560649eb8dfe97c81f3dea408f7f9c171e38892f077e9423e91b55a4635ddbea7b535d31c8ab28ae5030f04356bf05c737884a351a8da8ae81535ed5e9628befc767cd431907dd388c00b9a8d8ebf5b57017f70830dac5eb2872b77da544742d2c93940a945ed060e387e14680ea92e9a93799e64aca69ded0219486df2541b9fa209923c8d0f57978a39eba4fd17e9108243101d441cfe2c0374aaa65c434cea22e5d103588d526fc92531249ff8b8cd4783d8b915584c5ac71ff330797c85d5f66510a403cf996bec00239cef1730a35c1138b8f7f63f14e253e4d91999632d80f23076f7af79a38388e935e198d666efe799a4b8c2d82e443f01ea4907183d3bc9fb5bb94e119b1fb34beaaf1c0d296c4898600f99488a243c00309ee68a3c7297f3851ca8226eb72103d3e9981ab2dbc7dce584795aa452ee7950508f6016f04c965309f381edb1ce91059c3c21e0f7adf67f966d690545fb9597529fd5885937c433c5a156867951fc419f92ad55795a4267b0c66b59ba22ba782f92d431e37748aa41949a954b3c68120ddac938788b6d753d9152a562f8bf972c744359def08a16da4c077df2795710397e70faa3fe8e004ccf7275ad42d518094821207ad6813f66bf5c15e1a61298b3f977d7fd783f7cac82e88b652a14b9f6df36425cf89507428a6594d2200f392faea2542e6e51faa934ec1218652afd32c1f09ba277f8faa0b0fbf60b82340b42f88115394b36524026e71638bb7faec318168164e7448214f755c36dba743b15858788365171e521b9722d7950d48cb274b67361c89ef262a320186b8fb4ab84394fffdba09b14ca27608e6f49b6513d84a182459666d66902ef5cd3fa048d811401b910fc284c2d07dfe83bd398321f5e4a528b5c76dd2a4bbb7e68ce5826788c065cc686c8e174cc7cafdb289b0e4accd73fb54cccfdf3111a22a0fd764e5677cb54c94f7387b3290e8ea96a43ab678c514a33f497c3ed42ddaae3b1bad3c137d2b4aa193b2de5f4ac6e3f2a1404fcdf9919e18fb4cc8c042a72b550cf01d1dfffb8857d05d92430a669197cd66b7c7c88c539ff61aa880b94b5375989bae5fb8f381f8b211e52fd1bc3060eb2ad77d8de778a49ef3a21d99", 0xfa5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=[0x1002, 0x5], &(0x7f0000000240), 0x0, 0x12}}, 0x40) 636.746672ms ago: executing program 4 (id=2204): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45", 0xc8}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 614.788104ms ago: executing program 2 (id=2205): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$kcm(0x11, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r4, {0x0, 0x10}, {}, {0x8, 0x4}}, [@filter_kind_options=@f_flow={{0x9}, {0x54, 0x2, [@TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1e3a9}, @TCA_FLOW_POLICE={0x40, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x7, 0x2, 0x7f82e9d5, 0x6, {0x5, 0x1, 0xfff9, 0xfff, 0xd31}, {0xfc, 0x2, 0xe8b2, 0x0, 0x1ff, 0x65bb}, 0x200, 0x0, 0x5}}]}]}}]}, 0x84}}, 0x2) close(r2) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r1, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0x0, r7, 0x42}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)="27030200000314000e00002fb96dffff1144ee163cddcb00"/38, 0x26}, {&(0x7f00000004c0)="f058fe7dad777f8f", 0xa888}], 0x2}, 0x4005) 574.510416ms ago: executing program 4 (id=2206): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000100)={0x6, 0x1f, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000140)={0x9, 0x1fc, 0x9}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0xfa, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0xda2, 0x8166, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f00000004c0)={0x200, 0x1fb, 0x9}) r5 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000280)={0x40, 0x403, 0xc}) dup(r2) close_range(r0, 0xffffffffffffffff, 0x0) 568.827876ms ago: executing program 0 (id=2207): r0 = getpid() ptrace$setsig(0x4203, r0, 0x1, 0x0) 464.070603ms ago: executing program 0 (id=2208): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x10, 0x3, 0x6361, 0x5, 0x1, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xfffffffffffffff4, 0x2000000002, 0x8, 0x0, 0x5, 0x6}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0xc04c001}, 0x20000804) r8 = socket$unix(0x1, 0x1, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x10080000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {0x8, 0xb}, {0xd, 0xfff3}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c065}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 463.606622ms ago: executing program 4 (id=2209): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0x10002) fcntl$addseals(r1, 0x409, 0x7) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='@\x00\x00'], 0x40}}, 0x90) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x11, r5, 0x0) 394.606777ms ago: executing program 2 (id=2210): prlimit64(0x0, 0xe, &(0x7f0000000180)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000340)='./file1\x00', 0x0, &(0x7f0000000000)={[{@space_cache_v1}, {@clear_cache}, {@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0xff, 0x50d4, &(0x7f00000051c0)="$eJzs3U+IVWUfB/Dnzjg6KDjXnbp48QW3wiQKRURDaFaYc82CosVMLYIQYVAwFy3EgpIWDgha4cJgWmR/nFVFC3GVBEEQBcEgzEKQdkIxGC6Ke8957pz7HO+5dyZ1TD+fmDnnOb/zPOeZy1nc783n3AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhhJNz585V1bdemTm7Y2DP1Us3T+w8NTE6H0KtdbyW1yeeeuaFNw5MPD8cO0zuz7b1erchs67zWWN1x8Fmv86f10IIQ8kAg/l292Bp1OLu4fKAlfZfXNh25NbeXTPHxg9dOLp5qvyn0zS80hNYKfl9dW3xXhpr/R5Izmi3C7dereMWzfqnN9w9+SMAgCUZbbQ27bej+Vvcdvt4Wk/aY0l7OmnHdwjTxcZyZOOu7jbPLWl9heY5lkWFNd3mWU/q+evfbjeSekjbnVFjCfPsPDWPNMPd5jmV1FdqngAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD3k6c/+eJ6VX3rlZmzOwb2XL1088TOUxOj8yHUW8drWbn2xMLcwqa3dj/63e4vP/6zPn5yMO8Xt6sKJ4ff4s5jIyG8Xqhci8P+vj6ERmeh1QwflQtvtnaejQUAAAAeJJtavwfa7SwODnW0a600WWv9F2Vhcf/FhW1Hbu3dNXNs/NCFo5unlj9eo8t4Y7cdr92uL/7UCsE4xt90vMV6PPVwaZxq6Yhpnn959MPtVf1L+b9enf/jKyf/AwAA8G/I/+k41Xrl//nPX91X1b+U/7d0XLKU/+OMY/4fCMvL/wAAAHA/u9v5f6w0TrVe+f/r9/edrupfyv+j/eX/VcVpx4M/xgkfHAlhtNfUAQAAgC7i/3df/Ggh5vXsk4M0r7+49fpQ1Xil/D/WX/6vHBQAAAC4p34488jfVfVS/m/0l//X3NVZAwAAAEvxv/cmD1TVS/l/sr/8vzbf5isfsk7fx3+FcHokhOHmzlRWuBKmn2wXAAAAgDsk5vSXvt18tOq8Uv6fqn7+f3zSQVz/3/H8v9L6/0Ihe+rf4x4MAAAAwMOovJ4/Ph4/++aCbt+/3+/6/09//nVD1fVL+f94f/l/sLi9k9//BwAAAMvwX/v+v1dK41Tr9fz/t9/dsLT8P91f/o/bdcU/73J8fd4ZCWFjcyd/muBn8XIHk8LsUKHQ0kh6HIg98sLsmkKhZSrpsX0khP83d44nhQ2xMJ0UbqzPC+eTwk+xkN8P7cJXSeFyvNPOrM+nmxa+iYV8gcVsXEGxrr0kIunxR7cezcJte8y1Lw4AAPBQieE5z7JDnc2QRtnZWq8T1vY6YaDXCYO9TliVnJCe2O14mOwsxON//TL+XKhQyv/n+8v/8aVYnW26rf8Pcf1//r2G7fX/k7FQTwqzsdBInxjQiNfIwu4H8Rr1Rt7jxsZ2AQAAAB5o8XOBwRWeBwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAPe/ceY8dVHw787PN61+vdDUHKQxYxL0N+ktdrOw7WLyCcVBEIpGQtov6DQtbYm9TxBhs/Co4s1RhUlCKEC66IQh+2RFSnEsgqbXmEEosqQVUtGoU2fziPpgWEKkGjFNclSiRX986c2bln9j78WNsbPh/Je8+933POzDn33vGcmblnAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgt8PV373hy+3i7/jR1796U+8HXvjBbw6u/9I9ky+FMNV4vScL97zvzHNnrvvU7Ru+d/s3Hjk9fudDg3m5PB6W1v/05k8+F2v92bIQvt0TQn8aWDWSBQby5yOxvuUjIVwV5gJFiZnhrES64PDkUAhHwlygqOq7QyGMlAJ3PfPDJ75YTxweCuGdIYRauowXatkyhtLAysEsMJwGdvRngf89mykC3+nNAnDB4peh+NAfn2rOMD5/uRafv4GLtmKXV9q8vpgYb53vV7cu8EqVDKYvTF3Q21apjgVR+Xqc8G1bBN+2Sj8f8raVd6TyPZSzc6Fa6N06c+/mvbN74iu9YWKir1VNC/Q+n3pl/5ZzSS+az2FcgfGL8jm8//DNzw5+7I4XH3n98f2na19bfqGr2ap7F1ot5J+5RfM+RhttTxbB16+yl7TCTlcI4fSJk/vbxSvj//H24//4cY6PvU25Y62vjWZj8/jKSEy8PJqNzQEAAGDRWAxHTQdX/OtP29VXGf+v6O78fzzlnw/ms9aeCGFjI/HZsRCubbyeBR6Li/v4WAhvbaSmmgO3JoETIVzXSNxYVJWUWBJLrEgCvxjNAxuTwFMxMJUEHo2BQ0ngczFwPAlsiYETSeC2GAjbmtvx/0bzdnQdGIqB6awTj8erEH49GpeW9NVzRVUAAAAXST46HGh+WrrW4UIzxOHl8aFOGeIV2C0z1JIa0hFsMaxqWUN/pxp6O9VQtPtA++ZXau7pVHPlMoye5gz/c+qaHaGNyvh/sv34vzbPivRUzv+HyU2Nh5i7N4/MFhmmp5oyAAAAABfg9948vbldvDL+39jd9f/xmEhfKXM4GQ9DbB8LYbI5kFV7SzWQnfVemgcAAABgMSjOxxfnwrflj9kl2ul4upp/6hzzxxP/G+fNv+PH//J4u/WtjP+nurv+f7j5MVuJp+JafGUshCWlwI/iWtYDDSti4KX3Nwfy9j8VO+ALsar8woSiqi/EEtMxMJkEjrQq8XRR4trmQP5mFQv/bNGObXmJUgAAAAAuuXg4IJ6Xj9f/r/nbP3yyXbnK+H/63K7/b4yDK5f3zy4NYXV/CH3pDwNODmcTA8bASE+e+PvhrK6+tKqDwyHcUm9YWtV/5PP/96dzDP5kKKsqBq5927FXVtYTXx8KYXU58OxHj66vJ/YmgWLhvzsUwg311qYL/7sl2cIH0oU/vCSEt5QCRVVbloRQX9hgWtU/1PL7GKRVHa+FcHUpUFT1nloI+wIAi1X8v3Rr+cXd+x7cvnl2dmbXAibiQfyhcO+22ZmJLTtmt9ZarNPWZJ2b5jH6TLVN3d765vk4R9Hdx8a6SRc/FJwsLys/kF+5cjB/HneGBhrtXDvQ9HRd2uR3v726iFDalWrV5N4FbvJwuZK5N7FSf8w/GJaGJXt3z+ya+PTmPXt2rcn+dpt9bfY3nmfK+mpN2lfD861bFx+PltNlJc63r1aWK1m954Gdq3fve3DVtgc23zdz38wnNkyuW7vh5sn171ldb9Rk9rdDS1fOV3PS0rNHu2zWRWzp9f2lSi7FRkNCQmKxJQYH7jzVbvNTGf/vbD/+j1uduOHP52dodf5/PJ7mz16fO80/HQNHuj3/P97qbH5xYcCKJHAgBg44zQ8AAMAbQzwcGY9mxoPSB971wvvalauM/w909/v/izT/fzF1/YdaTfN/Yywx2Wr+/3Sa/2L+/wOt5v9Pp/kv5v8/chnm/99bBJIu+bX5/wEAgDeCSzf/f8fp/dMbBFQydJzeP71BQCVDx2n8u71BwDnP//83v1yzPrRRGf8f6m78b+J+AAAAuHJcc9sNP24Xr4z/j3Q3/r/08/+FVtf/r2gVmGo1MaD5/wAAAFikWs3/98xHdr6/XbnK+P94d+P/eNlFb1PuWOtro9mcdiGd0+7l0eInAwAAALA49IaJiYEu8zZNjHrr+S/zVJwKtE267NDnj53b7/9PdDf+b/pdxv2Hb3528GN3vPjaI68/vv907WvL587/AwAAAAun2+MSAAAAAAAAAAAAAADA5ffo1d+ad16AqPL7/7Cp8Xqr3//H+/413TTxTD4Z4IE4s/6XxkzzBwAAAAvroVtffTj+u+/Lf/Rf7fJWxv/j3Y3/4/0F8vvgZbfeOxHv//fZsRAat9YbzwKPxcV9fCyEtzZSU7FEdkO9D8USk1ngsThh4o2xxPRUc1VLYuB4EvjFaB44kQSeioH8KMWxeGPAPx4NYX0jtam5xM5YYjwJ3BkDK5LARAxMJoFlMbAxCfxyWR6YSgL/FAP5zQeLvvrWsryvAAAAzkU+zhpofhrScd7x/k4Zejpl6LiI4U4ZejtlqLXIEJ//dVyHgfJ8/HmG+NJAWutQUkslQ7wZ3vk3vZiu7+nmnGnByqL7YsHx5pwxw85/vukroY3K+H9Fd+P/y3j///Ru/htjYEUS2BkDG5PA9KY8cOSa5oD7/wMAAHBla3X//9G3/NWhduUq4//J7sb/8UDEm5tyx1o73/8/f37Xh7+5r7HKJ0dDeHs5sP3g9qvqiUdHQ3hXOfDE3Tc2Ru0H0xLff/G2n9cT96SBD65605l64r1JYDp20nVpIB5VObMsCcTu/UkaiP1xPA0M5oGHlmXt6En76j9Hsr7qSfvq1Eh2eUVP2lffHsmW0ZM28HASKBr4yTQQG3hHHuhN1+qbS7O1ioGRWPQvlhYXfQAAcGWKe4ED4d5tszOT6U94r+9vfoyabln+mWq1PV0u/vl4a/K7j411k+5L90VrRVUDoVZvwprK7mo5S0+jlRenlg5d9+YWTe50t/feFuVS59p1g61bNJS1aGLLjtmtAx0bvq5zlrX9HbOsqQx2yll6G13aRS1drEsXLeqyb7pY5fi8N0xM9CW5/n8MjocmnT4R3d6vr3yf/1afgnKeo5//91fb1VcZ/2/sbvwf27M0lD7On4u1/mxZCN/umTsaUQRWjWSB2NyRODxePhLCVaV+KErMDGclBpMFhyeHshHqYFrVd4eyYwzx+V3P/PCJL9YTh4dCeGfpvSqW8UItW8ZQGlg5mAWG08CO/iwQr/woAt/pzQJwwYqNQvxA5T91KYzPX67F5++Nck/QtHmVa6DmyTffNneh1NIX8muqCuf2tlWqY0FUvh4nfNsW47ct+LaVd6TyPZSzc6Fa6N06c+/mvbN74ivlPdmKBXqfy3up3aQvwufwwPmvbWe1dAUmk83H5Pzl5v8c9sTq7j9887ODH7vjxUdef3z/6drXlne9Gi3EgcKT//2mq8rdu9BqIf/MLbrtyZTtyWL8b2Dc2xZCOPTnQ59sF6+M/6e6G//3J48Nr8bO3D0WwrtLnXsydv/vjGXbwVIg20peXQ1kl9z/dLTllhMAAAAutuJwR3G8YFv+mP0gPB0nV/NPnWP+eLxi47z5u13v/U/+/mPt4pXx/3T78f+SZDWd/3f+nwXi/P+8rvRD0UvSFw5c0KHoSnUsCOf/53Wlf9uc/5+X8//O/8/H+f8OnP+f15X+tlX2knba6QohnL1+4OF28cr4f2d34//fsvn/09n8i/n/00n7i/n/p1vN/7+z1fz/B8z/DwAALKgWE82n47zK5PyVDOnk/JUMPUmGc7/FQMdp9M3/n87/f/DPbtkT2qiM/w90N/6PH4eR8tIXy/z/45talNi4qXl1i8ChGNjpjgEAAABcRvEAQbzovdsZJgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhYd7x6ZnO7+Dt+9PWv3tT7gRd+8JuD6790z+RLIWxrvN6ThXved+a5M9d96vYN37v9G4+cHr/zoVpebiB/XN6UO9b62mgIR0qvjMTEy6P1J3OBuz78zX399cTJ0RDeXg5sP7j9qnri0dEQ3lUOPHH3jdfUEwfTEt9/8baf1xP3pIEPrnrTmXrivXmgJ13dP12WrW5PurpfXBbCWClQrO79y5qrKpbxgTzQmy7jL0eyZcTASCz68Ei2jBiYjSW2LQlhdX8IfWlV/1jLqupLq/peLauqL63qD2oh3BJC6E+r+rfBrKr+tOVPD2ZVxcC1bzv2ysp64uhgCKvLgWc/enR9PbErCRQL/8hgCDfUPzLpwr81kC18IF34nwyE8JZSoKhqeiCE+sIG06pO9GdVDaZVfaM/hKtLgaKqm/pD2Be4XOKGZGv5xd37Hty+eXZ2ZtcCJgbzZQ2Fe7fNzkxs2TG7tZasUys9pfTZz5x/259/Zf+WRuLuY2PdpIv1miyvy9NTlRfLz/vzpwONdq4daHq6brE0ebhcydybWKk/5h8MS8OSvbtndk18evOePbvWZH+7zb42+9uXR7O+WrNY+mpluZLVex7YuXr3vgdXbXtg830z9818YsPkurUbbp5c/57V9UZNZn8vRkuPXvqWXt9fquRSbDQkJCQWW6K3aes2eaVvxys7+nMrOhBqjQ10ZVhRztLTaOXFaPSt59Ha3Lk2ujIkqbRoTWXgUMmytnOWdZUxw1yWoSxLY1+wMjgs19Tb6NL4vDdMTPS16ofx5qfl7v3VBXTvqdh1XaYBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4P3bgQAAAAAAAyP+1EaqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqwAwcCAAAAAED+r41QVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVhR04FgAAAAAQ5m8dRs8GAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXAoAAP//Qczu7Q==") openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000280)={0x84, @dev={0xac, 0x14, 0x14, 0xb}, 0x5, 0x3, 'sh\x00', 0x1, 0x4, 0x72}, 0x2c) fallocate(0xffffffffffffffff, 0x0, 0x2dc2, 0xfffb) 21.072098ms ago: executing program 0 (id=2211): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x44, 0x2, 0x6, 0x3, 0x0, 0x0, {0xd}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r1, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x4000050) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) 0s ago: executing program 0 (id=2212): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const={0x7, 0x0, 0x0, 0xa, 0x3}]}}, &(0x7f0000000380)=""/86, 0x26, 0x56, 0x1, 0xed}, 0x28) kernel console output (not intermixed with test programs): [ T9396] tipc: Disabling bearer [ 188.136064][ T9401] tipc: Enabled bearer , priority 0 [ 188.143605][ T9401] device syzkaller0 entered promiscuous mode [ 188.162788][ T9401] tipc: Resetting bearer [ 188.209790][ T9405] device syzkaller0 entered promiscuous mode [ 188.218918][ T9400] tipc: Resetting bearer [ 188.228008][ T9400] tipc: Disabling bearer [ 188.245246][ T23] usb 1-1: config 0 has an invalid interface number: 35 but max is 0 [ 188.255939][ T23] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 188.267938][ T23] usb 1-1: config 0 has no interface number 0 [ 188.274884][ T23] usb 1-1: config 0 interface 35 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 188.477231][ T23] usb 1-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f [ 188.486486][ T23] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.494592][ T23] usb 1-1: Product: syz [ 188.498984][ T23] usb 1-1: Manufacturer: syz [ 188.503775][ T23] usb 1-1: SerialNumber: syz [ 188.510919][ T23] usb 1-1: config 0 descriptor?? [ 188.560650][ T23] radio-si470x 1-1:0.35: could not find interrupt in endpoint [ 188.568292][ T23] radio-si470x: probe of 1-1:0.35 failed with error -5 [ 188.778168][ T23] radio-raremono 1-1:0.35: Thanko's Raremono connected: (10C4:818A) [ 188.797355][ T1110] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 188.806497][ T1110] usb 2-1: USB disconnect, device number 6 [ 188.997256][ T23] radio-raremono 1-1:0.35: raremono_cmd_main failed (-71) [ 189.005288][ T23] radio-raremono 1-1:0.35: V4L2 device registered as radio48 [ 189.015330][ T23] usb 1-1: USB disconnect, device number 5 [ 189.021695][ T23] radio-raremono 1-1:0.35: Thanko's Raremono disconnected [ 189.119974][ T9416] device syzkaller0 entered promiscuous mode [ 189.388122][ T1110] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 189.415897][ T9428] device syzkaller0 entered promiscuous mode [ 189.457194][ T9430] device syzkaller0 entered promiscuous mode [ 189.492493][ T9434] device syzkaller0 entered promiscuous mode [ 189.597744][ T9436] tipc: Enabling of bearer rejected, failed to enable media [ 189.607918][ T9436] device syzkaller0 entered promiscuous mode [ 189.657188][ T1110] usb 4-1: Using ep0 maxpacket: 32 [ 189.698237][ T9440] tipc: Enabled bearer , priority 10 [ 189.724128][ T9440] device syzkaller0 entered promiscuous mode [ 189.760175][ T9440] tipc: Resetting bearer [ 189.767326][ T9444] tipc: Enabled bearer , priority 0 [ 189.778006][ T9439] tipc: Resetting bearer [ 189.791091][ T9439] tipc: Disabling bearer [ 189.799477][ T9444] device syzkaller0 entered promiscuous mode [ 189.816942][ T9444] tipc: Resetting bearer [ 189.824947][ T9443] tipc: Resetting bearer [ 189.834213][ T9443] tipc: Disabling bearer [ 189.932560][ T9450] device syzkaller0 entered promiscuous mode [ 189.968538][ T1110] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 189.990491][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.010975][ T1110] usb 4-1: Product: syz [ 190.016407][ T1110] usb 4-1: Manufacturer: syz [ 190.022656][ T1110] usb 4-1: SerialNumber: syz [ 190.043691][ T1110] usb 4-1: config 0 descriptor?? [ 190.093317][ T1110] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 190.159102][ T9464] device syzkaller0 entered promiscuous mode [ 190.324533][ T9470] device syzkaller0 entered promiscuous mode [ 190.472186][ T9472] device syzkaller0 entered promiscuous mode [ 190.546364][ T9474] tipc: Enabling of bearer rejected, failed to enable media [ 190.557786][ T9474] device syzkaller0 entered promiscuous mode [ 190.606794][ T9476] tipc: Enabled bearer , priority 10 [ 190.614842][ T9476] device syzkaller0 entered promiscuous mode [ 190.631238][ T9476] tipc: Resetting bearer [ 190.639733][ T9475] tipc: Resetting bearer [ 190.648930][ T9475] tipc: Disabling bearer [ 190.713671][ T9478] tipc: Enabled bearer , priority 0 [ 190.740291][ T9478] device syzkaller0 entered promiscuous mode [ 190.760254][ T9478] tipc: Resetting bearer [ 190.771741][ T9477] tipc: Resetting bearer [ 190.804281][ T9477] tipc: Disabling bearer [ 190.973414][ T9484] device syzkaller0 entered promiscuous mode [ 191.077124][ T23] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 191.092620][ T9486] device syzkaller0 entered promiscuous mode [ 191.349426][ T9494] device syzkaller0 entered promiscuous mode [ 191.437324][ T23] usb 3-1: too many endpoints for config 0 interface 0 altsetting 254: 253, using maximum allowed: 30 [ 191.467104][ T23] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 191.495072][ T23] usb 3-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 191.527110][ T23] usb 3-1: config 0 interface 0 has no altsetting 0 [ 191.531097][ T9499] device syzkaller0 entered promiscuous mode [ 191.544151][ T23] usb 3-1: New USB device found, idVendor=044e, idProduct=120c, bcdDevice= 0.00 [ 191.563737][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.584048][ T23] usb 3-1: config 0 descriptor?? [ 191.615400][ T9417] udc-core: couldn't find an available UDC or it's busy [ 191.623312][ T9417] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 191.730410][ T9503] tipc: Enabled bearer , priority 10 [ 191.739340][ T9480] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1642'. [ 191.748724][ T9503] device syzkaller0 entered promiscuous mode [ 191.767682][ T9503] tipc: Resetting bearer [ 191.779957][ T9502] tipc: Resetting bearer [ 191.798136][ T9502] tipc: Disabling bearer [ 191.919412][ T9506] tipc: Enabling of bearer rejected, failed to enable media [ 191.935200][ T9506] device syzkaller0 entered promiscuous mode [ 192.078538][ T1110] gspca_ov534_9: reg_w failed -71 [ 192.079614][ T23] hid-alps 0003:044E:120C.000A: unbalanced collection at end of report description [ 192.102450][ T23] hid-alps 0003:044E:120C.000A: parse failed [ 192.111318][ T23] hid-alps: probe of 0003:044E:120C.000A failed with error -22 [ 192.283358][ T4248] usb 3-1: USB disconnect, device number 6 [ 192.372078][ T9513] tipc: Enabled bearer , priority 0 [ 192.381793][ T9513] device syzkaller0 entered promiscuous mode [ 192.403804][ T9513] tipc: Resetting bearer [ 192.411838][ T9512] tipc: Resetting bearer [ 192.420565][ T1110] gspca_ov534_9: Unknown sensor 0000 [ 192.420630][ T1110] ov534_9: probe of 4-1:0.0 failed with error -22 [ 192.435119][ T1110] usb 4-1: USB disconnect, device number 5 [ 192.442718][ T4845] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 192.470557][ T9512] tipc: Disabling bearer [ 192.613351][ T9515] device syzkaller0 entered promiscuous mode [ 192.768456][ T9518] device syzkaller0 entered promiscuous mode [ 193.027883][ T9529] device syzkaller0 entered promiscuous mode [ 193.165734][ T9533] device syzkaller0 entered promiscuous mode [ 193.176528][ T9535] tipc: Enabled bearer , priority 10 [ 193.185387][ T9535] device syzkaller0 entered promiscuous mode [ 193.210387][ T9535] tipc: Resetting bearer [ 193.260290][ T9534] tipc: Resetting bearer [ 193.282185][ T9534] tipc: Disabling bearer [ 193.330081][ T9540] tipc: Enabling of bearer rejected, failed to enable media [ 193.340268][ T9540] device syzkaller0 entered promiscuous mode [ 193.462682][ T9544] tipc: Enabled bearer , priority 0 [ 193.505094][ T9544] device syzkaller0 entered promiscuous mode [ 193.558942][ T9544] tipc: Resetting bearer [ 193.588678][ T9542] tipc: Resetting bearer [ 193.624932][ T9542] tipc: Disabling bearer [ 193.670005][ T9548] device syzkaller0 entered promiscuous mode [ 193.783989][ T9554] device syzkaller0 entered promiscuous mode [ 193.790615][ T9556] usb usb8: usbfs: process 9556 (syz.0.1673) did not claim interface 0 before use [ 193.943521][ T9563] device syzkaller0 entered promiscuous mode [ 194.044139][ T9566] pic_ioport_write: 9 callbacks suppressed [ 194.044156][ T9566] kvm: pic: single mode not supported [ 194.054152][ T9566] kvm: pic: single mode not supported [ 194.059723][ T9566] kvm: pic: level sensitive irq not supported [ 194.066469][ T9566] kvm: pic: level sensitive irq not supported [ 194.073179][ T9566] kvm: pic: single mode not supported [ 194.081228][ T9566] kvm: pic: level sensitive irq not supported [ 194.089468][ T9566] kvm: pic: single mode not supported [ 194.092753][ T9569] tipc: Enabled bearer , priority 10 [ 194.125446][ T9569] device syzkaller0 entered promiscuous mode [ 194.165122][ T9571] device syzkaller0 entered promiscuous mode [ 194.179335][ T9569] tipc: Resetting bearer [ 194.204328][ T9568] tipc: Resetting bearer [ 194.214204][ T9568] tipc: Disabling bearer [ 194.262767][ T1423] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.269169][ T1423] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.313403][ T9575] tipc: Enabling of bearer rejected, failed to enable media [ 194.348332][ T9575] device syzkaller0 entered promiscuous mode [ 194.430390][ T9581] tipc: Enabled bearer , priority 0 [ 194.438570][ T9581] device syzkaller0 entered promiscuous mode [ 194.463816][ T9581] tipc: Resetting bearer [ 194.501446][ T9584] device syzkaller0 entered promiscuous mode [ 194.509074][ T9580] tipc: Resetting bearer [ 194.526098][ T9580] tipc: Disabling bearer [ 194.625659][ T9588] device syzkaller0 entered promiscuous mode [ 194.715245][ T9592] device syzkaller0 entered promiscuous mode [ 194.835730][ T9598] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1691'. [ 194.867090][ T23] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 194.904871][ T9603] tipc: Enabled bearer , priority 10 [ 194.914129][ T9603] device syzkaller0 entered promiscuous mode [ 194.942433][ T9603] tipc: Resetting bearer [ 194.952172][ T9602] tipc: Resetting bearer [ 194.973444][ T9602] tipc: Disabling bearer [ 195.017484][ T9607] device syzkaller0 entered promiscuous mode [ 195.118019][ T9611] tipc: Enabling of bearer rejected, failed to enable media [ 195.127182][ T23] usb 3-1: Using ep0 maxpacket: 32 [ 195.128614][ T9611] device syzkaller0 entered promiscuous mode [ 195.225156][ T9613] device syzkaller0 entered promiscuous mode [ 195.251203][ T9615] device syzkaller0 entered promiscuous mode [ 195.277413][ T23] usb 3-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 195.291862][ T23] usb 3-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 195.304474][ T23] usb 3-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 195.343867][ T9617] tipc: Enabled bearer , priority 0 [ 195.353244][ T9617] device syzkaller0 entered promiscuous mode [ 195.373600][ T9617] tipc: Resetting bearer [ 195.402539][ T9616] tipc: Resetting bearer [ 195.418903][ T9616] tipc: Disabling bearer [ 195.498011][ T23] usb 3-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 195.517530][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 195.531136][ T23] usb 3-1: Product: syz [ 195.535363][ T23] usb 3-1: Manufacturer: syz [ 195.542253][ T23] usb 3-1: SerialNumber: syz [ 195.619176][ T23] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 195.645448][ T23] imon 3-1:155.0: unable to initialize intf0, err -19 [ 195.649650][ T9627] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 195.657119][ T23] imon:imon_probe: failed to initialize context! [ 195.666804][ T23] imon 3-1:155.0: unable to register, err -19 [ 195.729076][ T9634] tipc: Enabled bearer , priority 10 [ 195.736587][ T9634] device syzkaller0 entered promiscuous mode [ 195.752411][ T9634] tipc: Resetting bearer [ 195.759669][ T9633] tipc: Resetting bearer [ 195.769973][ T9633] tipc: Disabling bearer [ 195.866931][ T9636] device syzkaller0 entered promiscuous mode [ 195.873279][ T13] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 195.917434][ T4845] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 196.117113][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 196.157294][ T4845] usb 4-1: Using ep0 maxpacket: 32 [ 196.237398][ T13] usb 1-1: config 0 has an invalid interface number: 6 but max is 0 [ 196.245727][ T13] usb 1-1: config 0 has no interface number 0 [ 196.277256][ T4845] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 196.310132][ T9644] tipc: Enabling of bearer rejected, failed to enable media [ 196.335394][ T9644] device syzkaller0 entered promiscuous mode [ 196.418306][ T13] usb 1-1: New USB device found, idVendor=2f33, idProduct=92f7, bcdDevice=7f.1c [ 196.427969][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.436670][ T13] usb 1-1: Product: syz [ 196.442042][ T13] usb 1-1: Manufacturer: syz [ 196.449028][ T13] usb 1-1: SerialNumber: syz [ 196.456495][ T13] usb 1-1: config 0 descriptor?? [ 196.467341][ T4845] usb 4-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 196.475386][ T9646] device syzkaller0 entered promiscuous mode [ 196.476510][ T4845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.491003][ T4845] usb 4-1: Product: syz [ 196.495259][ T4845] usb 4-1: Manufacturer: syz [ 196.500524][ T4845] usb 4-1: SerialNumber: syz [ 196.507598][ T4845] usb 4-1: config 0 descriptor?? [ 196.549486][ T4845] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 196.589064][ T9649] tipc: Enabling of bearer rejected, failed to enable media [ 196.598429][ T9649] device syzkaller0 entered promiscuous mode [ 196.739290][ T13] cdc_acm 1-1:0.6: More than one union descriptor, skipping ... [ 196.751356][ T13] usb 1-1: USB disconnect, device number 6 [ 196.866510][ T9654] tipc: Enabled bearer , priority 0 [ 196.874269][ T9654] device syzkaller0 entered promiscuous mode [ 196.890629][ T9653] tipc: Resetting bearer [ 196.917474][ T9653] tipc: Disabling bearer [ 196.919975][ T4262] usb 3-1: USB disconnect, device number 7 [ 197.044608][ T4248] hid-generic 0005:0006:5508.000B: item fetching failed at offset 3/4 [ 197.054526][ T4248] hid-generic: probe of 0005:0006:5508.000B failed with error -22 [ 197.153990][ T9664] tipc: Enabled bearer , priority 10 [ 197.162029][ T9664] device syzkaller0 entered promiscuous mode [ 197.179460][ T9664] tipc: Resetting bearer [ 197.186463][ T9663] tipc: Resetting bearer [ 197.197350][ T9663] tipc: Disabling bearer [ 197.207502][ T4845] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 197.214503][ T4845] gspca_pac7302: probe of 4-1:0.0 failed with error -71 [ 197.252357][ T4845] usb 4-1: USB disconnect, device number 6 [ 197.280669][ T9667] device syzkaller0 entered promiscuous mode [ 197.400386][ T9669] tipc: Enabling of bearer rejected, failed to enable media [ 197.445078][ T9669] device syzkaller0 entered promiscuous mode [ 197.495462][ T9673] device syzkaller0 entered promiscuous mode [ 197.752586][ T9683] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 197.764151][ T9683] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 197.810942][ T9685] tipc: Enabled bearer , priority 0 [ 197.858443][ T9685] device syzkaller0 entered promiscuous mode [ 197.894213][ T9684] tipc: Resetting bearer [ 197.905094][ T9684] tipc: Disabling bearer [ 197.920128][ T9695] tipc: Enabled bearer , priority 0 [ 197.932611][ T9695] device syzkaller0 entered promiscuous mode [ 198.012677][ T9698] device syzkaller0 entered promiscuous mode [ 198.068561][ T9702] netlink: 'syz.1.1733': attribute type 1 has an invalid length. [ 198.101147][ T9706] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 198.113547][ T9706] bond1: (slave vxcan3): Error -22 calling dev_set_mtu [ 198.126903][ T9704] tipc: Resetting bearer [ 198.161367][ T9694] tipc: Resetting bearer [ 198.175756][ T9694] tipc: Disabling bearer [ 198.184786][ T9702] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1733'. [ 198.202718][ T9702] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 198.255183][ T9702] device geneve2 entered promiscuous mode [ 198.265253][ T9702] bond1: (slave geneve2): making interface the new active one [ 198.273896][ T9702] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 198.329002][ T9709] device syzkaller0 entered promiscuous mode [ 198.425239][ T9714] device syzkaller0 entered promiscuous mode [ 198.432646][ T9717] tipc: Enabling of bearer rejected, failed to enable media [ 198.515913][ T9717] device syzkaller0 entered promiscuous mode [ 198.912781][ T9740] tipc: Enabled bearer , priority 0 [ 198.931924][ T9740] device syzkaller0 entered promiscuous mode [ 198.981769][ T9740] tipc: Resetting bearer [ 199.031815][ T9739] tipc: Resetting bearer [ 199.054284][ T9739] tipc: Disabling bearer [ 199.103153][ T9743] netlink: 'syz.3.1748': attribute type 1 has an invalid length. [ 199.160947][ T9746] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 199.172353][ T9746] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 199.186008][ T9749] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1748'. [ 199.325171][ T9749] bond1: (slave bridge2): Enslaving as an active interface with a down link [ 199.432026][ T9753] device syzkaller0 entered promiscuous mode [ 199.465141][ T9743] device geneve2 entered promiscuous mode [ 199.488991][ T9743] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.510907][ T9743] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.542108][ T9743] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.573957][ T9743] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.604693][ T9743] bond1: (slave geneve2): making interface the new active one [ 199.619592][ T9743] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 199.685019][ T9767] tipc: Enabling of bearer rejected, failed to enable media [ 200.046237][ T9779] tipc: Enabled bearer , priority 0 [ 200.290170][ T9790] binder: BINDER_SET_CONTEXT_MGR already set [ 200.296582][ T9790] binder: 9789:9790 ioctl 4018620d 2000000002c0 returned -16 [ 200.414772][ T9779] device syzkaller0 entered promiscuous mode [ 200.525390][ T9779] tipc: Resetting bearer [ 200.568387][ T9779] tipc: Disabling bearer [ 200.869066][ T9804] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1764'. [ 200.878441][ T9806] tipc: Enabled bearer , priority 0 [ 200.904210][ T9806] device syzkaller0 entered promiscuous mode [ 200.945155][ T9806] tipc: Resetting bearer [ 200.956087][ T9805] tipc: Resetting bearer [ 200.970698][ T9805] tipc: Disabling bearer [ 200.980548][ T9810] device syzkaller0 entered promiscuous mode [ 201.134050][ T9814] tipc: Enabling of bearer rejected, failed to enable media [ 201.167162][ T23] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 201.174534][ T9814] device syzkaller0 entered promiscuous mode [ 201.182995][ T9816] tipc: Cannot configure node identity twice [ 201.299429][ T13] hid-generic 0005:0006:5508.000C: item fetching failed at offset 3/4 [ 201.308799][ T13] hid-generic: probe of 0005:0006:5508.000C failed with error -22 [ 201.393421][ T9823] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3244832872 (12979331488 ns) > initial count (11948735776 ns). Using initial count to start timer. [ 201.411570][ C0] vkms_vblank_simulate: vblank timer overrun [ 201.424937][ T9830] ======================================================= [ 201.424937][ T9830] WARNING: The mand mount option has been deprecated and [ 201.424937][ T9830] and is ignored by this kernel. Remove the mand [ 201.424937][ T9830] option from the mount to silence this warning. [ 201.424937][ T9830] ======================================================= [ 201.535824][ T9833] device geneve2 entered promiscuous mode [ 201.598148][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 201.610367][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 201.620851][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 201.630987][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 201.641251][ T23] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 201.650442][ T23] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.662983][ T9826] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 201.669245][ T23] usb 2-1: config 0 descriptor?? [ 201.682677][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.699330][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.710659][ T9826] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 201.731045][ T9826] syz.3.1774 (9826) used greatest stack depth: 20144 bytes left [ 201.833923][ T4854] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 201.868213][ T6017] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 201.920243][ T9851] netlink: 'syz.2.1781': attribute type 13 has an invalid length. [ 201.937581][ T23] hdpvr 2-1:0.0: firmware version 0xbb dated ‘ÿOgôoSÛÌà-\âÛÊHü„”Ùkƒ<¸×ãÓ¶ÚJò#/Yûê [ 201.948769][ T23] hdpvr 2-1:0.0: untested firmware, the driver might not work. [ 201.969528][ T9851] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 201.977739][ T9851] device syzkaller0 entered promiscuous mode [ 202.097187][ T4854] usb 5-1: Using ep0 maxpacket: 8 [ 202.119532][ T13] hid-generic 0005:0006:5508.000D: item fetching failed at offset 3/4 [ 202.131391][ T13] hid-generic: probe of 0005:0006:5508.000D failed with error -22 [ 202.148736][ T23] hdpvr 2-1:0.0: device init failed [ 202.155197][ T23] hdpvr: probe of 2-1:0.0 failed with error -12 [ 202.181457][ T23] usb 2-1: USB disconnect, device number 7 [ 202.238213][ T9860] tipc: Enabling of bearer rejected, failed to enable media [ 202.266762][ T9860] device syzkaller0 entered promiscuous mode [ 202.457363][ T4854] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 202.471138][ T4854] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.489630][ T4854] usb 5-1: Product: syz [ 202.499794][ T4854] usb 5-1: Manufacturer: syz [ 202.511357][ T4854] usb 5-1: SerialNumber: syz [ 202.530667][ T4854] usb 5-1: config 0 descriptor?? [ 202.551467][ T9863] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3244832872 (12979331488 ns) > initial count (11948735776 ns). Using initial count to start timer. [ 202.674842][ T9867] netlink: 'syz.2.1789': attribute type 1 has an invalid length. [ 202.741108][ T9873] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 202.766556][ T9873] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 202.782842][ T9867] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1789'. [ 202.805019][ T9867] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 202.819683][ T4854] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 202.937090][ T4248] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 202.987392][ T23] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 203.013411][ T9880] tipc: Enabled bearer , priority 0 [ 203.023411][ T9880] device syzkaller0 entered promiscuous mode [ 203.036822][ T9879] tipc: Resetting bearer [ 203.079448][ T9879] tipc: Disabling bearer [ 203.177542][ T4327] hid-generic 0005:0006:5508.000E: item fetching failed at offset 3/4 [ 203.186725][ T4327] hid-generic: probe of 0005:0006:5508.000E failed with error -22 [ 203.218533][ T4248] usb 1-1: Using ep0 maxpacket: 32 [ 203.260258][ T23] usb 2-1: Using ep0 maxpacket: 8 [ 203.358415][ T4248] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.437482][ T23] usb 2-1: unable to get BOS descriptor or descriptor too short [ 203.517143][ T1110] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 203.537912][ T4248] usb 1-1: New USB device found, idVendor=06f8, idProduct=301b, bcdDevice=bb.39 [ 203.547469][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 203.558469][ T4248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.567704][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 203.577893][ T4248] usb 1-1: Product: syz [ 203.582181][ T4248] usb 1-1: Manufacturer: syz [ 203.586789][ T4248] usb 1-1: SerialNumber: syz [ 203.592265][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 203.602704][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 203.615478][ T23] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 203.626635][ T4248] usb 1-1: config 0 descriptor?? [ 203.631904][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 203.641675][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 203.679277][ T4248] gspca_main: gspca_pac7302-2.14.0 probing 06f8:301b [ 203.818167][ T23] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 203.827833][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.835947][ T23] usb 2-1: Product: syz [ 203.841029][ T23] usb 2-1: Manufacturer: syz [ 203.845655][ T23] usb 2-1: SerialNumber: syz [ 203.852999][ T23] usb 2-1: config 0 descriptor?? [ 203.877563][ T9871] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 203.913697][ T6013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 203.924490][ T1110] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 203.934937][ T1110] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 203.985883][ T9895] udevd[9895]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 204.017609][ T1110] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 204.027257][ T1110] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 204.035367][ T1110] usb 3-1: SerialNumber: syz [ 204.106449][ T4845] usb 2-1: USB disconnect, device number 8 [ 204.137283][ T4854] gspca_sunplus: reg_w_riv err -71 [ 204.142622][ T4854] sunplus: probe of 5-1:0.0 failed with error -71 [ 204.151150][ T4854] usb 5-1: USB disconnect, device number 4 [ 204.319978][ T1110] usb 3-1: 0:2 : does not exist [ 204.337340][ T4248] gspca_pac7302: reg_w() failed i: ff v: 01 error -71 [ 204.344550][ T4248] gspca_pac7302: probe of 1-1:0.0 failed with error -71 [ 204.353662][ T4248] usb 1-1: USB disconnect, device number 7 [ 204.677475][ T1110] usb 3-1: 5:0: cannot get min/max values for control 2 (id 5) [ 204.887301][ T1110] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 205.117387][ T1110] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5) [ 205.128696][ T1110] usb 3-1: USB disconnect, device number 8 [ 205.137651][ T6022] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 205.369060][ T4174] udevd[4174]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 208.926490][ T9906] tipc: Enabled bearer , priority 10 [ 208.940574][ T9902] device syzkaller0 entered promiscuous mode [ 208.951722][ T9906] device syzkaller0 entered promiscuous mode [ 208.988512][ T9906] tipc: Resetting bearer [ 208.996455][ T9898] tipc: Resetting bearer [ 209.008994][ T9898] tipc: Disabling bearer [ 209.187276][ T13] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 209.232873][ T9918] device syzkaller0 entered promiscuous mode [ 209.247407][ T1110] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 209.337935][ T4841] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 209.546499][ T9920] infiniband syz1: set down [ 209.553144][ T9920] infiniband syz1: added bridge_slave_1 [ 209.597186][ T4841] usb 1-1: Using ep0 maxpacket: 32 [ 209.602113][ T9920] RDS/IB: syz1: added [ 209.608491][ T9920] smc: adding ib device syz1 with port count 1 [ 209.616326][ T9920] smc: ib device syz1 port 1 has pnetid [ 209.623049][ T1110] usb 5-1: config 0 has an invalid interface number: 120 but max is 0 [ 209.631863][ T1110] usb 5-1: config 0 has no interface number 0 [ 209.638502][ T1110] usb 5-1: config 0 interface 120 has no altsetting 0 [ 209.717295][ T13] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 209.728968][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.737829][ T13] usb 2-1: Product: syz [ 209.742101][ T13] usb 2-1: Manufacturer: syz [ 209.746776][ T13] usb 2-1: SerialNumber: syz [ 209.747153][ T4841] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 209.762413][ T4841] usb 1-1: config 0 has no interface number 0 [ 209.768800][ T4841] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 209.781006][ T4841] usb 1-1: config 0 interface 85 has no altsetting 0 [ 209.807161][ T4248] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 209.808568][ T1110] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=a1.3c [ 209.824527][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.834397][ T1110] usb 5-1: Product: syz [ 209.839253][ T1110] usb 5-1: Manufacturer: syz [ 209.844024][ T1110] usb 5-1: SerialNumber: syz [ 209.854844][ T1110] usb 5-1: config 0 descriptor?? [ 209.977216][ T4841] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 209.986310][ T4841] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 209.994723][ T4841] usb 1-1: Product: syz [ 209.999247][ T4841] usb 1-1: Manufacturer: syz [ 210.004048][ T4841] usb 1-1: SerialNumber: syz [ 210.018135][ T4841] usb 1-1: config 0 descriptor?? [ 210.067226][ T4248] usb 4-1: Using ep0 maxpacket: 8 [ 210.138985][ T1110] ir_toy 5-1:0.120: required endpoints not found [ 210.147636][ T1110] usb 5-1: USB disconnect, device number 5 [ 210.387284][ T4248] usb 4-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 210.396682][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.404903][ T4248] usb 4-1: Product: syz [ 210.409233][ T4248] usb 4-1: Manufacturer: syz [ 210.413941][ T4248] usb 4-1: SerialNumber: syz [ 210.467595][ T13] (unnamed net_device) (uninitialized): Assigned a random MAC address: 9e:e1:a2:4c:1c:31 [ 210.485804][ T13] rtl8150 2-1:1.0: eth1: rtl8150 is detected [ 210.687216][ T4841] appletouch 1-1:0.85: Geyser mode initialized. [ 210.705297][ T4841] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input6 [ 210.894960][ T13] usb 1-1: USB disconnect, device number 8 [ 210.898910][ T4248] mxuport 4-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 210.920998][ T4248] mxuport: probe of 4-1:254.0 failed with error -5 [ 210.950935][ T4248] usb 4-1: USB disconnect, device number 7 [ 211.015484][ T13] appletouch 1-1:0.85: input: appletouch disconnected [ 211.311459][ T4248] usb 2-1: USB disconnect, device number 9 [ 211.327075][ C1] usb 2-1: Rx status -71 [ 211.331755][ C1] usb 2-1: eth1: intr status -71 [ 211.341950][ T3854] usb 2-1: device reset failed [ 211.390525][ T9958] tipc: Enabled bearer , priority 10 [ 211.572025][ T9958] tipc: Disabling bearer [ 211.602774][ T9965] netlink: 'syz.3.1821': attribute type 10 has an invalid length. [ 211.639569][ T9969] netlink: 'syz.0.1820': attribute type 13 has an invalid length. [ 211.742858][ T9969] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 211.970803][ T9966] device syzkaller0 entered promiscuous mode [ 212.063337][ T9980] device syzkaller0 entered promiscuous mode [ 212.090386][ T9985] device syzkaller0 entered promiscuous mode [ 212.366252][T10001] device syzkaller0 entered promiscuous mode [ 212.568426][ T23] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 212.625350][T10014] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 212.651615][T10014] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 212.831241][T10025] tipc: Enabled bearer , priority 10 [ 212.849224][T10025] device syzkaller0 entered promiscuous mode [ 212.888633][T10025] tipc: Resetting bearer [ 212.905370][T10024] tipc: Resetting bearer [ 212.931440][T10024] tipc: Disabling bearer [ 212.947528][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 212.985764][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 212.997532][ T23] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 213.027835][ T23] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0 [ 213.038407][ T23] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 213.049069][T10032] netlink: 'syz.3.1836': attribute type 13 has an invalid length. [ 213.049386][ T4854] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 213.065130][ T23] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.079995][ T23] usb 3-1: config 0 descriptor?? [ 213.088270][T10032] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.102547][T10033] device syzkaller0 entered promiscuous mode [ 213.127063][T10032] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 213.135676][T10032] device syzkaller0 entered promiscuous mode [ 213.177247][ T13] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 213.306622][T10038] device syzkaller0 entered promiscuous mode [ 213.337239][ T23] hdpvr 3-1:0.0: firmware version 0xbb dated ‘ÿOgôoSÛÌà-\âÛÊHü„”Ùkƒ<¸×ãÓ¶ÚJò#/Yûê [ 213.349636][ T23] hdpvr 3-1:0.0: untested firmware, the driver might not work. [ 213.428636][ T13] usb 1-1: Using ep0 maxpacket: 8 [ 213.461183][T10042] device syzkaller0 entered promiscuous mode [ 213.507580][ T4262] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 213.557176][ T23] hdpvr 3-1:0.0: device init failed [ 213.562683][ T23] hdpvr: probe of 3-1:0.0 failed with error -12 [ 213.579562][ T23] usb 3-1: USB disconnect, device number 9 [ 213.589807][ T4854] usb 2-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d [ 213.611857][ T4854] usb 2-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 213.624037][ T4854] usb 2-1: Product: syz [ 213.630714][ T4854] usb 2-1: Manufacturer: syz [ 213.636193][ T4854] usb 2-1: SerialNumber: syz [ 213.688990][ T4854] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state. [ 213.747392][ T13] usb 1-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 213.756947][ T13] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 213.765066][ T13] usb 1-1: Product: syz [ 213.769416][ T13] usb 1-1: Manufacturer: syz [ 213.774256][ T13] usb 1-1: SerialNumber: syz [ 213.779037][ T4262] usb 5-1: Using ep0 maxpacket: 8 [ 213.947294][ T4262] usb 5-1: unable to get BOS descriptor or descriptor too short [ 214.037472][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 214.048524][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 214.058708][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 214.068795][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024 [ 214.097724][ T4262] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024 [ 214.119800][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 214.127231][ T4854] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 214.129827][ T4262] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 214.141910][ T4854] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19) [ 214.259017][ T13] mxuport 1-1:254.0: mxuport_recv_ctrl_urb - usb_control_msg failed (-71) [ 214.273502][ T13] mxuport: probe of 1-1:254.0 failed with error -5 [ 214.291475][ T13] usb 1-1: USB disconnect, device number 9 [ 214.317316][ T4262] usb 5-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 214.364277][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 214.373618][ T4262] usb 5-1: Product: syz [ 214.377920][ T4262] usb 5-1: Manufacturer: syz [ 214.382537][ T4262] usb 5-1: SerialNumber: syz [ 214.390361][ T4262] usb 5-1: config 0 descriptor?? [ 214.405433][ T4845] usb 2-1: USB disconnect, device number 10 [ 214.411950][T10036] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 214.518168][ T9927] udevd[9927]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 214.681332][ T13] usb 5-1: USB disconnect, device number 6 [ 214.799228][T10060] device syzkaller0 entered promiscuous mode [ 214.905936][T10062] device syzkaller0 entered promiscuous mode [ 214.927211][ T4845] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 215.025463][T10066] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 215.080800][T10068] device syzkaller0 entered promiscuous mode [ 215.135387][T10070] netlink: 'syz.1.1854': attribute type 1 has an invalid length. [ 215.160681][T10070] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 215.171817][T10070] bond2: (slave vxcan3): Error -22 calling dev_set_mtu [ 215.207134][ T4845] usb 3-1: Using ep0 maxpacket: 8 [ 215.220137][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1854'. [ 215.254490][T10070] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 215.498500][ T4845] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 215.515248][ T4845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.523872][ T13] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 215.536553][T10086] device syzkaller0 entered promiscuous mode [ 215.542949][ T4845] usb 3-1: Product: syz [ 215.547617][ T4845] usb 3-1: Manufacturer: syz [ 215.552258][ T4845] usb 3-1: SerialNumber: syz [ 215.562337][ T4845] usb 3-1: config 0 descriptor?? [ 215.664139][T10089] netlink: 'syz.1.1861': attribute type 13 has an invalid length. [ 215.691503][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 215.697879][ T23] Bluetooth: hci5: command 0x1003 tx timeout [ 215.707410][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 215.718448][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 215.731462][T10089] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 215.782221][T10089] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 215.794443][T10089] device syzkaller0 entered promiscuous mode [ 215.829863][ T4845] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 215.890226][T10093] device syzkaller0 entered promiscuous mode [ 215.928056][ T13] usb 1-1: config 0 has an invalid interface number: 142 but max is 0 [ 215.936254][ T13] usb 1-1: config 0 has no interface number 0 [ 215.942554][ T13] usb 1-1: config 0 interface 142 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.954429][ T13] usb 1-1: config 0 interface 142 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.964918][ T13] usb 1-1: config 0 interface 142 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 215.978224][ T13] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 215.997981][ T13] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 216.008543][ T13] usb 1-1: config 0 descriptor?? [ 216.035024][T10095] device syzkaller0 entered promiscuous mode [ 216.131543][T10097] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1864'. [ 216.196088][T10099] device syzkaller0 entered promiscuous mode [ 216.354808][T10103] netlink: 'syz.1.1866': attribute type 10 has an invalid length. [ 216.372425][T10101] kvm: pic: non byte read [ 216.377549][T10101] kvm: pic: non byte write [ 216.382420][T10101] kvm: pic: non byte read [ 216.386937][T10101] kvm: pic: non byte write [ 216.394969][T10101] kvm: pic: non byte read [ 216.400033][T10101] kvm: pic: non byte write [ 216.404732][T10101] kvm: pic: non byte read [ 216.417358][T10101] kvm: pic: non byte write [ 216.422306][T10101] kvm: pic: non byte read [ 216.426882][T10101] kvm: pic: non byte write [ 216.436842][T10101] kvm: pic: non byte read [ 216.444480][T10101] kvm: pic: non byte write [ 216.449622][T10101] kvm: pic: non byte read [ 216.454152][T10101] kvm: pic: non byte write [ 216.459671][T10101] kvm: pic: non byte read [ 216.464273][T10101] kvm: pic: non byte write [ 216.469154][T10101] kvm: pic: non byte read [ 216.473591][T10101] kvm: pic: non byte write [ 216.478503][T10101] kvm: pic: non byte read [ 216.483091][T10101] kvm: pic: non byte write [ 216.489311][ T13] hid-udraw 0003:20D6:CB17.000F: unknown main item tag 0x7 [ 216.499537][ T13] hid-udraw 0003:20D6:CB17.000F: item fetching failed at offset 5/7 [ 216.517476][ T13] hid-udraw 0003:20D6:CB17.000F: parse failed [ 216.528632][ T13] hid-udraw: probe of 0003:20D6:CB17.000F failed with error -22 [ 216.555064][T10108] netlink: 'syz.4.1869': attribute type 1 has an invalid length. [ 216.608042][T10108] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 216.619859][T10108] bond1: (slave vxcan1): Error -22 calling dev_set_mtu [ 216.654701][T10112] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1869'. [ 216.673463][T10112] bond1: (slave bridge1): Enslaving as an active interface with a down link [ 216.743265][ T23] usb 1-1: USB disconnect, device number 10 [ 216.784145][T10117] netlink: 'syz.4.1872': attribute type 13 has an invalid length. [ 216.798202][T10117] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 216.838980][T10117] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 216.848322][T10117] device syzkaller0 entered promiscuous mode [ 217.016333][T10121] device syzkaller0 entered promiscuous mode [ 217.133974][T10123] device syzkaller0 entered promiscuous mode [ 217.138276][ T4845] gspca_sunplus: reg_w_riv err -71 [ 217.145712][ T4845] sunplus: probe of 3-1:0.0 failed with error -71 [ 217.154656][ T4845] usb 3-1: USB disconnect, device number 10 [ 217.301234][T10125] device syzkaller0 entered promiscuous mode [ 217.309889][T10127] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1877'. [ 217.687073][ T4845] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 217.720586][T10138] netlink: 'syz.2.1881': attribute type 1 has an invalid length. [ 217.787219][ T4841] Bluetooth: hci5: command 0x1001 tx timeout [ 217.793407][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 217.798368][T10141] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 217.842268][T10141] bond2: (slave vxcan1): Error -22 calling dev_set_mtu [ 217.872982][T10138] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1881'. [ 217.899060][T10138] bond2: (slave bridge2): Enslaving as an active interface with a down link [ 217.921804][T10145] netlink: 'syz.1.1883': attribute type 13 has an invalid length. [ 217.950475][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 217.991285][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 218.001554][T10145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 218.024813][T10154] tipc: Enabled bearer , priority 10 [ 218.033409][T10145] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 218.045098][T10145] device syzkaller0 entered promiscuous mode [ 218.055069][T10154] device syzkaller0 entered promiscuous mode [ 218.076970][T10154] tipc: Resetting bearer [ 218.084787][T10152] tipc: Resetting bearer [ 218.088590][ T4845] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 218.100038][ T4845] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.109537][T10152] tipc: Disabling bearer [ 218.117313][ T4845] usb 5-1: config 0 descriptor?? [ 218.158473][ T4845] cp210x 5-1:0.0: cp210x converter detected [ 218.168272][T10156] device syzkaller0 entered promiscuous mode [ 218.237226][ T4841] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 218.286721][T10160] device syzkaller0 entered promiscuous mode [ 218.477274][ T4854] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 218.597276][ T4845] cp210x 5-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 218.657316][ T4841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.657429][ T13] usb 2-1: new full-speed USB device number 11 using dummy_hcd [ 218.669156][ T4841] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.727446][ T4854] usb 3-1: Using ep0 maxpacket: 8 [ 218.768151][ T4841] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.777524][ T4841] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 218.785705][ T4841] usb 1-1: Manufacturer: syz [ 218.793189][ T4841] usb 1-1: config 0 descriptor?? [ 218.857281][ T4845] cp210x 5-1:0.0: failed to get vendor val 0x370c size 15: -71 [ 218.865402][ T4845] cp210x 5-1:0.0: GPIO initialisation failed: -71 [ 218.874563][ T4845] usb 5-1: cp210x converter now attached to ttyUSB0 [ 218.883616][ T4845] usb 5-1: USB disconnect, device number 7 [ 218.893412][ T4845] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 218.902316][ T4845] cp210x 5-1:0.0: device disconnected [ 219.027347][ T4854] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 219.036830][ T4854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.045819][ T4854] usb 3-1: Product: syz [ 219.047306][ T13] usb 2-1: config 0 has an invalid interface number: 29 but max is 0 [ 219.050131][ T4854] usb 3-1: Manufacturer: syz [ 219.059149][ T13] usb 2-1: config 0 has no interface number 0 [ 219.066083][ T4854] usb 3-1: SerialNumber: syz [ 219.070822][ T13] usb 2-1: config 0 interface 29 has no altsetting 0 [ 219.080388][ T4854] usb 3-1: config 0 descriptor?? [ 219.267339][ T13] usb 2-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 219.276940][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.285111][ T13] usb 2-1: Product: syz [ 219.289350][ T13] usb 2-1: Manufacturer: syz [ 219.293960][ T13] usb 2-1: SerialNumber: syz [ 219.300396][ T13] usb 2-1: config 0 descriptor?? [ 219.337431][ T4854] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.557444][ T13] peak_usb 2-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 219.729486][ T4841] input: syz Pen as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0010/input/input7 [ 219.768635][ T13] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 219.775714][ T13] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 219.782780][ T13] peak_usb 2-1:0.29 can0: sending command failure: -22 [ 219.790007][ T4845] usb 5-1: new low-speed USB device number 8 using dummy_hcd [ 219.820612][ T4841] input: syz Pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.0010/input/input8 [ 219.835231][ T4841] uclogic 0003:256C:006D.0010: input,hidraw0: USB HID v0.00 Keypad [syz] on usb-dummy_hcd.0-1/input0 [ 219.837384][ T13] peak_usb: probe of 2-1:0.29 failed with error -22 [ 219.864961][ T4841] Bluetooth: hci5: command 0x1009 tx timeout [ 219.945659][ T13] usb 1-1: USB disconnect, device number 11 [ 220.030946][ T1110] usb 2-1: USB disconnect, device number 11 [ 220.237352][ T4845] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 220.246704][ T4845] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 220.257856][ T4845] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 220.268810][ T4845] usb 5-1: config 1 interface 1 has no altsetting 0 [ 220.558776][ T4845] usb 5-1: string descriptor 0 read error: -22 [ 220.569211][ T4845] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 220.591747][ T4845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 220.611136][T10180] netlink: 'syz.0.1897': attribute type 13 has an invalid length. [ 220.625547][T10180] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 220.660181][ T4845] usb 5-1: low speed audio streaming not supported [ 220.674579][T10184] tipc: Enabled bearer , priority 10 [ 220.684567][T10180] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 220.697281][ T4854] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -71 [ 220.706219][T10180] device syzkaller0 entered promiscuous mode [ 220.717995][T10184] device syzkaller0 entered promiscuous mode [ 220.745524][T10184] tipc: Resetting bearer [ 220.752395][ T4854] usb 3-1: USB disconnect, device number 11 [ 220.788989][T10183] tipc: Resetting bearer [ 220.802043][T10183] tipc: Disabling bearer [ 220.850942][T10187] device syzkaller0 entered promiscuous mode [ 220.891370][ T13] usb 5-1: USB disconnect, device number 8 [ 221.125571][T10195] block device autoloading is deprecated and will be removed. [ 221.267591][ T4845] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 221.488315][ T13] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 221.507181][ T4327] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 221.627230][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.639065][ T4845] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 221.648758][ T4845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.660000][ T4845] usb 1-1: config 0 descriptor?? [ 221.787195][ T4327] usb 2-1: Using ep0 maxpacket: 32 [ 221.807228][ T4262] usb 5-1: new full-speed USB device number 9 using dummy_hcd [ 221.847283][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.858632][ T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.868582][ T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 221.881536][ T13] usb 3-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 221.890813][ T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.901300][ T13] usb 3-1: config 0 descriptor?? [ 221.927458][ T4327] usb 2-1: config 0 has an invalid interface number: 85 but max is 0 [ 221.936132][ T4327] usb 2-1: config 0 has no interface number 0 [ 221.942750][ T4327] usb 2-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 221.953893][ T4327] usb 2-1: config 0 interface 85 has no altsetting 0 [ 221.997231][ T4845] usbhid 1-1:0.0: can't add hid device: -71 [ 222.003331][ T4845] usbhid: probe of 1-1:0.0 failed with error -71 [ 222.012373][ T4845] usb 1-1: USB disconnect, device number 12 [ 222.147338][ T4327] usb 2-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 222.156821][ T4327] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.165144][ T4327] usb 2-1: Product: syz [ 222.169454][ T4327] usb 2-1: Manufacturer: syz [ 222.174136][ T4327] usb 2-1: SerialNumber: syz [ 222.177216][ T4262] usb 5-1: config 0 has an invalid interface number: 29 but max is 0 [ 222.181819][ T4327] usb 2-1: config 0 descriptor?? [ 222.192225][ T4262] usb 5-1: config 0 has no interface number 0 [ 222.198511][ T4262] usb 5-1: config 0 interface 29 has no altsetting 0 [ 222.357343][ T4262] usb 5-1: New USB device found, idVendor=0c72, idProduct=0014, bcdDevice=39.ac [ 222.366636][ T4262] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.374722][ T4262] usb 5-1: Product: syz [ 222.380504][ T13] acrux 0003:1A34:0802.0011: item fetching failed at offset 1/5 [ 222.388218][ T4262] usb 5-1: Manufacturer: syz [ 222.392900][ T4262] usb 5-1: SerialNumber: syz [ 222.398511][ T13] acrux 0003:1A34:0802.0011: parse failed [ 222.404364][ T13] acrux: probe of 0003:1A34:0802.0011 failed with error -22 [ 222.413461][ T4262] usb 5-1: config 0 descriptor?? [ 222.467232][ T4845] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 222.581672][ T13] usb 3-1: USB disconnect, device number 12 [ 222.677324][ T4262] peak_usb 5-1:0.29: PEAK-System PCAN-USB X6 v0 fw v0.0.0 (2 channels) [ 222.707224][ T4845] usb 1-1: Using ep0 maxpacket: 16 [ 222.827644][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 222.838798][ T4845] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 222.848351][ T4845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.859222][ T4845] usb 1-1: config 0 descriptor?? [ 222.877258][ T4327] appletouch 2-1:0.85: Geyser mode initialized. [ 222.891831][ T4327] input: appletouch as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.85/input/input9 [ 222.907451][ T4262] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 222.916376][ T4262] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 222.924424][ T4262] peak_usb 5-1:0.29 can0: sending command failure: -22 [ 222.997382][ T4262] peak_usb: probe of 5-1:0.29 failed with error -22 [ 223.093567][ T4262] usb 2-1: USB disconnect, device number 12 [ 223.113750][ T4262] appletouch 2-1:0.85: input: appletouch disconnected [ 223.150991][ T4327] usb 5-1: USB disconnect, device number 9 [ 223.359734][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.367798][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.375613][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.383174][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.390688][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.398126][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.405625][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.413228][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.421028][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.428468][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.435897][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.443526][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.451070][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.458688][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.466230][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.474061][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.481605][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.489125][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.496513][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.503967][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.511391][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.518891][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.526282][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.533725][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.541389][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.548892][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.556280][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.563704][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.571125][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.579036][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.586450][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.593890][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.601359][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.608943][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.616440][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.626907][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.634722][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.649356][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.657083][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.660282][T10215] netlink: 'syz.1.1911': attribute type 13 has an invalid length. [ 223.664604][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.664629][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.664661][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.699983][T10215] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 223.724038][T10215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 223.746446][T10215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 223.762452][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.776611][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.785852][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.792891][T10217] tipc: Enabled bearer , priority 10 [ 223.797433][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.808356][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.812384][T10217] device syzkaller0 entered promiscuous mode [ 223.817467][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.829526][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.841037][T10215] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 223.847064][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.852076][T10215] device syzkaller0 entered promiscuous mode [ 223.856786][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.873271][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.874199][T10217] tipc: Resetting bearer [ 223.881566][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.894728][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.902549][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.910184][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.917809][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.926357][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.934196][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.941744][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.949376][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.954074][T10221] device syzkaller0 entered promiscuous mode [ 223.956831][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.956861][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.978072][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.978261][T10216] tipc: Resetting bearer [ 223.991762][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 223.999310][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.006737][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.014253][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.015644][T10216] tipc: Disabling bearer [ 224.021866][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.021899][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.021927][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.021948][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.021969][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.072180][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.080000][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.097484][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.105085][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.114047][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.121762][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.130947][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.139066][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.147769][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.156629][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.173885][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.181894][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.190049][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.197786][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.205293][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.237088][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.277406][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.284999][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.359975][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.375965][T10242] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 224.396093][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.398886][T10242] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 224.418430][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.436188][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.439370][T10247] netlink: 'syz.0.1919': attribute type 29 has an invalid length. [ 224.458120][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.467722][T10242] netlink: 548 bytes leftover after parsing attributes in process `syz.0.1919'. [ 224.493773][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.501952][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.510534][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.527502][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.535382][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.551224][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.558233][T10249] device syzkaller0 entered promiscuous mode [ 224.559139][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.573406][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.581861][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.589764][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.613651][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.621401][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.628901][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.636817][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.644675][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.655357][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.666939][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.691592][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.700067][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.707925][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.715658][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.723641][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.731204][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.738772][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.746202][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.753664][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.761177][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.768742][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.776305][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.784016][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.791964][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.799594][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.807564][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.814986][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.822580][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.830147][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.838263][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.845677][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.853336][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.860883][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.875697][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.883213][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.891019][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.899069][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.906911][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.914513][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.921940][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.929444][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.936852][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.944482][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.952002][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.959428][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.966817][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.974312][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.981895][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.989521][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 224.997081][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.004620][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.012673][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.020173][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.027975][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.035475][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.043125][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.050597][ T4845] hid-generic 0003:0458:5016.0012: unknown main item tag 0x0 [ 225.069049][ T4845] hid-generic 0003:0458:5016.0012: hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 225.084334][ T4845] usb 1-1: USB disconnect, device number 13 [ 225.121070][T10257] netlink: 'syz.0.1925': attribute type 13 has an invalid length. [ 225.132442][T10257] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 225.218415][T10262] fido_id[10262]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 225.263264][T10266] tipc: Enabled bearer , priority 10 [ 225.277471][T10266] device syzkaller0 entered promiscuous mode [ 225.329020][T10266] tipc: Resetting bearer [ 225.343541][T10265] tipc: Resetting bearer [ 225.376651][T10265] tipc: Disabling bearer [ 225.387301][ T1110] usb 4-1: new low-speed USB device number 8 using dummy_hcd [ 225.410453][T10271] tipc: Enabled bearer , priority 0 [ 225.423020][T10271] device syzkaller0 entered promiscuous mode [ 225.458663][ T1336] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 225.468980][T10271] tipc: Resetting bearer [ 225.480311][T10270] tipc: Resetting bearer [ 225.489254][T10270] tipc: Disabling bearer [ 225.708038][ T4845] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 225.717140][ T1336] usb 2-1: Using ep0 maxpacket: 32 [ 225.837438][ T1110] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 225.846387][ T1110] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 16, setting to 0 [ 225.847121][ T23] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 225.858867][ T1336] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 225.873674][ T1110] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 8, setting to 0 [ 225.886104][ T1336] usb 2-1: config 0 has no interface number 0 [ 225.892604][ T1110] usb 4-1: config 1 interface 1 has no altsetting 0 [ 225.900906][ T1336] usb 2-1: config 0 interface 184 has no altsetting 0 [ 225.987457][ T4845] usb 1-1: Using ep0 maxpacket: 32 [ 226.068962][ T1336] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 226.078684][ T1336] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.087447][ T1336] usb 2-1: Product: syz [ 226.092006][ T1336] usb 2-1: Manufacturer: syz [ 226.099264][ T1336] usb 2-1: SerialNumber: syz [ 226.107741][ T1336] usb 2-1: config 0 descriptor?? [ 226.118618][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 226.130980][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.141932][ T4845] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 226.153001][ T1336] smsc75xx v1.0.0 [ 226.159592][ T4845] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.168562][ T1110] usb 4-1: string descriptor 0 read error: -22 [ 226.174858][ T1110] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 226.185453][ T1110] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.195326][ T4845] usb 1-1: config 0 descriptor?? [ 226.227334][ T23] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 226.239348][ T23] usb 5-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 226.248478][ T4845] hub 1-1:0.0: USB hub found [ 226.253107][ T23] usb 5-1: config 0 interface 0 has no altsetting 0 [ 226.260008][ T1110] usb 4-1: low speed audio streaming not supported [ 226.265124][ T23] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 226.281431][ T23] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 226.301525][ T23] usb 5-1: config 0 descriptor?? [ 226.468451][ T4845] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 226.492393][ T1110] usb 4-1: USB disconnect, device number 8 [ 226.602998][T10287] tipc: Enabled bearer , priority 10 [ 226.614490][T10287] tipc: Resetting bearer [ 226.623495][T10286] tipc: Disabling bearer [ 226.723764][T10289] device syzkaller0 entered promiscuous mode [ 226.807305][ T1336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 226.818639][ T1336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 226.822615][ T23] cmedia_hs100b 0003:0D8C:0014.0013: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.4-1/input0 [ 226.921918][ T4845] hid-generic 0003:046D:C31C.0014: unknown main item tag 0x0 [ 226.947367][ T4845] hid-generic 0003:046D:C31C.0014: hidraw1: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.0-1/input0 [ 226.964889][T10293] netlink: 'syz.2.1938': attribute type 1 has an invalid length. [ 226.999422][T10293] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 227.017941][T10293] bond3: (slave vxcan1): Error -22 calling dev_set_mtu [ 227.063550][ T23] usb 5-1: USB disconnect, device number 10 [ 227.132707][T10297] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 227.144740][T10297] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 227.247474][ T4854] usb 1-1: USB disconnect, device number 14 [ 227.293660][T10306] tipc: Enabled bearer , priority 10 [ 227.306435][T10306] device syzkaller0 entered promiscuous mode [ 227.331017][T10306] tipc: Resetting bearer [ 227.339398][T10305] tipc: Resetting bearer [ 227.349034][T10305] tipc: Disabling bearer [ 227.597346][ T23] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 227.689788][T10318] device syzkaller0 entered promiscuous mode [ 227.807726][T10322] netlink: 'syz.0.1950': attribute type 1 has an invalid length. [ 227.829336][T10322] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 227.841392][T10322] bond2: (slave vxcan1): Error -22 calling dev_set_mtu [ 227.876671][T10324] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1950'. [ 227.887336][ T4845] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 228.008583][ T23] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 53407, setting to 1024 [ 228.017160][ T4239] usb 3-1: new low-speed USB device number 13 using dummy_hcd [ 228.028409][ T23] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 228.043214][ T23] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 228.127137][ T4845] usb 5-1: Using ep0 maxpacket: 32 [ 228.138449][ T23] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 228.148329][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 228.156662][ T23] usb 4-1: SerialNumber: syz [ 228.188646][T10308] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 228.247581][ T4845] usb 5-1: config 2 has an invalid interface number: 88 but max is 0 [ 228.260059][ T4845] usb 5-1: config 2 has no interface number 0 [ 228.266214][ T4845] usb 5-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256 [ 228.277219][ T4845] usb 5-1: config 2 interface 88 has no altsetting 0 [ 228.326930][T10337] 9pnet: Insufficient options for proto=fd [ 228.377340][ T1336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 228.389098][ T1336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 228.399158][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.410793][ T1336] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 228.421457][ T4239] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.432269][ T1336] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 228.439423][ T4239] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 228.448669][ T23] usbtest 4-1:1.0: Linux user mode ISO test driver [ 228.448722][ T4845] usb 5-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e [ 228.457609][ T23] usbtest 4-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 228.470929][ T1336] usb 2-1: USB disconnect, device number 13 [ 228.479396][ T4239] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.487557][ T4845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.495263][ T23] usb 4-1: USB disconnect, device number 9 [ 228.499857][ T4845] usb 5-1: Product: syz [ 228.510358][ T4239] usb 3-1: config 0 descriptor?? [ 228.519986][ T4845] usb 5-1: Manufacturer: syz [ 228.524718][ T4845] usb 5-1: SerialNumber: syz [ 228.557915][T10316] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 228.781301][T10316] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 228.992451][ T4239] hid-generic 0003:0C70:F0B6.0015: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 229.252470][T10358] netlink: 'syz.3.1964': attribute type 2 has an invalid length. [ 229.266050][ T4854] usb 3-1: USB disconnect, device number 13 [ 229.275763][T10358] netlink: 164 bytes leftover after parsing attributes in process `syz.3.1964'. [ 229.328351][ T23] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 229.382622][T10364] tmpfs: Unknown parameter 'usrquota' [ 229.587160][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 229.727959][ T23] usb 2-1: config 0 has an invalid interface number: 251 but max is 0 [ 229.736291][ T23] usb 2-1: config 0 has no interface number 0 [ 229.737183][ T1336] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 229.742904][ T4248] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 229.757847][ T23] usb 2-1: config 0 interface 251 altsetting 255 bulk endpoint 0x4 has invalid maxpacket 16 [ 229.768375][ T23] usb 2-1: config 0 interface 251 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 64 [ 229.778734][ T23] usb 2-1: config 0 interface 251 has no altsetting 0 [ 229.858556][ T4845] asix 5-1:2.88 (unnamed net_device) (uninitialized): invalid hw address, using random [ 229.957302][ T23] usb 2-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 229.966567][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.975122][ T23] usb 2-1: Product: syz [ 229.979833][ T23] usb 2-1: Manufacturer: syz [ 229.984539][ T23] usb 2-1: SerialNumber: syz [ 229.987119][ T1336] usb 4-1: Using ep0 maxpacket: 32 [ 229.991616][ T23] usb 2-1: config 0 descriptor?? [ 230.027518][T10345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.034635][T10345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.067278][ T4845] asix 5-1:2.88 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.078066][ T4845] asix 5-1:2.88 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 230.088848][ T4845] asix: probe of 5-1:2.88 failed with error -71 [ 230.098057][ T4845] usb 5-1: USB disconnect, device number 11 [ 230.117283][ T1336] usb 4-1: config 0 has an invalid interface number: 230 but max is 0 [ 230.125520][ T1336] usb 4-1: config 0 has no interface number 0 [ 230.132164][ T1336] usb 4-1: config 0 interface 230 has no altsetting 0 [ 230.147566][ T4248] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 53407, setting to 1024 [ 230.159144][ T4248] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1024 [ 230.169800][ T4248] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 230.250123][T10345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.257891][T10345] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 230.268806][ T4248] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 230.278267][ T4248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 230.286368][ T4248] usb 1-1: SerialNumber: syz [ 230.297299][ T1336] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 230.306486][ T1336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.315392][ T1336] usb 4-1: Product: syz [ 230.317490][T10367] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 230.320064][ T1336] usb 4-1: Manufacturer: syz [ 230.331553][ T1336] usb 4-1: SerialNumber: syz [ 230.346504][ T1336] usb 4-1: config 0 descriptor?? [ 230.388772][ T1336] ums-usbat 4-1:0.230: USB Mass Storage device detected [ 230.399248][ T1336] ums-usbat 4-1:0.230: Quirks match for vid 0781 pid 0005: 1 [ 230.590031][ T4248] usbtest 1-1:1.0: Linux user mode ISO test driver [ 230.599572][ T4248] usbtest 1-1:1.0: high-speed {control bulk-in bulk-out} tests (+alt) [ 230.624798][ T4248] usb 1-1: USB disconnect, device number 15 [ 230.785704][T10386] tipc: Enabled bearer , priority 10 [ 230.795449][T10386] device syzkaller0 entered promiscuous mode [ 230.833037][T10386] tipc: Resetting bearer [ 230.840813][T10385] tipc: Resetting bearer [ 230.853115][T10385] tipc: Disabling bearer [ 230.928423][ T23] asix 2-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 230.949453][ T23] asix 2-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9 [ 230.979762][ T23] asix: probe of 2-1:0.251 failed with error -71 [ 230.999284][ T23] usb 2-1: USB disconnect, device number 14 [ 231.034074][T10398] tipc: Enabled bearer , priority 0 [ 231.044021][T10398] tipc: Resetting bearer [ 231.054983][T10397] tipc: Disabling bearer [ 231.126718][T10400] device syzkaller0 entered promiscuous mode [ 231.387183][ T4845] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 231.437116][ T1110] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 231.461602][T10413] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 231.697165][ T1110] usb 5-1: Using ep0 maxpacket: 32 [ 231.747267][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 231.758278][ T4845] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0 [ 231.768493][ T4845] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0 [ 231.777087][ T4854] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 231.778724][ T4845] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0 [ 231.817222][ T1110] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 231.826351][ T1110] usb 5-1: config 0 has no interface number 0 [ 231.832925][ T1110] usb 5-1: config 0 interface 184 has no altsetting 0 [ 231.947220][ T4845] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00 [ 231.956722][ T4845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.965068][ T4845] usb 1-1: Product: syz [ 231.969306][ T4845] usb 1-1: Manufacturer: syz [ 231.974159][ T4845] usb 1-1: SerialNumber: syz [ 231.981020][ T4845] usb 1-1: config 0 descriptor?? [ 231.998008][ T1110] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 232.007301][ T1110] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.015314][ T1110] usb 5-1: Product: syz [ 232.021076][ T4845] ums-isd200 1-1:0.0: USB Mass Storage device detected [ 232.029199][ T1110] usb 5-1: Manufacturer: syz [ 232.033857][ T1110] usb 5-1: SerialNumber: syz [ 232.044634][ T1110] usb 5-1: config 0 descriptor?? [ 232.047149][ T4854] usb 3-1: Using ep0 maxpacket: 32 [ 232.088150][ T1110] smsc75xx v1.0.0 [ 232.187382][ T4854] usb 3-1: config 255 has an invalid interface number: 207 but max is 0 [ 232.196094][ T4854] usb 3-1: config 255 has an invalid descriptor of length 157, skipping remainder of the config [ 232.207246][ T4854] usb 3-1: config 255 has no interface number 0 [ 232.213515][ T4854] usb 3-1: config 255 interface 207 altsetting 107 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 232.227035][ T4854] usb 3-1: config 255 interface 207 has no altsetting 0 [ 232.284341][ T4845] ums-isd200: probe of 1-1:0.0 failed with error -22 [ 232.344940][T10422] tipc: Enabled bearer , priority 10 [ 232.353238][T10422] device syzkaller0 entered promiscuous mode [ 232.363703][T10421] tipc: Resetting bearer [ 232.383560][T10421] tipc: Disabling bearer [ 232.407937][ T4854] usb 3-1: New USB device found, idVendor=0c72, idProduct=0011, bcdDevice=e9.34 [ 232.417523][ T4854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 232.425536][ T4854] usb 3-1: Product: syz [ 232.430746][ T4854] usb 3-1: Manufacturer: syz [ 232.435771][ T4854] usb 3-1: SerialNumber: syz [ 232.447048][ T4845] usb 1-1: USB disconnect, device number 16 [ 232.658509][T10430] device syzkaller0 entered promiscuous mode [ 232.732004][ T1336] ums-usbat: probe of 4-1:0.230 failed with error 4 [ 232.739054][ T1110] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 232.756810][ T1336] usb 4-1: USB disconnect, device number 10 [ 232.762967][ T1110] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 232.790433][ T6009] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 232.815861][T10432] tipc: Enabled bearer , priority 0 [ 232.817420][ T4854] peak_usb 3-1:255.207 can0: unable to request usb[type=0 value=1] err=-71 [ 232.830277][T10432] tipc: Resetting bearer [ 232.832414][ T4854] peak_usb 3-1:255.207: unable to read PCAN-USB Pro FD firmware info (err -71) [ 232.849210][T10431] tipc: Disabling bearer [ 232.927957][ T4854] peak_usb: probe of 3-1:255.207 failed with error -71 [ 232.964226][ T4854] usb 3-1: USB disconnect, device number 14 [ 233.016408][T10438] netlink: 'syz.1.2000': attribute type 13 has an invalid length. [ 233.027433][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.036811][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 233.045517][T10438] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 233.137127][ T1336] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 233.220897][T10446] tipc: Enabled bearer , priority 10 [ 233.229690][T10446] device syzkaller0 entered promiscuous mode [ 233.250591][T10445] tipc: Resetting bearer [ 233.278471][T10445] tipc: Disabling bearer [ 233.419225][T10454] tipc: Enabled bearer , priority 0 [ 233.439901][T10453] tipc: Disabling bearer [ 233.464890][T10458] tipc: Enabled bearer , priority 0 [ 233.483332][T10458] tipc: Resetting bearer [ 233.495803][T10457] tipc: Disabling bearer [ 233.527211][ T1336] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.563487][ T1336] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 13 [ 233.579051][ T1336] usb 4-1: config 0 interface 0 has no altsetting 0 [ 233.585846][ T1336] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.00 [ 233.595998][ T1336] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.601773][T10464] netlink: 'syz.0.2012': attribute type 13 has an invalid length. [ 233.616879][T10464] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 233.648510][ T1336] usb 4-1: config 0 descriptor?? [ 233.686645][T10468] device syzkaller1 entered promiscuous mode [ 233.793195][T10474] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 233.872474][T10476] tipc: Enabled bearer , priority 10 [ 233.880260][T10476] device syzkaller0 entered promiscuous mode [ 233.893212][T10475] tipc: Resetting bearer [ 233.924954][T10475] tipc: Disabling bearer [ 233.979306][ T23] hid-generic 0005:0006:5508.0016: item fetching failed at offset 3/4 [ 234.004271][ T23] hid-generic: probe of 0005:0006:5508.0016 failed with error -22 [ 234.006227][T10483] device syzkaller1 entered promiscuous mode [ 234.105428][T10487] tipc: Enabled bearer , priority 0 [ 234.119966][T10486] tipc: Disabling bearer [ 234.148464][ T4845] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 234.203044][ T1336] cmedia_hs100b 0003:0D8C:0014.0017: hidraw0: USB HID v0.00 Device [HID 0d8c:0014] on usb-dummy_hcd.3-1/input0 [ 234.240115][T10493] tipc: Enabled bearer , priority 0 [ 234.255195][T10493] tipc: Resetting bearer [ 234.279665][T10492] tipc: Disabling bearer [ 234.346238][T10498] netlink: 'syz.2.2028': attribute type 13 has an invalid length. [ 234.407192][ T4845] usb 1-1: Using ep0 maxpacket: 16 [ 234.413987][ T1336] usb 4-1: USB disconnect, device number 11 [ 234.547160][ T23] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 234.547461][ T4845] usb 1-1: config 251 has an invalid interface number: 48 but max is 0 [ 234.563363][ T4845] usb 1-1: config 251 has no interface number 0 [ 234.570045][ T4845] usb 1-1: config 251 interface 48 altsetting 1 endpoint 0x9 has invalid wMaxPacketSize 0 [ 234.580640][ T4845] usb 1-1: config 251 interface 48 has no altsetting 0 [ 234.767665][ T4845] usb 1-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=f6.07 [ 234.768358][ T4854] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 234.777292][ T4845] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 234.788471][ T23] usb 2-1: Using ep0 maxpacket: 16 [ 234.793669][ T4845] usb 1-1: Product: syz [ 234.802479][ T4845] usb 1-1: Manufacturer: syz [ 234.808009][ T4845] usb 1-1: SerialNumber: syz [ 234.838409][ T6020] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 235.017321][ T4854] usb 3-1: Using ep0 maxpacket: 8 [ 235.038794][ T4239] hid-generic 0005:0006:5508.0018: item fetching failed at offset 3/4 [ 235.049468][ T4239] hid-generic: probe of 0005:0006:5508.0018 failed with error -22 [ 235.087312][ T23] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 235.096831][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.105656][ T23] usb 2-1: Product: syz [ 235.111710][ T23] usb 2-1: Manufacturer: syz [ 235.116351][ T23] usb 2-1: SerialNumber: syz [ 235.119571][ T4845] usb 1-1: USB disconnect, device number 17 [ 235.131652][ T23] r8152-cfgselector 2-1: config 0 descriptor?? [ 235.138792][ T4854] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.150286][ T4854] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.179505][ T4854] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.191979][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0x19, skipping [ 235.212962][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.228878][ T4854] usb 3-1: config 168 interface 0 has no altsetting 0 [ 235.298200][T10519] tipc: Enabled bearer , priority 0 [ 235.307261][ T4854] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.315448][T10518] tipc: Disabling bearer [ 235.321614][ T4854] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.333383][ T4854] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.345047][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0x19, skipping [ 235.356387][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.369928][ T4854] usb 3-1: config 168 interface 0 has no altsetting 0 [ 235.412871][T10521] netlink: 'syz.3.2037': attribute type 1 has an invalid length. [ 235.428827][ T1110] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 235.440927][ T1110] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 235.444174][T10521] bond2: (slave vxcan1): The slave device specified does not support setting the MAC address [ 235.451528][ T1110] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 235.462424][ T4854] usb 3-1: config 168 descriptor has 1 excess byte, ignoring [ 235.473327][ T1110] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 235.479388][ T4854] usb 3-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 235.499013][T10521] bond2: (slave vxcan1): Error -22 calling dev_set_mtu [ 235.506187][ T4854] usb 3-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 235.509038][ T1110] usb 5-1: USB disconnect, device number 12 [ 235.518250][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0x19, skipping [ 235.535011][ T4854] usb 3-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 235.548868][ T4854] usb 3-1: config 168 interface 0 has no altsetting 0 [ 235.561269][T10523] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2037'. [ 235.636772][T10526] tipc: Enabled bearer , priority 0 [ 235.649941][T10526] tipc: Resetting bearer [ 235.659859][T10525] tipc: Disabling bearer [ 235.667302][ T23] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.673738][ T23] r8152-cfgselector 2-1: bad CDC descriptors [ 235.697742][ T23] r8152-cfgselector 2-1: Unknown version 0x0000 [ 235.706239][ T23] r8152-cfgselector 2-1: USB disconnect, device number 15 [ 235.717524][ T4854] usb 3-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 235.738492][ T4854] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.746968][ T4854] usb 3-1: Product: syz [ 235.751723][ T4854] usb 3-1: Manufacturer: syz [ 235.764524][ T4854] usb 3-1: SerialNumber: syz [ 235.795725][T10530] device syzkaller0 entered promiscuous mode [ 235.841430][T10532] netlink: 'syz.3.2041': attribute type 13 has an invalid length. [ 235.852456][T10532] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 236.020564][T10540] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2045'. [ 236.044526][T10536] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 236.056859][T10536] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 236.068683][ T4854] adutux 3-1:168.0: interrupt endpoints not found [ 236.096747][ T4841] hid-generic 0005:0006:5508.0019: item fetching failed at offset 3/4 [ 236.107665][ T4841] hid-generic: probe of 0005:0006:5508.0019 failed with error -22 [ 236.118483][ T4854] usb 3-1: USB disconnect, device number 15 [ 236.219256][T10547] tipc: Enabled bearer , priority 0 [ 236.313953][T10547] device syzkaller0 entered promiscuous mode [ 236.341838][T10555] tipc: Enabled bearer , priority 0 [ 236.375695][T10546] tipc: Resetting bearer [ 236.435180][T10546] tipc: Disabling bearer [ 236.452876][T10555] tipc: Resetting bearer [ 236.482614][T10551] tipc: Disabling bearer [ 236.603181][T10564] device syzkaller0 entered promiscuous mode [ 236.753008][T10572] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2057'. [ 236.888849][ T4845] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 236.925595][ T1110] hid-generic 0005:0006:5508.001A: item fetching failed at offset 3/4 [ 236.941212][ T1110] hid-generic: probe of 0005:0006:5508.001A failed with error -22 [ 237.167125][ T4845] usb 4-1: Using ep0 maxpacket: 16 [ 237.287401][ T4239] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 237.295257][ T4845] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 237.316249][ T4845] usb 4-1: config 0 has no interface number 0 [ 237.420914][T10599] tipc: Enabling of bearer rejected, failed to enable media [ 237.527322][ T4845] usb 4-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25 [ 237.541067][ T4845] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.549721][ T4239] usb 2-1: Using ep0 maxpacket: 16 [ 237.562920][ T4845] usb 4-1: Product: syz [ 237.572949][ T4845] usb 4-1: Manufacturer: syz [ 237.583394][ T4845] usb 4-1: SerialNumber: syz [ 237.609328][ T4845] usb 4-1: config 0 descriptor?? [ 237.677603][ T4239] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 237.685852][ T4239] usb 2-1: config 0 has no interface number 0 [ 237.693140][ T4845] hub 4-1:0.132: bad descriptor, ignoring hub [ 237.701051][ T4845] hub: probe of 4-1:0.132 failed with error -5 [ 237.887227][ T4239] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 237.913550][ T4239] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 237.923878][ T4239] usb 2-1: Product: syz [ 237.928501][ T4239] usb 2-1: Manufacturer: syz [ 237.933399][ T4239] usb 2-1: SerialNumber: syz [ 237.951302][ T4239] usb 2-1: config 0 descriptor?? [ 238.004601][ T4239] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 238.007114][ T4854] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 238.221364][T10613] device syzkaller0 entered promiscuous mode [ 238.267127][ T4854] usb 5-1: Using ep0 maxpacket: 32 [ 238.287492][ T4845] usb 4-1: reset high-speed USB device number 12 using dummy_hcd [ 238.306654][T10617] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2071'. [ 238.354591][T10619] netlink: 'syz.2.2072': attribute type 1 has an invalid length. [ 238.387396][ T4854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 238.396382][ T4854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 238.405217][ T4854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 238.415050][ T4854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 238.421076][T10619] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 238.425374][ T4854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 238.445879][ T4854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 238.460249][ T4854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 238.469548][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 238.480272][ T4854] usb 5-1: config 0 descriptor?? [ 238.486188][T10619] bond4: (slave vxcan1): Error -22 calling dev_set_mtu [ 238.503484][T10624] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2072'. [ 238.646553][ T6009] Bluetooth: hci5: Frame reassembly failed (-90) [ 238.665419][T10634] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.672524][T10636] tipc: Enabling of bearer rejected, failed to enable media [ 238.687194][T10634] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.694745][T10634] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.706834][T10634] Bluetooth: hci5: Frame reassembly failed (-84) [ 238.758162][ T4854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 13 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 238.783208][ T4854] usb 5-1: USB disconnect, device number 13 [ 238.807736][ T4854] usblp0: removed [ 239.047209][ T4239] gspca_spca1528: reg_w err -71 [ 239.052303][ T4239] spca1528: probe of 2-1:0.1 failed with error -71 [ 239.060968][ T4239] usb 2-1: USB disconnect, device number 16 [ 239.067811][ T4841] usb 4-1: USB disconnect, device number 12 [ 239.337172][ T4854] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 239.478119][T10651] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2082'. [ 239.579726][T10655] device syzkaller0 entered promiscuous mode [ 239.597356][ T4854] usb 5-1: Using ep0 maxpacket: 32 [ 239.758692][ T4854] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 239.787162][ T4854] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 239.795823][ T4854] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 239.820558][ T4854] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 239.835549][ T4854] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 239.846245][ T4854] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 239.860743][ T4854] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 239.870929][ T4854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.879755][T10669] tipc: Enabling of bearer rejected, failed to enable media [ 239.899162][ T4854] usb 5-1: config 0 descriptor?? [ 239.948503][T10672] netlink: 'syz.1.2091': attribute type 1 has an invalid length. [ 240.003794][T10672] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 240.035538][T10672] bond3: (slave vxcan3): Error -22 calling dev_set_mtu [ 240.068785][T10678] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2091'. [ 240.148921][T10611] udc-core: couldn't find an available UDC or it's busy [ 240.156413][T10611] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 240.169402][ T4854] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 14 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 240.188916][ T4854] usb 5-1: USB disconnect, device number 14 [ 240.217587][ T4854] usblp0: removed [ 240.391779][T10689] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2094'. [ 240.513297][T10694] device syzkaller1 entered promiscuous mode [ 240.658383][ T4854] Bluetooth: hci5: command 0x1003 tx timeout [ 240.664717][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 240.696095][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2101'. [ 240.740179][T10705] tipc: Enabling of bearer rejected, failed to enable media [ 240.832336][T10712] netlink: 'syz.2.2104': attribute type 1 has an invalid length. [ 240.856294][ T4854] hid-generic 0005:0006:5508.001B: item fetching failed at offset 3/4 [ 240.879006][ T4854] hid-generic: probe of 0005:0006:5508.001B failed with error -22 [ 240.926359][T10720] bond5: (slave vxcan1): The slave device specified does not support setting the MAC address [ 240.940093][T10720] bond5: (slave vxcan1): Error -22 calling dev_set_mtu [ 240.965128][T10712] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2104'. [ 241.071753][T10726] netlink: 'syz.1.2108': attribute type 13 has an invalid length. [ 241.083442][T10726] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 241.092712][T10726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 241.102333][T10726] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 241.107192][ T4239] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 241.337072][ T4845] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 241.357305][ T4239] usb 4-1: Using ep0 maxpacket: 32 [ 241.439834][T10741] block device autoloading is deprecated and will be removed. [ 241.577328][ T4845] usb 5-1: Using ep0 maxpacket: 32 [ 241.637428][ T4239] usb 4-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 241.646607][ T4239] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.655261][ T4239] usb 4-1: Product: syz [ 241.659810][ T4239] usb 4-1: Manufacturer: syz [ 241.664698][ T4239] usb 4-1: SerialNumber: syz [ 241.680367][ T4239] usb 4-1: config 0 descriptor?? [ 241.697637][ T4845] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 241.706882][ T4845] usb 5-1: config 0 has no interface number 0 [ 241.717951][ T4239] hub 4-1:0.0: bad descriptor, ignoring hub [ 241.723949][ T4239] hub: probe of 4-1:0.0 failed with error -5 [ 241.736344][ T4845] usb 5-1: config 0 interface 184 has no altsetting 0 [ 241.749069][ T4239] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 241.870511][ T4248] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 241.917231][ T4845] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 241.937258][ T4845] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.945335][ T4845] usb 5-1: Product: syz [ 241.949626][ T4845] usb 5-1: Manufacturer: syz [ 241.954375][ T4845] usb 5-1: SerialNumber: syz [ 241.961176][ T4845] usb 5-1: config 0 descriptor?? [ 241.998283][ T4845] smsc75xx v1.0.0 [ 242.096019][T10748] tipc: Enabling of bearer rejected, failed to enable media [ 242.117268][ T4248] usb 2-1: Using ep0 maxpacket: 16 [ 242.158363][ T4239] gspca_vc032x: reg_w err -71 [ 242.163106][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.168811][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.174712][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.184468][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.189888][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.195475][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.207372][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.213403][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.220778][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.226104][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.231824][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.237408][ T4248] usb 2-1: config 0 interface 0 altsetting 16 has 0 endpoint descriptors, different from the interface descriptor's value: 28 [ 242.238364][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.257991][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.260421][ T4248] usb 2-1: config 0 interface 0 has no altsetting 0 [ 242.263304][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.271769][ T4248] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 242.276200][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.286236][ T4248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.297038][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.304344][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.305069][ T4248] usb 2-1: config 0 descriptor?? [ 242.314525][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.320251][ T4239] gspca_vc032x: I2c Bus Busy Wait 00 [ 242.325869][ T4239] gspca_vc032x: Unknown sensor... [ 242.331245][ T4239] vc032x: probe of 4-1:0.0 failed with error -22 [ 242.359647][ T4248] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 242.390158][ T4239] usb 4-1: USB disconnect, device number 13 [ 242.647253][ T4845] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 242.658519][ T4845] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 242.747292][ T4841] Bluetooth: hci5: command 0x1001 tx timeout [ 242.753628][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 242.759910][ T4248] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 242.765179][T10768] netlink: 'syz.3.2121': attribute type 13 has an invalid length. [ 242.779232][T10768] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 242.880462][T10770] tipc: Enabled bearer , priority 0 [ 242.903025][T10770] device syzkaller0 entered promiscuous mode [ 242.915120][T10769] tipc: Resetting bearer [ 242.944135][T10769] tipc: Disabling bearer [ 242.954917][T10744] netlink: 'syz.1.2114': attribute type 39 has an invalid length. [ 243.155591][T10778] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2126'. [ 243.203891][T10778] syz.3.2126 (10778) used greatest stack depth: 17008 bytes left [ 243.234733][T10780] tipc: Enabling of bearer rejected, failed to enable media [ 243.347375][ T4248] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 243.356523][ T4248] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.366954][ T4248] usb 3-1: Product: syz [ 243.371852][ T4248] usb 3-1: Manufacturer: syz [ 243.376581][ T4248] usb 3-1: SerialNumber: syz [ 243.385074][ T4248] usb 3-1: config 0 descriptor?? [ 243.473232][ T4239] hid-generic 0005:0006:5508.001C: item fetching failed at offset 3/4 [ 243.482789][ T4239] hid-generic: probe of 0005:0006:5508.001C failed with error -22 [ 243.779591][T10799] device syzkaller1 entered promiscuous mode [ 243.858437][T10801] netlink: 'syz.3.2132': attribute type 13 has an invalid length. [ 243.868728][ T4248] airspy 3-1:0.0: Board ID: 00 [ 243.869551][T10801] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 243.873596][ T4248] airspy 3-1:0.0: Firmware version: [ 243.970978][T10803] tipc: Enabled bearer , priority 0 [ 243.993560][T10803] device syzkaller0 entered promiscuous mode [ 244.004281][T10802] tipc: Resetting bearer [ 244.037634][T10802] tipc: Disabling bearer [ 244.114340][T10805] tipc: Enabled bearer , priority 10 [ 244.123199][T10805] device syzkaller0 entered promiscuous mode [ 244.134198][T10805] tipc: Resetting bearer [ 244.146805][T10804] tipc: Resetting bearer [ 244.159508][T10804] tipc: Disabling bearer [ 244.242134][T10807] device syzkaller0 entered promiscuous mode [ 244.527217][ T4248] airspy 3-1:0.0: usb_control_msg() failed -71 request 12 [ 244.540688][ T4248] airspy 3-1:0.0: Registered as swradio24 [ 244.546572][ T4248] airspy 3-1:0.0: SDR API is still slightly experimental and functionality changes may follow [ 244.551281][ T1336] usb 2-1: USB disconnect, device number 17 [ 244.558738][ T4248] usb 3-1: USB disconnect, device number 16 [ 244.624883][T10811] tipc: Enabled bearer , priority 0 [ 244.633453][T10811] device syzkaller0 entered promiscuous mode [ 244.656860][T10811] tipc: Resetting bearer [ 244.665265][T10810] tipc: Resetting bearer [ 244.681799][T10810] tipc: Disabling bearer [ 244.817332][ T4248] Bluetooth: hci5: command 0x1009 tx timeout [ 245.114640][ T1336] hid-generic 0005:0006:5508.001D: item fetching failed at offset 3/4 [ 245.133920][ T1336] hid-generic: probe of 0005:0006:5508.001D failed with error -22 [ 245.210909][T10824] netlink: 4476 bytes leftover after parsing attributes in process `syz.2.2142'. [ 245.290375][T10827] netlink: 'syz.3.2143': attribute type 13 has an invalid length. [ 245.304946][T10827] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 245.319754][T10828] tipc: Enabled bearer , priority 0 [ 245.362902][T10828] device syzkaller0 entered promiscuous mode [ 245.382437][T10826] tipc: Resetting bearer [ 245.428843][T10826] tipc: Disabling bearer [ 245.537248][ T4845] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000010: -71 [ 245.558579][T10832] device syzkaller0 entered promiscuous mode [ 245.564701][ T4845] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read HW_CFG: -71 [ 245.584855][ T4845] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 245.596115][ T4845] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 245.606156][ T4845] usb 5-1: USB disconnect, device number 15 [ 245.760422][T10838] tipc: Enabled bearer , priority 0 [ 245.777892][T10838] device syzkaller0 entered promiscuous mode [ 245.807823][T10838] tipc: Resetting bearer [ 245.823410][T10837] tipc: Resetting bearer [ 245.858229][T10837] tipc: Disabling bearer [ 246.217372][ T1110] hid-generic 0005:0006:5508.001E: item fetching failed at offset 3/4 [ 246.226415][ T1110] hid-generic: probe of 0005:0006:5508.001E failed with error -22 [ 246.281971][T10857] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2155'. [ 246.294980][T10858] netlink: 'syz.1.2156': attribute type 13 has an invalid length. [ 246.320680][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 246.340790][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 246.348787][T10858] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 246.384036][T10860] tipc: Enabled bearer , priority 0 [ 246.446491][ T4196] Bluetooth: hci4: ACL packet for unknown connection handle 201 [ 246.454184][T10860] device syzkaller0 entered promiscuous mode [ 246.497345][T10859] tipc: Resetting bearer [ 246.586906][T10859] tipc: Disabling bearer [ 247.087644][ T1110] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 247.096132][ T4845] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 247.337597][ T4845] usb 3-1: Using ep0 maxpacket: 32 [ 247.457810][ T1110] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 247.470200][ T1110] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0 [ 247.487153][ T1110] usb 2-1: config 0 interface 0 has no altsetting 0 [ 247.494237][ T1110] usb 2-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00 [ 247.504013][ T1110] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.518013][ T1110] usb 2-1: config 0 descriptor?? [ 247.638439][ T4845] usb 3-1: New USB device found, idVendor=0ac8, idProduct=c301, bcdDevice=82.d5 [ 247.656353][ T4845] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.665117][ T4845] usb 3-1: Product: syz [ 247.672990][ T4845] usb 3-1: Manufacturer: syz [ 247.678861][ T4845] usb 3-1: SerialNumber: syz [ 247.692056][ T4845] usb 3-1: config 0 descriptor?? [ 247.737874][ T4845] hub 3-1:0.0: bad descriptor, ignoring hub [ 247.745204][ T4845] hub: probe of 3-1:0.0 failed with error -5 [ 247.753293][ T4845] gspca_main: vc032x-2.14.0 probing 0ac8:c301 [ 248.050776][ T1110] hid-generic 0003:17EF:60EE.001F: unknown main item tag 0x0 [ 248.059866][ T1110] hid-generic 0003:17EF:60EE.001F: unknown main item tag 0x0 [ 248.068210][ T1110] hid-generic 0003:17EF:60EE.001F: unknown main item tag 0x0 [ 248.075768][ T1110] hid-generic 0003:17EF:60EE.001F: unknown main item tag 0x0 [ 248.083482][ T1110] hid-generic 0003:17EF:60EE.001F: unknown main item tag 0x0 [ 248.093081][ T1110] hid-generic 0003:17EF:60EE.001F: hidraw0: USB HID v0.01 Device [HID 17ef:60ee] on usb-dummy_hcd.1-1/input0 [ 248.177262][ T4845] gspca_vc032x: reg_w err -71 [ 248.182039][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.188065][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.197113][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.211327][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.217543][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.222870][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.228379][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.233720][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.239378][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.244684][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.250761][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.253291][ T4841] usb 2-1: USB disconnect, device number 18 [ 248.256555][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.268132][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.275996][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.281928][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.300910][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.306397][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.311801][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.317527][ T4845] gspca_vc032x: I2c Bus Busy Wait 00 [ 248.322932][ T4845] gspca_vc032x: Unknown sensor... [ 248.329621][ T4845] vc032x: probe of 3-1:0.0 failed with error -22 [ 248.337258][ T4248] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 248.369191][ T4845] usb 3-1: USB disconnect, device number 17 [ 248.597145][ T4248] usb 4-1: Using ep0 maxpacket: 32 [ 248.717312][ T4248] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 248.725631][ T4248] usb 4-1: config 0 has no interface number 0 [ 248.786672][ T4248] usb 4-1: config 0 interface 184 has no altsetting 0 [ 248.878269][ T4854] hid-generic 0005:0006:5508.0020: item fetching failed at offset 3/4 [ 248.893515][ T4854] hid-generic: probe of 0005:0006:5508.0020 failed with error -22 [ 248.909706][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 248.918989][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 248.928148][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 248.937728][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 248.947106][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 248.957055][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 248.966647][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #292!!! [ 248.975798][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 248.986514][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 248.995843][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #392!!! [ 249.007332][ T4248] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 249.025816][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 249.087646][ T4248] usb 4-1: Product: syz [ 249.114644][ T4248] usb 4-1: Manufacturer: syz [ 249.120295][ T4248] usb 4-1: SerialNumber: syz [ 249.124959][T10906] netlink: 'syz.0.2172': attribute type 13 has an invalid length. [ 249.145484][T10906] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 249.155708][ T4248] usb 4-1: config 0 descriptor?? [ 249.195381][T10911] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2174'. [ 249.204717][T10912] tipc: Enabled bearer , priority 0 [ 249.221524][ T4248] smsc75xx v1.0.0 [ 249.249122][T10905] device syzkaller0 entered promiscuous mode [ 249.285285][T10904] tipc: Resetting bearer [ 249.349407][T10904] tipc: Disabling bearer [ 249.363357][T10916] tipc: Enabling of bearer rejected, failed to enable media [ 249.438462][ T1110] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 249.505967][ T6020] Bluetooth: hci5: Frame reassembly failed (-84) [ 249.797094][ T1110] usb 3-1: Using ep0 maxpacket: 32 [ 250.090143][T10942] loop4: detected capacity change from 0 to 4096 [ 250.286121][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 250.297477][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 250.297639][T10942] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 251.786911][ T4841] Bluetooth: hci5: command 0x1003 tx timeout [ 251.808557][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 251.833707][T10942] ntfs3: loop4: Inode r=19 is not in use! [ 251.842220][T10942] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 251.857272][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 251.911233][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 251.941837][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 252.009904][ T4248] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 252.046645][ T4248] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 252.073657][ T4248] usb 4-1: USB disconnect, device number 14 [ 252.128386][ T1110] usb 3-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 252.137763][ T1110] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.146242][ T1110] usb 3-1: Product: syz [ 252.167041][ T1110] usb 3-1: Manufacturer: syz [ 252.171947][ T1110] usb 3-1: SerialNumber: syz [ 252.207772][ T1110] usb 3-1: config 0 descriptor?? [ 252.229420][ T1110] usb 3-1: can't set config #0, error -71 [ 252.244675][ T1110] usb 3-1: USB disconnect, device number 18 [ 252.299198][T10950] tipc: Enabled bearer , priority 0 [ 252.323635][T10952] netlink: 'syz.3.2189': attribute type 13 has an invalid length. [ 252.341093][T10952] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 252.383965][T10950] device syzkaller0 entered promiscuous mode [ 252.409496][T10949] tipc: Resetting bearer [ 252.456621][T10949] tipc: Disabling bearer [ 252.534533][T10963] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2185'. [ 252.668660][T10970] tipc: Enabling of bearer rejected, failed to enable media [ 252.879881][T10987] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2197'. [ 253.033404][T10996] tipc: Enabled bearer , priority 0 [ 253.066513][T10996] device syzkaller0 entered promiscuous mode [ 253.083795][T10995] tipc: Resetting bearer [ 253.113453][T10995] tipc: Disabling bearer [ 253.247066][ T4248] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 253.260975][T11007] device syzkaller0 entered promiscuous mode [ 253.343971][T11013] tipc: Enabling of bearer rejected, failed to enable media [ 253.620178][T11015] page:ffffea00011df800 refcount:4 mapcount:1 mapping:ffff88801e7db510 index:0x2 pfn:0x477e0 [ 253.631126][T11015] memcg:ffff88807d510000 [ 253.635393][T11015] aops:shmem_aops ino:46d [ 253.639753][T11015] flags: 0xfff00000080035(locked|uptodate|lru|active|swapbacked|node=0|zone=1|lastcpupid=0x7ff) [ 253.650229][T11015] raw: 00fff00000080035 ffffea000116d788 ffff88807d4ec010 ffff88801e7db510 [ 253.658873][T11015] raw: 0000000000000002 0000000000000000 0000000400000000 ffff88807d510000 [ 253.667483][T11015] page dumped because: VM_BUG_ON_PAGE(page_mapped(page)) [ 253.674524][T11015] page_owner tracks the page as allocated [ 253.680648][T11015] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 11027, ts 253553427644, free_ts 253515771044 [ 253.695875][T11015] get_page_from_freelist+0x1bbd/0x1ca0 [ 253.701466][T11015] __alloc_pages+0x1ee/0x480 [ 253.704605][T11024] loop2: detected capacity change from 0 to 32768 [ 253.706179][T11015] alloc_pages_vma+0x393/0x7c0 [ 253.717369][T11015] shmem_alloc_and_acct_page+0x47f/0xbe0 [ 253.723041][T11015] shmem_getpage_gfp+0x14f4/0x2d40 [ 253.728189][T11015] shmem_read_mapping_page_gfp+0x96/0x100 [ 253.734044][T11015] udmabuf_create+0x895/0x1570 [ 253.738841][T11015] udmabuf_ioctl+0x1f3/0x300 [ 253.743847][T11015] __se_sys_ioctl+0xfa/0x170 [ 253.748685][T11015] do_syscall_64+0x4c/0xa0 [ 253.753131][T11015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.759050][T11015] page last free stack trace: [ 253.763857][T11015] free_unref_page_prepare+0x637/0x6c0 [ 253.769353][T11015] free_unref_page_list+0x119/0x820 [ 253.774594][T11015] release_pages+0x186c/0x1be0 [ 253.779579][T11015] tlb_finish_mmu+0x176/0x300 [ 253.784385][T11015] exit_mmap+0x3d0/0x640 [ 253.788659][T11015] __mmput+0x115/0x3b0 [ 253.792842][T11015] exit_mm+0x588/0x6e0 [ 253.796932][T11015] do_exit+0x5a9/0x20c0 [ 253.801115][T11015] do_group_exit+0x12e/0x300 [ 253.805903][T11015] __x64_sys_exit_group+0x3b/0x40 [ 253.810953][T11015] do_syscall_64+0x4c/0xa0 [ 253.815390][T11015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 253.821395][T11015] ------------[ cut here ]------------ [ 253.826977][T11015] kernel BUG at mm/filemap.c:166! [ 253.832115][T11015] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 253.838204][T11015] CPU: 0 PID: 11015 Comm: syz.4.2209 Not tainted syzkaller #0 [ 253.845678][T11015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 253.855757][T11015] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 253.857751][ T4841] Bluetooth: hci5: command 0x1001 tx timeout [ 253.862555][T11015] Code: e8 29 15 db ff 4c 89 f7 48 c7 c6 00 00 33 8a e8 8a fb 0d 00 0f 0b e8 13 15 db ff 4c 89 f7 48 c7 c6 40 00 33 8a e8 74 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 14 db ff eb 5d e8 f1 14 db ff 4c 89 f7 [ 253.877085][ T4196] Bluetooth: hci5: sending frame failed (-49) [ 253.888688][T11015] RSP: 0018:ffffc900014af688 EFLAGS: 00010046 [ 253.888711][T11015] RAX: a10d83fb56ebf000 RBX: 0000000000000000 RCX: 0000000000000000 [ 253.888724][T11015] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000295ec4 [ 253.888737][T11015] RBP: 1ffffd400023bf01 R08: ffff8880b902795b R09: fffff52000295e80 [ 253.888749][T11015] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea00011df800 [ 253.888762][T11015] R13: dffffc0000000000 R14: ffffea00011df800 R15: ffffea00011df808 [ 253.888775][T11015] FS: 00005555935b7500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 253.888791][T11015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 253.888816][T11015] CR2: 00007fb9905e7440 CR3: 000000004f62a000 CR4: 00000000003506f0 [ 253.888835][T11015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 253.888846][T11015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 253.888858][T11015] Call Trace: [ 253.888864][T11015] [ 253.888874][T11015] __delete_from_page_cache+0xbe/0x6d0 [ 253.987271][ T4248] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f [ 253.987955][T11015] ? _raw_spin_lock_irq+0x86/0xf0 [ 253.993503][ T4248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 254.002511][T11015] ? lockdep_hardirqs_off+0x70/0x100 [ 254.002541][T11015] ? __bpf_trace_file_check_and_advance_wb_err+0x30/0x30 [ 254.002563][T11015] ? _raw_spin_lock_irq+0xb7/0xf0 [ 254.002581][T11015] ? _raw_spin_lock_irqsave+0x100/0x100 [ 254.002601][T11015] ? page_mapping+0x30e/0x440 [ 254.008329][ T4248] usb 4-1: Product: syz [ 254.015687][T11015] delete_from_page_cache+0x121/0x190 [ 254.021384][ T4248] usb 4-1: Manufacturer: syz [ 254.028092][T11015] truncate_inode_page+0x8d/0xb0 [ 254.028118][T11015] shmem_undo_range+0x53c/0x1930 [ 254.028142][T11015] ? __lock_acquire+0x13bc/0x7d10 [ 254.028162][T11015] ? shmem_truncate_range+0xa0/0xa0 [ 254.033748][ T4248] usb 4-1: SerialNumber: syz [ 254.038927][T11015] ? do_raw_spin_lock+0x128/0x2f0 [ 254.038953][T11015] ? __rwlock_init+0x140/0x140 [ 254.038969][T11015] shmem_evict_inode+0x220/0xa40 [ 254.038990][T11015] ? inode_wait_for_writeback+0x1df/0x220 [ 254.039011][T11015] ? shmem_free_in_core_inode+0xb0/0xb0 [ 254.046146][ T4248] usb 4-1: config 0 descriptor?? [ 254.048138][T11015] ? do_raw_spin_lock+0x128/0x2f0 [ 254.048165][T11015] ? bit_waitqueue+0x30/0x30 [ 254.048186][T11015] ? do_raw_spin_unlock+0x11d/0x230 [ 254.048203][T11015] ? shmem_free_in_core_inode+0xb0/0xb0 [ 254.136120][T11015] evict+0x4c9/0x8d0 [ 254.140045][T11015] ? proc_nr_inodes+0x320/0x320 [ 254.145023][T11015] ? do_raw_spin_unlock+0x11d/0x230 [ 254.150281][T11015] ? _raw_spin_unlock+0x24/0x40 [ 254.155263][T11015] __dentry_kill+0x431/0x650 [ 254.159865][T11015] dentry_kill+0xb8/0x290 [ 254.164190][T11015] dput+0xd8/0x1a0 [ 254.167902][T11015] __fput+0x5ee/0x930 [ 254.171903][T11015] task_work_run+0x125/0x1a0 [ 254.176482][T11015] exit_to_user_mode_loop+0x10f/0x130 [ 254.181842][T11015] exit_to_user_mode_prepare+0xee/0x180 [ 254.187074][ T4841] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 254.187440][T11015] syscall_exit_to_user_mode+0x16/0x40 [ 254.200432][T11015] do_syscall_64+0x58/0xa0 [ 254.204933][T11015] ? clear_bhb_loop+0x30/0x80 [ 254.209685][T11015] ? clear_bhb_loop+0x30/0x80 [ 254.214356][T11015] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 254.220427][T11015] RIP: 0033:0x7f1e5cbc5eb9 [ 254.224839][T11015] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 254.244615][T11015] RSP: 002b:00007ffced32cb28 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 254.253105][T11015] RAX: 0000000000000000 RBX: 00007f1e5ce42da0 RCX: 00007f1e5cbc5eb9 [ 254.261167][T11015] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 254.269134][T11015] RBP: 00007f1e5ce42da0 R08: 00007f1e5ce41038 R09: 0000000000000000 [ 254.277368][T11015] R10: 00000000003ffcd8 R11: 0000000000000246 R12: 000000000003e0e6 [ 254.285340][T11015] R13: 00007f1e5ce4109c R14: 000000000003de7e R15: 00007f1e5ce41090 [ 254.293309][T11015] [ 254.296372][T11015] Modules linked in: [ 254.300277][T11015] ---[ end trace 417b3cd3d62f928c ]--- [ 254.305818][T11015] RIP: 0010:unaccount_page_cache_page+0x75c/0x870 [ 254.312253][T11015] Code: e8 29 15 db ff 4c 89 f7 48 c7 c6 00 00 33 8a e8 8a fb 0d 00 0f 0b e8 13 15 db ff 4c 89 f7 48 c7 c6 40 00 33 8a e8 74 fb 0d 00 <0f> 0b 48 85 ed 75 59 e8 f8 14 db ff eb 5d e8 f1 14 db ff 4c 89 f7 [ 254.332036][T11015] RSP: 0018:ffffc900014af688 EFLAGS: 00010046 [ 254.338201][T11015] RAX: a10d83fb56ebf000 RBX: 0000000000000000 RCX: 0000000000000000 [ 254.346333][T11015] RDX: 0000000000000044 RSI: 0000000000000000 RDI: fffff52000295ec4 [ 254.354298][T11015] RBP: 1ffffd400023bf01 R08: ffff8880b902795b R09: fffff52000295e80 [ 254.362276][T11015] R10: dffffc0000000000 R11: ffffed1017204f2c R12: ffffea00011df800 [ 254.370336][T11015] R13: dffffc0000000000 R14: ffffea00011df800 R15: ffffea00011df808 [ 254.378663][T11015] FS: 00005555935b7500(0000) GS:ffff8880b9000000(0000) knlGS:0000000000000000 [ 254.387589][T11015] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 254.394176][T11015] CR2: 00007fb9905e7440 CR3: 000000004f62a000 CR4: 00000000003506f0 [ 254.402145][T11015] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 254.410544][T11015] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 254.418515][T11015] Kernel panic - not syncing: Fatal exception [ 254.425076][T11015] Kernel Offset: disabled [ 254.429394][T11015] Rebooting in 86400 seconds..