last executing test programs: 1m34.352453622s ago: executing program 2 (id=100): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)='devtmpfs\x00', 0x1214040, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r3, 0x0, 0x0) 1m30.697777187s ago: executing program 2 (id=106): r0 = epoll_create1(0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x3e000, 0x1000}, 0x20) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000002d40)=0x1, 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_ublk_setup_io_uring(0x155a, &(0x7f0000000500)={0x0, 0xa355, 0x10000, 0x2, 0x15a}, &(0x7f0000000100)=0x0, &(0x7f0000000440)=0x0, &(0x7f00000000c0)=0x0) syz_ublk_add_dev(r4, r5, r6, r7, 0x0, &(0x7f0000000480)=0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = dup(r9) syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7fffde, 0x200, 0x2, 0x15e, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x80, 0x10000000, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x2000, 0x20003, 0x0, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x8, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0x8004, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'netdevsim0\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r2, &(0x7f00000003c0)={0x2c, 0x18, r11}, 0x10) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa002803f}) 1m29.828086744s ago: executing program 2 (id=110): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000002c0)={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, 0x3, 0x6, 0x0, 0x400, 0x4, 0x540100, r1}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0, 0x0, 0x6, 0x0, 0x100, 0x6, 0x180107, r1}) 1m29.449443326s ago: executing program 2 (id=111): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000080)=ANY=[], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r0 = socket$alg(0x26, 0x5, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x6, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000680), 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x18, &(0x7f0000000300)={@flat=@weak_binder={0x77622a85, 0x100a, 0x8000000000}, @flat=@weak_binder={0x77622a85, 0x0, 0x3}}, &(0x7f0000000200)={0x0, 0x18, 0x30}}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000002ac0), 0x0, 0x0, 0x0}) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000", @ANYRES32, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1m28.969243741s ago: executing program 2 (id=114): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x8, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 1m28.281958316s ago: executing program 2 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$eJzs289PHFUcAPDv7EKR/hBs6o/Sqmg1En9AobX24EWjiQdNTPRQjwi0wW6LKZjYhigaU4+miXfj0cS/wJNejHoy8ap306QxXFo9rZndGdhddrdAF7a6n08y8N7MW9777szbfW8eE0DPGk1/JBH7I+L3iBiqZusLjFZ/3Vpdnvl7dXkmiXL5rb+SSrmbq8szedH8dfvyTF9E4bMkjjSpd/HylfPTpdLcpSw/sXTh/YnFy1eem78wfW7u3NzFqdOnT56YfOHU1PMdiTON6+bIRwtHD7/2zrU3Zs5ce/fnb5M8/oY4OmS03cEny+UOV9ddB2rSSV8XG8KWFKvdNPor/X8oirF+8obi1U+72jhgR5XL5fIDrQ+vlIH/sSS63QKgO/Iv+nT+m2+7NPS4K9x4qToBSuO+lW3VI31RyMr0N8xvO2k0Is6s/PNVusXO3IcAAKjzfTr+ebbZ+K8QtfeF7s3WUIYj4r6IOBgRpyLiUETcH1Ep+2BEPNSskqR1/Y2LJBvHP4Xr2w5uE9Lx34vZ2lb9+C8f/cVwMcsdqMTfn5ydL80dz96TsegfSPOTber44ZXfvmh1rHb8l25p/flYMGvH9b6B+tfMTi9N30nMtW58EjHS1yz+ZG0lID19hyNiZJt1zD/9zdFWx24ffxsdWGcqfx3xVPX8r0RD/Lmk/frkxD1Rmjs+kV8VG/3y69U3W9V/R/F3QHr+9za9/tfiH05q12sXt17H1T8+bzmn2e71vyd5u27fh9NLS5cmI/Ykr1cbXbt/qqHc1Hr5NP6xY837/8FYfyeORER6ET8cEY9ExKNZ2x+LiMcj4lib+H96+Yn3thf/QJu/2hlp/LNbOv/riT3RuKd5onj+x+/qKh3ebPyRnf+TldRYtmczn3+badf2rmYAAAD47ylExP5ICuNr6UJhfLz6P/yHYm+htLC49MzZhQ8uzlafERiO/kJ+p2uo5n7oZDatz/NTDfkT2X3jL4uDlfz4zEJpttvBQ4/b16L/p/4sdrt1wI7zvBb0Lv0fepf+D71L/4fe1aT/D3ajHcDua/b9/3EX2gHsvob+b9kPeoj5P/Qu/R96l/4PPWlxMG7/kLyExIZEFO6KZkjsUKLbn0wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACd8W8AAAD//zpS5t0=") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 1m12.383612738s ago: executing program 32 (id=119): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@errors_remount}, {@nombcache}]}, 0x1, 0x437, &(0x7f0000000900)="$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") lsetxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) 16.487200853s ago: executing program 6 (id=358): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/63, 0x0, 0xc000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000019c0)) r1 = eventfd2(0x1, 0x80001) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/4096}) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000b80)='./file1\x00', 0x1008002, &(0x7f0000000000)={[{@nomblk_io_submit}, {@orlov}, {@nodiscard}]}, 0x3, 0x609, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 16.296072137s ago: executing program 3 (id=360): mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./debug\x00', 0x4f) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0), 0x0, 0x2040000, &(0x7f0000003700)={0x77359400}) write(0xffffffffffffffff, 0x0, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000340)='./debug/failslab/probability\x00', &(0x7f0000000480), &(0x7f0000000880)={0x0, 0xfb, 0x2c, 0x4, 0x3, "2462049d5ac07f56eeb4b5c909bedcf4", "5246f193e28ac1d05a5da09896cf7e2b111a5be584e775"}, 0x2c, 0x2) r1 = io_uring_setup(0xf08, &(0x7f0000000780)={0x0, 0xfb6e, 0x38c1, 0x3, 0xf0}) io_uring_register$IORING_REGISTER_FILES(r1, 0x20, &(0x7f0000000000)=[r1], 0x1) pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r4 = add_key$fscrypt_v1(&(0x7f00000000c0), &(0x7f0000000100)={'fscrypt:', @desc2}, &(0x7f0000000140)={0x0, "1f1f758a517ac2afb617707a659039f0aa79253dd2e6ec53cfd8915ab1f2eb2d9eab6a44988b9cca3beaf0b8db297ec526ea0c178c23db4616a845473010137c", 0x12}, 0x48, 0xfffffffffffffffb) keyctl$KEYCTL_WATCH_KEY(0x20, r4, r2, 0xd8) r5 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r2, 0x36) keyctl$KEYCTL_WATCH_KEY(0x20, r5, r3, 0xffffffffffffffff) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/times\x00', 0x1, 0x0) socket(0x10, 0x3, 0x0) syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x20108c0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], 0xf6, 0x618a, &(0x7f000000c840)="$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") ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) 13.614938816s ago: executing program 0 (id=367): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) 13.4493715s ago: executing program 6 (id=369): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00979ad1010203010902240001000000000904290202b48cbb0009050402100000fa"], 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000007c0)={0x84, &(0x7f0000000140)={0x20, 0x5, 0x6, "07fa3c1d0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 13.350104606s ago: executing program 0 (id=370): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x521, &(0x7f0000001280)="$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") lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 12.213031658s ago: executing program 3 (id=374): bpf$PROG_LOAD(0x5, &(0x7f0000001000)={0x6, 0x8, &(0x7f00000010c0)=@raw=[@generic={0x18, 0x2, 0x0, 0x0, 0x100000a}, @generic, @generic={0x18, 0x2, 0x0, 0x0, 0x200000a}, @generic, @generic={0xbf, 0x2, 0xa}, @generic={0xb7, 0x3, 0x0, 0x0, 0x40}, @generic={0x85, 0x0, 0x0, 0x0, 0x45}, @generic={0x95}], &(0x7f00000011c0)='GPL\x00', 0x1, 0x1000, &(0x7f0000001200)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.101873867s ago: executing program 0 (id=376): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x20008005, 0x0, 0x0) 11.730092937s ago: executing program 3 (id=380): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030332c726573765f6c6576656c3d30303030303030303030303030303030303030362c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c636f686572656e63793d66756c6c2c6e6f61636c2c004c98065b85e5b137d63b2211c62c402045083da9bddc3b0d88d44ecd24ba5288d428197284f332858b83349af2c7646f1e07e91120d7f23ce20389bbc031d81d654f1ca08f61c92d90e6ea478843c1ad942c7c257f9ff5348dd038e947775991ad90f8861dada21d5fa2de7042b5e2cbbcd1ada2b568e375812eb0bc448e68eda4c70cf1d5adf566142ed45924fe72a1eb1a914faf754b9d94bf0fdc1f98c708bd89940b5ef96e328240c39559b35bc83c15c15104f3b3fe1945f0278c34e2399dadcd9776ac659afcbb239569140ab408ad87f15b353941"], 0x1, 0x442d, &(0x7f000000d680)="$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") syz_clone(0x4200000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, &(0x7f00000000c0)={{}, 0x0, 0x0, 0x100000}) 10.885276056s ago: executing program 1 (id=382): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x14, 0x30, 0x9}, 0x14}}, 0x0) 10.326534266s ago: executing program 1 (id=384): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="62a02a3a34097777"], 0xa) 10.273156395s ago: executing program 4 (id=385): mkdir(&(0x7f0000000400)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, &(0x7f0000006840)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x10b}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x2, 0x0) lseek(r2, 0x0, 0x2) 9.996762943s ago: executing program 1 (id=386): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 9.926455459s ago: executing program 4 (id=387): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7001}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x9, 0x70a0af8c93042c75}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x5, 0x3, 0xc06a2f6, 0x1, 0x7}, 0x6, 0x0, 0xa, 0x4, 0x6, 0x4, 0x18, 0x9, 0x3, 0x4, {0x0, 0x2, 0x5, 0x800, 0x8704, 0x27000000}}}}]}, 0x78}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000006c0)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd2c, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0xa, 0x10}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x7, 0xc3f, 0x8, 0x1, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x2400c884}, 0x20000000) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r7) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r8, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r6, 0xe}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)='C\a', 0x2}], 0x2}, 0x4) 9.376975706s ago: executing program 5 (id=388): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x1000c40, &(0x7f00000002c0), 0x5, 0x521, &(0x7f0000001280)="$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") lsetxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) listxattr(0x0, 0x0, 0x0) 9.06955606s ago: executing program 6 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 8.979814745s ago: executing program 0 (id=390): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r1, 0x10001) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r4, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) futex(&(0x7f0000000300)=0x1, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @mcast2, 0x80}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x20008005, 0x0, 0x0) 8.94868191s ago: executing program 4 (id=391): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000003c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000004c0)={0x4b, "276cd4a5dc6b3b75a1c1ccff2476a46ce09805c0732f3c23d345b1060506c27089b1ee5a2b4b3a4a6dfc2bf7c2dfbf59592093ede47ba07c0fb9b4732d27ec0ccf86405b6a0deca6f2803d"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002b40)}], 0x1}}], 0x1, 0x40408c1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 7.837991227s ago: executing program 6 (id=392): syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x1402, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffc000, 0x103) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x4, 0x638a8063, 0x3, 0x0, 0x7, 0x6, 0x0, 0x0, 0x1}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x90, 0x0, 0x0, {0x0, 0x400000000000, 0x0, 0x1000000000000000, 0x0, 0xb22f, {0x0, 0x1003, 0x0, 0x0, 0xd, 0xfffffffffffffffd, 0xfffffffd, 0xfffffffe, 0x0, 0x1000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 6.900438985s ago: executing program 1 (id=393): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x102) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn']) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000480)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) 6.900059814s ago: executing program 5 (id=394): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000400)=' \\', 0x2) 6.841908183s ago: executing program 4 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./myconfig\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./myconfig\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./myconfig/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./myconfig/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,384000,705600,7', 0x3c) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./myconfig/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000640)='usbip-vudc.0', 0xc) 6.705290979s ago: executing program 3 (id=396): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0) clock_gettime(0x0, &(0x7f00000000c0)) futex(0x0, 0x86, 0x2, 0x0, 0x0, 0xfffffffc) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) socket$inet_tcp(0x2, 0x1, 0x0) 6.302651777s ago: executing program 1 (id=397): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) socket$kcm(0xa, 0x2, 0x73) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp(0x2, 0x3, 0x2) socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB], 0x392c}}, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$tcp_mem(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001400000008000200fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r1], 0x5c}, 0x1, 0x0, 0x0, 0x40800}, 0x40090) 6.052639263s ago: executing program 5 (id=398): openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000080)=ANY=[@ANYRES16=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r0, 0x0) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r1, 0x541c, &(0x7f0000000000)) 5.920279793s ago: executing program 6 (id=399): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX=r0, @ANYRESOCT=r1], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, 0x0, 0x0, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.61778233s ago: executing program 0 (id=400): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x200840, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x5, 0x4445, &(0x7f000000cd00)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 5.454768827s ago: executing program 1 (id=401): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000003900), 0x34aa945a513d639, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) ftruncate(r0, 0x10001) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)=0x0) clock_gettime(0x0, &(0x7f00000000c0)) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) fchown(0xffffffffffffffff, 0x0, 0x0) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x2c, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x2, @mcast2, 0x80}, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) r4 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r4, 0x0, 0x0, 0x20008005, 0x0, 0x0) 5.447165615s ago: executing program 6 (id=402): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/vhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='vhci_hcd.0', 0xa) 5.35336486s ago: executing program 5 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='1', 0x1) close(r1) 4.859045059s ago: executing program 4 (id=404): bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1, 0x42, 0x6, 0x8, 0x0, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f00000000c0), &(0x7f0000000000)=""/3, 0x2}, 0x20) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.619019043s ago: executing program 3 (id=405): openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpid() syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000040)='./file1\x00', 0x3010846, &(0x7f00000002c0)=ANY=[@ANYBLOB='iocharset=koi8-u,discard=0x0000000000000004,iocharset=iso8859-9,discard,iocharset=koi8-ru,errors=remount-ro,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c6572726f72733d72656d6f756e742d726f2c6572726f72733d636f6e74696e75652c6e6f646973636172642c696f636861727365743d69736f383835392d332c005d245603bb5b494e31b3e32f7a4536f7389f889613f9bebfad670d9c5b69025afa2ed8a0983033c21a066b886aded885e0be89c3a88225b41e870229bff872d594d5a79ca2a73ae38725a8a4251c102dd8a175ce9f42f974c650e3f4d216c776b32d707119113d826189e7cc3f2b74b5191cce0209a7c007d15932d18b9ea2f49c0c2b7395277707"], 0x24, 0x62d7, &(0x7f0000021240)="$eJzs3c1vHGcdB/Df7JtfStuoh6pECLlteCmleS0hUKDtAQ5cOKBcUSLXrSJSQElAaRURV75w4I8AIXFEiCMn/oAeuHLjDyCSgwTqAXXQ2M/jjKe7XjuJd3Yzn4/kzPzmmfE+k++Od9cz4ycAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgPjhD358roiIK79KC05EfC76Eb2Ilapei4iVtRP1bV6IneZ4PiKGSxHV9jv/PBvxekR8/EzE9v0769Xi84fsx/f//I8//OSpH/39T8Mz//3Lrf4bk9a7ffu3//nr3YffXwAAAOiisizLIn3MPxkRg/TZHgB48uXX/zLJy9VzV2/OWX/UarVavYB1XTne3XoREZv1bar3DE7HA8CC2YxP2u4CLZJ/pw0i4qm2OwHMtaLtDnAstu/fWS9SvkX99WBttz1fC7Iv/81i7/6OSdNpmteYzOr5tRX9eG5Cf1Zm1Id5kvPvNfO/sts+Susdd/6zMin/0e6tT52T8+838294cvLvjc2/q3L+gyPl35c/AAAAAADMsfz7/xMtn/9devRdOZSDzv+uzagPAAAAAAAAAPC4HXX8v0Fj/L89xv8DAACAuVV9Vq/87pkHyyb9LbZq+eUi4unG+kDHpJtlVtvuBwAAAAAAAAAAAAB0yWD3Gt7LRcQwIp5eXS3Lsvqqa9ZH9ajbL7qu7z90Wds/5AEAYNfHzzTu5S8iliPicvpbf8PV1dWyXF5ZLVfLlaX8fna0tFyu1D7X5mm1bGl0iDfEg1FZfbPl2nZ10z4vT2tvfr/qsUZl/xAdm40WAweAiNh9Ndqe9Ir0P69Xi6ksn42W3+SwIA44/llQjn8Oo+3nKQAAAHD8yrIsi/TnvE+mc/69tjsFAMxEfv1vnhdQq9VqtVr95NV15Xh360VEbNa3qd4zGI4fABbMZnzSdhdokfw7bRARL7TdCWCuFW13gGOxff/OepHyLeqvB2l893wtyL78N4ud7fL246bTNK8xmdXzayv68dyE/jw/oz7Mk5x/r5n/ld32UVrv0fMv9/2asK1rjCblX+3niRb607acf7+Zf8NxH/+zshW9sfl3Vc5/cKT8+/IHAAAAAIA5ln//f2Kuzv+OHnZ3pjro/O/a2C2Ory8AAAAAAAAA8Lhs37+znu97zef/vzBmPfd/Pply/oX8Oynn32vk/9XGev3a/L23H+T/7/t31v9461+fz9PD5r+UZ4r0zCrSM6JIj1QM0vRR9u6ztob9UfVIw6LXH6Rrfsrhu3EtrsdGnN23bi/9fzxoP7evverpcKe97O+2n9/XPthrz9tf2Nc+TFcXlSu5/XSsx8/jeryz0161LU3Z/+Up7eWU9px/3/HfSdtpOnjw9WxVr6blRWNaufdR7zPHfX067nHeuvbF35w91j05nK3o7+1bXbV/L7XQn53/k6dG8cubGzdO375669aNc5Em+5aejzR5zPLxP0xfez//X95tzz/368frvY9GR85/XmzFYGL+L9fmq/19ZcZ9a0POf5S+cv7vpPbxx/8i5z/5+H+1hf4AAAAAAAAAAAAAAADAQcqy3LlF9K2IuJju/2nr3kwAYLby63+Z5OWzqvszfjy1esHrYs76M9P603K++qNWL2JdV473Zr2IiL/Vt6neM/x63DcDAObZpxHxz7Y7QWvk32H57/1V01NtdwaYqZsffPjTq9evb9y42XZPAAAAAAAAAICHlcf/XKuN/3yqLMu7jfX2jf/6dqw96vifgzyzN8DohIGq+0ffp4Ns9Ub9Xm248Rdj0vjfw725g8b/Hkx5vOGU9tGU9qUp7ctT2sfe6FGT83+xNt75qYg42Rh+vQvjvzbHvO+CnP9Ltedzlf9XGuvV8y9/v8j59/blf+bW+784c/ODD1+79v7V9zbe2/jZhXPnzl64ePHSpUtn3r12fePs7r8t9vh45fzz2NeuA+2WnH/OXP7dkvP/Uqrl3y05/y+nWv7dkvPP7/fk3y05//zZR/7dkvN/JdXy75ac/9dSLf9uyfm/murp+U/7jSaLJOf/9VQ7/rsl5/9aquXfLTn/06mWf7fk/M+k+pD5rxx3v5iNnH8+w+X475acf76yQf7dkvM/n2r5d0vO/0Kq5d8tOf/XUy3/bsn5fyPV8u+WnP/FVMu/W3L+30y1/Lsl538p1fLvlpz/t1It/27J+X871fLvlpz/G6mWf7fk/L+Tavl3S87/u6mWf7fk/L+Xavl3S87/zVTLv1se/P1/M2bMmMkzbf9kAgAAAAAAAAAAAACaZnE5cdv7CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPyfHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh7+5i5DrLO4Cf/fTaIYmBkDqpgY1jQkg22bWd+IM2xYTPhq8SCIV+YLvetVlwbOO1S6CRbBookTAqqmgbLtoCQm1uKnLBBa0A5QK1QmoF7QXtBQKhchFVAQWkSrQCtppz3vfdmdnZmV3vePfMOb+fZD+eM2fmvHPmnTPz7Po/BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAZre8Zu4TQ1mWNf7kf23Psuc1/r11cnu+7JWbPUIAAABgvX6R//3c9WnB4VXcqGmdf37Jt768uLi4mL175M/HPrO4mK6YzLKxLVmWXxc99YP3DDWvEzyWTQwNN10e7rH5kR7Xj/a4fqzH9eM9rt/S4/qJHtcv2wHLbC1+HpPf2e78n9uLXZrdkI3l1+3ucKvHhrYMD8ef5eSG8tssjp3I5rNT2Vw207J+se5Qvv5Xb2ls641Z3NZw07Z2NmbITx49HscwFPbx7pZtLd1n9KNXZ5M//cmjx//2/LM3dao9d0PL/RXjvH1XY5wfC0uKsQ5lW9I+ieMcbhrnzg7PyUjLOIfy2zX+3T7O51Y5zpGlYW6o9ud8IhvO//3tfD+NNv9YL+2nnWHZz27NsuzS0rDb11m2rWw429ayZHjp+ZkoZmTjPhpT6QXZ6Jrm6S2rmKeNOru7dZ62vybi839LuN3oCmNofpp+9NHxpuf954tXMk+jxqNe6bXSPgf7/VopyxyM8+Lb+YN+vOMc3B0e/6O3rTwHO86dDnMwPe6mObir1xwcHh/Jx5yehKH8NktzcE/L+iP5loby+sxt3efg9PmHz04vfPgjd80/fOzk3Mm50/v27JnZt3//wYMHp0/Mn5qbKf6+wr1dftuy4fQa2BX2XXwNvLxt3eapuvj58WXH3yt9HU50eR1ub1u336/D0fYHN7QxL8jlc7p4bbyzsdMnLg9nK7zG8ufnjvW/DtPjbnodjja9Dju+p3R4HY6u4nXYWOfsHav7zDLa9KfTGFZ+L1jfHNzeNAfbP4+0z8F+fx4pyxycCPPiu3es/F6wM4z38am1fh4ZWTYH08MNx57GkvR5f+JgXjrNy5sbV1wznl1YmDt39yPHzp8/tycLZUO8sGmutM/XbU2PKVs2X4fXPF8Pz7/k8Zs7LN8e9tXEXY2/JlZ8rhrr3HN39+cqf3frvD9blu7NQumzjd6fnd7NG/tzPMs++42PPvi1Rz/7mhX3Z6Pf/Nj0+j+Lp7606fg7tsLxN/b9vyy2l+7qsZGx0eL1O5L2zljL8bj1qRrNj11D+bafm17d8Xgs/Nno4/ENXY7HO9rW7ffxeKz9wcXj8VCvn3asT/vzORHmyamZ7sfjxjo79q51To52PR7fGupQ2P+vCJ1C6oua5s5K8zZta3R0LDyu0biF1nm6r2X9sdCbNbb15N7woTCNcnXz9PZbi/VHmm4XbdQ8nWxbt9/zNP3sa6V5OtTrp29Xpv35nAjz4oZ93edpY52n71n/sXNr/GfTsXO81xwcGxlvjHksTcL8eJ8tbo1z8O7seHYmO5XN5teO5/NpKN/W1L2rO1aOhz8bfazc0WUO3t62br/nYHofW2nuDY0uf/B90P58ToR58cS93edgY53XHujvZ9fbiyVLP4pu+uza/vO1lX7mdXPbbrpac6UxksZj+caB7j+bbaxz6uBa+8zu++nOsOSaDvup/fW70mtqNtuY/bQjjPPZgyvvp8Z4Gut85tAq59PhLMsufvD+/Oe94fcrFy9858stv3fp9Dudix+8/8fXnvintYwfgMH3y6JsK97rmn4ztZrf/wMAAAADIfb9w6Em+n8AAACojNj3x/8Vnuj/AQAAoDJi3z8aalKF/v+Pe6+y47XPzv/yYpaS+YtBvD7thgeK9WLGdSZcnlxc0lh+/xfn/ucfL65ueMNZlv38gT/quP6OB+K4CpNhnE+9rnX5Ml++a1XbPvrQxbTd5vz658L9x8ez2mnQKYI7k2XZV6//VL6dyfdczuvTDxzN64OXHn+ssc5zh4rL8fbPvLBY/69C+PfwiWMtt38m7Icfhjrzps77I97uS5dfsfPAu5a2F283tOu6/GE/8d7ifuP35Hz6sWL9uJ9XGv/XPvnklxrrP/KyzuO/ONx5/E+G+/1iqP/74mL95uegcTne7uNh/HF78XZ3f+HrHcf/1CeK9c++vljvaKhx+7eHy7tf/+x88/56ZOhYy+PK3lCsF7c/850/za+P9xfvv338E0cut+yP9vnx9L8X9zPdtn5cHrcT/UPb9hv30zw/4/af/JOjLfu51/afevCZFzfut337d7atd/aDd+TbX7q/1m9s+uuPf6rj9uJ4Dv/92ZbHc/jt4XUctv/Ee8N8DNf/31PF/bV/u8LRt7cef+L6n9t+seXxRG/8abH9p151Mq9bJrZuu+Z511536aWNfZdl395S3F+v7Z/8mzMt4//8jcX+iNfHjH779lcSt3/uQ1OnzyxcmJ9Ne/XR6/PvznlzMZ443uvDsbX98pEz5983d25yZnImyyar+xV6V+wLof64KJe6r7247Ah6x0Ph+bz5L7+67bZ/+2Rc/h/vLJZfflPxvvXysN6nw/Lt4flb2/aXe+KWG/PX99DTYYSLy78veD127v7vg72+3zcXHn/754I438++6H35fmhcl79vxNf1Osf/vdnifr4S9uti+GbmXTcuba95/fjdCJffUbze173/wmEuPq9/F57vt/ywuP84rvh4vxc+x3x9R+vxLs6Pr1wcbr///Fs8LoXjSXapuD6uFff35edu7Di8+D0k2aWb8st/lu7npjU9zJUsfHhh+tT86QuPTJ+fWzg/vfDhjxx5+MyF0+eP5N/leeT9vW6/dHzalh+fZuf235PlR6szRbnKNnv8Zx86Pntg5rbZuRPHLpw4/9DZuXMnjy8sHJ+bXbjt2IkTcx/qdfv52fv27D2078DeqZPzs/cdPHRo36Gp+dNnGsMoBtXD/pkPTJ0+dyS/ycJ99xzac++998xMPXxmdu6+AzMzUxd63T5/b5pq3PoPp87NnTp2fv7huamF+Y/M3bfn0P79e3t+G+DDZ08sTE6fu3B6+sLC3Lnp4rFMns8XN977et2ealr4fvF5tt1Q8UV82dvu3J++n7Xhix9d8a6KVdq+QPTZ8F0033z+2YOruRz7/rFQkyr0/wAAAEAu9v3joSb6fwAAAKiM2PdvCTXR/wMAAEBlxL5/ItT0XwJq0v9XLv+/4+Kqti//L//fvL/k/2uW/39H2fL/xfFC/r8/1pu/r0P+f1Uryv/L/8v/y//L/9MHZcv/x75/a5b5/T8AAABUVOz7t4Wa6P8BAACgMmLff02oif4fAAAAKiP2/c8LNalJ/y//L/8v/y//L//fefvy/4NJ/r+7kuX/J9oXyP9vfv4/q1f+/1I/x78J+f+tzRfk/ymjsuX/Y99/bahJTfp/AAAAqIPY918XaqL/BwAAgMqIff/1oSb6fwAAAKiM2PdvDzWpSf8v/7+u/H/KXA1u/r/Ysvy//L/8v/x/Vcj/d1ey/P8y8v+bn/93/v+Byv+3kP+njMqW/499//NDTWrS/wMAAEAdxL7/BaEm+n8AAAAon9Eru1ns+18YarKs/7/CDQAAAACbLvb9N2RtQfCa/P5f/t/5/0t7/v8x+X/5/0L58/8jmfx/ecj/dyf/30M/8v+X5P/l/+X/5f+Jypb/z/v+bCJ7UahJTfp/AAAAqIPY998YaqL/BwAAgMqIff+vhJro/wEAAKAyYt+/I9SkJv2//H9l8v8/a37qKpH/d/5/+f+g/Pl/5/8vE/n/7uT/e3D+f/l/+X/5f/pqoWOntHn5/9j33xRqUpP+HwAAAOog9v03h5ro/wEAAKAyYt//q6Em+n8AAACojNj37ww1qUn/L/9f8vx/TI7W8fz/8v/y/0GZ8/8T8v+lI//fnfx/D/L/8v/y//L/9NXC94vPs+02K/8f+/4Xh5rUpP8HAACAOoh9/0tCTfT/AAAAUBmx739pqIn+HwAAACoj9v2ToSY16f/Xkv8fuiT/v5KrfP7/8VWc/7+F/P+m5P9H5f8Ldcr/Z/L/pSP/3538fw/y//L/8v/y//RV2fL/se+/JdSkJv0/AAAA1EHs+3eFmuj/AQAAoDJi339rqIn+HwAAACoj9v27Q01q0v87//9A5P8z+f+ByP87/38g/9+Z/P/GkP/vTv6/B/l/+X/5f/l/+qps+f/Y978s1KQm/T8AAADUQez7bws10f8DAABAZcS+/+WhJvp/AAAAqIzY998ealKT/l/+X/5f/l/+X/6/8/Y3PP9/Sf6/H+T/u5P/70H+X/5f/l/+n74qW/4/9v2vCDWpSf8PAAAAdRD7/jtCTfT/AAAAUBmx778z1ET/DwAAAJUR+/6pUJOa9P/y//L/1cz//6f8f5fty/+XNP/v/P99If/fnfx/D/L/8v/9yP+PhQXy//L/bHr+P35ei5dj339XqElN+n8AAACog9j33x1qov8HAACAyoh9/3Soif4fAAAAKiP2/TOhJjXp/+X/5f+rmf93/v9u219X/v+lS/cr/1+Q/y8X+f/u5P976Gf+f4v8f23z/+s6//+Y/D+Vstn5//bLse/fE2pSk/4fAAAA6iD2/XtDTfT/AAAAUBmx798XaqL/BwAAgMqIff89oSY16f/l/+X/5f/l/53/v/P25f8Hk/x/d/3P/8eHKP/v/P/y//3J/zv/P9VStvx/7PvvDTWpSf8PAAAAdRD7/v2hJvp/AAAAqIzY9x8INdH/AwAAQGXEvv9gqElN+n/5f/l/+X/5f/n/ztuX/x9M8v/dOf9/D/L/8v8DnP9vzC35f8qmbPn/2PcfCjWpSf8PAAAAdRD7/leGmuj/AQAAoDJi3/9roSb6fwAAACih8Su6Vez7fz3UpCb9v/y//L/8v/z/Juf/x3rl/8fl/+X/10D+vzv5/x7k/+X/Bzj/v8L5/68NV8v/synKlv+Pff99oSY16f8BAACgDmLf/xuhJvp/AAAAqIzY978q1ET/DwAAAJUR+/7DoSY16f/l/zco/x8Xljb/H5PM8v/5Avl/5/+X/x9Y8v/dyf/3IP8v/1+9/H+/z//f/jadyP/TSdny/7Hvf3WoSU36fwAAAKiD2PffH2qi/wcAAIDKiH3/a0JN9P8AAABQGbHvf22oSU36f/l/5//f/PP/j7WMXf5/6Xby/wX5f/n/tZD/707+vwf5f/l/+X/n/6evypb/j33/60JNatL/AwAAQB3Evv/1oSb6fwAAAKiM2Pe/IdRE/w8AAACVEfv+N4aa1KT/l/+X/9/8/L/z/8v/F+T/5f/7Qf6/O/n/HuT/5f/l/+X/6auy5f9j3/+boSY16f8BAACgDmLf/0Coif4fAAAAKiP2/W8KNdH/AwAAQGXEvv/NoSY16f/l/+X/5f/l/+X/O29f/n8wyf93N2D5/19cF5bL/xfk/8s9/rXm/0fbLl+V/P8PVsr/L25pv738P1dD2fL/se9/S6hJTfp/AAAAqIPY97811ET/DwAAAJUR+/63hZro/wEAAKAyYt//W6EmNen/5f8b41hKL8v/y//nC+T/5f/l/weW/H93Kf//XKd3riblyP87/38b+f9yj9/5/+X/Wa5s+f/Y97891KQm/T8AAADUQez7Hww10f8DAABAZcS+/x2hJvp/AAAAqIzY978z1KQm/b/8v/P/y//L/8v/d96+/P9gkv/vbsDO/y//30b+v9zjvyr5//+S/2ewlS3/H/v+h0JNatL/AwAAQB3Evv9doSb6fwAAAKiM2Pf/dqiJ/h8AAAAqI/b97w41qUn/L/8/KPn/Sfn/Neb/x8My+X/5f/n/epH/707+vwf5f/n/suX/nf+fAVe2/H/s+98TarL6/n9i1WsCAAAAV1P7r5OS2Pf/TqhJTX7/DwAAAHUQ+/7fDTXR/wMAAEBlxL7/90JNatL/y/8PSv7f+f8z5/+X/297PPL/8v+dbFz+Px551pT/39Jr+/L/8v/y/4M7fvl/+X+WK1v+P/b9vx9qUpP+HwAAAOog9v3vDTXR/wMAAMBA6PR/stvFvv9IqIn+HwAAACoj9v1HQ01q0v/L/8v/y/+XNP//F7v+5bvfeuvRPfL/8v/y/2uyoef/b7z4nf9f/l/+P5H/l/+X/6dd2fL/se8/Fmqy1Pi92Qn+AQAAYLDFvv8PQk1q8vt/AAAAqIPY9x8PNdH/AwAAQGXEvn821KQm/b/8/ybm/0ezLJP/l/+v4Pn/4/4YpPz/1JYByv/Hg678f0cbmv9/11JOXP5/rfn/8Y5L2/P/Q/L/LeT/1zz+b2ZZtmHjv/iv8v/y/7QrW/4/9v1zoSY16f8BAACgDkLfP3yiqEtX6P8BAACgMmLffzLURP8PAAAAlRH7/veFmtSk/5f/d/5/+X/5f+f/77z90ub/nf+/K/n/7sqT/+/M+f/l/wd5/M7/L//PcmXL/8e+fz7UpCb9PwAAANRB7PvfH2qi/wcAAIDKiH3/B0JN9P/w/+zdyZNlZZnH8ZuQRFUF0RG960Uvuve96k1vWDSrXnT/Ab1gw6YjulvFAeeJwnnEeR7QUBEHHEARUVGcBScUcUTFGcQJJ0SlDCqf56kcTp6bWXUz77nv+/ksfIqE5F4IrOJXybcOAABAM3L3Pzhu6WT/6//1/032/0f0/2Ovr//X/7dM/z9O/z+H/l//r//X/7NQU+v/c/c/JG7pZP8DAABAD3L3XxS32P8AAADQjNz9D41b7H8AAABoRu7+h8Utnex//b/+v8n+/z/u/r/7/13/v9vr6//1/y3T/4/T/8+h/9f/6//1/yzU1Pr/3P0Pj1s62f8AAADQg9z9j4hb7H8AAABoRu7+i+MW+x8AAACakbv/kXFLJ/t/W/+/Nuuz/8+MV//fUv/v+f+7vr7+X//fssPt/y994Hs+/b/+X/8f9P/6f/0/202t/8/d/6i4pZP9DwAAAD3I3f/ouMX+BwAAgGbk7n9M3GL/AwAAQDNy9z82bulk/3v+v+f/6//1//r/4dfX/68mz/8f11P/f/Gt5150z7X/eN1+Xl//r//X/+v/Wayp9f+5+x8Xt3Sy/wEAAKAHufsfH7fY/wAAANCM3P1PiFvsfwAAAFhBxwY/mrv/iXFLJ/tf/6//1/9H/39U/6//1/+3QP8/btn9/9CPl5t5/n/7/f+DFvJOl/f+x+j/9f/sNLX+P3f/k+KWTvY/AAAA9CB3/5PjFvsfAAAApmvef1i2Te7+S+IW+x8AAACakbv/eNzSyf7X/x98//9X/f9q9P+e/6//1/83Qf8/btn9/zz6//b7/4O07Pev/9f/s9PU+v/c/ZfGLZ3sfwAAAOhB7v6nxC32PwAAADQjd/9T4xb7HwAAAJqRu/9pcUsn+1//7/n/+n/9/+H3/xvf2er/T/1d1f8vjv5/nP5/Dv3/mfbz5+j/9f/6fzbbZ/9/38h32wvp/3P3Pz1u6WT/AwAAQA9y9z8jbrH/AQAAoBm5+58Zt9j/AAAA0Izc/c+KWzrZ//p//b/+X/9/2v3/zn/0TvL8/2H6/8Oh/x83mf5/bX3ww/r/le//Pf9f/6//Z4upPf8/d/+z45ZO9j8AAAD0IHf/c+KWkf2/75/MBwAAAJYqd/9z4xZf/wcAAICVl9VZ7v7nxS2d7H/9v/5f/6//P/zn/69+/3/dpven/58W/f+4yfT/u9D/6/9X+f3r//X/7DS1/j93//Pjlk72PwAAAPQgd/9lcYv9DwAAAM3I3f+CuMX+BwAAgGbk7n9h3NLJ/h/u/0/9/kn3/9sj4Zn+P+n/2+7/88+o/x/t/8/3/P8+6f/H6f/n0P/r//X/u/X/x+Z9vv6fIVPr/3P3vyhu6WT/AwAAQA9y9784brH/AQAAoBm5+18St9j/AAAA0Izc/S+NWzrZ/57/r//X/69e/+/5/xuW+fz/2aH3/+v6/z1abv+/dn/+CKr/P733r//X/6/y+2+y/z9ntvX5/yO/CoD+nyFT6/9z978sbulk/wMAAEAPcve/PG6x/wEAAGA1bP5vB4aeFTeb1e5/Rdxi/wMAAEAzcve/Mm5pZ/+PPqtT/6//1/+f/HT9v/5/oP9fn02n//f8/73y/P9x+v859P8H0c+vN9b/X77b50+h/7/k4J7//6/zPl//z5At/f8Npz6+rP4/d/+r4pZ29j8AAAB0L3f/q+MW+x8AAACakbv/NXGL/Q8AAADNyN3/2rilk/1/4P3/yK8+oP/X/0+k//f8f/3/4OtP6/n/+v+90v+P0//Pof/3/H/P/9f/c+Y2/Svjlv5/k2X1/7n7Xxe3dLL/AQAAoAe5+18ft9j/AAAA0Izc/ZfHLfY/AAAANCN3/xvilk72v+f/6//1//p//f/w6+v/V9MZ9fdn6f+L/l//r//X/+v/WYCp9f9bd39/+x8AAAB68MaT/3s0fr7e/gcAAIAW5e5/U9xi/wMAAEAzcve/OW7pZP/r/w+2/8+P6//1/zP9v/5f/38oun3+/9rQj0Q77dL/3/y/x/9r60f0//p//b/+X//PHv39yO+bRP9/4tS/Xebuf0vc0sn+BwAAgB7k7r8ibrH/AQAAoBm5+98at9j/AAAA0Izc/VfGLfvc/2PNw5Tp/z3/X/+v/9f/D7++/n81ddv/75Hn/8+h/9f/6//1/yzUJPr/Tb+du/9tcYuv/wMAAEAzcve/PW6x/wEAAKAZufvfEbfY/wAAANCM3P3vjFs62f/6f/2//l//r/8ffn39/2rS/4/T/8+xSv3/lWfQ/68Pf3jZ/fyZWvb71//r/9lpav1/7v6r4pZO9j8AAAD0IHf/u+IW+x8AAACakbv/3XGL/Q8AAADNyN3/nrilk/2v/9f/6//1//r/4dfX/68m/f84/f9sNrt65A0M9f8njkyz//f8/8m9f/2//p+dptb/5+5/b9zSyf4HAACAHuTuvzpusf8BAACgGbn7r4lb7H8AAABoRu7+98Utnex//b/+X/+v/9f/D7++/n816f/H6f/nWKXn/+v/J/f+9f/6f3aaWv+fu//9cUsn+x8AAAB6kLv/2rjF/gcAAIBm5O7/QNxi/wMAAEAzcvdfF7d0sv/1//p//b/+f6D/P/l/df2//n8VHVz/P9P/6//1/3Po//X/+n+2m1r/n7v/g3FLJ/sfAAAAepC7//q4xf4HAACAZuTu/1DcYv8DAABAM3L3fzhu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9/xz6f/2//l//z0IN9/+XLK3/z93/kbilk/0PAAAAPcjdf0PcYv8DAABAM3L3fzRusf8BAACgGbn7Pxa3dLL/9f/6/639/2ym/9f/6/83DPT/t917xd/Vby+g/z860/8vnP5/nP5/Dv1/m/3/WbOG+v9ju36+/p8pmtrz/3P33xi3dLL/AQAAoAe5+z8et9j/AAAA0Izc/Z+IW+x/AAAAaEbu/k/GLZ3sf/2//n/Bz/+/68KB96H/36D/X/n+3/P/V4D+f5z+fw79f5v9v+f/6/9Zmqn1/7n7PxW3dLL/AQAAoAe5+z8dt9j/AAAA0Izc/Z+JW+x/AAAAaEbu/s/GLZ3sf/2//n/B/b/n/+v/9f+70P8fDv3/OP3/HPr/5vr//Ld7/b/+n+WYWv+fu/9zcUsn+x8AAAB6kLv/prjF/gcAAIBm5O6/OW6x/wEAAKAZufs/H7d0sv/1//p//f9q9v9Ht/T/Z8/0/6f+eP1/36bS/5933n/eov/X/+v/l9//e/6//p/lmlr/n7v/C3FLJ/sfAAAAepC7/4txi/0PAAAAzcjd/6W4xf4HAACAZuTu/3Lc0sn+39n/nzPbKFQ3DPX/0ajp/zfR/299//r/4X8+PP9f/6//P3hT6f89///03r/+X/+/yu9/X/3/P+/8fP0/LZpa/5+7/5a4pZP9DwAAAD3I3f+VuMX+BwAAgGbk7v9q3GL/AwAAQDNy998at3Sy/z3/X/+v/9f/L7z/v/7OjW/o/7fQ/x+O0+zv/+3G+Ib+P+j/9f/6/36f/3+2/p/FmVr/n7v/a3FLJ/sfAAAAepC7/7a4xf4HAACAZuTu/3rcYv8DAABAM3L3fyNu6WT/6//1//p//b/n/w+/vv5/NXn+/zj9f9n+l7ahn/7/6NAHl93Pn6llv/9m+n/P/2eBptb/5+7/ZtzSyf4HAACAHuTu/1bcYv8DAABAM3L3fztusf8BAACgGbn7vxO3dLL/9f/6//b7/wv1/9teX/+v/2+Z/j9/RB+m/5+jn/5/0LL7+VV///p//T87Ta3/z91/e9zSyf4HAACAHuTu/27cYv8DAABAM3L3fy9usf8BAACgGbn7vx+3dLL/9f999f9rsx77f8//1//r/3ui/x+n/59D/6//1//r/1moqfX/ufvvWFvvcv8DAADAqvrvf/n/2/f6x95x8n+Pzn4Qt5w/O7HHL2MDAAAAE/fA7l9bn81+ePK3fP0fAAAAWpS7/0dxSyf7X//fV//f5/P/9f/6f/1/T4b6+6Hvo3ej/w/6f/2//l//r/9nAabW/+fu/3Hcsmn4re/7rxIAAACYktz9P4lbOvn6PwAAAPQgd/9P45Yd+98vBwgAAACrKnf/z+KWTr7+r/+feP8/O6D+P/44/f8G/b/+f+j19f+ryfP/x51h/39iTf+v/x+h/9f/6//Zbmr9f+7+O+OWTvY/AAAANGrLzyjk7r8rbrH/AQAAoBm5+38et9j/AAAA0Izc/XfHLZ3sf/3/off/maof4PP/j9W3PP+/8/7/sqODr6//1/+3TP8/zvP/59D/t9L/H9H/6/+Zhqn1/7n7fxG3dLL/AQAAoAe5+38Zt9j/AAAA0Izc/b+KW+x/AAAAaEbu/l/HLZ3sf/3/xJ//f1r9/x6e/6//76P/3+X12+n//+Hc4zdd8D/XXKX/55TD7P/zn4VD7v+P7PfPuZn+fw79fyv9v+f/6/+ZiMX3/+tbPrjf/j93/2/ilk72PwAAAPQgd/89cYv9DwAAAM3I3f/buMX+BwAAgGbk7v9d3NLJ/tf/6/+n0v/n3+sl9P/HT7v/PzabzZbS/2dT3Hv/7/n/+v+dPP9/nP5/Dv2//l//r/9noRbf/2/94H77/9z9v49bOtn/AAAA0IPc/X+IW3L/r+37p+4BAACAicnd/8e4xdf/AQAAoBm5+++NWzrZ//p//f9U+v/k+f+nPq+t5/9fUHFqn/3/P9W39P8HS/8/Tv8/h/5f/6//1/+zUFPr/3P3/ylu6WT/AwAAQA9y998Xt9j/AAAA0Izc/X+OW+x/AAAAaEbu/r/ELZ3sf/1/q/1/FvH6f/3/VPp/z//3/P/Dof8fp/+fQ/+v/9f/6/9ZqKn1/7n7/xYAAP//2HxcCQ==") syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d010, 0x0, 0x40, 0x0, &(0x7f0000000140)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket(0x1e, 0x1, 0x0) 1.445323038s ago: executing program 5 (id=406): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) 841.510125ms ago: executing program 0 (id=407): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x90}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 730.659168ms ago: executing program 4 (id=408): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f00000003c0), 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000380), 0x121682, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f00000004c0)={0x4b, "276cd4a5dc6b3b75a1c1ccff2476a46ce09805c0732f3c23d345b1060506c27089b1ee5a2b4b3a4a6dfc2bf7c2dfbf59592093ede47ba07c0fb9b4732d27ec0ccf86405b6a0deca6f2803d"}) sendmmsg(0xffffffffffffffff, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002b40)}], 0x1}}], 0x1, 0x40408c1) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 3.98027ms ago: executing program 3 (id=409): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r1, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) 0s ago: executing program 5 (id=410): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a40)={0x2, 0x2, &(0x7f0000000540)=ANY=[@ANYBLOB="b7881185000000ae00", @ANYRESHEX, @ANYRESOCT=r0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2a, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.63' (ED25519) to the list of known hosts. [ 84.668999][ T5607] cgroup: Unknown subsys name 'net' [ 84.787413][ T5607] cgroup: Unknown subsys name 'cpuset' [ 84.796786][ T5607] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.057906][ T29] cfg80211: failed to load regulatory.db [ 86.385562][ T5607] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 90.926967][ T4936] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 90.955665][ T5647] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.965678][ T5649] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 90.973625][ T5649] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 90.977286][ T5647] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 90.983747][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 90.990064][ T5647] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.005057][ T5647] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.007415][ T5650] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 91.013704][ T5647] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 91.021642][ T5650] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 91.028770][ T5647] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.033132][ T5649] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.048169][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.050072][ T5651] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 91.056374][ T5650] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.065022][ T5651] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 91.071082][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 91.076795][ T5651] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 91.083941][ T5650] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.100946][ T5651] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.109005][ T5651] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 91.109417][ T5653] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 91.126409][ T5651] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 91.127819][ T5653] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.136570][ T5651] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 91.142162][ T5653] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.150944][ T5651] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 91.161569][ T5646] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.172432][ T5646] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 93.093344][ T4936] Bluetooth: hci4: command tx timeout [ 93.172903][ T4936] Bluetooth: hci0: command tx timeout [ 93.253289][ T4936] Bluetooth: hci1: command tx timeout [ 93.253307][ T5653] Bluetooth: hci5: command tx timeout [ 93.253463][ T5653] Bluetooth: hci2: command tx timeout [ 93.259188][ T4936] Bluetooth: hci3: command tx timeout [ 93.407917][ T5630] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.420366][ T5630] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.427761][ T5630] bridge_slave_0: entered allmulticast mode [ 93.435912][ T5630] bridge_slave_0: entered promiscuous mode [ 93.482551][ T5630] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.490506][ T5630] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.498053][ T5630] bridge_slave_1: entered allmulticast mode [ 93.506576][ T5630] bridge_slave_1: entered promiscuous mode [ 93.616171][ T5630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.628734][ T5630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.795720][ T5627] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.803029][ T5627] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.810194][ T5627] bridge_slave_0: entered allmulticast mode [ 93.818612][ T5627] bridge_slave_0: entered promiscuous mode [ 93.835968][ T5630] team0: Port device team_slave_0 added [ 93.870025][ T5627] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.877247][ T5627] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.884630][ T5627] bridge_slave_1: entered allmulticast mode [ 93.892019][ T5627] bridge_slave_1: entered promiscuous mode [ 93.908921][ T5630] team0: Port device team_slave_1 added [ 94.014582][ T5631] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.021834][ T5631] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.029064][ T5631] bridge_slave_0: entered allmulticast mode [ 94.037027][ T5631] bridge_slave_0: entered promiscuous mode [ 94.104094][ T5631] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.111519][ T5631] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.118839][ T5631] bridge_slave_1: entered allmulticast mode [ 94.126653][ T5631] bridge_slave_1: entered promiscuous mode [ 94.136532][ T5627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.145782][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.153208][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.160350][ T5629] bridge_slave_0: entered allmulticast mode [ 94.168038][ T5629] bridge_slave_0: entered promiscuous mode [ 94.177116][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.184151][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.210184][ T5630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.233202][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.240329][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.247558][ T5628] bridge_slave_0: entered allmulticast mode [ 94.255456][ T5628] bridge_slave_0: entered promiscuous mode [ 94.279049][ T5627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.288787][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.296169][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.303473][ T5629] bridge_slave_1: entered allmulticast mode [ 94.311494][ T5629] bridge_slave_1: entered promiscuous mode [ 94.319107][ T5630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.326081][ T5630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.352013][ T5630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.375947][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.383233][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.390455][ T5628] bridge_slave_1: entered allmulticast mode [ 94.398343][ T5628] bridge_slave_1: entered promiscuous mode [ 94.479240][ T5631] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.519023][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.528706][ T5632] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.536119][ T5632] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.543635][ T5632] bridge_slave_0: entered allmulticast mode [ 94.551200][ T5632] bridge_slave_0: entered promiscuous mode [ 94.575529][ T5631] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.586877][ T5627] team0: Port device team_slave_0 added [ 94.609010][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.632334][ T5632] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.639653][ T5632] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.647513][ T5632] bridge_slave_1: entered allmulticast mode [ 94.655261][ T5632] bridge_slave_1: entered promiscuous mode [ 94.665249][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.689733][ T5627] team0: Port device team_slave_1 added [ 94.735782][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.778223][ T5630] hsr_slave_0: entered promiscuous mode [ 94.785329][ T5630] hsr_slave_1: entered promiscuous mode [ 94.796043][ T5629] team0: Port device team_slave_0 added [ 94.829322][ T5631] team0: Port device team_slave_0 added [ 94.849781][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.857013][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.883168][ T5627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.898091][ T5629] team0: Port device team_slave_1 added [ 94.919214][ T5632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.944717][ T5631] team0: Port device team_slave_1 added [ 94.965361][ T5627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.972508][ T5627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 94.998761][ T5627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.026370][ T5632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.044852][ T5628] team0: Port device team_slave_0 added [ 95.087131][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.094145][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.120260][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.146390][ T5628] team0: Port device team_slave_1 added [ 95.161997][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.169066][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.196071][ T5631] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.196240][ T4936] Bluetooth: hci4: command tx timeout [ 95.211080][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.219478][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.245755][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.264577][ T4936] Bluetooth: hci0: command tx timeout [ 95.302096][ T5631] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.309368][ T5631] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.333291][ T5646] Bluetooth: hci1: command tx timeout [ 95.335488][ T5653] Bluetooth: hci5: command tx timeout [ 95.340964][ T5644] Bluetooth: hci3: command tx timeout [ 95.341758][ T4936] Bluetooth: hci2: command tx timeout [ 95.348099][ T5631] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.380116][ T5632] team0: Port device team_slave_0 added [ 95.446441][ T5632] team0: Port device team_slave_1 added [ 95.454196][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.461144][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.487506][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.530033][ T5627] hsr_slave_0: entered promiscuous mode [ 95.536593][ T5627] hsr_slave_1: entered promiscuous mode [ 95.544026][ T5627] debugfs: 'hsr0' already exists in 'hsr' [ 95.549834][ T5627] Cannot create hsr debugfs directory [ 95.589990][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.598814][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.630592][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.764844][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.771893][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.798286][ T5632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.816198][ T5631] hsr_slave_0: entered promiscuous mode [ 95.822954][ T5631] hsr_slave_1: entered promiscuous mode [ 95.829131][ T5631] debugfs: 'hsr0' already exists in 'hsr' [ 95.835358][ T5631] Cannot create hsr debugfs directory [ 95.858634][ T5629] hsr_slave_0: entered promiscuous mode [ 95.865637][ T5629] hsr_slave_1: entered promiscuous mode [ 95.871817][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 95.877812][ T5629] Cannot create hsr debugfs directory [ 95.902269][ T5632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.909406][ T5632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 95.935540][ T5632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.976051][ T5628] hsr_slave_0: entered promiscuous mode [ 95.982529][ T5628] hsr_slave_1: entered promiscuous mode [ 95.988998][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 95.994777][ T5628] Cannot create hsr debugfs directory [ 96.260097][ T5632] hsr_slave_0: entered promiscuous mode [ 96.266767][ T5632] hsr_slave_1: entered promiscuous mode [ 96.273084][ T5632] debugfs: 'hsr0' already exists in 'hsr' [ 96.278818][ T5632] Cannot create hsr debugfs directory [ 96.668472][ T5630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.681717][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.690623][ T5630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.701730][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.737154][ T5630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.747035][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.773475][ T5630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.784395][ T5630] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 96.867393][ T5627] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 96.888541][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 96.896606][ T5627] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 96.907622][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 96.915587][ T5627] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 96.925777][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 96.934534][ T5627] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 96.945133][ T5627] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.057344][ T5629] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.068411][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.076511][ T5629] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.087687][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.099663][ T5629] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.111593][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.136282][ T5629] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.146899][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.253264][ T4936] Bluetooth: hci4: command tx timeout [ 97.263538][ T5631] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.275395][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.283448][ T5631] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.294203][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.302094][ T5631] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.313615][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.329331][ T5631] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.340002][ T5631] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.347107][ T4936] Bluetooth: hci0: command tx timeout [ 97.397468][ T5630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.414229][ T4936] Bluetooth: hci2: command tx timeout [ 97.414256][ T5653] Bluetooth: hci1: command tx timeout [ 97.419692][ T5644] Bluetooth: hci5: command tx timeout [ 97.431282][ T5646] Bluetooth: hci3: command tx timeout [ 97.511334][ T5628] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.521911][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.530687][ T5628] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.541757][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.570917][ T5627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.582277][ T5628] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.594026][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.612037][ T5630] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.624808][ T5628] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.635701][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 97.677383][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.684809][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.707312][ T5627] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.741709][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.748837][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.800261][ T5632] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 97.812106][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 97.824579][ T1165] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.831713][ T1165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.850016][ T5632] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 97.860254][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 97.869334][ T5632] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 97.880602][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 97.899323][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.906454][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.920204][ T5632] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 97.932109][ T5632] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 98.051539][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.120743][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.167997][ T5631] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.198325][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.205514][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.227943][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.235110][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.378600][ T5631] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.418435][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.441391][ T77] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.448601][ T77] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.511959][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.519166][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.557706][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.592021][ T197] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.599192][ T197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.609334][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.616440][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.661870][ T5632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.849262][ T5632] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.896737][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.903945][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.997298][ T197] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.004493][ T197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.333057][ T5646] Bluetooth: hci4: command tx timeout [ 99.413559][ T5646] Bluetooth: hci0: command tx timeout [ 99.446200][ T5627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.493521][ T5646] Bluetooth: hci3: command tx timeout [ 99.499425][ T4936] Bluetooth: hci2: command tx timeout [ 99.505031][ T5644] Bluetooth: hci5: command tx timeout [ 99.505933][ T5653] Bluetooth: hci1: command tx timeout [ 99.637408][ T5630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.830264][ T5630] veth0_vlan: entered promiscuous mode [ 99.896247][ T5630] veth1_vlan: entered promiscuous mode [ 100.090874][ T5630] veth0_macvtap: entered promiscuous mode [ 100.120486][ T5630] veth1_macvtap: entered promiscuous mode [ 100.217850][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.270095][ T5630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.351874][ T1165] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.394969][ T1165] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.436590][ T1165] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.475231][ T1165] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.497322][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.759880][ T5627] veth0_vlan: entered promiscuous mode [ 100.818002][ T5627] veth1_vlan: entered promiscuous mode [ 100.851384][ T5631] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.874316][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.898342][ T5629] veth0_vlan: entered promiscuous mode [ 100.903516][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.922169][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.971138][ T5632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.025491][ T5629] veth1_vlan: entered promiscuous mode [ 101.059274][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.069446][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.205129][ T5627] veth0_macvtap: entered promiscuous mode [ 101.218679][ T5630] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 101.221659][ T5631] veth0_vlan: entered promiscuous mode [ 101.260824][ T5627] veth1_macvtap: entered promiscuous mode [ 101.276008][ T5629] veth0_macvtap: entered promiscuous mode [ 101.295971][ T5628] veth0_vlan: entered promiscuous mode [ 101.318012][ T5631] veth1_vlan: entered promiscuous mode [ 101.328584][ T5629] veth1_macvtap: entered promiscuous mode [ 101.399501][ T5628] veth1_vlan: entered promiscuous mode [ 101.458730][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.469533][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.519183][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.529464][ T5627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.564196][ T77] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.574703][ T77] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.595180][ T77] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.605949][ T77] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.616265][ T77] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.640618][ T77] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.649415][ T77] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.672397][ T77] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.691310][ T5631] veth0_macvtap: entered promiscuous mode [ 101.705120][ T5628] veth0_macvtap: entered promiscuous mode [ 101.726994][ T5631] veth1_macvtap: entered promiscuous mode [ 101.756428][ T5628] veth1_macvtap: entered promiscuous mode [ 101.861845][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.871254][ T5632] veth0_vlan: entered promiscuous mode [ 101.889859][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.899342][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.910503][ T5631] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.936133][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.993962][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.001348][ T77] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.023880][ T77] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.042439][ T5632] veth1_vlan: entered promiscuous mode [ 102.068671][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.080505][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.093613][ T77] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.103071][ T77] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.175303][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.175694][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.194347][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.206805][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.233072][ T77] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.245066][ T77] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.269012][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.286241][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.532127][ T5632] veth0_macvtap: entered promiscuous mode [ 102.637188][ T5632] veth1_macvtap: entered promiscuous mode [ 102.670411][ T1112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.709219][ T1112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.762959][ T29] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 102.844215][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.867132][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.875558][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.925179][ T5877] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10'. [ 102.952729][ T29] usb 3-1: Using ep0 maxpacket: 16 [ 102.964383][ T29] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 102.980096][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.995810][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.009543][ T29] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 103.035249][ T29] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 103.049434][ T29] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.061810][ T24] kernel read not supported for file /rfkill (pid: 24 comm: kworker/1:0) [ 103.079791][ T5632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.082744][ T29] usb 3-1: Product: syz [ 103.092758][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.102679][ T29] usb 3-1: Manufacturer: syz [ 103.113060][ T29] usb 3-1: SerialNumber: syz [ 103.119096][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.181293][ T29] usb 3-1: config 0 descriptor?? [ 103.186681][ T77] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.206325][ T77] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.240726][ T77] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.241449][ T29] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 103.284031][ T77] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.292670][ T29] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 103.616090][ T5888] loop5: detected capacity change from 0 to 512 [ 103.637568][ T5887] faux_driver vkms: [drm] Unknown color mode 11; guessing buffer size. [ 103.668463][ T5888] EXT4-fs: Ignoring removed bh option [ 103.835086][ T29] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 103.871690][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.876256][ T5888] EXT4-fs error (device loop5): ext4_iget_extra_inode:5179: inode #15: comm syz.5.14: corrupted in-inode xattr: e_value size too large [ 103.880925][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.912855][ T5888] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 103.918796][ T29] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 103.932743][ C0] EXT4-fs (loop5): error count since last fsck: 1 [ 103.942485][ C0] EXT4-fs (loop5): initial error at time 1785280731: ext4_iget_extra_inode:5179: inode 15 [ 103.952505][ C0] EXT4-fs (loop5): last error at time 1785280731: ext4_iget_extra_inode:5179: inode 15 [ 103.963342][ T5888] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.14: couldn't read orphan inode 15 (err -117) [ 103.991173][ T5888] loop5: lost filesystem error report for type 5 error -117 [ 104.003886][ T5888] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.241121][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.283673][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.324147][ T988] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 104.552901][ T988] usb 1-1: Using ep0 maxpacket: 16 [ 104.602267][ T5903] EXT4-fs warning (device loop5): dx_probe:800: inode #2: comm syz.5.14: Unrecognised inode hash code 4 [ 104.614005][ T5903] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.14: Corrupt directory, running e2fsck is recommended [ 104.629993][ T5903] EXT4-fs warning (device loop5): dx_probe:800: inode #2: comm syz.5.14: Unrecognised inode hash code 4 [ 104.641267][ T5903] EXT4-fs warning (device loop5): dx_probe:933: inode #2: comm syz.5.14: Corrupt directory, running e2fsck is recommended [ 104.840213][ T988] usb 1-1: config 0 interface 0 altsetting 88 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 104.920129][ T988] usb 1-1: config 0 interface 0 has no altsetting 0 [ 104.981133][ T988] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 105.051507][ T988] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.138638][ T988] usb 1-1: config 0 descriptor?? [ 105.145450][ T29] em28xx 3-1:0.0: Unknown AC97 audio processor detected! [ 105.285118][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 105.361369][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.391333][ T29] em28xx 3-1:0.0: couldn't setup AC97 register 2 [ 105.431655][ T29] em28xx 3-1:0.0: couldn't setup AC97 register 4 [ 105.461412][ T29] em28xx 3-1:0.0: couldn't setup AC97 register 6 [ 105.475420][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 105.508282][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 105.518970][ T29] em28xx 3-1:0.0: couldn't setup AC97 register 54 [ 105.535913][ T29] em28xx 3-1:0.0: couldn't setup AC97 register 56 [ 105.560912][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 105.587643][ T29] usb 3-1: USB disconnect, device number 2 [ 105.659985][ T10] usb 2-1: config 0 descriptor?? [ 105.704729][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 105.870552][ T988] usbhid 1-1:0.0: can't add hid device: -71 [ 105.904557][ T988] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 105.970412][ T988] usb 1-1: USB disconnect, device number 2 [ 106.006709][ T5774] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 106.117547][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 106.143565][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 106.164516][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 106.172065][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 106.182087][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 106.208524][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 106.209505][ T5774] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 106.217007][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 106.249688][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 106.261472][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 106.287718][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 106.304268][ T5774] usb 6-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 106.310620][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 106.346334][ T5774] usb 6-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.366138][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 106.391347][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 106.402711][ T5352] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 106.415869][ T5774] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.417373][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 106.423861][ T5774] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 106.460779][ T5774] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.486631][ T5774] usb 6-1: config 0 descriptor?? [ 106.505694][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 106.535397][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 106.592481][ T10] pwc: Registered as video103. [ 106.593680][ T5352] usb 5-1: Using ep0 maxpacket: 32 [ 106.636583][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 106.727290][ T10] usb 2-1: USB disconnect, device number 2 [ 106.887959][ T5352] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 106.919058][ T5352] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.937254][ T5774] usbhid 6-1:0.0: can't add hid device: -71 [ 107.627217][ T5774] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 107.641386][ T5352] usb 5-1: Product: syz [ 107.786042][ T5352] usb 5-1: Manufacturer: syz [ 107.852870][ T5352] usb 5-1: SerialNumber: syz [ 107.892150][ T5774] usb 6-1: USB disconnect, device number 2 [ 107.951305][ T5352] usb 5-1: config 0 descriptor?? [ 108.110115][ T5352] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 108.473796][ T5774] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 108.878931][ T5352] gspca_ov534_9: reg_w failed -110 [ 109.061355][ T5942] Bluetooth: MGMT ver 1.23 [ 109.072767][ T5774] usb 4-1: Using ep0 maxpacket: 32 [ 109.087973][ T5774] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 109.116233][ T5774] usb 4-1: config 0 has no interface number 0 [ 109.132776][ T5774] usb 4-1: config 0 interface 184 has no altsetting 0 [ 109.156104][ T5774] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 109.179570][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.209054][ T5774] usb 4-1: Product: syz [ 109.219204][ T5774] usb 4-1: Manufacturer: syz [ 109.235921][ T5774] usb 4-1: SerialNumber: syz [ 109.248780][ T5939] loop5: detected capacity change from 0 to 32768 [ 109.258609][ T5939] ======================================================= [ 109.258609][ T5939] WARNING: The mand mount option has been deprecated and [ 109.258609][ T5939] and is ignored by this kernel. Remove the mand [ 109.258609][ T5939] option from the mount to silence this warning. [ 109.258609][ T5939] ======================================================= [ 109.323014][ T5352] gspca_ov534_9: Unknown sensor 0000 [ 109.323119][ T5352] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 109.353495][ T5774] usb 4-1: config 0 descriptor?? [ 109.414124][ T5949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.32'. [ 110.032236][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 110.439149][ T5956] loop1: detected capacity change from 0 to 512 [ 110.454162][ T10] usb 5-1: USB disconnect, device number 2 [ 110.474651][ T5956] EXT4-fs: Ignoring removed nobh option [ 110.493980][ T5774] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 110.514049][ T5774] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 110.519433][ T5956] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 110.531899][ T5774] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 110.554091][ T5774] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71 [ 110.570539][ T5774] usb 4-1: USB disconnect, device number 2 [ 110.587033][ T5956] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 110.617728][ T5956] EXT4-fs (loop1): 1 truncate cleaned up [ 110.641094][ T5956] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 110.672743][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 110.688886][ T24] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 110.715307][ T5963] loop2: detected capacity change from 0 to 512 [ 110.729743][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 110.745962][ T5963] EXT4-fs (loop2): Test dummy encryption mode enabled [ 110.758067][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 110.781415][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 110.781443][ T5963] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0022] [ 110.781609][ T5963] System zones: [ 110.802677][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 110.852181][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.857049][ T5963] 1-2 [ 110.873169][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.880433][ T5963] , 4-12, 8-8 [ 110.901837][ T5963] EXT4-fs error (device loop2): ext4_orphan_get:1399: inode #15: comm syz.2.34: iget: bad i_size value: 38620345925642 [ 110.916702][ T5963] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 110.919516][ T5963] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz.2.34: couldn't read orphan inode 15 (err -117) [ 110.928727][ C1] EXT4-fs (loop2): error count since last fsck: 1 [ 110.928758][ C1] EXT4-fs (loop2): initial error at time 1785280738: ext4_orphan_get:1399: inode 15 [ 110.928810][ C1] EXT4-fs (loop2): last error at time 1785280738: ext4_orphan_get:1399: inode 15 [ 110.998325][ T5963] loop2: lost filesystem error report for type 5 error -117 [ 111.009931][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.056966][ T5963] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.249695][ T24] usb 1-1: usb_control_msg returned -32 [ 111.263091][ T24] usbtmc 1-1:16.0: can't read capabilities [ 111.522719][ T5797] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 111.562304][ T5630] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 111.584009][ T5774] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.283050][ T5774] usb 2-1: Using ep0 maxpacket: 32 [ 112.329158][ T5797] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 112.339977][ T5797] usb 4-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 112.358517][ T5774] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 112.443975][ T5797] usb 4-1: Product: syz [ 112.449245][ T5797] usb 4-1: SerialNumber: syz [ 112.457321][ T5774] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 112.476997][ T5774] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 112.514095][ T5797] usb 4-1: config 0 descriptor?? [ 112.530463][ T5774] usb 2-1: Product: syz [ 112.539126][ T5774] usb 2-1: Manufacturer: syz [ 112.562669][ T5774] usb 2-1: SerialNumber: syz [ 112.589230][ T5774] usb 2-1: config 0 descriptor?? [ 112.609696][ T5971] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 112.647682][ T5774] hub 2-1:0.0: bad descriptor, ignoring hub [ 112.679388][ T5774] hub 2-1:0.0: probe with driver hub failed with error -5 [ 112.757617][ T5797] hso 4-1:0.0: Failed to find BULK eps [ 113.282357][ T5635] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 113.580989][ T5971] usbtmc 1-1:16.0: send_request_dev_dep_msg_in returned -90 [ 113.677712][ T5774] usb 1-1: USB disconnect, device number 3 [ 113.692203][ T5797] usb 4-1: USB disconnect, device number 3 [ 113.847464][ T24] usb 2-1: USB disconnect, device number 3 [ 113.859940][ T5635] usb 6-1: device descriptor read/64, error -71 [ 113.920145][ T5992] loop0: detected capacity change from 0 to 128 [ 114.524790][ T5992] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 114.581519][ T5996] netlink: 12 bytes leftover after parsing attributes in process `syz.2.46'. [ 114.601549][ T5992] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 114.759299][ T30] audit: type=1804 audit(1785280742.547:2): pid=5992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.45" name="/newroot/5/file1/bus" dev="loop0" ino=12 res=1 errno=0 [ 114.805971][ T5635] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 114.842987][ T24] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 114.972663][ T5635] usb 6-1: device descriptor read/64, error -71 [ 114.992885][ T5797] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 115.013945][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 115.036582][ T24] usb 2-1: device descriptor read/all, error -71 [ 115.113405][ T5635] usb usb6-port1: attempt power cycle [ 115.153908][ T5797] usb 4-1: Using ep0 maxpacket: 32 [ 115.201636][ T5797] usb 4-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 115.240924][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.272020][ T6010] loop4: detected capacity change from 0 to 256 [ 115.272440][ T5797] usb 4-1: Product: syz [ 115.320788][ T5797] usb 4-1: Manufacturer: syz [ 115.353692][ T5797] usb 4-1: SerialNumber: syz [ 115.385063][ T5797] usb 4-1: config 0 descriptor?? [ 115.423717][ T5797] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 115.465596][ T5635] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 115.515083][ T5635] usb 6-1: device descriptor read/8, error -71 [ 115.774963][ T5635] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 115.824218][ T5635] usb 6-1: device descriptor read/8, error -71 [ 115.931481][ T6017] tipc: Started in network mode [ 115.946989][ T6019] Zero length message leads to an empty skb [ 115.958688][ T6017] tipc: Node identity 52f1dee6cb0a, cluster identity 4711 [ 115.973422][ T5635] usb usb6-port1: unable to enumerate USB device [ 116.007867][ T6017] tipc: Enabled bearer , priority 1 [ 116.086779][ T6016] tipc: Resetting bearer [ 116.232346][ T6016] tipc: Disabling bearer [ 116.446958][ T5774] kernel write not supported for file /dsp (pid: 5774 comm: kworker/1:5) [ 117.428712][ T6034] netlink: 'syz.2.62': attribute type 39 has an invalid length. [ 117.507573][ T5631] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 117.752749][ T988] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 117.760438][ T5635] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 117.926274][ T5635] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 118.224397][ T5635] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 118.236667][ T988] usb 5-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 118.259001][ T988] usb 5-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 118.665012][ T5635] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.000849][ T5797] gspca_ov534_9: reg_r err -71 [ 119.120321][ T988] usb 5-1: Product: syz [ 119.128877][ T988] usb 5-1: SerialNumber: syz [ 119.151631][ T5635] usb 2-1: config 0 descriptor?? [ 119.160087][ T988] usb 5-1: config 0 descriptor?? [ 119.204442][ T5635] pwc: Askey VC010 type 2 USB webcam detected. [ 119.418130][ T988] hso 5-1:0.0: Failed to find BULK eps [ 119.606275][ T9] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 119.626326][ T5635] pwc: recv_control_msg error -32 req 02 val 2b00 [ 119.696710][ T10] usb 5-1: USB disconnect, device number 3 [ 119.704830][ T5635] pwc: recv_control_msg error -32 req 02 val 2700 [ 119.750771][ T5635] pwc: recv_control_msg error -32 req 02 val 2c00 [ 119.781737][ T5635] pwc: recv_control_msg error -32 req 04 val 1000 [ 119.807148][ T5635] pwc: recv_control_msg error -32 req 04 val 1300 [ 119.831229][ T5635] pwc: recv_control_msg error -32 req 04 val 1400 [ 119.843261][ T9] usb 3-1: device descriptor read/64, error -71 [ 119.875573][ T5635] pwc: recv_control_msg error -32 req 02 val 2000 [ 119.905403][ T5635] pwc: recv_control_msg error -32 req 02 val 2100 [ 119.912394][ T6062] loop5: detected capacity change from 0 to 1024 [ 119.939456][ T5635] pwc: recv_control_msg error -32 req 04 val 1500 [ 119.954618][ T6062] hfsplus: Bad value for 'session' [ 119.965945][ T6065] loop3: detected capacity change from 0 to 512 [ 119.992017][ T5635] pwc: recv_control_msg error -32 req 02 val 2500 [ 120.033118][ T5635] pwc: recv_control_msg error -71 req 02 val 2400 [ 120.073357][ T5635] pwc: recv_control_msg error -71 req 02 val 2600 [ 120.115173][ T5635] pwc: recv_control_msg error -71 req 02 val 2900 [ 120.125512][ T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 120.178588][ T5635] pwc: recv_control_msg error -71 req 02 val 2800 [ 120.191159][ T6065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 120.265770][ T5635] pwc: recv_control_msg error -71 req 04 val 1100 [ 120.321278][ T5635] pwc: recv_control_msg error -71 req 04 val 1200 [ 120.337947][ T5797] gspca_ov534_9: Unknown sensor 0000 [ 120.338049][ T5797] ov534_9 4-1:0.0: probe with driver ov534_9 failed with error -22 [ 120.339450][ T9] usb 3-1: device descriptor read/64, error -71 [ 120.350429][ T5797] usb 4-1: USB disconnect, device number 4 [ 120.369142][ T6065] ext4 filesystem being mounted at /8/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.426057][ T5635] pwc: Registered as video103. [ 120.464796][ T5635] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input6 [ 120.540636][ T5635] usb 2-1: USB disconnect, device number 6 [ 120.564353][ T9] usb usb3-port1: attempt power cycle [ 120.760427][ T6080] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 120.896657][ T6071] syzkaller0: entered promiscuous mode [ 120.922771][ T6071] syzkaller0: entered allmulticast mode [ 120.930763][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 121.709225][ T9] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 121.743414][ T9] usb 3-1: device descriptor read/8, error -71 [ 121.993856][ T9] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 122.034290][ T9] usb 3-1: device descriptor read/8, error -71 [ 122.163197][ T9] usb usb3-port1: unable to enumerate USB device [ 122.613494][ T6118] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 122.654891][ T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 123.769482][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 123.789840][ T9] usb 5-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 123.799272][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.807406][ T9] usb 5-1: Product: syz [ 123.811586][ T9] usb 5-1: Manufacturer: syz [ 123.816987][ T9] usb 5-1: SerialNumber: syz [ 124.657340][ T5352] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 124.772568][ T9] usb 5-1: config 0 descriptor?? [ 124.784067][ T9] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 125.404141][ T6126] tipc: Enabling of bearer rejected, failed to enable media [ 125.417329][ T9] gspca_ov534_9: reg_w failed -110 [ 125.469732][ T5352] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 125.550279][ T5352] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 125.745533][ T5352] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.021837][ T5352] usb 4-1: config 0 descriptor?? [ 126.032746][ T9] gspca_ov534_9: Unknown sensor 0000 [ 126.032845][ T9] ov534_9 5-1:0.0: probe with driver ov534_9 failed with error -22 [ 126.105866][ T5352] usb 4-1: can't set config #0, error -71 [ 126.240483][ T5352] usb 4-1: USB disconnect, device number 5 [ 126.263455][ T9] usb 5-1: USB disconnect, device number 4 [ 127.516198][ T6175] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 129.400734][ T5774] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 130.182750][ T5940] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 130.399738][ T5940] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 130.450124][ T5940] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 130.642715][ T5774] usb 2-1: device descriptor read/64, error -71 [ 130.797356][ T6224] loop0: detected capacity change from 0 to 32768 [ 130.815329][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.842219][ T5940] usb 5-1: config 0 descriptor?? [ 130.892484][ T5940] pwc: Askey VC010 type 2 USB webcam detected. [ 131.615659][ T5940] pwc: recv_control_msg error -32 req 02 val 2b00 [ 131.668933][ T5940] pwc: recv_control_msg error -32 req 02 val 2700 [ 131.712691][ T5774] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 131.735661][ T5940] pwc: recv_control_msg error -32 req 02 val 2c00 [ 131.788766][ T5940] pwc: recv_control_msg error -32 req 04 val 1000 [ 131.831610][ T5940] pwc: recv_control_msg error -32 req 04 val 1300 [ 131.842685][ T5774] usb 2-1: device descriptor read/64, error -71 [ 131.887034][ T5940] pwc: recv_control_msg error -32 req 04 val 1400 [ 131.954416][ T5774] usb usb2-port1: attempt power cycle [ 132.126447][ T5940] pwc: recv_control_msg error -71 req 02 val 2100 [ 132.146317][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.155830][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.190778][ T5940] pwc: recv_control_msg error -71 req 04 val 1500 [ 132.211138][ T5940] pwc: recv_control_msg error -71 req 02 val 2500 [ 132.238948][ T5940] pwc: recv_control_msg error -71 req 02 val 2400 [ 132.272132][ T5940] pwc: recv_control_msg error -71 req 02 val 2600 [ 132.301599][ T5940] pwc: recv_control_msg error -71 req 02 val 2900 [ 132.339061][ T5940] pwc: recv_control_msg error -71 req 02 val 2800 [ 132.357555][ T6233] loop1: detected capacity change from 0 to 512 [ 132.369442][ T5940] pwc: recv_control_msg error -71 req 04 val 1100 [ 132.394118][ T5940] pwc: recv_control_msg error -71 req 04 val 1200 [ 132.422164][ T5940] pwc: Registered as video103. [ 132.467623][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.490848][ T5940] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input7 [ 132.555637][ T6235] syzkaller0: entered promiscuous mode [ 132.561371][ T6233] ext4 filesystem being mounted at /19/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.589919][ T5940] usb 5-1: USB disconnect, device number 5 [ 132.602695][ T6235] syzkaller0: entered allmulticast mode [ 132.637140][ T6239] tipc: Started in network mode [ 132.643835][ T5753] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 132.652733][ T6239] tipc: Node identity 9effb6f48c46, cluster identity 4711 [ 132.671345][ T6239] tipc: Enabled bearer , priority 0 [ 132.756530][ T6234] tipc: Resetting bearer [ 132.835146][ T5753] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 132.897719][ T5753] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 132.920566][ T6234] tipc: Disabling bearer [ 132.954458][ T5753] usb 4-1: config 220 has no interface number 2 [ 132.983650][ T5753] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 133.026675][ T5753] usb 4-1: config 220 interface 0 has no altsetting 0 [ 133.061196][ T5753] usb 4-1: config 220 interface 76 has no altsetting 0 [ 133.091980][ T5753] usb 4-1: config 220 interface 1 has no altsetting 0 [ 133.119378][ T5753] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 133.160361][ T5753] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.195067][ T5753] usb 4-1: Product: syz [ 133.203443][ T5753] usb 4-1: Manufacturer: syz [ 133.217602][ T5753] usb 4-1: SerialNumber: syz [ 133.349573][ T5628] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.466285][ T6251] syzkaller0: entered promiscuous mode [ 133.484573][ T6251] syzkaller0: entered allmulticast mode [ 133.492511][ T5753] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 133.531419][ T5753] uvcvideo 4-1:220.0: No valid video chain found. [ 133.553303][ T5753] usb 4-1: selecting invalid altsetting 0 [ 133.587779][ T6253] fuse: Unknown parameter 'group_i00000000000000000000' [ 133.612288][ T5753] usb 4-1: selecting invalid altsetting 0 [ 133.638500][ T5753] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 133.673739][ T5753] usb 4-1: USB disconnect, device number 6 [ 133.844217][ T6256] loop4: detected capacity change from 0 to 512 [ 134.947928][ T6268] loop2: detected capacity change from 0 to 512 [ 134.958306][ T6268] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 135.097847][ T6268] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2859: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 135.215665][ T6268] EXT4-fs (loop2): 1 truncate cleaned up [ 135.215671][ T6275] syzkaller0: entered promiscuous mode [ 135.215700][ T6275] syzkaller0: entered allmulticast mode [ 135.268364][ T6268] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 135.272649][ T6275] netlink: 'syz.3.121': attribute type 10 has an invalid length. [ 135.340245][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.348879][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.383802][ T6275] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.391031][ T6275] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.401462][ T6275] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.408658][ T6275] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.574618][ T6275] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 135.903635][ T6267] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 136.145347][ T6288] syz.3.125 uses obsolete (PF_INET,SOCK_PACKET) [ 137.933375][ T6300] fuse: Unknown parameter 'group_i00000000000000000000' [ 138.447533][ T6302] syzkaller0: entered promiscuous mode [ 138.472710][ T6302] syzkaller0: entered allmulticast mode [ 139.139054][ T6312] loop4: detected capacity change from 0 to 4096 [ 139.248824][ T6316] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.273072][ T5940] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 139.470056][ T5940] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.501356][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.551417][ T5940] usb 1-1: Product: syz [ 139.571672][ T5940] usb 1-1: Manufacturer: syz [ 139.592744][ T5940] usb 1-1: SerialNumber: syz [ 139.629521][ T5940] usb 1-1: config 0 descriptor?? [ 139.884770][ T5940] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 139.895891][ T5868] IPVS: starting estimator thread 0... [ 139.968922][ T6311] loop3: detected capacity change from 0 to 32768 [ 140.033455][ T6319] IPVS: using max 22 ests per chain, 52800 per kthread [ 141.017694][ T6311] JBD2: Ignoring recovery information on journal [ 141.303288][ T6311] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode. [ 141.355100][ T5753] usb 2-1: new full-speed USB device number 10 using dummy_hcd [ 141.548681][ T5753] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.577313][ T5753] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 141.601521][ T6339] fuse: Unknown parameter 'group_i00000000000000000000' [ 141.611435][ T5753] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 141.627233][ T5940] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 141.644691][ T5753] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.666239][ T5940] usb 1-1: USB disconnect, device number 4 [ 141.687229][ T5753] usb 2-1: config 0 descriptor?? [ 141.735112][ T5753] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 141.751094][ T5753] dvb-usb: bulk message failed: -22 (3/0) [ 141.787794][ T5753] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 141.821005][ T5753] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 141.846977][ T5753] usb 2-1: media controller created [ 141.852489][ T5629] ocfs2: Unmounting device (7,3) on (node local) [ 141.876276][ T5753] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 141.923910][ T5753] dvb-usb: bulk message failed: -22 (6/0) [ 141.949784][ T5753] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 141.950877][ T6331] dvb-usb: bulk message failed: -22 (2/0) [ 142.002561][ T5753] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input8 [ 142.074760][ T5753] dvb-usb: schedule remote query interval to 150 msecs. [ 142.105653][ T5753] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 142.142450][ T5753] usb 2-1: USB disconnect, device number 10 [ 142.260799][ T5753] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 142.553771][ T6336] loop4: detected capacity change from 0 to 32768 [ 142.638907][ T6336] JBD2: Ignoring recovery information on journal [ 142.804600][ T6349] 9p: Bad value for 'wfdno' [ 142.847414][ T6336] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 143.046464][ T6352] syzkaller0: entered promiscuous mode [ 143.083581][ T6352] syzkaller0: entered allmulticast mode [ 149.784886][ T5632] ocfs2: Unmounting device (7,4) on (node local) [ 150.514939][ T5646] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 150.529309][ T5646] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 150.538051][ T5646] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 150.548538][ T5646] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 150.558765][ T5646] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 151.353573][ T6281] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.384299][ T6397] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 151.712786][ T5774] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 151.906969][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 151.942836][ T5774] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 151.993829][ T5774] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 152.039452][ T5774] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.085003][ T5774] usb 1-1: config 0 descriptor?? [ 152.128751][ T5774] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 152.149792][ T5774] dvb-usb: bulk message failed: -22 (3/0) [ 152.242244][ T5774] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 152.301074][ T5774] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 152.364169][ T6400] dvb-usb: bulk message failed: -22 (2/0) [ 152.388446][ T5774] usb 1-1: media controller created [ 152.628384][ T5646] Bluetooth: hci6: command tx timeout [ 153.087063][ T5774] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 153.101605][ T5774] dvb-usb: bulk message failed: -22 (6/0) [ 153.107564][ T5774] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 153.166150][ T5774] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 153.203788][ T6389] loop1: detected capacity change from 0 to 32768 [ 153.221349][ T5774] dvb-usb: schedule remote query interval to 150 msecs. [ 153.287400][ T5774] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 153.304765][ T6394] loop4: detected capacity change from 0 to 32768 [ 153.307195][ T6389] JBD2: Ignoring recovery information on journal [ 153.336694][ T6394] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.159 (6394) [ 153.344646][ T5774] usb 1-1: USB disconnect, device number 5 [ 153.385258][ T6413] loop3: detected capacity change from 0 to 512 [ 153.444752][ T5797] dvb-usb: bulk message failed: -22 (1/0) [ 153.454253][ T6389] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode. [ 153.707999][ T5797] dvb-usb: error while querying for an remote control event. [ 153.739631][ T6394] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 153.756171][ T5628] ocfs2: Unmounting device (7,1) on (node local) [ 153.855359][ T6394] BTRFS info (device loop4): using sha256 checksum algorithm [ 153.867701][ T6421] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 154.381318][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 154.408189][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 154.486747][ T5774] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 154.543881][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 154.549513][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 154.639866][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 154.693132][ T5646] Bluetooth: hci6: command tx timeout [ 154.764427][ T6422] syzkaller0: entered promiscuous mode [ 154.780746][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 154.781235][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 154.835178][ T6422] syzkaller0: entered allmulticast mode [ 154.936917][ T6394] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 156.231828][ T6394] BTRFS error (device loop4): open_ctree failed: -12 [ 156.772941][ T5646] Bluetooth: hci6: command tx timeout [ 157.270087][ T1120] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.342257][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 157.415159][ T6455] loop0: detected capacity change from 0 to 256 [ 157.495775][ T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 157.530426][ T10] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 157.574380][ T10] usb 2-1: config 220 has no interface number 2 [ 157.614853][ T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 157.678882][ T10] usb 2-1: config 220 interface 0 has no altsetting 0 [ 157.712343][ T10] usb 2-1: config 220 interface 76 has no altsetting 0 [ 157.723552][ T1120] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.756839][ T10] usb 2-1: config 220 interface 1 has no altsetting 0 [ 157.794279][ T10] usb 2-1: string descriptor 0 read error: -71 [ 157.827370][ T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 157.880819][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.920288][ T10] usb 2-1: can't set config #220, error -71 [ 157.938662][ T10] usb 2-1: USB disconnect, device number 11 [ 158.006623][ T6470] syzkaller0: entered promiscuous mode [ 158.012228][ T6470] syzkaller0: entered allmulticast mode [ 158.852906][ T5646] Bluetooth: hci6: command tx timeout [ 159.097032][ T24] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 159.139788][ T1120] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.288414][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.320765][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 159.349062][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.379070][ T1120] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.382172][ T24] usb 1-1: config 0 descriptor?? [ 159.394579][ T5774] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 159.430148][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 159.482685][ T10] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 159.555333][ T5774] usb 4-1: Using ep0 maxpacket: 8 [ 159.575392][ T5774] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 159.588824][ T5774] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 159.601927][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 159.619065][ T5774] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 159.636358][ T5774] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.649966][ T5774] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 159.667836][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 159.672289][ T5774] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.688195][ T10] usb 2-1: not running at top speed; connect to a high speed hub [ 159.704528][ T10] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 159.713364][ T10] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 159.721650][ T10] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 159.736601][ T10] usb 2-1: config 14 has no interface number 0 [ 159.748453][ T10] usb 2-1: config 14 has no interface number 1 [ 159.759275][ T10] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 159.793180][ T10] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 159.823516][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 159.830342][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 159.852176][ T6382] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.854851][ T10] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 159.864277][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 159.877105][ T6382] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.888839][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 159.897895][ T6382] bridge_slave_0: entered allmulticast mode [ 159.905656][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 159.914327][ T10] usb 2-1: config 14 interface 57 has no altsetting 0 [ 159.915804][ T6382] bridge_slave_0: entered promiscuous mode [ 159.930373][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 159.935203][ T10] usb 2-1: config 14 interface 228 has no altsetting 0 [ 159.938269][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 159.964342][ T6382] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.977149][ T5774] usb 4-1: GET_CAPABILITIES returned 0 [ 159.985503][ T10] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 159.986326][ T6382] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.002465][ T5774] usbtmc 4-1:16.0: can't read capabilities [ 160.014260][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.027083][ T6382] bridge_slave_1: entered allmulticast mode [ 160.039055][ T10] usb 2-1: Product: syz [ 160.049490][ T6382] bridge_slave_1: entered promiscuous mode [ 160.051210][ T10] usb 2-1: Manufacturer: syz [ 160.082704][ T10] usb 2-1: SerialNumber: syz [ 160.188843][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 160.202322][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 160.232959][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 160.252215][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 160.268358][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 160.274358][ T6456] loop5: detected capacity change from 0 to 65536 [ 160.288250][ T6382] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.288454][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 160.313342][ T6382] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.390883][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 160.408994][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 160.409183][ T6456] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 160.425424][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 160.452218][ T24] pwc: Registered as video103. [ 160.468415][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 160.486290][ T24] usb 1-1: USB disconnect, device number 6 [ 160.500011][ T6456] workqueue: Failed to create a rescuer kthread for wq "xfs-log/loop5": -EINTR [ 160.508070][ T6456] XFS (loop5): log mount failed [ 160.561124][ T10] legousbtower 2-1:14.57: interrupt endpoints not found [ 160.571196][ T6382] team0: Port device team_slave_0 added [ 160.595259][ T6382] team0: Port device team_slave_1 added [ 160.628062][ T1120] bridge_slave_1: left allmulticast mode [ 160.662888][ T1120] bridge_slave_1: left promiscuous mode [ 160.697595][ T1120] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.800473][ T1120] bridge_slave_0: left allmulticast mode [ 160.834322][ T1120] bridge_slave_0: left promiscuous mode [ 160.854210][ T1120] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.974003][ T10] legousbtower 2-1:14.228: get version request failed: -32 [ 161.011159][ T10] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 161.959662][ T1120] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.056194][ T1120] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.108111][ T1120] bond0 (unregistering): Released all slaves [ 162.481280][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.490466][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.528023][ T6382] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.552488][ T6382] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.560101][ T6382] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 162.600932][ T6382] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.087466][ T5281] 8021q: adding VLAN 0 to HW filter on device eth1 [ 163.182560][ T6382] hsr_slave_0: entered promiscuous mode [ 163.197784][ T6382] hsr_slave_1: entered promiscuous mode [ 163.205952][ T6382] debugfs: 'hsr0' already exists in 'hsr' [ 163.211759][ T6382] Cannot create hsr debugfs directory [ 163.285386][ T10] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 163.394219][ T1120] hsr_slave_0: left promiscuous mode [ 163.412857][ T1120] hsr_slave_1: left promiscuous mode [ 163.425915][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.444868][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.469965][ T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 163.472820][ T1120] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.486798][ T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 163.504417][ T1120] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.520165][ T10] usb 1-1: config 220 has no interface number 2 [ 163.534496][ T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 163.563398][ T10] usb 1-1: config 220 interface 0 has no altsetting 0 [ 163.583856][ T1120] veth1_macvtap: left promiscuous mode [ 163.587814][ T10] usb 1-1: config 220 interface 76 has no altsetting 0 [ 163.599799][ T1120] veth0_macvtap: left promiscuous mode [ 163.602272][ T6539] loop4: detected capacity change from 0 to 32768 [ 163.610006][ T1120] veth1_vlan: left promiscuous mode [ 163.611878][ T10] usb 1-1: config 220 interface 1 has no altsetting 0 [ 163.631084][ T1120] veth0_vlan: left promiscuous mode [ 163.641032][ T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 163.782259][ T6539] JBD2: Ignoring recovery information on journal [ 163.812897][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.860065][ T10] usb 1-1: Product: syz [ 163.895647][ T10] usb 1-1: Manufacturer: syz [ 163.920246][ T24] IPVS: starting estimator thread 0... [ 163.926668][ T10] usb 1-1: SerialNumber: syz [ 163.979174][ T6539] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 164.025428][ T6548] IPVS: using max 23 ests per chain, 55200 per kthread [ 164.253647][ T10] uvcvideo 1-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 164.271625][ T10] uvcvideo 1-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 164.313760][ T10] uvcvideo 1-1:220.0: No valid video chain found. [ 164.336484][ T10] usb 1-1: selecting invalid altsetting 0 [ 164.432537][ T10] usb 1-1: selecting invalid altsetting 0 [ 164.452108][ T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 164.492374][ T5632] ocfs2: Unmounting device (7,4) on (node local) [ 164.502034][ T10] usb 1-1: USB disconnect, device number 7 [ 165.052130][ T1120] team0 (unregistering): Port device team_slave_1 removed [ 165.126509][ T1120] team0 (unregistering): Port device team_slave_0 removed [ 165.254323][ T6477] usbtmc 4-1:16.0: usb_control_msg returned -110 [ 165.351113][ T24] usb 2-1: USB disconnect, device number 12 [ 165.372307][ T5774] usb 4-1: USB disconnect, device number 7 [ 165.578319][ T6585] loop1: detected capacity change from 0 to 1024 [ 165.597806][ T6585] hfsplus: Bad value for 'session' [ 165.747295][ T5281] 8021q: adding VLAN 0 to HW filter on device eth2 [ 165.763707][ T6580] sch_tbf: burst 19872 is lower than device lo mtu (32783) ! [ 166.050208][ T6588] syzkaller0: entered promiscuous mode [ 166.098244][ T6596] loop3: detected capacity change from 0 to 512 [ 166.102789][ T6588] syzkaller0: entered allmulticast mode [ 166.116692][ T6597] loop0: detected capacity change from 0 to 128 [ 166.146835][ T6596] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 166.183478][ T6596] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 166.187757][ T6597] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 166.254273][ T6596] EXT4-fs (loop3): 1 truncate cleaned up [ 166.269975][ T6597] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 166.290628][ T6596] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.304282][ T30] audit: type=1804 audit(1785280794.077:3): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.198" name="/newroot/38/file1/bus" dev="loop0" ino=12 res=1 errno=0 [ 166.457847][ T6596] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000. [ 166.723589][ T5629] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 167.142984][ T24] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 167.328836][ T5631] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 167.344178][ T24] usb 2-1: config 220 has an invalid interface number: 76 but max is 2 [ 167.358502][ T6382] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 167.408666][ T24] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 167.428426][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 167.435843][ T24] usb 2-1: config 220 has no interface number 2 [ 167.442197][ T24] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 167.457932][ T6382] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 167.470680][ T24] usb 2-1: config 220 interface 0 has no altsetting 0 [ 167.479941][ T24] usb 2-1: config 220 interface 76 has no altsetting 0 [ 167.501625][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 167.517700][ T24] usb 2-1: config 220 interface 1 has no altsetting 0 [ 167.530347][ T6382] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 167.550882][ T24] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 167.569419][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.592762][ T5774] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 167.602123][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 167.613190][ T24] usb 2-1: Product: syz [ 167.617579][ T24] usb 2-1: Manufacturer: syz [ 167.624986][ T6382] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 167.631773][ T24] usb 2-1: SerialNumber: syz [ 167.650318][ T6631] loop0: detected capacity change from 0 to 1024 [ 167.695970][ T6382] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 167.713897][ T6631] hfsplus: Bad value for 'session' [ 167.775689][ T5774] usb 4-1: unable to get BOS descriptor or descriptor too short [ 167.793982][ T5774] usb 4-1: not running at top speed; connect to a high speed hub [ 167.826311][ T5774] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 167.867388][ T5774] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 167.924923][ T5774] usb 4-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 167.958344][ T24] uvcvideo 2-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 167.984767][ T5774] usb 4-1: config 14 has no interface number 0 [ 167.999197][ T24] uvcvideo 2-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 168.014231][ T5774] usb 4-1: config 14 has no interface number 1 [ 168.039735][ T24] uvcvideo 2-1:220.0: No valid video chain found. [ 168.051715][ T5774] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 168.077015][ T24] usb 2-1: selecting invalid altsetting 0 [ 168.096277][ T5774] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 168.119395][ T6642] loop5: detected capacity change from 0 to 256 [ 168.138265][ T24] usb 2-1: selecting invalid altsetting 0 [ 168.149659][ T5774] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.175821][ T24] usbtest 2-1:220.1: probe with driver usbtest failed with error -22 [ 168.197646][ T6382] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.204809][ T5774] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 168.247981][ T24] usb 2-1: USB disconnect, device number 13 [ 168.270187][ T5774] usb 4-1: config 14 interface 57 has no altsetting 0 [ 168.308106][ T5774] usb 4-1: config 14 interface 228 has no altsetting 0 [ 168.335146][ T6382] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.357612][ T5774] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 168.393615][ T5774] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 168.414177][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.421418][ T6149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.424055][ T5774] usb 4-1: Product: syz [ 168.445926][ T5774] usb 4-1: Manufacturer: syz [ 168.466825][ T5774] usb 4-1: SerialNumber: syz [ 168.502197][ T1120] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.509445][ T1120] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.955135][ T5774] legousbtower 4-1:14.57: interrupt endpoints not found [ 169.113350][ T5281] 8021q: adding VLAN 0 to HW filter on device eth3 [ 169.372640][ T5774] legousbtower 4-1:14.228: get version request failed: -32 [ 169.607843][ T5774] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -32 [ 170.210494][ T6667] syzkaller0: entered promiscuous mode [ 170.249133][ T6667] syzkaller0: entered allmulticast mode [ 170.962811][ T10] usb 2-1: new full-speed USB device number 14 using dummy_hcd [ 171.159281][ T9] usb 4-1: USB disconnect, device number 8 [ 172.089872][ T10] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 172.105366][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.116999][ T10] usb 2-1: Product: syz [ 172.121856][ T10] usb 2-1: Manufacturer: syz [ 172.126952][ T10] usb 2-1: SerialNumber: syz [ 172.199105][ T10] usb 2-1: config 0 descriptor?? [ 172.281636][ T6382] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.441588][ T10] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.826617][ T6728] overlayfs: failed to resolve './file1': -2 [ 173.160990][ T6734] syzkaller0: entered promiscuous mode [ 173.186300][ T6740] loop5: detected capacity change from 0 to 512 [ 173.200512][ T6734] syzkaller0: entered allmulticast mode [ 173.209455][ T6741] fuse: Bad value for 'fd' [ 173.231909][ T6740] EXT4-fs: Ignoring removed nobh option [ 173.278825][ T6740] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 173.343664][ T6740] EXT4-fs (loop5): 1 truncate cleaned up [ 173.376299][ T5281] 8021q: adding VLAN 0 to HW filter on device eth4 [ 173.386365][ T6740] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 173.485567][ T6747] zram0: detected capacity change from 0 to 8 [ 173.729077][ T6382] veth0_vlan: entered promiscuous mode [ 173.745230][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 173.807434][ T6382] veth1_vlan: entered promiscuous mode [ 173.854724][ T10] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 173.901058][ T10] usb 2-1: USB disconnect, device number 14 [ 173.953266][ T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 173.980485][ T6382] veth0_macvtap: entered promiscuous mode [ 174.050940][ T6382] veth1_macvtap: entered promiscuous mode [ 174.101512][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 174.145724][ T24] usb 5-1: unable to get BOS descriptor or descriptor too short [ 174.160442][ T24] usb 5-1: not running at top speed; connect to a high speed hub [ 174.177324][ T24] usb 5-1: config 14 has an invalid interface number: 57 but max is 1 [ 174.200086][ T24] usb 5-1: config 14 has an invalid interface number: 228 but max is 1 [ 174.229397][ T24] usb 5-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 174.252702][ T24] usb 5-1: config 14 has no interface number 0 [ 174.266332][ T24] usb 5-1: config 14 has no interface number 1 [ 174.279459][ T24] usb 5-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 174.316705][ T24] usb 5-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 174.348391][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 174.400117][ T6382] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 174.408812][ T24] usb 5-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 175.191547][ T24] usb 5-1: config 14 interface 57 has no altsetting 0 [ 175.198514][ T24] usb 5-1: config 14 interface 228 has no altsetting 0 [ 175.211195][ T24] usb 5-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 175.238070][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 175.269658][ T6147] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.289556][ T24] usb 5-1: Product: syz [ 175.305590][ T24] usb 5-1: Manufacturer: syz [ 175.329465][ T6147] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.333331][ T24] usb 5-1: SerialNumber: syz [ 175.368109][ T6147] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.433684][ T6147] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.576535][ T6771] syzkaller0: entered promiscuous mode [ 175.606409][ T6771] syzkaller0: entered allmulticast mode [ 175.703137][ T5797] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 175.800125][ T6153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.817199][ T6153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.851364][ T24] legousbtower 5-1:14.57: interrupt endpoints not found [ 175.885442][ T5797] usb 4-1: config 220 has an invalid interface number: 76 but max is 2 [ 175.933574][ T5797] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 175.964897][ T5797] usb 4-1: config 220 has no interface number 2 [ 175.974007][ T6153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.993915][ T5797] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 176.008618][ T6779] overlayfs: failed to resolve './file0': -2 [ 176.012798][ T6153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 176.037673][ T5797] usb 4-1: config 220 interface 0 has no altsetting 0 [ 176.063467][ T5797] usb 4-1: config 220 interface 76 has no altsetting 0 [ 176.075008][ T5797] usb 4-1: config 220 interface 1 has no altsetting 0 [ 176.093714][ T5797] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 176.114431][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.145849][ T5797] usb 4-1: Product: syz [ 176.155391][ T5797] usb 4-1: Manufacturer: syz [ 176.180146][ T5797] usb 4-1: SerialNumber: syz [ 176.254074][ T24] legousbtower 5-1:14.228: get version request failed: -32 [ 176.277173][ T24] legousbtower 5-1:14.228: probe with driver legousbtower failed with error -32 [ 176.448694][ T6785] syzkaller0: entered promiscuous mode [ 176.503461][ T5797] uvcvideo 4-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 176.525733][ T6785] syzkaller0: entered allmulticast mode [ 176.556881][ T5797] uvcvideo 4-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 176.593739][ T6783] loop5: detected capacity change from 0 to 32768 [ 176.597046][ T5797] uvcvideo 4-1:220.0: No valid video chain found. [ 176.682037][ T5797] usb 4-1: selecting invalid altsetting 0 [ 176.733353][ T5797] usb 4-1: selecting invalid altsetting 0 [ 176.753365][ T5797] usbtest 4-1:220.1: probe with driver usbtest failed with error -22 [ 176.807893][ T5797] usb 4-1: USB disconnect, device number 9 [ 177.498505][ T6776] loop1: detected capacity change from 0 to 32768 [ 177.747628][ T6794] loop0: detected capacity change from 0 to 512 [ 177.759061][ T6794] EXT4-fs: Ignoring removed nobh option [ 177.767825][ T6794] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 177.802982][ T6794] EXT4-fs (loop0): 1 truncate cleaned up [ 177.824991][ T6794] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 177.986977][ T5774] usb 5-1: USB disconnect, device number 6 [ 178.157449][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 178.328609][ T6808] syzkaller0: entered promiscuous mode [ 178.349200][ T6808] syzkaller0: entered allmulticast mode [ 178.500484][ T6814] overlayfs: failed to resolve './file0': -2 [ 179.593202][ T6818] syzkaller0: entered promiscuous mode [ 179.628125][ T6818] syzkaller0: entered allmulticast mode [ 180.068486][ T6835] loop1: detected capacity change from 0 to 32768 [ 180.077842][ T5774] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 180.423535][ T5797] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 180.869947][ T5774] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.978573][ T5774] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.000286][ T5797] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 181.064446][ T5774] usb 6-1: Product: syz [ 181.068714][ T5797] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 181.105353][ T5774] usb 6-1: Manufacturer: syz [ 181.136831][ T5774] usb 6-1: SerialNumber: syz [ 181.154407][ T5797] usb 7-1: config 220 has no interface number 2 [ 181.186146][ T5774] usb 6-1: config 0 descriptor?? [ 181.196931][ T5797] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 181.227056][ T5797] usb 7-1: config 220 interface 0 has no altsetting 0 [ 181.244660][ T5797] usb 7-1: config 220 interface 76 has no altsetting 0 [ 181.261536][ T5797] usb 7-1: config 220 interface 1 has no altsetting 0 [ 181.277441][ T5797] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 181.297560][ T5797] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.316994][ T5797] usb 7-1: Product: syz [ 181.329422][ T5797] usb 7-1: Manufacturer: syz [ 181.341701][ T5797] usb 7-1: SerialNumber: syz [ 181.363773][ T5352] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 181.439971][ T5774] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.526288][ T5352] usb 1-1: unable to get BOS descriptor or descriptor too short [ 181.551120][ T5352] usb 1-1: not running at top speed; connect to a high speed hub [ 181.570642][ T5352] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 181.615344][ T5797] uvcvideo 7-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 181.625689][ T6837] loop4: detected capacity change from 0 to 32768 [ 181.633444][ T5352] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 181.655557][ T5797] uvcvideo 7-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 181.672083][ T5352] usb 1-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 181.688117][ T5797] uvcvideo 7-1:220.0: No valid video chain found. [ 181.972261][ T5352] usb 1-1: config 14 has no interface number 0 [ 181.980224][ T5797] usb 7-1: selecting invalid altsetting 0 [ 181.986060][ T5352] usb 1-1: config 14 has no interface number 1 [ 181.996104][ T6861] FAT-fs (loop4): unable to read boot sector [ 182.006986][ T5352] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 182.022649][ T5352] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 182.036927][ T5797] usb 7-1: selecting invalid altsetting 0 [ 182.042749][ T5352] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 182.057360][ T5797] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 183.056251][ T5352] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 183.068261][ T5797] usb 7-1: USB disconnect, device number 2 [ 183.092519][ T5352] usb 1-1: config 14 interface 57 has no altsetting 0 [ 183.768674][ T5352] usb 1-1: config 14 interface 228 has no altsetting 0 [ 183.862154][ T5352] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 183.998917][ T5352] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.031649][ T5774] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 184.116404][ T5352] usb 1-1: Product: syz [ 184.173312][ T5774] usb 6-1: USB disconnect, device number 7 [ 184.182757][ T5352] usb 1-1: Manufacturer: syz [ 184.231795][ T5352] usb 1-1: SerialNumber: syz [ 184.319547][ T5352] usb 1-1: can't set config #14, error -71 [ 184.477060][ T5352] usb 1-1: USB disconnect, device number 8 [ 184.492205][ T6871] loop1: detected capacity change from 0 to 128 [ 184.623585][ T6875] syzkaller0: entered promiscuous mode [ 184.629340][ T6875] syzkaller0: entered allmulticast mode [ 184.641251][ T6871] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 184.767733][ T6871] ext4 filesystem being mounted at /46/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 185.562680][ T30] audit: type=1804 audit(1785280813.347:4): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.273" name="/newroot/46/file1/bus" dev="loop1" ino=12 res=1 errno=0 [ 185.673091][ T6892] syzkaller0: entered promiscuous mode [ 185.721361][ T6892] syzkaller0: entered allmulticast mode [ 186.276159][ T6907] loop0: detected capacity change from 0 to 512 [ 186.297509][ T6907] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 186.984407][ T30] audit: type=1804 audit(1785280814.757:5): pid=6907 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.281" name="/newroot/56/file0/bus" dev="loop0" ino=1048622 res=1 errno=0 [ 188.861730][ T5628] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 189.134072][ T5774] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 189.144788][ T5797] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 189.154042][ T5352] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.340882][ T6935] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 189.363225][ T5797] usb 4-1: Using ep0 maxpacket: 16 [ 189.381707][ T5352] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 189.399644][ T6937] overlayfs: failed to resolve './file0': -2 [ 189.417320][ T5797] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 189.426573][ T5352] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 189.437077][ T5774] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.456113][ T5797] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.471244][ T5774] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.486294][ T5352] usb 6-1: config 220 has no interface number 2 [ 189.502750][ T5797] usb 4-1: config 0 has no interface number 0 [ 189.508933][ T5352] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 189.522199][ T5774] usb 7-1: Product: syz [ 189.527174][ T5774] usb 7-1: Manufacturer: syz [ 189.538149][ T5797] usb 4-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 189.551861][ T5774] usb 7-1: SerialNumber: syz [ 189.560445][ T5352] usb 6-1: config 220 interface 0 has no altsetting 0 [ 189.576090][ T5797] usb 4-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 189.590415][ T5774] usb 7-1: config 0 descriptor?? [ 189.599029][ T5352] usb 6-1: config 220 interface 76 has no altsetting 0 [ 189.613298][ T5868] usb 2-1: new full-speed USB device number 15 using dummy_hcd [ 189.625915][ T5352] usb 6-1: config 220 interface 1 has no altsetting 0 [ 189.633225][ T5797] usb 4-1: config 0 interface 41 has no altsetting 0 [ 189.658574][ T5797] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 189.667996][ T5352] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 189.684894][ T5352] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.703110][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.711196][ T5352] usb 6-1: Product: syz [ 189.723868][ T5797] usb 4-1: Product: syz [ 189.733606][ T5352] usb 6-1: Manufacturer: syz [ 189.738287][ T5797] usb 4-1: Manufacturer: syz [ 189.753078][ T5352] usb 6-1: SerialNumber: syz [ 189.757746][ T5797] usb 4-1: SerialNumber: syz [ 189.791979][ T5797] usb 4-1: config 0 descriptor?? [ 189.808629][ T5797] sr9700 4-1:0.41: probe with driver sr9700 failed with error -22 [ 189.824761][ T5868] usb 2-1: unable to get BOS descriptor or descriptor too short [ 189.832768][ T5774] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 189.859870][ T5868] usb 2-1: not running at top speed; connect to a high speed hub [ 189.876945][ T5868] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 189.892556][ T5868] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 189.902311][ T5868] usb 2-1: config 14 has an invalid descriptor of length 0, skipping remainder of the config [ 189.922876][ T5868] usb 2-1: config 14 has no interface number 0 [ 189.932162][ T5868] usb 2-1: config 14 has no interface number 1 [ 189.939087][ T5868] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 189.952483][ T5868] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 189.967226][ T5868] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 189.982308][ T5868] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 137, setting to 64 [ 190.033175][ T5940] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 190.039462][ T5868] usb 2-1: config 14 interface 57 has no altsetting 0 [ 190.050736][ T5352] uvcvideo 6-1:220.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 190.062347][ T5868] usb 2-1: config 14 interface 228 has no altsetting 0 [ 190.070688][ T5352] uvcvideo 6-1:220.0: Found UVC 7.01 device syz (8086:0b07) [ 190.081194][ T5352] uvcvideo 6-1:220.0: No valid video chain found. [ 190.094771][ T5868] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 190.104737][ T5352] usb 6-1: selecting invalid altsetting 0 [ 190.116200][ T5868] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.140764][ T5868] usb 2-1: Product: syz [ 190.146200][ T5868] usb 2-1: Manufacturer: syz [ 190.160623][ T5352] usb 6-1: selecting invalid altsetting 0 [ 190.172720][ T5868] usb 2-1: SerialNumber: syz [ 190.180689][ T5352] usbtest 6-1:220.1: probe with driver usbtest failed with error -22 [ 190.193068][ T5940] usb 5-1: Using ep0 maxpacket: 16 [ 190.218339][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 190.234848][ T5352] usb 6-1: USB disconnect, device number 8 [ 190.258251][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 190.299731][ T5940] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 190.318474][ T5940] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.327860][ T5940] usb 5-1: Product: syz [ 190.332072][ T5940] usb 5-1: Manufacturer: syz [ 190.338875][ T5940] usb 5-1: SerialNumber: syz [ 190.360090][ T5940] usb 5-1: config 0 descriptor?? [ 190.384880][ T5940] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 190.422649][ T5940] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 190.490507][ T6952] syzkaller0: entered promiscuous mode [ 190.496238][ T6952] syzkaller0: entered allmulticast mode [ 190.648623][ T5868] legousbtower 2-1:14.57: interrupt endpoints not found [ 191.060393][ T5868] legousbtower 2-1:14.228: get version request failed: -32 [ 191.078965][ T5940] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 191.086685][ T5868] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -32 [ 191.097045][ T5940] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 191.991965][ T5774] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 192.010643][ T9] usb 4-1: USB disconnect, device number 10 [ 192.152829][ T5940] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 192.193956][ T5940] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 192.221869][ T5940] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 192.261730][ T5940] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 192.263004][ T5774] usb 7-1: USB disconnect, device number 3 [ 192.314237][ T5940] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 192.344368][ T5940] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 192.380600][ T6977] syzkaller0: entered promiscuous mode [ 192.397563][ T5940] usb 5-1: USB disconnect, device number 7 [ 192.412119][ T6977] syzkaller0: entered allmulticast mode [ 192.452157][ T6986] netlink: 20 bytes leftover after parsing attributes in process `syz.5.298'. [ 192.685539][ T5774] usb 2-1: USB disconnect, device number 15 [ 192.881361][ T6993] loop6: detected capacity change from 0 to 128 [ 192.952916][ T6993] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 192.969923][ T6993] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 192.994201][ T30] audit: type=1804 audit(1785280820.777:6): pid=6993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.301" name="/newroot/9/file1/bus" dev="loop6" ino=12 res=1 errno=0 [ 193.576088][ T1311] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.583664][ T1311] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.949687][ T7026] syzkaller0: entered promiscuous mode [ 193.987425][ T7026] syzkaller0: entered allmulticast mode [ 194.384600][ T6382] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 195.762686][ T9] usb 7-1: new full-speed USB device number 4 using dummy_hcd [ 196.861393][ T9] usb 7-1: unable to get BOS descriptor or descriptor too short [ 197.086425][ T7060] syzkaller0: entered promiscuous mode [ 197.102319][ T5653] Bluetooth: hci5: unexpected event 0x05 length: 12 > 4 [ 197.130208][ T7060] syzkaller0: entered allmulticast mode [ 197.431600][ T7068] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 197.826861][ T9] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 197.834544][ T9] usb 7-1: can't read configurations, error -71 [ 198.121361][ T7076] team0 (unregistering): Port device team_slave_0 removed [ 198.170766][ T7076] team0 (unregistering): Port device team_slave_1 removed [ 198.388967][ T7085] syzkaller0: entered promiscuous mode [ 198.415848][ T7085] syzkaller0: entered allmulticast mode [ 198.797894][ T7094] loop4: detected capacity change from 0 to 512 [ 199.195443][ T7094] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 199.600053][ T7094] ext4 filesystem being mounted at /55/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 199.792150][ T7094] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000. [ 199.984678][ T5632] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 200.015738][ T7114] syzkaller0: entered promiscuous mode [ 200.038015][ T7114] syzkaller0: entered allmulticast mode [ 200.280900][ T7121] overlayfs: failed to resolve './file1': -2 [ 200.482808][ T5774] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 200.662715][ T5774] usb 1-1: Using ep0 maxpacket: 16 [ 200.686015][ T5774] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 200.719212][ T5774] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 200.769113][ T5774] usb 1-1: config 0 has no interface number 0 [ 200.797107][ T5774] usb 1-1: config 0 interface 41 altsetting 2 has an invalid descriptor for endpoint zero, skipping [ 200.832676][ T5774] usb 1-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 201.835860][ T5774] usb 1-1: config 0 interface 41 has no altsetting 0 [ 201.870123][ T5774] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 202.816612][ T5774] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.825053][ T5774] usb 1-1: Product: syz [ 202.829306][ T5774] usb 1-1: Manufacturer: syz [ 202.834234][ T5774] usb 1-1: SerialNumber: syz [ 202.863594][ T5774] usb 1-1: config 0 descriptor?? [ 202.898321][ T5774] sr9700 1-1:0.41: probe with driver sr9700 failed with error -22 [ 202.963271][ T7149] loop6: detected capacity change from 0 to 512 [ 203.005484][ T7149] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.347: casefold flag without casefold feature [ 203.053417][ T7149] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 203.054433][ T7149] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.347: couldn't read orphan inode 15 (err -117) [ 203.063761][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 203.063795][ C1] EXT4-fs (loop6): initial error at time 1785280830: ext4_orphan_get:1399: inode 15 [ 203.063847][ C1] EXT4-fs (loop6): last error at time 1785280830: ext4_orphan_get:1399: inode 15 [ 203.150511][ T7126] loop5: detected capacity change from 0 to 32768 [ 203.183134][ T7149] loop6: lost filesystem error report for type 5 error -117 [ 203.189519][ T7149] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.506792][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 203.736094][ T7164] loop6: detected capacity change from 0 to 512 [ 203.804857][ T7165] syzkaller0: entered promiscuous mode [ 203.848758][ T7165] syzkaller0: entered allmulticast mode [ 204.305955][ T7177] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 204.815189][ T5868] usb 1-1: USB disconnect, device number 9 [ 206.814976][ T7196] loop6: detected capacity change from 0 to 1024 [ 207.177832][ T7196] EXT4-fs: Ignoring removed nomblk_io_submit option [ 207.239406][ T7196] EXT4-fs: Ignoring removed orlov option [ 207.576466][ T7206] Invalid ELF header magic: != ELF [ 208.386335][ T7196] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 208.731983][ T6382] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 209.026676][ T7225] loop0: detected capacity change from 0 to 512 [ 209.073738][ T7224] syzkaller0: entered promiscuous mode [ 209.091511][ T7224] syzkaller0: entered allmulticast mode [ 209.270785][ T7225] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 209.325221][ T7225] ext4 filesystem being mounted at /73/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 210.128732][ T5631] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 210.163592][ T5352] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 210.332679][ T5352] usb 7-1: Using ep0 maxpacket: 16 [ 210.354705][ T5352] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 210.393755][ T5352] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 210.457598][ T5352] usb 7-1: config 0 has no interface number 0 [ 210.489671][ T5352] usb 7-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 210.776694][ T5352] usb 7-1: config 0 interface 41 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 210.790323][ T5352] usb 7-1: config 0 interface 41 has no altsetting 0 [ 210.815055][ T5352] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 210.826953][ T5352] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.850804][ T5352] usb 7-1: Product: syz [ 210.996833][ T5352] usb 7-1: Manufacturer: syz [ 211.021563][ T5352] usb 7-1: SerialNumber: syz [ 211.412028][ T5352] usb 7-1: config 0 descriptor?? [ 211.461875][ T7221] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 211.563046][ T5352] sr9700 7-1:0.41: probe with driver sr9700 failed with error -22 [ 212.547942][ T7267] syzkaller0: entered promiscuous mode [ 212.569687][ T7267] syzkaller0: entered allmulticast mode [ 212.811473][ T7247] loop3: detected capacity change from 0 to 32768 [ 213.008261][ T7247] JBD2: Ignoring recovery information on journal [ 213.078544][ T5868] usb 7-1: USB disconnect, device number 6 [ 213.100681][ T7272] loop5: detected capacity change from 0 to 512 [ 213.275058][ T7247] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 213.288814][ T7272] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 213.398952][ T7272] ext4 filesystem being mounted at /66/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 215.671495][ T5627] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 215.769853][ T7297] configfs-gadget.g1 gadget.32: FS Playback: Req. wMaxPacketSize 2840 at bInterval 1 > max ISOC 1023, may drop data! [ 215.807924][ T5629] ocfs2: Unmounting device (7,3) on (node local) [ 216.613105][ T5650] Bluetooth: hci5: command 0x0406 tx timeout [ 216.618389][ T5646] Bluetooth: hci4: command 0x0406 tx timeout [ 216.619173][ T5650] Bluetooth: hci0: command 0x0406 tx timeout [ 216.625618][ T5636] Bluetooth: hci2: command 0x0406 tx timeout [ 216.632429][ T5650] Bluetooth: hci3: command 0x0406 tx timeout [ 217.000940][ T7312] vhci_hcd vhci_hcd.0: remove, state 4 [ 217.243624][ T7308] smpboot: CPU 1 is now offline [ 217.274498][ T7312] usb usb34: USB disconnect, device number 1 [ 218.788701][ T7321] netlink: 'syz.4.404': attribute type 39 has an invalid length. [ 221.070702][ T7325] loop3: detected capacity change from 0 to 32768 [ 222.234403][ T6155] vhci_hcd vhci_hcd.0: stop threads [ 222.258654][ T7312] vhci_hcd vhci_hcd.0: USB bus 34 deregistered [ 222.322440][ T6155] vhci_hcd vhci_hcd.0: release socket [ 222.359894][ T6155] vhci_hcd vhci_hcd.0: disconnect device [ 222.418630][ T6155] vhci_hcd vhci_hcd.0: stop threads [ 222.470391][ T6155] vhci_hcd vhci_hcd.0: release socket [ 222.516327][ T7312] vhci_hcd vhci_hcd.0: remove, state 4 [ 222.530336][ T6155] ================================================================== [ 222.538394][ T6155] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x44/0x456 [ 222.546810][ T6155] Read of size 4 at addr ffff888028c586a0 by task kworker/u8:17/6155 [ 222.554854][ T6155] [ 222.557162][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 222.557194][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 222.557212][ T6155] Workqueue: usbip_event event_handler [ 222.557243][ T6155] Call Trace: [ 222.557253][ T6155] [ 222.557264][ T6155] dump_stack_lvl+0x100/0x190 [ 222.557294][ T6155] print_report+0x13d/0x4b0 [ 222.557334][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.557368][ T6155] ? __virt_addr_valid+0x239/0x430 [ 222.557401][ T6155] ? vhci_cleanup_unlink_list+0x44/0x456 [ 222.557441][ T6155] kasan_report+0xdf/0x1c0 [ 222.557470][ T6155] ? vhci_cleanup_unlink_list+0x44/0x456 [ 222.557515][ T6155] vhci_cleanup_unlink_list+0x44/0x456 [ 222.557560][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 222.557604][ T6155] event_handler+0x216/0x570 [ 222.557634][ T6155] process_one_work+0xa23/0x1940 [ 222.557669][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 222.557694][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.557733][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.557769][ T6155] worker_thread+0x5ef/0xe50 [ 222.557801][ T6155] ? kthread+0x13a/0x450 [ 222.557843][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 222.557868][ T6155] kthread+0x370/0x450 [ 222.557909][ T6155] ? __pfx_kthread+0x10/0x10 [ 222.557952][ T6155] ret_from_fork+0x72b/0xd50 [ 222.557989][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 222.558024][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.558056][ T6155] ? rcu_is_watching+0x12/0xc0 [ 222.558095][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 222.558127][ T6155] ? __switch_to+0x800/0x10f0 [ 222.558175][ T6155] ? __switch_to_asm+0x39/0x70 [ 222.558212][ T6155] ? __pfx_kthread+0x10/0x10 [ 222.558256][ T6155] ret_from_fork_asm+0x1a/0x30 [ 222.558302][ T6155] [ 222.558312][ T6155] [ 222.733912][ T6155] Allocated by task 1: [ 222.737956][ T6155] kasan_save_stack+0x30/0x50 [ 222.742633][ T6155] kasan_save_track+0x14/0x30 [ 222.747309][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 222.751896][ T6155] __kmalloc_noprof+0x322/0x820 [ 222.756744][ T6155] __usb_create_hcd+0x5e/0xac0 [ 222.761507][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 222.766178][ T6155] platform_probe+0x106/0x1d0 [ 222.770847][ T6155] really_probe+0x241/0xa60 [ 222.775346][ T6155] __driver_probe_device+0x20e/0x450 [ 222.780632][ T6155] driver_probe_device+0x4a/0x140 [ 222.785648][ T6155] __device_attach_driver+0x1df/0x320 [ 222.791010][ T6155] bus_for_each_drv+0x159/0x1e0 [ 222.795846][ T6155] __device_attach+0x1e4/0x4d0 [ 222.800606][ T6155] device_initial_probe+0xaf/0xd0 [ 222.805629][ T6155] bus_probe_device+0x64/0x160 [ 222.810386][ T6155] device_add+0x121d/0x1970 [ 222.814891][ T6155] platform_device_add+0x35a/0x800 [ 222.819993][ T6155] platform_device_register_full+0x5cf/0x830 [ 222.825967][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 222.830547][ T6155] do_one_initcall+0x11d/0x700 [ 222.835339][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 222.840538][ T6155] kernel_init+0x1f/0x1e0 [ 222.844874][ T6155] ret_from_fork+0x72b/0xd50 [ 222.849468][ T6155] ret_from_fork_asm+0x1a/0x30 [ 222.854231][ T6155] [ 222.856533][ T6155] Freed by task 7312: [ 222.860490][ T6155] kasan_save_stack+0x30/0x50 [ 222.865173][ T6155] kasan_save_track+0x14/0x30 [ 222.869856][ T6155] kasan_save_free_info+0x3b/0x70 [ 222.874879][ T6155] __kasan_slab_free+0x5f/0x80 [ 222.879633][ T6155] kfree+0x22b/0x6c0 [ 222.883528][ T6155] usb_put_hcd+0x149/0x1f0 [ 222.887946][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 222.892609][ T6155] platform_remove+0x5f/0x80 [ 222.897186][ T6155] device_remove+0xcb/0x180 [ 222.901687][ T6155] device_release_driver_internal+0x44e/0x620 [ 222.907757][ T6155] unbind_store+0xf8/0x110 [ 222.912166][ T6155] drv_attr_store+0x74/0xb0 [ 222.916654][ T6155] sysfs_kf_write+0xf2/0x150 [ 222.921237][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 222.926513][ T6155] vfs_write+0x6ac/0x1050 [ 222.930842][ T6155] ksys_write+0x12a/0x250 [ 222.935169][ T6155] do_syscall_64+0x115/0x870 [ 222.939756][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.945641][ T6155] [ 222.947964][ T6155] Last potentially related work creation: [ 222.953655][ T6155] kasan_save_stack+0x30/0x50 [ 222.958337][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 222.963531][ T6155] insert_work+0x36/0x230 [ 222.967864][ T6155] __queue_work+0x9bc/0x12b0 [ 222.972439][ T6155] queue_work_on+0x1a9/0x1e0 [ 222.977016][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 222.982220][ T6155] unlink1+0x418/0x510 [ 222.986294][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 222.991332][ T6155] usb_kill_urb+0x121/0x320 [ 222.995830][ T6155] hub_quiesce+0x1e9/0x320 [ 223.000245][ T6155] hub_suspend+0x4ab/0x9e0 [ 223.004672][ T6155] usb_suspend_both+0x288/0x950 [ 223.009524][ T6155] usb_runtime_suspend+0x49/0x120 [ 223.014552][ T6155] __rpm_callback+0xc8/0x620 [ 223.019142][ T6155] rpm_callback+0x16a/0x1b0 [ 223.023643][ T6155] rpm_suspend+0x2f4/0x11a0 [ 223.028155][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 223.033273][ T6155] usb_new_device.cold+0xd61/0x115c [ 223.038466][ T6155] register_root_hub+0x4e6/0x639 [ 223.043398][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 223.048329][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 223.053020][ T6155] platform_probe+0x106/0x1d0 [ 223.057700][ T6155] really_probe+0x241/0xa60 [ 223.062198][ T6155] __driver_probe_device+0x20e/0x450 [ 223.067481][ T6155] driver_probe_device+0x4a/0x140 [ 223.072498][ T6155] __device_attach_driver+0x1df/0x320 [ 223.077861][ T6155] bus_for_each_drv+0x159/0x1e0 [ 223.082697][ T6155] __device_attach+0x1e4/0x4d0 [ 223.087453][ T6155] device_initial_probe+0xaf/0xd0 [ 223.092470][ T6155] bus_probe_device+0x64/0x160 [ 223.097221][ T6155] device_add+0x121d/0x1970 [ 223.101720][ T6155] platform_device_add+0x35a/0x800 [ 223.106816][ T6155] platform_device_register_full+0x5cf/0x830 [ 223.112789][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 223.117363][ T6155] do_one_initcall+0x11d/0x700 [ 223.122125][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 223.127316][ T6155] kernel_init+0x1f/0x1e0 [ 223.131642][ T6155] ret_from_fork+0x72b/0xd50 [ 223.136227][ T6155] ret_from_fork_asm+0x1a/0x30 [ 223.140985][ T6155] [ 223.143289][ T6155] Second to last potentially related work creation: [ 223.149847][ T6155] kasan_save_stack+0x30/0x50 [ 223.154527][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 223.159721][ T6155] insert_work+0x36/0x230 [ 223.164050][ T6155] __queue_work+0x9bc/0x12b0 [ 223.168626][ T6155] queue_work_on+0x1a9/0x1e0 [ 223.173198][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 223.178392][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 223.183505][ T6155] usb_submit_urb+0x827/0x19b0 [ 223.188256][ T6155] usb_start_wait_urb+0x10e/0x580 [ 223.193270][ T6155] usb_control_msg+0x328/0x4b0 [ 223.198018][ T6155] hub_suspend+0x826/0x9e0 [ 223.202424][ T6155] usb_suspend_both+0x288/0x950 [ 223.207270][ T6155] usb_runtime_suspend+0x49/0x120 [ 223.212294][ T6155] __rpm_callback+0xc8/0x620 [ 223.216891][ T6155] rpm_callback+0x16a/0x1b0 [ 223.221388][ T6155] rpm_suspend+0x2f4/0x11a0 [ 223.225884][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 223.230995][ T6155] usb_new_device.cold+0xd61/0x115c [ 223.236182][ T6155] register_root_hub+0x4e6/0x639 [ 223.241112][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 223.246048][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 223.250716][ T6155] platform_probe+0x106/0x1d0 [ 223.255381][ T6155] really_probe+0x241/0xa60 [ 223.259904][ T6155] __driver_probe_device+0x20e/0x450 [ 223.265184][ T6155] driver_probe_device+0x4a/0x140 [ 223.270207][ T6155] __device_attach_driver+0x1df/0x320 [ 223.275576][ T6155] bus_for_each_drv+0x159/0x1e0 [ 223.280420][ T6155] __device_attach+0x1e4/0x4d0 [ 223.285183][ T6155] device_initial_probe+0xaf/0xd0 [ 223.290208][ T6155] bus_probe_device+0x64/0x160 [ 223.294966][ T6155] device_add+0x121d/0x1970 [ 223.299471][ T6155] platform_device_add+0x35a/0x800 [ 223.304569][ T6155] platform_device_register_full+0x5cf/0x830 [ 223.310547][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 223.315127][ T6155] do_one_initcall+0x11d/0x700 [ 223.319892][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 223.325089][ T6155] kernel_init+0x1f/0x1e0 [ 223.329425][ T6155] ret_from_fork+0x72b/0xd50 [ 223.334012][ T6155] ret_from_fork_asm+0x1a/0x30 [ 223.338775][ T6155] [ 223.341078][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 223.341078][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 223.355115][ T6155] The buggy address is located 1696 bytes inside of [ 223.355115][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 223.369078][ T6155] [ 223.371384][ T6155] The buggy address belongs to the physical page: [ 223.377772][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 223.386517][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 223.394999][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 223.402530][ T6155] page_type: f5(slab) [ 223.406497][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 223.415069][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 223.423641][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 223.432300][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 223.440957][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 223.449633][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 223.458283][ T6155] page dumped because: kasan: bad access detected [ 223.464690][ T6155] page_owner tracks the page as allocated [ 223.470378][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 223.489998][ T6155] post_alloc_hook+0xfd/0x120 [ 223.494694][ T6155] get_page_from_freelist+0xf48/0x3530 [ 223.500156][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 223.506062][ T6155] new_slab+0xa2/0x640 [ 223.510139][ T6155] refill_objects+0xe3/0x410 [ 223.514727][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 223.520269][ T6155] __kmalloc_noprof+0x66d/0x820 [ 223.525119][ T6155] scsi_host_alloc+0x30/0x1380 [ 223.529879][ T6155] virtscsi_probe+0x21f/0xf80 [ 223.534555][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 223.539407][ T6155] really_probe+0x241/0xa60 [ 223.543902][ T6155] __driver_probe_device+0x20e/0x450 [ 223.549183][ T6155] driver_probe_device+0x4a/0x140 [ 223.554227][ T6155] __driver_attach+0x21f/0x5b0 [ 223.558987][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 223.563833][ T6155] bus_add_driver+0x305/0x5b0 [ 223.568500][ T6155] page_owner free stack trace missing [ 223.573841][ T6155] [ 223.576143][ T6155] Memory state around the buggy address: [ 223.581748][ T6155] ffff888028c58580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.589787][ T6155] ffff888028c58600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.597825][ T6155] >ffff888028c58680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.605863][ T6155] ^ [ 223.610948][ T6155] ffff888028c58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.618990][ T6155] ffff888028c58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.627029][ T6155] ================================================================== [ 223.697239][ T7312] usb usb33: USB disconnect, device number 1 [ 224.241374][ T7312] vhci_hcd vhci_hcd.0: USB bus 33 deregistered [ 224.276608][ T6155] Disabling lock debugging due to kernel taint [ 224.298982][ T6155] ================================================================== [ 224.307068][ T6155] BUG: KASAN: slab-use-after-free in vhci_cleanup_unlink_list+0x85/0x456 [ 224.315497][ T6155] Read of size 8 at addr ffff888028c58400 by task kworker/u8:17/6155 [ 224.323548][ T6155] [ 224.325859][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 224.325897][ T6155] Tainted: [B]=BAD_PAGE [ 224.325907][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 224.325926][ T6155] Workqueue: usbip_event event_handler [ 224.325957][ T6155] Call Trace: [ 224.325967][ T6155] [ 224.325978][ T6155] dump_stack_lvl+0x100/0x190 [ 224.326008][ T6155] print_report+0x13d/0x4b0 [ 224.326048][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.326081][ T6155] ? __virt_addr_valid+0x239/0x430 [ 224.326115][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 224.326160][ T6155] kasan_report+0xdf/0x1c0 [ 224.326189][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 224.326233][ T6155] vhci_cleanup_unlink_list+0x85/0x456 [ 224.326278][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 224.326322][ T6155] event_handler+0x216/0x570 [ 224.326353][ T6155] process_one_work+0xa23/0x1940 [ 224.326387][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 224.326413][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.326451][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.326487][ T6155] worker_thread+0x5ef/0xe50 [ 224.326520][ T6155] ? kthread+0x13a/0x450 [ 224.326561][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 224.326587][ T6155] kthread+0x370/0x450 [ 224.326628][ T6155] ? __pfx_kthread+0x10/0x10 [ 224.326671][ T6155] ret_from_fork+0x72b/0xd50 [ 224.326708][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 224.326743][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.326776][ T6155] ? rcu_is_watching+0x12/0xc0 [ 224.326815][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 224.326847][ T6155] ? __switch_to+0x800/0x10f0 [ 224.326891][ T6155] ? __switch_to_asm+0x39/0x70 [ 224.326928][ T6155] ? __pfx_kthread+0x10/0x10 [ 224.326971][ T6155] ret_from_fork_asm+0x1a/0x30 [ 224.327018][ T6155] [ 224.327027][ T6155] [ 224.508279][ T6155] Allocated by task 1: [ 224.512330][ T6155] kasan_save_stack+0x30/0x50 [ 224.517011][ T6155] kasan_save_track+0x14/0x30 [ 224.521688][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 224.526304][ T6155] __kmalloc_noprof+0x322/0x820 [ 224.531152][ T6155] __usb_create_hcd+0x5e/0xac0 [ 224.535920][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 224.540590][ T6155] platform_probe+0x106/0x1d0 [ 224.545258][ T6155] really_probe+0x241/0xa60 [ 224.549773][ T6155] __driver_probe_device+0x20e/0x450 [ 224.555055][ T6155] driver_probe_device+0x4a/0x140 [ 224.560078][ T6155] __device_attach_driver+0x1df/0x320 [ 224.565447][ T6155] bus_for_each_drv+0x159/0x1e0 [ 224.570306][ T6155] __device_attach+0x1e4/0x4d0 [ 224.575084][ T6155] device_initial_probe+0xaf/0xd0 [ 224.580109][ T6155] bus_probe_device+0x64/0x160 [ 224.584865][ T6155] device_add+0x121d/0x1970 [ 224.589374][ T6155] platform_device_add+0x35a/0x800 [ 224.594472][ T6155] platform_device_register_full+0x5cf/0x830 [ 224.600448][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 224.605026][ T6155] do_one_initcall+0x11d/0x700 [ 224.609787][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 224.614980][ T6155] kernel_init+0x1f/0x1e0 [ 224.619311][ T6155] ret_from_fork+0x72b/0xd50 [ 224.623894][ T6155] ret_from_fork_asm+0x1a/0x30 [ 224.628658][ T6155] [ 224.630957][ T6155] Freed by task 7312: [ 224.634911][ T6155] kasan_save_stack+0x30/0x50 [ 224.639592][ T6155] kasan_save_track+0x14/0x30 [ 224.644283][ T6155] kasan_save_free_info+0x3b/0x70 [ 224.649304][ T6155] __kasan_slab_free+0x5f/0x80 [ 224.654051][ T6155] kfree+0x22b/0x6c0 [ 224.657940][ T6155] usb_put_hcd+0x149/0x1f0 [ 224.662356][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 224.667024][ T6155] platform_remove+0x5f/0x80 [ 224.671601][ T6155] device_remove+0xcb/0x180 [ 224.676095][ T6155] device_release_driver_internal+0x44e/0x620 [ 224.682161][ T6155] unbind_store+0xf8/0x110 [ 224.686566][ T6155] drv_attr_store+0x74/0xb0 [ 224.691056][ T6155] sysfs_kf_write+0xf2/0x150 [ 224.695635][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 224.700907][ T6155] vfs_write+0x6ac/0x1050 [ 224.705235][ T6155] ksys_write+0x12a/0x250 [ 224.709564][ T6155] do_syscall_64+0x115/0x870 [ 224.714151][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.720030][ T6155] [ 224.722329][ T6155] Last potentially related work creation: [ 224.728014][ T6155] kasan_save_stack+0x30/0x50 [ 224.732689][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 224.737878][ T6155] insert_work+0x36/0x230 [ 224.742207][ T6155] __queue_work+0x9bc/0x12b0 [ 224.746780][ T6155] queue_work_on+0x1a9/0x1e0 [ 224.751356][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 224.756552][ T6155] unlink1+0x418/0x510 [ 224.760617][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 224.765640][ T6155] usb_kill_urb+0x121/0x320 [ 224.770131][ T6155] hub_quiesce+0x1e9/0x320 [ 224.774548][ T6155] hub_suspend+0x4ab/0x9e0 [ 224.778956][ T6155] usb_suspend_both+0x288/0x950 [ 224.783803][ T6155] usb_runtime_suspend+0x49/0x120 [ 224.788829][ T6155] __rpm_callback+0xc8/0x620 [ 224.793412][ T6155] rpm_callback+0x16a/0x1b0 [ 224.797905][ T6155] rpm_suspend+0x2f4/0x11a0 [ 224.802402][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 224.807508][ T6155] usb_new_device.cold+0xd61/0x115c [ 224.812701][ T6155] register_root_hub+0x4e6/0x639 [ 224.817632][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 224.822562][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 224.827227][ T6155] platform_probe+0x106/0x1d0 [ 224.831889][ T6155] really_probe+0x241/0xa60 [ 224.836382][ T6155] __driver_probe_device+0x20e/0x450 [ 224.841668][ T6155] driver_probe_device+0x4a/0x140 [ 224.846699][ T6155] __device_attach_driver+0x1df/0x320 [ 224.852069][ T6155] bus_for_each_drv+0x159/0x1e0 [ 224.856907][ T6155] __device_attach+0x1e4/0x4d0 [ 224.861689][ T6155] device_initial_probe+0xaf/0xd0 [ 224.866708][ T6155] bus_probe_device+0x64/0x160 [ 224.871479][ T6155] device_add+0x121d/0x1970 [ 224.875979][ T6155] platform_device_add+0x35a/0x800 [ 224.881077][ T6155] platform_device_register_full+0x5cf/0x830 [ 224.887048][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 224.891626][ T6155] do_one_initcall+0x11d/0x700 [ 224.896386][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 224.901582][ T6155] kernel_init+0x1f/0x1e0 [ 224.905907][ T6155] ret_from_fork+0x72b/0xd50 [ 224.910493][ T6155] ret_from_fork_asm+0x1a/0x30 [ 224.915256][ T6155] [ 224.917561][ T6155] Second to last potentially related work creation: [ 224.924116][ T6155] kasan_save_stack+0x30/0x50 [ 224.928812][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 224.934002][ T6155] insert_work+0x36/0x230 [ 224.938338][ T6155] __queue_work+0x9bc/0x12b0 [ 224.942911][ T6155] queue_work_on+0x1a9/0x1e0 [ 224.947485][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 224.952703][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 224.957813][ T6155] usb_submit_urb+0x827/0x19b0 [ 224.962562][ T6155] usb_start_wait_urb+0x10e/0x580 [ 224.967571][ T6155] usb_control_msg+0x328/0x4b0 [ 224.972325][ T6155] hub_suspend+0x826/0x9e0 [ 224.976748][ T6155] usb_suspend_both+0x288/0x950 [ 224.981602][ T6155] usb_runtime_suspend+0x49/0x120 [ 224.986631][ T6155] __rpm_callback+0xc8/0x620 [ 224.991219][ T6155] rpm_callback+0x16a/0x1b0 [ 224.995741][ T6155] rpm_suspend+0x2f4/0x11a0 [ 225.000255][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 225.005367][ T6155] usb_new_device.cold+0xd61/0x115c [ 225.010567][ T6155] register_root_hub+0x4e6/0x639 [ 225.015498][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 225.020430][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 225.025098][ T6155] platform_probe+0x106/0x1d0 [ 225.029765][ T6155] really_probe+0x241/0xa60 [ 225.034261][ T6155] __driver_probe_device+0x20e/0x450 [ 225.039542][ T6155] driver_probe_device+0x4a/0x140 [ 225.044563][ T6155] __device_attach_driver+0x1df/0x320 [ 225.049951][ T6155] bus_for_each_drv+0x159/0x1e0 [ 225.054789][ T6155] __device_attach+0x1e4/0x4d0 [ 225.059548][ T6155] device_initial_probe+0xaf/0xd0 [ 225.064567][ T6155] bus_probe_device+0x64/0x160 [ 225.069324][ T6155] device_add+0x121d/0x1970 [ 225.073823][ T6155] platform_device_add+0x35a/0x800 [ 225.078955][ T6155] platform_device_register_full+0x5cf/0x830 [ 225.084929][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 225.089507][ T6155] do_one_initcall+0x11d/0x700 [ 225.094271][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 225.099464][ T6155] kernel_init+0x1f/0x1e0 [ 225.103792][ T6155] ret_from_fork+0x72b/0xd50 [ 225.108378][ T6155] ret_from_fork_asm+0x1a/0x30 [ 225.113140][ T6155] [ 225.115440][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 225.115440][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 225.129474][ T6155] The buggy address is located 1024 bytes inside of [ 225.129474][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 225.143431][ T6155] [ 225.145729][ T6155] The buggy address belongs to the physical page: [ 225.152113][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 225.160856][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 225.169359][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 225.176889][ T6155] page_type: f5(slab) [ 225.180856][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 225.189426][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 225.197998][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 225.206656][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 225.215313][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 225.223971][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 225.232619][ T6155] page dumped because: kasan: bad access detected [ 225.239004][ T6155] page_owner tracks the page as allocated [ 225.244693][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 225.264313][ T6155] post_alloc_hook+0xfd/0x120 [ 225.268991][ T6155] get_page_from_freelist+0xf48/0x3530 [ 225.274453][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 225.280348][ T6155] new_slab+0xa2/0x640 [ 225.284414][ T6155] refill_objects+0xe3/0x410 [ 225.289001][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 225.294541][ T6155] __kmalloc_noprof+0x66d/0x820 [ 225.299392][ T6155] scsi_host_alloc+0x30/0x1380 [ 225.304179][ T6155] virtscsi_probe+0x21f/0xf80 [ 225.308855][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 225.313707][ T6155] really_probe+0x241/0xa60 [ 225.318208][ T6155] __driver_probe_device+0x20e/0x450 [ 225.323491][ T6155] driver_probe_device+0x4a/0x140 [ 225.328511][ T6155] __driver_attach+0x21f/0x5b0 [ 225.333274][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 225.338140][ T6155] bus_add_driver+0x305/0x5b0 [ 225.342804][ T6155] page_owner free stack trace missing [ 225.348145][ T6155] [ 225.350445][ T6155] Memory state around the buggy address: [ 225.356049][ T6155] ffff888028c58300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.364090][ T6155] ffff888028c58380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.372149][ T6155] >ffff888028c58400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.380186][ T6155] ^ [ 225.384232][ T6155] ffff888028c58480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.392280][ T6155] ffff888028c58500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 225.400317][ T6155] ================================================================== [ 225.469558][ T6155] ================================================================== [ 225.477648][ T6155] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x23b/0x260 [ 225.485461][ T6155] Read of size 4 at addr ffff888028c58814 by task kworker/u8:17/6155 [ 225.493510][ T6155] [ 225.495820][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 225.495856][ T6155] Tainted: [B]=BAD_PAGE [ 225.495866][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 225.495883][ T6155] Workqueue: usbip_event event_handler [ 225.495912][ T6155] Call Trace: [ 225.495922][ T6155] [ 225.495931][ T6155] dump_stack_lvl+0x100/0x190 [ 225.495960][ T6155] print_report+0x13d/0x4b0 [ 225.495997][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496028][ T6155] ? __virt_addr_valid+0x239/0x430 [ 225.496059][ T6155] ? do_raw_spin_lock+0x23b/0x260 [ 225.496092][ T6155] kasan_report+0xdf/0x1c0 [ 225.496119][ T6155] ? do_raw_spin_lock+0x23b/0x260 [ 225.496160][ T6155] do_raw_spin_lock+0x23b/0x260 [ 225.496193][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496224][ T6155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 225.496258][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 225.496295][ T6155] ? _raw_spin_lock_irqsave+0x52/0x60 [ 225.496326][ T6155] vhci_cleanup_unlink_list+0xb1/0x456 [ 225.496367][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 225.496408][ T6155] event_handler+0x216/0x570 [ 225.496436][ T6155] process_one_work+0xa23/0x1940 [ 225.496468][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 225.496491][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496527][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496560][ T6155] worker_thread+0x5ef/0xe50 [ 225.496590][ T6155] ? kthread+0x13a/0x450 [ 225.496628][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 225.496652][ T6155] kthread+0x370/0x450 [ 225.496689][ T6155] ? __pfx_kthread+0x10/0x10 [ 225.496730][ T6155] ret_from_fork+0x72b/0xd50 [ 225.496764][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 225.496796][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496827][ T6155] ? rcu_is_watching+0x12/0xc0 [ 225.496862][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 225.496892][ T6155] ? __switch_to+0x800/0x10f0 [ 225.496932][ T6155] ? __switch_to_asm+0x39/0x70 [ 225.496967][ T6155] ? __pfx_kthread+0x10/0x10 [ 225.497007][ T6155] ret_from_fork_asm+0x1a/0x30 [ 225.497049][ T6155] [ 225.497058][ T6155] [ 225.703753][ T6155] Allocated by task 1: [ 225.707801][ T6155] kasan_save_stack+0x30/0x50 [ 225.712487][ T6155] kasan_save_track+0x14/0x30 [ 225.717169][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 225.721763][ T6155] __kmalloc_noprof+0x322/0x820 [ 225.726615][ T6155] __usb_create_hcd+0x5e/0xac0 [ 225.731387][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 225.736059][ T6155] platform_probe+0x106/0x1d0 [ 225.740726][ T6155] really_probe+0x241/0xa60 [ 225.745228][ T6155] __driver_probe_device+0x20e/0x450 [ 225.750511][ T6155] driver_probe_device+0x4a/0x140 [ 225.755531][ T6155] __device_attach_driver+0x1df/0x320 [ 225.760896][ T6155] bus_for_each_drv+0x159/0x1e0 [ 225.765730][ T6155] __device_attach+0x1e4/0x4d0 [ 225.770485][ T6155] device_initial_probe+0xaf/0xd0 [ 225.775503][ T6155] bus_probe_device+0x64/0x160 [ 225.780259][ T6155] device_add+0x121d/0x1970 [ 225.784762][ T6155] platform_device_add+0x35a/0x800 [ 225.789860][ T6155] platform_device_register_full+0x5cf/0x830 [ 225.795855][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 225.800436][ T6155] do_one_initcall+0x11d/0x700 [ 225.805193][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 225.810391][ T6155] kernel_init+0x1f/0x1e0 [ 225.814722][ T6155] ret_from_fork+0x72b/0xd50 [ 225.819309][ T6155] ret_from_fork_asm+0x1a/0x30 [ 225.824072][ T6155] [ 225.826376][ T6155] Freed by task 7312: [ 225.830333][ T6155] kasan_save_stack+0x30/0x50 [ 225.835015][ T6155] kasan_save_track+0x14/0x30 [ 225.839695][ T6155] kasan_save_free_info+0x3b/0x70 [ 225.844714][ T6155] __kasan_slab_free+0x5f/0x80 [ 225.849467][ T6155] kfree+0x22b/0x6c0 [ 225.853360][ T6155] usb_put_hcd+0x149/0x1f0 [ 225.857776][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 225.862448][ T6155] platform_remove+0x5f/0x80 [ 225.867024][ T6155] device_remove+0xcb/0x180 [ 225.871523][ T6155] device_release_driver_internal+0x44e/0x620 [ 225.877590][ T6155] unbind_store+0xf8/0x110 [ 225.881996][ T6155] drv_attr_store+0x74/0xb0 [ 225.886482][ T6155] sysfs_kf_write+0xf2/0x150 [ 225.891061][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 225.896330][ T6155] vfs_write+0x6ac/0x1050 [ 225.900650][ T6155] ksys_write+0x12a/0x250 [ 225.904970][ T6155] do_syscall_64+0x115/0x870 [ 225.909555][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.915435][ T6155] [ 225.917755][ T6155] Last potentially related work creation: [ 225.923443][ T6155] kasan_save_stack+0x30/0x50 [ 225.928122][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 225.933317][ T6155] insert_work+0x36/0x230 [ 225.937663][ T6155] __queue_work+0x9bc/0x12b0 [ 225.942236][ T6155] queue_work_on+0x1a9/0x1e0 [ 225.946808][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 225.952003][ T6155] unlink1+0x418/0x510 [ 225.956068][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 225.961093][ T6155] usb_kill_urb+0x121/0x320 [ 225.965585][ T6155] hub_quiesce+0x1e9/0x320 [ 225.969989][ T6155] hub_suspend+0x4ab/0x9e0 [ 225.974399][ T6155] usb_suspend_both+0x288/0x950 [ 225.979269][ T6155] usb_runtime_suspend+0x49/0x120 [ 225.984294][ T6155] __rpm_callback+0xc8/0x620 [ 225.988908][ T6155] rpm_callback+0x16a/0x1b0 [ 225.993409][ T6155] rpm_suspend+0x2f4/0x11a0 [ 225.997913][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 226.003029][ T6155] usb_new_device.cold+0xd61/0x115c [ 226.008218][ T6155] register_root_hub+0x4e6/0x639 [ 226.013153][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 226.018080][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 226.022746][ T6155] platform_probe+0x106/0x1d0 [ 226.027410][ T6155] really_probe+0x241/0xa60 [ 226.031911][ T6155] __driver_probe_device+0x20e/0x450 [ 226.037193][ T6155] driver_probe_device+0x4a/0x140 [ 226.042211][ T6155] __device_attach_driver+0x1df/0x320 [ 226.047575][ T6155] bus_for_each_drv+0x159/0x1e0 [ 226.052412][ T6155] __device_attach+0x1e4/0x4d0 [ 226.057172][ T6155] device_initial_probe+0xaf/0xd0 [ 226.062191][ T6155] bus_probe_device+0x64/0x160 [ 226.066942][ T6155] device_add+0x121d/0x1970 [ 226.071445][ T6155] platform_device_add+0x35a/0x800 [ 226.076540][ T6155] platform_device_register_full+0x5cf/0x830 [ 226.082511][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 226.087083][ T6155] do_one_initcall+0x11d/0x700 [ 226.091841][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 226.097029][ T6155] kernel_init+0x1f/0x1e0 [ 226.101354][ T6155] ret_from_fork+0x72b/0xd50 [ 226.105938][ T6155] ret_from_fork_asm+0x1a/0x30 [ 226.110693][ T6155] [ 226.112992][ T6155] Second to last potentially related work creation: [ 226.119546][ T6155] kasan_save_stack+0x30/0x50 [ 226.124223][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 226.129414][ T6155] insert_work+0x36/0x230 [ 226.133744][ T6155] __queue_work+0x9bc/0x12b0 [ 226.138320][ T6155] queue_work_on+0x1a9/0x1e0 [ 226.142891][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 226.148088][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 226.153199][ T6155] usb_submit_urb+0x827/0x19b0 [ 226.157949][ T6155] usb_start_wait_urb+0x10e/0x580 [ 226.162959][ T6155] usb_control_msg+0x328/0x4b0 [ 226.167707][ T6155] hub_suspend+0x826/0x9e0 [ 226.172111][ T6155] usb_suspend_both+0x288/0x950 [ 226.176958][ T6155] usb_runtime_suspend+0x49/0x120 [ 226.181977][ T6155] __rpm_callback+0xc8/0x620 [ 226.186561][ T6155] rpm_callback+0x16a/0x1b0 [ 226.191056][ T6155] rpm_suspend+0x2f4/0x11a0 [ 226.195550][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 226.200655][ T6155] usb_new_device.cold+0xd61/0x115c [ 226.205843][ T6155] register_root_hub+0x4e6/0x639 [ 226.210773][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 226.215708][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 226.220373][ T6155] platform_probe+0x106/0x1d0 [ 226.225035][ T6155] really_probe+0x241/0xa60 [ 226.229536][ T6155] __driver_probe_device+0x20e/0x450 [ 226.234817][ T6155] driver_probe_device+0x4a/0x140 [ 226.239839][ T6155] __device_attach_driver+0x1df/0x320 [ 226.245206][ T6155] bus_for_each_drv+0x159/0x1e0 [ 226.250043][ T6155] __device_attach+0x1e4/0x4d0 [ 226.254798][ T6155] device_initial_probe+0xaf/0xd0 [ 226.259821][ T6155] bus_probe_device+0x64/0x160 [ 226.264576][ T6155] device_add+0x121d/0x1970 [ 226.269109][ T6155] platform_device_add+0x35a/0x800 [ 226.274219][ T6155] platform_device_register_full+0x5cf/0x830 [ 226.280197][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 226.284776][ T6155] do_one_initcall+0x11d/0x700 [ 226.289537][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 226.294732][ T6155] kernel_init+0x1f/0x1e0 [ 226.299065][ T6155] ret_from_fork+0x72b/0xd50 [ 226.303654][ T6155] ret_from_fork_asm+0x1a/0x30 [ 226.308419][ T6155] [ 226.310721][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 226.310721][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 226.324757][ T6155] The buggy address is located 2068 bytes inside of [ 226.324757][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 226.338712][ T6155] [ 226.341013][ T6155] The buggy address belongs to the physical page: [ 226.347403][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 226.356153][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 226.364632][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 226.372179][ T6155] page_type: f5(slab) [ 226.376145][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 226.384714][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 226.393286][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 226.401940][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 226.410596][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 226.419249][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 226.427893][ T6155] page dumped because: kasan: bad access detected [ 226.434285][ T6155] page_owner tracks the page as allocated [ 226.439975][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 226.459599][ T6155] post_alloc_hook+0xfd/0x120 [ 226.464283][ T6155] get_page_from_freelist+0xf48/0x3530 [ 226.469744][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 226.475641][ T6155] new_slab+0xa2/0x640 [ 226.479704][ T6155] refill_objects+0xe3/0x410 [ 226.484295][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 226.489838][ T6155] __kmalloc_noprof+0x66d/0x820 [ 226.494693][ T6155] scsi_host_alloc+0x30/0x1380 [ 226.499454][ T6155] virtscsi_probe+0x21f/0xf80 [ 226.504169][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 226.509025][ T6155] really_probe+0x241/0xa60 [ 226.513527][ T6155] __driver_probe_device+0x20e/0x450 [ 226.518808][ T6155] driver_probe_device+0x4a/0x140 [ 226.523828][ T6155] __driver_attach+0x21f/0x5b0 [ 226.528591][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 226.533428][ T6155] bus_add_driver+0x305/0x5b0 [ 226.538094][ T6155] page_owner free stack trace missing [ 226.543438][ T6155] [ 226.545736][ T6155] Memory state around the buggy address: [ 226.551339][ T6155] ffff888028c58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.559380][ T6155] ffff888028c58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.567422][ T6155] >ffff888028c58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.575464][ T6155] ^ [ 226.580037][ T6155] ffff888028c58880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.588079][ T6155] ffff888028c58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 226.596114][ T6155] ================================================================== [ 226.604178][ T6155] ================================================================== [ 226.612237][ T6155] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x248/0x260 [ 226.620038][ T6155] Read of size 8 at addr ffff888028c58820 by task kworker/u8:17/6155 [ 226.628080][ T6155] [ 226.630386][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 226.630423][ T6155] Tainted: [B]=BAD_PAGE [ 226.630432][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 226.630451][ T6155] Workqueue: usbip_event event_handler [ 226.630480][ T6155] Call Trace: [ 226.630491][ T6155] [ 226.630501][ T6155] dump_stack_lvl+0x100/0x190 [ 226.630529][ T6155] print_report+0x13d/0x4b0 [ 226.630567][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.630598][ T6155] ? __virt_addr_valid+0x239/0x430 [ 226.630629][ T6155] ? do_raw_spin_lock+0x248/0x260 [ 226.630661][ T6155] kasan_report+0xdf/0x1c0 [ 226.630689][ T6155] ? do_raw_spin_lock+0x248/0x260 [ 226.630726][ T6155] do_raw_spin_lock+0x248/0x260 [ 226.630759][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.630790][ T6155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 226.630823][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 226.630861][ T6155] ? _raw_spin_lock_irqsave+0x52/0x60 [ 226.630891][ T6155] vhci_cleanup_unlink_list+0xb1/0x456 [ 226.630932][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 226.630973][ T6155] event_handler+0x216/0x570 [ 226.631001][ T6155] process_one_work+0xa23/0x1940 [ 226.631033][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 226.631056][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.631092][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.631125][ T6155] worker_thread+0x5ef/0xe50 [ 226.631159][ T6155] ? kthread+0x13a/0x450 [ 226.631197][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 226.631220][ T6155] kthread+0x370/0x450 [ 226.631258][ T6155] ? __pfx_kthread+0x10/0x10 [ 226.631298][ T6155] ret_from_fork+0x72b/0xd50 [ 226.631332][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 226.631364][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.631395][ T6155] ? rcu_is_watching+0x12/0xc0 [ 226.631431][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 226.631461][ T6155] ? __switch_to+0x800/0x10f0 [ 226.631500][ T6155] ? __switch_to_asm+0x39/0x70 [ 226.631535][ T6155] ? __pfx_kthread+0x10/0x10 [ 226.631575][ T6155] ret_from_fork_asm+0x1a/0x30 [ 226.631618][ T6155] [ 226.631626][ T6155] [ 226.838344][ T6155] Allocated by task 1: [ 226.842393][ T6155] kasan_save_stack+0x30/0x50 [ 226.847102][ T6155] kasan_save_track+0x14/0x30 [ 226.851789][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 226.856384][ T6155] __kmalloc_noprof+0x322/0x820 [ 226.861239][ T6155] __usb_create_hcd+0x5e/0xac0 [ 226.866004][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 226.870674][ T6155] platform_probe+0x106/0x1d0 [ 226.875341][ T6155] really_probe+0x241/0xa60 [ 226.879841][ T6155] __driver_probe_device+0x20e/0x450 [ 226.885119][ T6155] driver_probe_device+0x4a/0x140 [ 226.890150][ T6155] __device_attach_driver+0x1df/0x320 [ 226.895517][ T6155] bus_for_each_drv+0x159/0x1e0 [ 226.900355][ T6155] __device_attach+0x1e4/0x4d0 [ 226.905115][ T6155] device_initial_probe+0xaf/0xd0 [ 226.910143][ T6155] bus_probe_device+0x64/0x160 [ 226.914897][ T6155] device_add+0x121d/0x1970 [ 226.919404][ T6155] platform_device_add+0x35a/0x800 [ 226.924502][ T6155] platform_device_register_full+0x5cf/0x830 [ 226.930481][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 226.935062][ T6155] do_one_initcall+0x11d/0x700 [ 226.939824][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 226.945016][ T6155] kernel_init+0x1f/0x1e0 [ 226.949346][ T6155] ret_from_fork+0x72b/0xd50 [ 226.953948][ T6155] ret_from_fork_asm+0x1a/0x30 [ 226.958712][ T6155] [ 226.961012][ T6155] Freed by task 7312: [ 226.964965][ T6155] kasan_save_stack+0x30/0x50 [ 226.969647][ T6155] kasan_save_track+0x14/0x30 [ 226.974327][ T6155] kasan_save_free_info+0x3b/0x70 [ 226.979348][ T6155] __kasan_slab_free+0x5f/0x80 [ 226.984103][ T6155] kfree+0x22b/0x6c0 [ 226.988005][ T6155] usb_put_hcd+0x149/0x1f0 [ 226.992421][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 226.997113][ T6155] platform_remove+0x5f/0x80 [ 227.001693][ T6155] device_remove+0xcb/0x180 [ 227.006190][ T6155] device_release_driver_internal+0x44e/0x620 [ 227.012254][ T6155] unbind_store+0xf8/0x110 [ 227.016685][ T6155] drv_attr_store+0x74/0xb0 [ 227.021190][ T6155] sysfs_kf_write+0xf2/0x150 [ 227.025770][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 227.031038][ T6155] vfs_write+0x6ac/0x1050 [ 227.035362][ T6155] ksys_write+0x12a/0x250 [ 227.039696][ T6155] do_syscall_64+0x115/0x870 [ 227.044308][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.050195][ T6155] [ 227.052497][ T6155] Last potentially related work creation: [ 227.058185][ T6155] kasan_save_stack+0x30/0x50 [ 227.062886][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 227.068078][ T6155] insert_work+0x36/0x230 [ 227.072411][ T6155] __queue_work+0x9bc/0x12b0 [ 227.076983][ T6155] queue_work_on+0x1a9/0x1e0 [ 227.081578][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 227.086774][ T6155] unlink1+0x418/0x510 [ 227.090838][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 227.095863][ T6155] usb_kill_urb+0x121/0x320 [ 227.100348][ T6155] hub_quiesce+0x1e9/0x320 [ 227.104757][ T6155] hub_suspend+0x4ab/0x9e0 [ 227.109171][ T6155] usb_suspend_both+0x288/0x950 [ 227.114022][ T6155] usb_runtime_suspend+0x49/0x120 [ 227.119068][ T6155] __rpm_callback+0xc8/0x620 [ 227.123655][ T6155] rpm_callback+0x16a/0x1b0 [ 227.128166][ T6155] rpm_suspend+0x2f4/0x11a0 [ 227.132663][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 227.137773][ T6155] usb_new_device.cold+0xd61/0x115c [ 227.142964][ T6155] register_root_hub+0x4e6/0x639 [ 227.147908][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 227.152838][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 227.157503][ T6155] platform_probe+0x106/0x1d0 [ 227.162166][ T6155] really_probe+0x241/0xa60 [ 227.166659][ T6155] __driver_probe_device+0x20e/0x450 [ 227.171935][ T6155] driver_probe_device+0x4a/0x140 [ 227.176951][ T6155] __device_attach_driver+0x1df/0x320 [ 227.182321][ T6155] bus_for_each_drv+0x159/0x1e0 [ 227.187179][ T6155] __device_attach+0x1e4/0x4d0 [ 227.191944][ T6155] device_initial_probe+0xaf/0xd0 [ 227.196971][ T6155] bus_probe_device+0x64/0x160 [ 227.201740][ T6155] device_add+0x121d/0x1970 [ 227.206251][ T6155] platform_device_add+0x35a/0x800 [ 227.211377][ T6155] platform_device_register_full+0x5cf/0x830 [ 227.217359][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 227.221945][ T6155] do_one_initcall+0x11d/0x700 [ 227.226710][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 227.231904][ T6155] kernel_init+0x1f/0x1e0 [ 227.236233][ T6155] ret_from_fork+0x72b/0xd50 [ 227.240818][ T6155] ret_from_fork_asm+0x1a/0x30 [ 227.245586][ T6155] [ 227.247891][ T6155] Second to last potentially related work creation: [ 227.254452][ T6155] kasan_save_stack+0x30/0x50 [ 227.259150][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 227.264372][ T6155] insert_work+0x36/0x230 [ 227.268709][ T6155] __queue_work+0x9bc/0x12b0 [ 227.273287][ T6155] queue_work_on+0x1a9/0x1e0 [ 227.277895][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 227.283100][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 227.288221][ T6155] usb_submit_urb+0x827/0x19b0 [ 227.293000][ T6155] usb_start_wait_urb+0x10e/0x580 [ 227.298016][ T6155] usb_control_msg+0x328/0x4b0 [ 227.302770][ T6155] hub_suspend+0x826/0x9e0 [ 227.307182][ T6155] usb_suspend_both+0x288/0x950 [ 227.312039][ T6155] usb_runtime_suspend+0x49/0x120 [ 227.317072][ T6155] __rpm_callback+0xc8/0x620 [ 227.321700][ T6155] rpm_callback+0x16a/0x1b0 [ 227.326204][ T6155] rpm_suspend+0x2f4/0x11a0 [ 227.330710][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 227.335823][ T6155] usb_new_device.cold+0xd61/0x115c [ 227.341016][ T6155] register_root_hub+0x4e6/0x639 [ 227.345951][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 227.350884][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 227.355556][ T6155] platform_probe+0x106/0x1d0 [ 227.360222][ T6155] really_probe+0x241/0xa60 [ 227.364722][ T6155] __driver_probe_device+0x20e/0x450 [ 227.370004][ T6155] driver_probe_device+0x4a/0x140 [ 227.375029][ T6155] __device_attach_driver+0x1df/0x320 [ 227.380404][ T6155] bus_for_each_drv+0x159/0x1e0 [ 227.385250][ T6155] __device_attach+0x1e4/0x4d0 [ 227.390016][ T6155] device_initial_probe+0xaf/0xd0 [ 227.395042][ T6155] bus_probe_device+0x64/0x160 [ 227.399799][ T6155] device_add+0x121d/0x1970 [ 227.404305][ T6155] platform_device_add+0x35a/0x800 [ 227.409407][ T6155] platform_device_register_full+0x5cf/0x830 [ 227.415387][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 227.419969][ T6155] do_one_initcall+0x11d/0x700 [ 227.424732][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 227.429928][ T6155] kernel_init+0x1f/0x1e0 [ 227.434260][ T6155] ret_from_fork+0x72b/0xd50 [ 227.438847][ T6155] ret_from_fork_asm+0x1a/0x30 [ 227.443613][ T6155] [ 227.445917][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 227.445917][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 227.459952][ T6155] The buggy address is located 2080 bytes inside of [ 227.459952][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 227.473910][ T6155] [ 227.476218][ T6155] The buggy address belongs to the physical page: [ 227.482609][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 227.491361][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.499836][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.507361][ T6155] page_type: f5(slab) [ 227.511326][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 227.519903][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 227.528480][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 227.537144][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 227.545803][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 227.554478][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 227.563147][ T6155] page dumped because: kasan: bad access detected [ 227.569535][ T6155] page_owner tracks the page as allocated [ 227.575222][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 227.594844][ T6155] post_alloc_hook+0xfd/0x120 [ 227.599526][ T6155] get_page_from_freelist+0xf48/0x3530 [ 227.604989][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 227.610883][ T6155] new_slab+0xa2/0x640 [ 227.614948][ T6155] refill_objects+0xe3/0x410 [ 227.619536][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 227.625074][ T6155] __kmalloc_noprof+0x66d/0x820 [ 227.629925][ T6155] scsi_host_alloc+0x30/0x1380 [ 227.634683][ T6155] virtscsi_probe+0x21f/0xf80 [ 227.639378][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 227.644229][ T6155] really_probe+0x241/0xa60 [ 227.648729][ T6155] __driver_probe_device+0x20e/0x450 [ 227.654005][ T6155] driver_probe_device+0x4a/0x140 [ 227.659024][ T6155] __driver_attach+0x21f/0x5b0 [ 227.663789][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 227.668630][ T6155] bus_add_driver+0x305/0x5b0 [ 227.673305][ T6155] page_owner free stack trace missing [ 227.678653][ T6155] [ 227.680953][ T6155] Memory state around the buggy address: [ 227.686562][ T6155] ffff888028c58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.694605][ T6155] ffff888028c58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.702653][ T6155] >ffff888028c58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.710695][ T6155] ^ [ 227.715784][ T6155] ffff888028c58880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.723828][ T6155] ffff888028c58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 227.731869][ T6155] ================================================================== [ 227.739903][ T6155] ================================================================== [ 227.747935][ T6155] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x231/0x260 [ 227.755737][ T6155] Read of size 4 at addr ffff888028c58818 by task kworker/u8:17/6155 [ 227.763786][ T6155] [ 227.766098][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 227.766134][ T6155] Tainted: [B]=BAD_PAGE [ 227.766148][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 227.766167][ T6155] Workqueue: usbip_event event_handler [ 227.766197][ T6155] Call Trace: [ 227.766208][ T6155] [ 227.766218][ T6155] dump_stack_lvl+0x100/0x190 [ 227.766246][ T6155] print_report+0x13d/0x4b0 [ 227.766283][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.766314][ T6155] ? __virt_addr_valid+0x239/0x430 [ 227.766345][ T6155] ? do_raw_spin_lock+0x231/0x260 [ 227.766378][ T6155] kasan_report+0xdf/0x1c0 [ 227.766406][ T6155] ? do_raw_spin_lock+0x231/0x260 [ 227.766443][ T6155] do_raw_spin_lock+0x231/0x260 [ 227.766476][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.766507][ T6155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 227.766540][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 227.766577][ T6155] ? _raw_spin_lock_irqsave+0x52/0x60 [ 227.766608][ T6155] vhci_cleanup_unlink_list+0xb1/0x456 [ 227.766650][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 227.766691][ T6155] event_handler+0x216/0x570 [ 227.766720][ T6155] process_one_work+0xa23/0x1940 [ 227.766751][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 227.766775][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.766810][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.766844][ T6155] worker_thread+0x5ef/0xe50 [ 227.766873][ T6155] ? kthread+0x13a/0x450 [ 227.766911][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 227.766935][ T6155] kthread+0x370/0x450 [ 227.766973][ T6155] ? __pfx_kthread+0x10/0x10 [ 227.767013][ T6155] ret_from_fork+0x72b/0xd50 [ 227.767047][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 227.767080][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.767110][ T6155] ? rcu_is_watching+0x12/0xc0 [ 227.767150][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 227.767180][ T6155] ? __switch_to+0x800/0x10f0 [ 227.767220][ T6155] ? __switch_to_asm+0x39/0x70 [ 227.767254][ T6155] ? __pfx_kthread+0x10/0x10 [ 227.767294][ T6155] ret_from_fork_asm+0x1a/0x30 [ 227.767337][ T6155] [ 227.767346][ T6155] [ 227.974551][ T6155] Allocated by task 1: [ 227.978598][ T6155] kasan_save_stack+0x30/0x50 [ 227.983280][ T6155] kasan_save_track+0x14/0x30 [ 227.987971][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 227.992557][ T6155] __kmalloc_noprof+0x322/0x820 [ 227.997413][ T6155] __usb_create_hcd+0x5e/0xac0 [ 228.002179][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 228.006873][ T6155] platform_probe+0x106/0x1d0 [ 228.011538][ T6155] really_probe+0x241/0xa60 [ 228.016038][ T6155] __driver_probe_device+0x20e/0x450 [ 228.021322][ T6155] driver_probe_device+0x4a/0x140 [ 228.026356][ T6155] __device_attach_driver+0x1df/0x320 [ 228.031726][ T6155] bus_for_each_drv+0x159/0x1e0 [ 228.036567][ T6155] __device_attach+0x1e4/0x4d0 [ 228.041332][ T6155] device_initial_probe+0xaf/0xd0 [ 228.046369][ T6155] bus_probe_device+0x64/0x160 [ 228.051132][ T6155] device_add+0x121d/0x1970 [ 228.055635][ T6155] platform_device_add+0x35a/0x800 [ 228.060735][ T6155] platform_device_register_full+0x5cf/0x830 [ 228.066712][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 228.071300][ T6155] do_one_initcall+0x11d/0x700 [ 228.076073][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 228.081273][ T6155] kernel_init+0x1f/0x1e0 [ 228.085605][ T6155] ret_from_fork+0x72b/0xd50 [ 228.090212][ T6155] ret_from_fork_asm+0x1a/0x30 [ 228.094976][ T6155] [ 228.097279][ T6155] Freed by task 7312: [ 228.101235][ T6155] kasan_save_stack+0x30/0x50 [ 228.105916][ T6155] kasan_save_track+0x14/0x30 [ 228.110597][ T6155] kasan_save_free_info+0x3b/0x70 [ 228.115615][ T6155] __kasan_slab_free+0x5f/0x80 [ 228.120366][ T6155] kfree+0x22b/0x6c0 [ 228.124253][ T6155] usb_put_hcd+0x149/0x1f0 [ 228.128671][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 228.133341][ T6155] platform_remove+0x5f/0x80 [ 228.137919][ T6155] device_remove+0xcb/0x180 [ 228.142419][ T6155] device_release_driver_internal+0x44e/0x620 [ 228.148492][ T6155] unbind_store+0xf8/0x110 [ 228.153071][ T6155] drv_attr_store+0x74/0xb0 [ 228.157560][ T6155] sysfs_kf_write+0xf2/0x150 [ 228.162146][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 228.167418][ T6155] vfs_write+0x6ac/0x1050 [ 228.171738][ T6155] ksys_write+0x12a/0x250 [ 228.176059][ T6155] do_syscall_64+0x115/0x870 [ 228.180639][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.186518][ T6155] [ 228.188822][ T6155] Last potentially related work creation: [ 228.194515][ T6155] kasan_save_stack+0x30/0x50 [ 228.199201][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 228.204423][ T6155] insert_work+0x36/0x230 [ 228.208761][ T6155] __queue_work+0x9bc/0x12b0 [ 228.213364][ T6155] queue_work_on+0x1a9/0x1e0 [ 228.217970][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 228.223177][ T6155] unlink1+0x418/0x510 [ 228.227255][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 228.232298][ T6155] usb_kill_urb+0x121/0x320 [ 228.236799][ T6155] hub_quiesce+0x1e9/0x320 [ 228.241211][ T6155] hub_suspend+0x4ab/0x9e0 [ 228.245620][ T6155] usb_suspend_both+0x288/0x950 [ 228.250470][ T6155] usb_runtime_suspend+0x49/0x120 [ 228.255494][ T6155] __rpm_callback+0xc8/0x620 [ 228.260083][ T6155] rpm_callback+0x16a/0x1b0 [ 228.264578][ T6155] rpm_suspend+0x2f4/0x11a0 [ 228.269082][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 228.274199][ T6155] usb_new_device.cold+0xd61/0x115c [ 228.279395][ T6155] register_root_hub+0x4e6/0x639 [ 228.284332][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 228.289265][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 228.293946][ T6155] platform_probe+0x106/0x1d0 [ 228.298617][ T6155] really_probe+0x241/0xa60 [ 228.303125][ T6155] __driver_probe_device+0x20e/0x450 [ 228.308411][ T6155] driver_probe_device+0x4a/0x140 [ 228.313433][ T6155] __device_attach_driver+0x1df/0x320 [ 228.318799][ T6155] bus_for_each_drv+0x159/0x1e0 [ 228.323639][ T6155] __device_attach+0x1e4/0x4d0 [ 228.328412][ T6155] device_initial_probe+0xaf/0xd0 [ 228.333430][ T6155] bus_probe_device+0x64/0x160 [ 228.338181][ T6155] device_add+0x121d/0x1970 [ 228.342767][ T6155] platform_device_add+0x35a/0x800 [ 228.347863][ T6155] platform_device_register_full+0x5cf/0x830 [ 228.353835][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 228.358414][ T6155] do_one_initcall+0x11d/0x700 [ 228.363177][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 228.368369][ T6155] kernel_init+0x1f/0x1e0 [ 228.372697][ T6155] ret_from_fork+0x72b/0xd50 [ 228.377278][ T6155] ret_from_fork_asm+0x1a/0x30 [ 228.382036][ T6155] [ 228.384339][ T6155] Second to last potentially related work creation: [ 228.390896][ T6155] kasan_save_stack+0x30/0x50 [ 228.395573][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 228.400762][ T6155] insert_work+0x36/0x230 [ 228.405097][ T6155] __queue_work+0x9bc/0x12b0 [ 228.409674][ T6155] queue_work_on+0x1a9/0x1e0 [ 228.414248][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 228.419448][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 228.424560][ T6155] usb_submit_urb+0x827/0x19b0 [ 228.429314][ T6155] usb_start_wait_urb+0x10e/0x580 [ 228.434327][ T6155] usb_control_msg+0x328/0x4b0 [ 228.439079][ T6155] hub_suspend+0x826/0x9e0 [ 228.443489][ T6155] usb_suspend_both+0x288/0x950 [ 228.448334][ T6155] usb_runtime_suspend+0x49/0x120 [ 228.453358][ T6155] __rpm_callback+0xc8/0x620 [ 228.457941][ T6155] rpm_callback+0x16a/0x1b0 [ 228.462436][ T6155] rpm_suspend+0x2f4/0x11a0 [ 228.466936][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 228.472051][ T6155] usb_new_device.cold+0xd61/0x115c [ 228.477241][ T6155] register_root_hub+0x4e6/0x639 [ 228.482172][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 228.487104][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 228.491783][ T6155] platform_probe+0x106/0x1d0 [ 228.496456][ T6155] really_probe+0x241/0xa60 [ 228.500959][ T6155] __driver_probe_device+0x20e/0x450 [ 228.506244][ T6155] driver_probe_device+0x4a/0x140 [ 228.511290][ T6155] __device_attach_driver+0x1df/0x320 [ 228.516663][ T6155] bus_for_each_drv+0x159/0x1e0 [ 228.521528][ T6155] __device_attach+0x1e4/0x4d0 [ 228.526289][ T6155] device_initial_probe+0xaf/0xd0 [ 228.531314][ T6155] bus_probe_device+0x64/0x160 [ 228.536091][ T6155] device_add+0x121d/0x1970 [ 228.540603][ T6155] platform_device_add+0x35a/0x800 [ 228.545702][ T6155] platform_device_register_full+0x5cf/0x830 [ 228.551680][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 228.556284][ T6155] do_one_initcall+0x11d/0x700 [ 228.561051][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 228.566280][ T6155] kernel_init+0x1f/0x1e0 [ 228.570615][ T6155] ret_from_fork+0x72b/0xd50 [ 228.575204][ T6155] ret_from_fork_asm+0x1a/0x30 [ 228.579969][ T6155] [ 228.582278][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 228.582278][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 228.596319][ T6155] The buggy address is located 2072 bytes inside of [ 228.596319][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 228.610281][ T6155] [ 228.612590][ T6155] The buggy address belongs to the physical page: [ 228.618980][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 228.627727][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 228.636213][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 228.643740][ T6155] page_type: f5(slab) [ 228.647713][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 228.656288][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 228.664872][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 228.673533][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 228.682194][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 228.690851][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 228.699500][ T6155] page dumped because: kasan: bad access detected [ 228.705892][ T6155] page_owner tracks the page as allocated [ 228.711585][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 228.731203][ T6155] post_alloc_hook+0xfd/0x120 [ 228.735882][ T6155] get_page_from_freelist+0xf48/0x3530 [ 228.741338][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 228.747235][ T6155] new_slab+0xa2/0x640 [ 228.751306][ T6155] refill_objects+0xe3/0x410 [ 228.755894][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 228.761440][ T6155] __kmalloc_noprof+0x66d/0x820 [ 228.766295][ T6155] scsi_host_alloc+0x30/0x1380 [ 228.771053][ T6155] virtscsi_probe+0x21f/0xf80 [ 228.775729][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 228.780573][ T6155] really_probe+0x241/0xa60 [ 228.785085][ T6155] __driver_probe_device+0x20e/0x450 [ 228.790394][ T6155] driver_probe_device+0x4a/0x140 [ 228.795417][ T6155] __driver_attach+0x21f/0x5b0 [ 228.800180][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 228.805373][ T6155] bus_add_driver+0x305/0x5b0 [ 228.810044][ T6155] page_owner free stack trace missing [ 228.815389][ T6155] [ 228.817693][ T6155] Memory state around the buggy address: [ 228.823304][ T6155] ffff888028c58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.831351][ T6155] ffff888028c58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.839398][ T6155] >ffff888028c58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.847459][ T6155] ^ [ 228.852289][ T6155] ffff888028c58880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.860336][ T6155] ffff888028c58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.868380][ T6155] ================================================================== [ 228.876420][ T6155] ================================================================== [ 228.884460][ T6155] BUG: KASAN: slab-use-after-free in do_raw_spin_lock+0x119/0x260 [ 228.892270][ T6155] Write of size 4 at addr ffff888028c58810 by task kworker/u8:17/6155 [ 228.900404][ T6155] [ 228.902714][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 228.902753][ T6155] Tainted: [B]=BAD_PAGE [ 228.902763][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 228.902782][ T6155] Workqueue: usbip_event event_handler [ 228.902813][ T6155] Call Trace: [ 228.902824][ T6155] [ 228.902835][ T6155] dump_stack_lvl+0x100/0x190 [ 228.902866][ T6155] print_report+0x13d/0x4b0 [ 228.902906][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.902939][ T6155] ? __virt_addr_valid+0x239/0x430 [ 228.902973][ T6155] ? do_raw_spin_lock+0x119/0x260 [ 228.903009][ T6155] kasan_report+0xdf/0x1c0 [ 228.903038][ T6155] ? do_raw_spin_lock+0x119/0x260 [ 228.903079][ T6155] kasan_check_range+0x10f/0x1e0 [ 228.903113][ T6155] do_raw_spin_lock+0x119/0x260 [ 228.903152][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.903186][ T6155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 228.903222][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 228.903262][ T6155] ? _raw_spin_lock_irqsave+0x52/0x60 [ 228.903295][ T6155] vhci_cleanup_unlink_list+0xb1/0x456 [ 228.903340][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 228.903384][ T6155] event_handler+0x216/0x570 [ 228.903415][ T6155] process_one_work+0xa23/0x1940 [ 228.903449][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 228.903475][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.903514][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.903549][ T6155] worker_thread+0x5ef/0xe50 [ 228.903582][ T6155] ? kthread+0x13a/0x450 [ 228.903623][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 228.903649][ T6155] kthread+0x370/0x450 [ 228.903690][ T6155] ? __pfx_kthread+0x10/0x10 [ 228.903733][ T6155] ret_from_fork+0x72b/0xd50 [ 228.903770][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 228.903805][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.903838][ T6155] ? rcu_is_watching+0x12/0xc0 [ 228.903877][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 228.903910][ T6155] ? __switch_to+0x800/0x10f0 [ 228.903952][ T6155] ? __switch_to_asm+0x39/0x70 [ 228.903990][ T6155] ? __pfx_kthread+0x10/0x10 [ 228.904033][ T6155] ret_from_fork_asm+0x1a/0x30 [ 228.904080][ T6155] [ 228.904089][ T6155] [ 229.115744][ T6155] Allocated by task 1: [ 229.119790][ T6155] kasan_save_stack+0x30/0x50 [ 229.124475][ T6155] kasan_save_track+0x14/0x30 [ 229.129155][ T6155] __kasan_kmalloc+0xaa/0xb0 [ 229.133749][ T6155] __kmalloc_noprof+0x322/0x820 [ 229.138606][ T6155] __usb_create_hcd+0x5e/0xac0 [ 229.143371][ T6155] vhci_hcd_probe+0x1a5/0x4e0 [ 229.148039][ T6155] platform_probe+0x106/0x1d0 [ 229.152707][ T6155] really_probe+0x241/0xa60 [ 229.157218][ T6155] __driver_probe_device+0x20e/0x450 [ 229.162503][ T6155] driver_probe_device+0x4a/0x140 [ 229.167522][ T6155] __device_attach_driver+0x1df/0x320 [ 229.172909][ T6155] bus_for_each_drv+0x159/0x1e0 [ 229.177746][ T6155] __device_attach+0x1e4/0x4d0 [ 229.182510][ T6155] device_initial_probe+0xaf/0xd0 [ 229.187535][ T6155] bus_probe_device+0x64/0x160 [ 229.192291][ T6155] device_add+0x121d/0x1970 [ 229.196809][ T6155] platform_device_add+0x35a/0x800 [ 229.201929][ T6155] platform_device_register_full+0x5cf/0x830 [ 229.207906][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 229.212489][ T6155] do_one_initcall+0x11d/0x700 [ 229.217247][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 229.222437][ T6155] kernel_init+0x1f/0x1e0 [ 229.226768][ T6155] ret_from_fork+0x72b/0xd50 [ 229.231353][ T6155] ret_from_fork_asm+0x1a/0x30 [ 229.236117][ T6155] [ 229.238425][ T6155] Freed by task 7312: [ 229.242381][ T6155] kasan_save_stack+0x30/0x50 [ 229.247066][ T6155] kasan_save_track+0x14/0x30 [ 229.251749][ T6155] kasan_save_free_info+0x3b/0x70 [ 229.256771][ T6155] __kasan_slab_free+0x5f/0x80 [ 229.261543][ T6155] kfree+0x22b/0x6c0 [ 229.265441][ T6155] usb_put_hcd+0x149/0x1f0 [ 229.269862][ T6155] vhci_hcd_remove+0xb5/0x1b0 [ 229.274535][ T6155] platform_remove+0x5f/0x80 [ 229.279114][ T6155] device_remove+0xcb/0x180 [ 229.283614][ T6155] device_release_driver_internal+0x44e/0x620 [ 229.289710][ T6155] unbind_store+0xf8/0x110 [ 229.294128][ T6155] drv_attr_store+0x74/0xb0 [ 229.298623][ T6155] sysfs_kf_write+0xf2/0x150 [ 229.303207][ T6155] kernfs_fop_write_iter+0x3e0/0x5f0 [ 229.308480][ T6155] vfs_write+0x6ac/0x1050 [ 229.312804][ T6155] ksys_write+0x12a/0x250 [ 229.317128][ T6155] do_syscall_64+0x115/0x870 [ 229.321722][ T6155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 229.327606][ T6155] [ 229.330017][ T6155] Last potentially related work creation: [ 229.335707][ T6155] kasan_save_stack+0x30/0x50 [ 229.340386][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 229.345575][ T6155] insert_work+0x36/0x230 [ 229.349903][ T6155] __queue_work+0x9bc/0x12b0 [ 229.354478][ T6155] queue_work_on+0x1a9/0x1e0 [ 229.359056][ T6155] usb_hcd_giveback_urb+0x330/0x4a0 [ 229.364258][ T6155] unlink1+0x418/0x510 [ 229.368327][ T6155] usb_hcd_unlink_urb+0x131/0x210 [ 229.373357][ T6155] usb_kill_urb+0x121/0x320 [ 229.377843][ T6155] hub_quiesce+0x1e9/0x320 [ 229.382251][ T6155] hub_suspend+0x4ab/0x9e0 [ 229.386655][ T6155] usb_suspend_both+0x288/0x950 [ 229.391497][ T6155] usb_runtime_suspend+0x49/0x120 [ 229.396520][ T6155] __rpm_callback+0xc8/0x620 [ 229.401103][ T6155] rpm_callback+0x16a/0x1b0 [ 229.405603][ T6155] rpm_suspend+0x2f4/0x11a0 [ 229.410106][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 229.415218][ T6155] usb_new_device.cold+0xd61/0x115c [ 229.420430][ T6155] register_root_hub+0x4e6/0x639 [ 229.425361][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 229.430302][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 229.434969][ T6155] platform_probe+0x106/0x1d0 [ 229.439635][ T6155] really_probe+0x241/0xa60 [ 229.444139][ T6155] __driver_probe_device+0x20e/0x450 [ 229.449428][ T6155] driver_probe_device+0x4a/0x140 [ 229.454448][ T6155] __device_attach_driver+0x1df/0x320 [ 229.459818][ T6155] bus_for_each_drv+0x159/0x1e0 [ 229.464654][ T6155] __device_attach+0x1e4/0x4d0 [ 229.469417][ T6155] device_initial_probe+0xaf/0xd0 [ 229.474439][ T6155] bus_probe_device+0x64/0x160 [ 229.479197][ T6155] device_add+0x121d/0x1970 [ 229.483700][ T6155] platform_device_add+0x35a/0x800 [ 229.488811][ T6155] platform_device_register_full+0x5cf/0x830 [ 229.494789][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 229.499375][ T6155] do_one_initcall+0x11d/0x700 [ 229.504194][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 229.509419][ T6155] kernel_init+0x1f/0x1e0 [ 229.513752][ T6155] ret_from_fork+0x72b/0xd50 [ 229.518344][ T6155] ret_from_fork_asm+0x1a/0x30 [ 229.523109][ T6155] [ 229.525411][ T6155] Second to last potentially related work creation: [ 229.531970][ T6155] kasan_save_stack+0x30/0x50 [ 229.536657][ T6155] kasan_record_aux_stack+0xa7/0xc0 [ 229.541851][ T6155] insert_work+0x36/0x230 [ 229.546186][ T6155] __queue_work+0x9bc/0x12b0 [ 229.550763][ T6155] queue_work_on+0x1a9/0x1e0 [ 229.555338][ T6155] usb_hcd_giveback_urb+0x3b8/0x4a0 [ 229.560542][ T6155] usb_hcd_submit_urb+0xab7/0x2150 [ 229.565659][ T6155] usb_submit_urb+0x827/0x19b0 [ 229.570414][ T6155] usb_start_wait_urb+0x10e/0x580 [ 229.575430][ T6155] usb_control_msg+0x328/0x4b0 [ 229.580210][ T6155] hub_suspend+0x826/0x9e0 [ 229.584619][ T6155] usb_suspend_both+0x288/0x950 [ 229.589472][ T6155] usb_runtime_suspend+0x49/0x120 [ 229.594495][ T6155] __rpm_callback+0xc8/0x620 [ 229.599082][ T6155] rpm_callback+0x16a/0x1b0 [ 229.603578][ T6155] rpm_suspend+0x2f4/0x11a0 [ 229.608087][ T6155] __pm_runtime_suspend+0xba/0x1a0 [ 229.613199][ T6155] usb_new_device.cold+0xd61/0x115c [ 229.618390][ T6155] register_root_hub+0x4e6/0x639 [ 229.623317][ T6155] usb_add_hcd.cold+0xccd/0x1158 [ 229.628248][ T6155] vhci_hcd_probe+0x1c2/0x4e0 [ 229.632916][ T6155] platform_probe+0x106/0x1d0 [ 229.637579][ T6155] really_probe+0x241/0xa60 [ 229.642073][ T6155] __driver_probe_device+0x20e/0x450 [ 229.647369][ T6155] driver_probe_device+0x4a/0x140 [ 229.652404][ T6155] __device_attach_driver+0x1df/0x320 [ 229.657768][ T6155] bus_for_each_drv+0x159/0x1e0 [ 229.662603][ T6155] __device_attach+0x1e4/0x4d0 [ 229.667359][ T6155] device_initial_probe+0xaf/0xd0 [ 229.672376][ T6155] bus_probe_device+0x64/0x160 [ 229.677127][ T6155] device_add+0x121d/0x1970 [ 229.681632][ T6155] platform_device_add+0x35a/0x800 [ 229.686727][ T6155] platform_device_register_full+0x5cf/0x830 [ 229.692697][ T6155] vhci_hcd_init+0x1a1/0x2f0 [ 229.697272][ T6155] do_one_initcall+0x11d/0x700 [ 229.702030][ T6155] kernel_init_freeable+0x6ea/0x7b0 [ 229.707227][ T6155] kernel_init+0x1f/0x1e0 [ 229.711573][ T6155] ret_from_fork+0x72b/0xd50 [ 229.716161][ T6155] ret_from_fork_asm+0x1a/0x30 [ 229.720926][ T6155] [ 229.723227][ T6155] The buggy address belongs to the object at ffff888028c58000 [ 229.723227][ T6155] which belongs to the cache kmalloc-8k of size 8192 [ 229.737270][ T6155] The buggy address is located 2064 bytes inside of [ 229.737270][ T6155] freed 8192-byte region [ffff888028c58000, ffff888028c5a000) [ 229.751232][ T6155] [ 229.753537][ T6155] The buggy address belongs to the physical page: [ 229.759939][ T6155] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28c58 [ 229.768678][ T6155] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 229.777158][ T6155] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 229.784687][ T6155] page_type: f5(slab) [ 229.788656][ T6155] raw: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 229.797228][ T6155] raw: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 229.805821][ T6155] head: 00fff00000000040 ffff88813fe22280 dead000000000122 0000000000000000 [ 229.814480][ T6155] head: 0000000000000000 0000000800020002 00000000f5000000 0000000000000000 [ 229.823138][ T6155] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 229.831800][ T6155] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 229.840450][ T6155] page dumped because: kasan: bad access detected [ 229.846844][ T6155] page_owner tracks the page as allocated [ 229.852538][ T6155] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 6303220528, free_ts 0 [ 229.872179][ T6155] post_alloc_hook+0xfd/0x120 [ 229.876877][ T6155] get_page_from_freelist+0xf48/0x3530 [ 229.882356][ T6155] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 229.888253][ T6155] new_slab+0xa2/0x640 [ 229.892321][ T6155] refill_objects+0xe3/0x410 [ 229.896911][ T6155] __pcs_replace_empty_main+0x376/0x680 [ 229.902454][ T6155] __kmalloc_noprof+0x66d/0x820 [ 229.907312][ T6155] scsi_host_alloc+0x30/0x1380 [ 229.912076][ T6155] virtscsi_probe+0x21f/0xf80 [ 229.916752][ T6155] virtio_dev_probe+0x6a2/0xbe0 [ 229.921603][ T6155] really_probe+0x241/0xa60 [ 229.926121][ T6155] __driver_probe_device+0x20e/0x450 [ 229.931413][ T6155] driver_probe_device+0x4a/0x140 [ 229.936436][ T6155] __driver_attach+0x21f/0x5b0 [ 229.941197][ T6155] bus_for_each_dev+0x13e/0x1d0 [ 229.946035][ T6155] bus_add_driver+0x305/0x5b0 [ 229.950706][ T6155] page_owner free stack trace missing [ 229.956049][ T6155] [ 229.958356][ T6155] Memory state around the buggy address: [ 229.963964][ T6155] ffff888028c58700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.972010][ T6155] ffff888028c58780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.980055][ T6155] >ffff888028c58800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 229.988095][ T6155] ^ [ 229.992666][ T6155] ffff888028c58880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.000717][ T6155] ffff888028c58900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 230.008761][ T6155] ================================================================== [ 230.016802][ T6155] Kernel panic - not syncing: kasan.fault=panic_on_write set ... [ 230.024507][ T6155] CPU: 0 UID: 0 PID: 6155 Comm: kworker/u8:17 Tainted: G B syzkaller #0 PREEMPT(full) [ 230.035619][ T6155] Tainted: [B]=BAD_PAGE [ 230.039752][ T6155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 230.049796][ T6155] Workqueue: usbip_event event_handler [ 230.055259][ T6155] Call Trace: [ 230.058524][ T6155] [ 230.061440][ T6155] dump_stack_lvl+0x100/0x190 [ 230.066113][ T6155] vpanic+0x552/0x970 [ 230.070092][ T6155] ? __pfx_vpanic+0x10/0x10 [ 230.074587][ T6155] ? do_raw_spin_lock+0x119/0x260 [ 230.079609][ T6155] panic+0xd1/0xe0 [ 230.083332][ T6155] ? __pfx_panic+0x10/0x10 [ 230.087737][ T6155] ? end_report.part.0+0x23/0x90 [ 230.092671][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.098317][ T6155] ? rcu_is_watching+0x12/0xc0 [ 230.103081][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.108708][ T6155] ? lock_release+0x24d/0x310 [ 230.113382][ T6155] end_report.part.0+0x68/0x90 [ 230.118147][ T6155] kasan_report.cold+0xe/0x18 [ 230.122824][ T6155] ? do_raw_spin_lock+0x119/0x260 [ 230.127848][ T6155] kasan_check_range+0x10f/0x1e0 [ 230.132780][ T6155] do_raw_spin_lock+0x119/0x260 [ 230.137631][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.143616][ T6155] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 230.149004][ T6155] ? vhci_cleanup_unlink_list+0x85/0x456 [ 230.154639][ T6155] ? _raw_spin_lock_irqsave+0x52/0x60 [ 230.160011][ T6155] vhci_cleanup_unlink_list+0xb1/0x456 [ 230.165485][ T6155] vhci_shutdown_connection.cold+0x165/0x37c [ 230.171473][ T6155] event_handler+0x216/0x570 [ 230.176055][ T6155] process_one_work+0xa23/0x1940 [ 230.180986][ T6155] ? __pfx_process_one_work+0x10/0x10 [ 230.186351][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.191997][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.197631][ T6155] worker_thread+0x5ef/0xe50 [ 230.202220][ T6155] ? kthread+0x13a/0x450 [ 230.206469][ T6155] ? __pfx_worker_thread+0x10/0x10 [ 230.211569][ T6155] kthread+0x370/0x450 [ 230.215643][ T6155] ? __pfx_kthread+0x10/0x10 [ 230.220239][ T6155] ret_from_fork+0x72b/0xd50 [ 230.224825][ T6155] ? __pfx_ret_from_fork+0x10/0x10 [ 230.229936][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.235567][ T6155] ? rcu_is_watching+0x12/0xc0 [ 230.240329][ T6155] ? srso_alias_return_thunk+0x5/0xfbef5 [ 230.245970][ T6155] ? __switch_to+0x800/0x10f0 [ 230.250667][ T6155] ? __switch_to_asm+0x39/0x70 [ 230.255432][ T6155] ? __pfx_kthread+0x10/0x10 [ 230.260038][ T6155] ret_from_fork_asm+0x1a/0x30 [ 230.264808][ T6155] [ 230.267860][ T6155] Kernel Offset: disabled [ 230.272184][ T6155] Rebooting in 86400 seconds..