last executing test programs: 10.259731971s ago: executing program 1 (id=2387): r0 = creat(&(0x7f0000000340)='./file0\x00', 0x0) io_uring_setup(0x26d7, &(0x7f00000000c0)={0x0, 0x200066c7, 0x10000, 0xffffffff, 0x3, 0x0, r0}) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_mmap}], [], 0x6b}}) chmod(&(0x7f0000000140)='./file0\x00', 0x0) r4 = open$dir(&(0x7f0000000140)='./file0\x00', 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000000400)=' ', 0x1) truncate(&(0x7f0000000080)='./file0\x00', 0x800) 10.212899265s ago: executing program 1 (id=2388): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9ecda75e2a7d49d5cbcb370c4d789390a328ba42c9c60cf2154d1b659aa709e8980a522cfb72f23ad87fb7019706ccae98cfe7c4fd23e8297b8cabc46ede1ac3da78f1b488c6357e7edfcd417df6660af20a54ecdcb02f689ae15ee655d4b7b1ea733e88ee9f53669388dff487c1c49953f3bc142112bd4b582b29b35d43962ed245c2cd5d5df40a3e0ed6beaf3b641e84b0f0dfa121a9efe05269f9f4a0e9bcbf43c7a90a711f453668c730c3badedca687b71a9c27bab9e724cc4a4918713031596ea6fd01124f973f257ccd9665aee7df4a9d64f079d176abc00000000d7af3e2dd4396f72373fb0a787a6129ca41181f5087fb843212550b58e3707d5a0399de36c2503836cbe2133de4f574e9e05c96788b0de1bd13e390445433d96737b964fa8af2ac4b2f0f9390ca93d8d3d810044d024359e067c4553230ab748947d33f8fc115ce9a49e6571c45a05d786cbd49342c236537dbbeec666b07baab917252113a5b9a77283189b518f356debe42d80cf2d0687b9c64d0253a6a09286fded6e4f8557b8fb4f25ca4fb138af8945c74bbc98748eaaa030be5317646f195e6e085ac6ddb29542e3581961259987241f7e7061526a7afec8962e74215f", 0x1f0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 8.852639163s ago: executing program 1 (id=2396): ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) r0 = add_key$user(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000280)="d2", 0x1, 0xfffffffffffffffe) r1 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r0, r1, r1}, &(0x7f00000000c0)=""/83, 0x53, 0x0) 8.76592739s ago: executing program 1 (id=2397): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000200)='kmem_cache_free\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) socket$igmp(0x2, 0x3, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="796100000000000000007e00000033000300", @ANYRES32=0x0, @ANYBLOB="9b44875f9fb70f086ecd22d16d2008f8c5cc82ca01c16315e070e3a8ed91aa1cd6274d9b440bf979f0264ed04834b309c377ade4afa74bee93ac62972fd8cb3215ab519fb1b846984b6bbd61360dd91245b42cc8ee9033c02833cc452807b5f7bf11450679b9cbcbef84c55313f49d93d92cbbe7af0237870ff77741c7e6aa"], 0x1c}}, 0x4000054) r4 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a2f000000000800410072786500140033007465616d5f736c6176655f30"], 0x38}}, 0x0) 8.066689046s ago: executing program 4 (id=2402): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x400}], 0x1, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 7.916045618s ago: executing program 0 (id=2403): syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0xa0000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) ioctl$KVM_HYPERV_EVENTFD(r1, 0x400caed0, &(0x7f0000000180)={0x2, 0xffffffffffffffff, 0xffffffff}) 7.745028682s ago: executing program 4 (id=2404): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="08002600ad1600004000330010000000080211000000080211000000080211000001000000000000010001002d1a40000b0000000000000000040003000b0000000600500000000304006c"], 0x68}}, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x2c, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}]}, 0x2c}}, 0x0) 7.618961522s ago: executing program 0 (id=2406): r0 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)="08001efba054158e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x1c9477516a687e1a) 7.550425527s ago: executing program 0 (id=2407): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 7.464907984s ago: executing program 4 (id=2409): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000160e00000020c0002"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) 7.331041825s ago: executing program 4 (id=2411): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1) write$dsp(r0, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f", 0x7d) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="787dc3fe68c6648907e19383b464be6b58371c42d8b96915f1d085919dc251770db4b0f526ceaf46c45b9006397aa1cef9d102e66fa12ad4a90db0b3d1d98d371b317eb37476fd31483cfff1a93c97121c68319aae5bae3f97b6eaa74f842460677ad7eac395f3e1e84f8d68647ff01f2a78b4487536551bfed95858f3f6aa54676eb6db183d5499fff27693c3ec2c9d37b25f82b2be13352d51a1e486addb83b0c479cf5fa82e7d7a85df133a0a6ea15c00da95a4b41c809975e6d3340ba87537", @ANYRESHEX, @ANYRES32=r0, @ANYRES32, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c00a906000000fe85d64fa0ccdb913e824d7188c037d048f18b76ccf7f0374a6b76b840747ac3c7b23e7720706aed4f0a8b175a9833"], 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) 7.233992993s ago: executing program 2 (id=2413): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000008c0)=@nat={'nat\x00', 0x1b, 0x5, 0x3b0, 0x270, 0x1b8, 0xffffffff, 0x270, 0x1b8, 0x318, 0x318, 0xffffffff, 0x318, 0x318, 0x5, &(0x7f00000002c0), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x10, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4=@private=0xa010101, @gre_key=0x7f, @port=0x4}}}, {{@ip={@loopback, @dev={0xac, 0x14, 0x14, 0x17}, 0xffffff00, 0xffffffff, 'pim6reg\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x6, 0x2, 0x2}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@ah={{0x30}, {[0x2, 0x400], 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x5, 0x5, 0x1, 0x4, 0x1, 0x6], 0x4}, {0x2, [0x1, 0x1, 0x0, 0x1, 0x7, 0x5], 0x5, 0x9a5fbb5c6d4290da}}}}, {{@ip={@multicast1, @multicast1, 0xffffff00, 0x0, 'gre0\x00', 'veth0_to_hsr\x00', {}, {}, 0x2, 0x1, 0x20}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x4, @ipv6=@remote, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}, @port=0x4e23, @gre_key=0x9}}}, {{@ip={@multicast1, @private=0xa010101, 0xff000000, 0xffffff00, 'syz_tun\x00', 'virt_wifi0\x00', {0xff}, {0xff}, 0x16, 0x2, 0x50}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x16, @loopback, @local, @gre_key=0x9b3, @port=0x4e24}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x410) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000f40)=ANY=[@ANYBLOB="2c0200001000100029bd7000fedbdf25ac1414aa000000000000000000000000e00000020000000000000000000000004e2100004e2000060a0080c087000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x22c}}, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet_smc(0x2b, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) r3 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r4, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r4}) 5.794977268s ago: executing program 2 (id=2414): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x400}], 0x1, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 5.794792128s ago: executing program 3 (id=2415): r0 = syz_open_dev$sndmidi(&(0x7f0000000100), 0x2, 0x141121) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = syz_io_uring_setup(0x1c57, &(0x7f0000000300)={0x0, 0x40ac, 0x10000, 0x2, 0x3f, 0x0, r1}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x1009}}) io_uring_enter(r2, 0x29ed, 0x8a24, 0x4, 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) preadv2(r5, &(0x7f0000000180)=[{&(0x7f0000000000)=""/167, 0xa7}], 0x1, 0x0, 0x4, 0x1) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) 5.757850751s ago: executing program 0 (id=2416): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x20, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x73cea2d47785b264, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r4}, 0x18) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x7fffffe, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r5}, 0x10) syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x11, 0x2}, 0x0, 0x0) 5.608683342s ago: executing program 2 (id=2417): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="180000000000f5ff000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000300)='tcp_cong_state_set\x00', r0, 0x0, 0x800000000}, 0x18) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x30004084) 5.507056691s ago: executing program 2 (id=2418): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = syz_io_uring_setup(0x236, &(0x7f0000000580)={0x0, 0x0, 0x10100}, 0x0, &(0x7f0000000100)) timerfd_gettime(0xffffffffffffffff, &(0x7f00000002c0)) io_uring_enter(r0, 0x207a98, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000040)='./file0\x00', 0x0, 0x1214040, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141102) pselect6(0x0, 0x0, 0x0, &(0x7f0000000280)={0x3ff, 0x0, 0x0, 0x400d, 0x4, 0x2, 0x466}, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x2200892, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, &(0x7f0000000300)={[], [], 0x2f}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000), 0xc) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x100010, r1, 0xb3d2d000) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) sched_setaffinity(0x0, 0x43, &(0x7f0000000040)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) chroot(&(0x7f0000000a40)='./file0\x00') mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) syz_open_dev$tty20(0xc, 0x4, 0x1) 2.654973948s ago: executing program 0 (id=2419): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) 2.408037628s ago: executing program 3 (id=2420): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) 2.250951341s ago: executing program 4 (id=2421): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000005840)='net/snmp6\x00') read$FUSE(r3, &(0x7f0000000b00)={0x2020}, 0x2020) 1.166271348s ago: executing program 4 (id=2422): r0 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040), 0x3, 0xa041) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, 0x0, 0x0) sendmmsg$inet(r2, 0x0, 0x0, 0x40000d0) sendmsg$SOCK_DESTROY(0xffffffffffffffff, 0x0, 0x40095) r3 = openat$fb0(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r3, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x40, 0xbbba, 0x2, 0x0, 0x2, {}, {0x80004, 0x2}, {0x4004000}, {0x0, 0x8}, 0x0, 0x3f0, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x800f, 0x2, 0x20000000, 0x80, 0x0, 0x11}) syz_emit_ethernet(0x0, 0x0, 0x0) syz_usb_disconnect(r0) close(r1) 1.109520672s ago: executing program 2 (id=2423): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600000000000000", @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0xffffff1f, 0xfffffffe, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x22}}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}}, 0x4000) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x60, &(0x7f0000000300)={&(0x7f0000000900)=ANY=[@ANYBLOB="5c00000010001ffffcffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800b0001006772657461700000240002800800070064010100060003001008000008001500700f0d0008000700ac1414bb08000a00", @ANYRES32=r6], 0x5c}}, 0x40) 880.66669ms ago: executing program 1 (id=2424): sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040011) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000b40)="8b", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000000240)=' ', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000bc0)="71f7", 0x2}], 0x1}}], 0x3, 0x48800) syz_usb_disconnect(0xffffffffffffffff) shutdown(r0, 0x2) 853.533023ms ago: executing program 0 (id=2425): syz_mount_image$ocfs2(&(0x7f00000026c0), &(0x7f0000004780)='./file0\x00', 0x200000, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], 0x1, 0x4703, &(0x7f0000004800)="$eJzs212IXFcBB/BzZ1ezmybb/UibpOnHJBFctCybPlXrQ1yrNpo2H9pWU2Wd3Ww3q7M76+6MFgxSgyAKghIEFT+oCqUvtSAG+lKLUPADaRVKRdH6IlKogg8GbaArM3Nvdu6d2d7JTtLS9veDdvaee8+5Z/a/99w590wKseqphdXiwmqxtFSszN6/ekvxc5VybXEuFF4lr/X56c6VyEn2r50j7/vAR+65JYQ/HPvah9bW1tZC3XDo6EDLz+f/fXq29TVRyNSpt9u5taY/1h556edveaUj8pwIIexo61ddXwjhY78IYUsIYSQuG41fB0MI20IIUQjh0d/868cDvXShxdl7X3ju2JnD+85MPf7YMxfmj254YBTCd8u7b55ffHF/323Pv+MynR4AAF7RB48fufvo5IHwZBSGzvW3f17fGb8mn4/vfNun7nq4f33/Gt3pexVDBQAAgIz1+f9w9HKH9bpkZS1ZEnzigRN3PxWt7zexfX07dNeR298/eSBe/43a9t8aF/3zvX2NNdTsum92/XckU7/z+u/6eR7+6rO/XHrr5vuf9C8573CIChOp7UJhYiKEY1PN7V3R1kK5slp95/2V2tLJzZ/3jSKdf3b1fn1Bv9v8RzPV89b/d3/i8z8b7O/lHYyF7F9tfbvY/qdMB+n8Nx7Lf/KlqKv8xzL18vK/4+nt53+1pZd3kD0jlyKdf/NC3Nd6QLE5ANTz/2Z/fv47Mu3n5f/9qXOPntjE93/q48xwVO/rQGoEeDku3+ArTGSk828GkRo641/kRtf//zL5X5NpPy//Oyv/+N3ferj/bzT+j0/10uabRzr/ZhDF1BHr1/9IIf/6vzbTfl7+vz3152c/2dO9uj3/ev/H3f+7ks4/vhGnB8/Gb7Lb8X9npv28/HeN3ffQwib6/eHBuJ9DURhr+dbpufotbGh9vboxpanvXt7ESd4E0vk3f2upS2eo+dK4/ofzx/9dmfbz8n9oz9ffc7qn7/92Hv8njf9dSec/2Ci7lPxfyuS/O9N+Xv4/PP33v9x3mcf/+vZB+Xclnf/Wtv3rz38KXc3/rsvUz3v+s2/0qUf+2sP8P+lfct7k+U/yHGI8aj7/obN0/ldteFy39/89mXp51/+3/vP80/t7Gf+jAU8AepDOf1uzsMMEsNv8r8+0n5f/F+758sf/tIn5X+MT30CSf8v8f0uz/Kjxvyvp/Lc3C1P/GOrBxv8b9/+oPff/ZvK/IdN+Xv4XDk30f+Uy3//r/R/v8Cibdun8hzY8rp7/77u4/9+YqZeX/xf3/vTFm3v6/B/CpLn+pqXzv3rD4xrX/0B+/jdl6uXl/51v/PqJB3vo/9t7qEs2/+a9PnU5xZ/Nu53/FzPt5+X/o/HzZ/dfgfnfre7/XUnn31w1v5T8s/P/vZn28/L/3pEfrPRfgec/d8gfAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgU0bj1+EQFSZS24XCxEQIY/H2rrA1mimdnJ4pV2Y/sxrCjri8GEaj+XJlplSeXliqnJybLpXLldkQron37wgD0Wq5Up1eLC1fe7GtwejUXGmlOjNXqoYQdsbl14ftSVszC9XF0nLj2KTOVVHps7VKtTRRW51bCbsvlm9LyudXKrXl6y62dXWhsrJ8qrQ0fXJh5d2Tk5OTYc/FPo9Ecw9U55aqzd4299brJHWHo5Y309h9Q8v5Pl2prSyVyo3yG1vqlCuzpXJLnZtazlddqS3Nlqpz0+XKfHK+YkvdlvfW2L033jceRlLvL6mbdTB+vf3Q8Y8eP3ygbX8xSue9VFucm9ze+W8CAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDeuJ29717dDCH3NrUII4WDyQxT/l3L23heeO3bm8L4zU48/9syF+aOdjgEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg/+zAgQAAAAAAkP9rI1RVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVh535equjiOACfGd/7WiCltBFyGRgiojsJC/pFJJXXyJZtWge1SsigKDCMaFkQBEHtooKgVVD5F0QtXLaqNrVoYRBBxehMXu4IN7zQMed5YDgzzL1nvjBw78z5HA4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD6cXbHYlfWXtq1eWnr7g+hMz/3fwhhNFne/7y3I/SEEL5+mTkdVmkLPU39v5mcGy9fNfm9t3/84fXRZO31F98trtsdknSo4XhnkqZDQ2vvf6O6M/hsejAJIY1dCFEsjD05UwshdMQuhCh+fpy/mP2+/xe7EKLo/3C3K7v/tdiFEMXW3Z/6avkzHtVzvn5hsPG/v9UjeBuP6KxDb09eeZe6qZX3Mn//T/LN+2A1zJ448v557CKIZnZu6mjsGgAAgL/rXIv8P2xZ3r9/OQk93eXc/1tT/t/b1P/q+f+Ke9tvjM20FUJsK41NZsfD+9rpc+M7NXD19uua8Z6qkv9Xm/y/2uT/1Sb/rzb5f7XJ/8m8kv9X0uObexZfxC6CaOT/AABQPYeOT0zVh0eyl/9NPzrLeX1f3tbzPP3BremBRw3jRvLDf9vhYxMHDg6P5Pe9PCC4sv5DunT2ez7fo7ktTDbNu2i1/kPv04X5a53lT9T/cP5GUV9xXes/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC/2J17GgbBKAyj321F1EarogkLPwk+0MCIAKQwowEdTBiAgRBQwEDOWe5NnuUFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnu9f5XXx/aUx0muNSFPZZdf+OZ5mP3PfDsv77HHjVgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANjYgQMZAAAAAGH+1nm0HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKcCAAD//wTsyzo=") mkdir(&(0x7f0000000080)='./file1\x00', 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000380)=@file={0x1, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) mknod$loop(&(0x7f0000000440)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x6000, 0x1) 842.794013ms ago: executing program 2 (id=2426): socket$unix(0x1, 0x5, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000004100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='net/xfrm_stat\x00') r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f00000000c0)="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", 0x1f0, 0x0, 0x0, 0x0) socket$nl_audit(0x10, 0x3, 0x9) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a41, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x50) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) userfaultfd(0x801) r2 = socket$inet_udp(0x2, 0x2, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0) 611.039752ms ago: executing program 3 (id=2427): pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000800b7030000000000008500000083000000bf"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) vmsplice(r0, &(0x7f0000002440)=[{&(0x7f00000002c0)="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", 0x400}], 0x1, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f00000002c0)='ip6_vti0\x00') r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, 0x2000400c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x1, 0x6a, 0x0, 0x0, 0xf7ffff7e, 0x0, 0x0, 0x0, 0xe}, 0x94) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 536.286348ms ago: executing program 3 (id=2428): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0xfdef) 392.509599ms ago: executing program 3 (id=2429): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000400008500000072"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x2, 0x13, 0x0, 0x0, 0x2}, 0x10}}, 0x0) 263.03472ms ago: executing program 3 (id=2430): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={0x0, 0x328000, 0x800}, 0x1c) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000400)={0x0, 0xe, 0x4, '\"098'}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000580)={0x1c, &(0x7f00000000c0)=ANY=[@ANYBLOB="001309"], 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=2431): r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x1) write$dsp(r0, &(0x7f0000000400)="c4322f5c57ef1e8c2d500b7efabd1af0b06ee646f0d7c11ea4a8f86ecc05d60b7021cc9a2bf2b1fbb537f242c642619e1fdea2c7dd2e019267f3eec05db7b7805888178436eccf92c044357bd1e45b9a6f1d42b23f2549ef8211fdf9ead0e6c005fb76f054bce224fa814166ca756011e32bd2af7e2855846f25732d8f", 0x7d) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="787dc3fe68c6648907e19383b464be6b58371c42d8b96915f1d085919dc251770db4b0f526ceaf46c45b9006397aa1cef9d102e66fa12ad4a90db0b3d1d98d371b317eb37476fd31483cfff1a93c97121c68319aae5bae3f97b6eaa74f842460677ad7eac395f3e1e84f8d68647ff01f2a78b4487536551bfed95858f3f6aa54676eb6db183d5499fff27693c3ec2c9d37b25f82b2be13352d51a1e486addb83b0c479cf5fa82e7d7a85df133a0a6ea15c00da95a4b41c809975e6d3340ba87537", @ANYRESHEX, @ANYRES32=r0, @ANYRES32, @ANYRES16, @ANYRESDEC=0x0, @ANYBLOB="2c00a906000000fe85d64fa0ccdb913e824d7188c037d048f18b76ccf7f0374a6b76b840747ac3c7b23e7720706aed4f0a8b175a9833"], 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) openat$vmci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0xc048aeca, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) kernel console output (not intermixed with test programs): ller0> [ 370.158432][ T9290] tipc: Resetting bearer [ 370.209977][ T9290] tipc: Disabling bearer [ 370.401919][ T9297] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 370.433549][ T9300] autofs4:pid:9300:autofs_fill_super: called with bogus options [ 371.262261][ T7030] usb 4-1: new full-speed USB device number 45 using dummy_hcd [ 371.467473][ T7030] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 371.481257][ T7030] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.498212][ T7030] usb 4-1: config 0 descriptor?? [ 371.536021][ T9324] tipc: Enabled bearer , priority 0 [ 371.544655][ T9324] device syzkaller0 entered promiscuous mode [ 371.544886][ T4321] usb 2-1: USB disconnect, device number 30 [ 371.591669][ T9324] tipc: Resetting bearer [ 371.607588][ T9323] tipc: Resetting bearer [ 371.631972][ T9323] tipc: Disabling bearer [ 371.643572][ T2120] usb 1-1: new full-speed USB device number 45 using dummy_hcd [ 371.767686][ T9333] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 371.854837][ T2120] usb 1-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 371.866568][ T2120] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.880167][ T2120] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 371.890806][ T2120] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 371.921845][ T2120] usb 1-1: config 0 descriptor?? [ 371.950626][ T2120] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 371.980654][ T2120] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 372.136060][ T9341] autofs4:pid:9341:autofs_fill_super: called with bogus options [ 372.641087][ T7030] pegasus: probe of 4-1:0.0 failed with error -71 [ 372.668313][ T7030] usb 4-1: USB disconnect, device number 45 [ 373.326978][ T9364] tipc: Enabled bearer , priority 0 [ 373.334766][ T9364] device syzkaller0 entered promiscuous mode [ 373.362167][ T7030] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 373.363744][ T9364] tipc: Resetting bearer [ 373.387553][ T9363] tipc: Resetting bearer [ 373.418417][ T9363] tipc: Disabling bearer [ 373.548587][ T4321] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 373.563937][ T7030] usb 5-1: Using ep0 maxpacket: 32 [ 373.571206][ T7030] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 373.579640][ T7030] usb 5-1: config 0 has no interface number 0 [ 373.585998][ T7030] usb 5-1: config 0 interface 184 has no altsetting 0 [ 373.597650][ T7030] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 373.608913][ T7030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.618397][ T7030] usb 5-1: Product: syz [ 373.973509][ T9370] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 373.998994][ T7030] usb 5-1: Manufacturer: syz [ 374.006599][ T7030] usb 5-1: SerialNumber: syz [ 374.021386][ T7030] usb 5-1: config 0 descriptor?? [ 374.037348][ T7030] smsc75xx v1.0.0 [ 374.072204][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 374.080134][ T4321] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 374.098315][ T4321] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 374.109330][ T4321] usb 3-1: config 0 has no interface number 0 [ 374.128747][ T4321] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 374.139137][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.147538][ T4321] usb 3-1: Product: syz [ 374.161573][ T4321] usb 3-1: Manufacturer: syz [ 374.170798][ T4321] usb 3-1: SerialNumber: syz [ 374.199811][ T4321] usb 3-1: config 0 descriptor?? [ 374.220137][ T4321] usb 3-1: Found UVC 0.00 device syz (046d:08f3) [ 374.226920][ T4321] usb 3-1: No valid video chain found. [ 374.422691][ T4321] usb 1-1: USB disconnect, device number 45 [ 374.437774][ T4342] usb 3-1: USB disconnect, device number 27 [ 374.474639][ T9375] netlink: 'syz.3.1515': attribute type 1 has an invalid length. [ 374.668365][ T9375] bond4: (slave gretap2): making interface the new active one [ 374.677857][ T9375] bond4: (slave gretap2): Enslaving as an active interface with an up link [ 374.717501][ T9383] autofs4:pid:9383:autofs_fill_super: called with bogus options [ 374.750041][ T9375] syz.3.1515 (9375) used greatest stack depth: 19424 bytes left [ 375.096329][ T9393] tipc: Enabled bearer , priority 0 [ 375.112684][ T9393] device syzkaller0 entered promiscuous mode [ 375.185086][ T9392] tipc: Resetting bearer [ 375.238993][ T9392] tipc: Disabling bearer [ 375.251910][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 375.270836][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 375.299010][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 375.324080][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 375.344931][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 375.375874][ T7030] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 375.401159][ T7030] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 375.418915][ T7030] usb 5-1: USB disconnect, device number 34 [ 375.672856][ T9398] loop0: detected capacity change from 0 to 2048 [ 375.718014][ T9398] FAT-fs (loop0): Unrecognized mount option "measure" or missing value [ 376.812375][ T9415] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1528'. [ 376.966877][ T9426] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 376.973414][ T9424] tipc: Enabled bearer , priority 0 [ 377.023496][ T9424] device syzkaller0 entered promiscuous mode [ 377.049916][ T9429] autofs4:pid:9429:autofs_fill_super: called with bogus options [ 377.125313][ T9423] tipc: Resetting bearer [ 377.230986][ T9423] tipc: Disabling bearer [ 378.475691][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.482229][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.746228][ T9455] netlink: 'syz.4.1540': attribute type 1 has an invalid length. [ 379.342923][ T9470] tipc: Enabled bearer , priority 0 [ 379.389021][ T9470] tipc: Resetting bearer [ 379.433054][ T9473] autofs4:pid:9473:autofs_fill_super: called with bogus options [ 379.503091][ T9469] tipc: Disabling bearer [ 379.559359][ T4458] tipc: Subscription rejected, illegal request [ 379.810240][ T4342] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 380.003417][ T4342] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 380.023600][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.058764][ T4342] usb 1-1: config 0 descriptor?? [ 380.330512][ T9504] netlink: 'syz.3.1556': attribute type 1 has an invalid length. [ 380.784683][ T9517] tipc: Enabled bearer , priority 0 [ 380.802798][ T9517] tipc: Resetting bearer [ 380.848171][ T9516] tipc: Disabling bearer [ 381.433881][ T4342] pegasus: probe of 1-1:0.0 failed with error -71 [ 381.486569][ T4342] usb 1-1: USB disconnect, device number 46 [ 381.681784][ T9536] autofs4:pid:9536:autofs_fill_super: called with bogus options [ 382.291121][ T9555] netlink: 'syz.3.1573': attribute type 1 has an invalid length. [ 382.957226][ T7361] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 383.642080][ T7361] usb 2-1: Using ep0 maxpacket: 8 [ 383.648925][ T7361] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 383.720927][ T7361] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 383.757987][ T7361] usb 2-1: config 0 descriptor?? [ 383.975520][ T7361] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 383.988341][ T9591] loop2: detected capacity change from 0 to 1024 [ 384.007628][ T9597] autofs4:pid:9597:autofs_fill_super: called with bogus options [ 384.057835][ T9591] netlink: 'syz.2.1585': attribute type 10 has an invalid length. [ 384.124957][ T9591] team0: Port device netdevsim0 added [ 386.062897][ T7361] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 386.224646][ T7361] asix: probe of 2-1:0.0 failed with error -71 [ 386.255311][ T7361] usb 2-1: USB disconnect, device number 31 [ 386.701404][ T9653] autofs4:pid:9653:autofs_fill_super: called with bogus options [ 387.590092][ T9674] netlink: 'syz.3.1612': attribute type 1 has an invalid length. [ 388.742088][ T4343] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 388.932121][ T4343] usb 2-1: Using ep0 maxpacket: 8 [ 388.940100][ T4343] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 388.949703][ T4343] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.971161][ T4343] usb 2-1: config 0 descriptor?? [ 389.183626][ T4343] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 389.458184][ T9719] loop0: detected capacity change from 0 to 4096 [ 390.156096][ T9678] tipc: Enabled bearer , priority 0 [ 390.166560][ T9688] device syzkaller0 entered promiscuous mode [ 390.184289][ T9699] device syzkaller0 entered promiscuous mode [ 390.191832][ T9676] tipc: Resetting bearer [ 390.246224][ T9676] tipc: Disabling bearer [ 390.421252][ T9730] autofs4:pid:9730:autofs_fill_super: called with bogus options [ 391.032281][ T4343] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 391.384422][ T4343] asix: probe of 2-1:0.0 failed with error -71 [ 391.395794][ T4343] usb 2-1: USB disconnect, device number 32 [ 392.161308][ T9764] loop3: detected capacity change from 0 to 1024 [ 392.364926][ T9764] hfsplus: b-tree write err: -5, ino 3 [ 392.385725][ T9764] hfsplus: bad catalog file entry [ 392.504814][ T4569] hfsplus: bad catalog file entry [ 392.649977][ T4389] tipc: Subscription rejected, illegal request [ 392.660274][ T9775] device syzkaller0 entered promiscuous mode [ 393.032953][ T3653] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 393.283056][ T3653] usb 5-1: Using ep0 maxpacket: 32 [ 393.292456][ T7030] usb 2-1: new full-speed USB device number 33 using dummy_hcd [ 393.324031][ T3653] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 393.394604][ T3653] usb 5-1: config 0 has no interface number 0 [ 393.465079][ T3653] usb 5-1: config 0 interface 184 has no altsetting 0 [ 393.534084][ T7030] usb 2-1: config 0 has an invalid descriptor of length 25, skipping remainder of the config [ 393.566997][ T3653] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 393.603945][ T7030] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 393.666375][ T3653] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.753648][ T7030] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 393.781745][ T3653] usb 5-1: Product: syz [ 393.802476][ T3653] usb 5-1: Manufacturer: syz [ 393.807099][ T3653] usb 5-1: SerialNumber: syz [ 393.842389][ T7030] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.890988][ T3653] usb 5-1: config 0 descriptor?? [ 394.001485][ T7030] usb 2-1: config 0 descriptor?? [ 394.013015][ T3653] smsc75xx v1.0.0 [ 394.037097][ T7030] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 394.052539][ T7030] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 394.461416][ T9802] autofs4:pid:9802:autofs_fill_super: called with bogus options [ 395.230182][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 395.265959][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 395.282766][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 395.300629][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 395.310632][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 395.321606][ T3653] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 395.331374][ T3653] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 395.350985][ T3653] usb 5-1: USB disconnect, device number 35 [ 396.191508][ T4314] usb 2-1: USB disconnect, device number 33 [ 397.145305][ T9851] autofs4:pid:9851:autofs_fill_super: called with bogus options [ 397.327012][ T7361] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 397.503349][ T7361] usb 3-1: device descriptor read/64, error -71 [ 397.782356][ T7361] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 397.822118][ T2120] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 397.912100][ T3653] usb 5-1: new full-speed USB device number 36 using dummy_hcd [ 397.942926][ T7361] usb 3-1: device descriptor read/64, error -71 [ 398.008860][ T2120] usb 2-1: Using ep0 maxpacket: 32 [ 398.017319][ T2120] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 398.037466][ T2120] usb 2-1: config 0 has no interface number 0 [ 398.044755][ T2120] usb 2-1: config 0 interface 184 has no altsetting 0 [ 398.065570][ T2120] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 398.078891][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 398.092412][ T2120] usb 2-1: Product: syz [ 398.097212][ T7361] usb usb3-port1: attempt power cycle [ 398.098700][ T3653] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.118327][ T2120] usb 2-1: Manufacturer: syz [ 398.126031][ T2120] usb 2-1: SerialNumber: syz [ 398.133250][ T3653] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 398.143973][ T2120] usb 2-1: config 0 descriptor?? [ 398.149123][ T3653] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.159086][ T2120] smsc75xx v1.0.0 [ 398.165590][ T3653] usb 5-1: config 0 descriptor?? [ 398.178728][ T3653] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 398.191832][ T3653] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 398.299397][ T9870] 9pnet_fd: Insufficient options for proto=fd [ 398.557269][ T7361] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 398.607305][ T7361] usb 3-1: device descriptor read/8, error -71 [ 398.912801][ T7361] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 398.956227][ T7361] usb 3-1: device descriptor read/8, error -71 [ 399.102565][ T7361] usb usb3-port1: unable to enumerate USB device [ 399.379844][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 399.418544][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 399.458448][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 399.481203][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 399.522945][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 399.570846][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 399.606058][ T2120] smsc75xx: probe of 2-1:0.184 failed with error -71 [ 399.650047][ T2120] usb 2-1: USB disconnect, device number 34 [ 400.498560][ T9899] autofs4:pid:9899:autofs_fill_super: called with bogus options [ 400.696553][ T4314] usb 5-1: USB disconnect, device number 36 [ 401.080551][ T9908] 9pnet_fd: Insufficient options for proto=fd [ 401.655382][ T9932] device syzkaller0 entered promiscuous mode [ 401.692159][ T2120] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 401.932164][ T4314] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 401.962253][ T2120] usb 2-1: Using ep0 maxpacket: 32 [ 401.971000][ T2120] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 401.999699][ T2120] usb 2-1: config 0 has no interface number 0 [ 402.016282][ T2120] usb 2-1: config 0 interface 184 has no altsetting 0 [ 402.058055][ T2120] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 402.092324][ T4314] usb 4-1: device descriptor read/64, error -71 [ 402.111974][ T2120] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.120122][ T2120] usb 2-1: Product: syz [ 402.128065][ T2120] usb 2-1: Manufacturer: syz [ 402.133014][ T2120] usb 2-1: SerialNumber: syz [ 402.161501][ T2120] usb 2-1: config 0 descriptor?? [ 402.177919][ T2120] smsc75xx v1.0.0 [ 402.392157][ T4314] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 402.552332][ T4314] usb 4-1: device descriptor read/64, error -71 [ 402.684425][ T4314] usb usb4-port1: attempt power cycle [ 402.780775][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 402.791862][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 402.802360][ T2120] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 402.814606][ T2120] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 403.102203][ T4314] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 403.142639][ T4314] usb 4-1: device descriptor read/8, error -71 [ 403.422310][ T4314] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 403.464870][ T4314] usb 4-1: device descriptor read/8, error -71 [ 403.506278][ T9953] autofs4:pid:9953:autofs_fill_super: called with bogus options [ 403.607209][ T4314] usb usb4-port1: unable to enumerate USB device [ 404.457725][ T9578] usb 2-1: USB disconnect, device number 35 [ 407.802138][ T4313] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 407.986012][T10030] autofs4:pid:10030:autofs_fill_super: called with bogus options [ 408.008601][ T4313] usb 4-1: Using ep0 maxpacket: 32 [ 408.018191][ T4313] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 408.031768][ T4313] usb 4-1: config 0 has no interface number 0 [ 408.038839][T10034] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 408.049530][T10035] device syzkaller0 entered promiscuous mode [ 408.061167][ T4313] usb 4-1: config 0 interface 184 has no altsetting 0 [ 408.071350][ T4313] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 408.080932][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.091058][ T4313] usb 4-1: Product: syz [ 408.105085][ T4313] usb 4-1: Manufacturer: syz [ 408.110842][ T4313] usb 4-1: SerialNumber: syz [ 408.126443][ T4313] usb 4-1: config 0 descriptor?? [ 408.156194][ T4313] smsc75xx v1.0.0 [ 408.162241][ T4343] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 408.342234][ T4343] usb 3-1: device descriptor read/64, error -71 [ 408.704625][ T4343] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 408.798770][ T4313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 408.819581][ T4313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 408.834990][ T4313] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 408.845734][ T4313] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 408.902200][ T4343] usb 3-1: device descriptor read/64, error -71 [ 409.022248][ T4343] usb usb3-port1: attempt power cycle [ 409.444654][ T4343] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 409.484170][ T4343] usb 3-1: device descriptor read/8, error -71 [ 409.575810][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eaa3c00: rx timeout, send abort [ 409.755935][ T4343] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 409.792666][ T4343] usb 3-1: device descriptor read/8, error -71 [ 409.912290][ T4343] usb usb3-port1: unable to enumerate USB device [ 410.084060][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801eaa3c00: abort rx timeout. Force session deactivation [ 410.584052][ T4343] usb 4-1: USB disconnect, device number 50 [ 410.868126][T10076] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 410.901760][T10070] overlayfs: overlapping lowerdir path [ 413.321696][ T4343] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 413.552081][ T4343] usb 2-1: Using ep0 maxpacket: 32 [ 413.558812][ T4343] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 413.621210][ T4343] usb 2-1: config 0 has no interface number 0 [ 413.647203][ T4343] usb 2-1: config 0 interface 184 has no altsetting 0 [ 413.691208][ T4343] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 413.739412][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.808434][ T4343] usb 2-1: Product: syz [ 413.833003][T10123] overlayfs: overlapping lowerdir path [ 413.841805][ T4343] usb 2-1: Manufacturer: syz [ 413.892438][ T4343] usb 2-1: SerialNumber: syz [ 413.925241][T10104] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 413.931765][T10104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 413.950781][ T4343] usb 2-1: config 0 descriptor?? [ 413.992385][ T4343] smsc75xx v1.0.0 [ 413.996926][T10104] vhci_hcd vhci_hcd.0: Device attached [ 414.016603][T10126] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 414.023218][T10126] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 414.088937][T10126] vhci_hcd vhci_hcd.0: Device attached [ 414.157609][T10130] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 414.164158][T10130] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.232221][ T2120] vhci_hcd: vhci_device speed not set [ 414.275161][T10130] vhci_hcd vhci_hcd.0: Device attached [ 414.302312][ T2120] usb 33-1: new full-speed USB device number 2 using vhci_hcd [ 414.610283][ T4343] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 414.636315][ T4343] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 414.684808][ T4343] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 414.722956][T10116] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(16) [ 414.729566][T10116] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 414.742173][T10104] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 414.748783][T10104] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 414.757295][ T4343] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 414.832331][T10116] vhci_hcd vhci_hcd.0: Device attached [ 414.844545][T10126] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 414.937508][T10104] vhci_hcd vhci_hcd.0: Device attached [ 414.955251][T10116] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 415.069760][T10104] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(15) [ 415.076389][T10104] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 415.112391][T10104] vhci_hcd vhci_hcd.0: Device attached [ 415.148263][T10116] vhci_hcd vhci_hcd.0: port 0 already used [ 415.196335][T10146] vhci_hcd: connection closed [ 415.196559][ T9] vhci_hcd: stop threads [ 415.206500][T10141] vhci_hcd: connection closed [ 415.207293][T10140] vhci_hcd: connection closed [ 415.212148][T10127] vhci_hcd: connection closed [ 415.216868][T10124] vhci_hcd: connection reset by peer [ 415.226958][T10131] vhci_hcd: connection closed [ 415.254791][ T9] vhci_hcd: release socket [ 415.294752][ T9] vhci_hcd: disconnect device [ 415.329165][ T9] vhci_hcd: stop threads [ 415.357695][ T9] vhci_hcd: release socket [ 415.369980][ T9] vhci_hcd: disconnect device [ 415.388807][ T9] vhci_hcd: stop threads [ 415.416606][ T9] vhci_hcd: release socket [ 415.445874][ T9] vhci_hcd: disconnect device [ 415.459786][ T9] vhci_hcd: stop threads [ 415.474133][ T9] vhci_hcd: release socket [ 415.481915][ T9] vhci_hcd: disconnect device [ 415.494111][ T9] vhci_hcd: stop threads [ 415.537668][ T9] vhci_hcd: release socket [ 415.555839][ T9] vhci_hcd: disconnect device [ 415.560876][ T9] vhci_hcd: stop threads [ 415.568886][ T9] vhci_hcd: release socket [ 415.576957][ T9] vhci_hcd: disconnect device [ 415.654393][T10156] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 416.263184][ T4343] usb 2-1: USB disconnect, device number 36 [ 418.255077][T10202] device syzkaller0 entered promiscuous mode [ 418.378803][T10206] 9pnet: Could not find request transport: fd0x0000000000000003 [ 418.806778][T10219] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 419.413101][T10231] 9pnet: Could not find request transport: fd0x0000000000000003 [ 419.422229][ T2120] vhci_hcd: vhci_device speed not set [ 419.772384][ T9578] usb 5-1: new full-speed USB device number 37 using dummy_hcd [ 419.964245][ T9578] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 419.984975][ T9578] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 420.005527][ T9578] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.050853][ T9578] usb 5-1: config 0 descriptor?? [ 420.071447][T10234] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 420.098865][ T9578] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 420.130510][ T9578] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 420.442194][ T4313] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 420.743133][ T4313] usb 2-1: Using ep0 maxpacket: 16 [ 420.926246][ T4313] usb 2-1: config index 0 descriptor too short (expected 30768, got 72) [ 420.935003][ T4313] usb 2-1: config 48 has too many interfaces: 48, using maximum allowed: 32 [ 420.943936][ T4313] usb 2-1: config 48 has an invalid descriptor of length 0, skipping remainder of the config [ 420.954528][ T4313] usb 2-1: config 48 has 0 interfaces, different from the descriptor's value: 48 [ 420.974354][ T4313] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 421.025220][ T4313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.047221][ T4313] usb 2-1: Product: syz [ 421.051492][ T4313] usb 2-1: Manufacturer: syz [ 421.072813][ T4313] usb 2-1: SerialNumber: syz [ 421.287841][T10268] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 421.317245][ T4313] usb 2-1: USB disconnect, device number 37 [ 422.899548][T10276] 9pnet: Could not find request transport: fd0x0000000000000003 [ 423.294912][ T7030] usb 5-1: USB disconnect, device number 37 [ 423.900057][T10306] 9pnet_fd: Insufficient options for proto=fd [ 425.232212][ T2120] usb 3-1: new full-speed USB device number 36 using dummy_hcd [ 425.723616][ T2120] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 425.776858][ T2120] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 425.962269][ T2120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.004548][ T2120] usb 3-1: config 0 descriptor?? [ 426.011564][T10328] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 426.025836][ T2120] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 426.047471][ T2120] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 426.324241][T10351] fuse: Bad value for 'fd' [ 426.380887][T10352] overlayfs: overlapping lowerdir path [ 428.089011][ T4314] usb 3-1: USB disconnect, device number 36 [ 429.712225][ T7361] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 429.722890][T10396] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 429.912162][ T7361] usb 5-1: Using ep0 maxpacket: 16 [ 429.918728][ T7361] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 429.960371][ T7361] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 430.003409][ T7361] usb 5-1: config 0 has no interface number 0 [ 430.030421][ T7361] usb 5-1: too many endpoints for config 0 interface 105 altsetting 48: 120, using maximum allowed: 30 [ 430.074134][ T7361] usb 5-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 430.131616][ T7361] usb 5-1: config 0 interface 105 has no altsetting 0 [ 430.160807][ T7361] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 430.208239][ T7361] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.229640][ T7361] usb 5-1: Product: syz [ 430.260357][ T7361] usb 5-1: Manufacturer: syz [ 430.276971][ T7361] usb 5-1: SerialNumber: syz [ 430.307589][ T7361] usb 5-1: config 0 descriptor?? [ 430.334542][T10402] 9pnet_fd: Insufficient options for proto=fd [ 430.548921][ T7361] usb 5-1: USB disconnect, device number 38 [ 431.303010][ T7361] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 431.694420][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 431.712191][ T7361] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 431.731714][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.747230][ T7361] usb 3-1: config 0 descriptor?? [ 431.754559][T10415] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 431.773140][ T7361] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 431.780364][ T7361] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 432.202860][ T4313] usb 3-1: USB disconnect, device number 37 [ 434.940728][T10463] overlayfs: conflicting lowerdir path [ 436.732134][ T4314] usb 2-1: new full-speed USB device number 38 using dummy_hcd [ 436.792412][T10490] overlayfs: overlapping lowerdir path [ 436.944342][ T4314] usb 2-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 436.988486][ T4314] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 437.038384][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.086944][ T4314] usb 2-1: config 0 descriptor?? [ 437.105263][T10475] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 437.118439][ T4314] pegasus_notetaker 2-1:0.0: Invalid number of endpoints [ 437.137796][ T4314] pegasus_notetaker: probe of 2-1:0.0 failed with error -22 [ 437.187652][T10495] 9pnet_fd: Insufficient options for proto=fd [ 437.511166][ T4313] usb 2-1: USB disconnect, device number 38 [ 437.852145][ T7361] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 438.062106][ T7361] usb 3-1: Using ep0 maxpacket: 16 [ 438.069561][ T7361] usb 3-1: config 0 has an invalid interface number: 105 but max is 0 [ 438.131707][ T7361] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 438.223815][ T7361] usb 3-1: config 0 has no interface number 0 [ 438.284783][ T7361] usb 3-1: too many endpoints for config 0 interface 105 altsetting 48: 120, using maximum allowed: 30 [ 438.420195][ T7361] usb 3-1: config 0 interface 105 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 120 [ 438.507839][ T7361] usb 3-1: config 0 interface 105 has no altsetting 0 [ 438.559657][ T7361] usb 3-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 438.662123][ T7361] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.670159][ T7361] usb 3-1: Product: syz [ 439.247161][ T7361] usb 3-1: Manufacturer: syz [ 439.498021][ T7361] usb 3-1: SerialNumber: syz [ 439.522755][T10519] tipc: Enabled bearer , priority 0 [ 439.542995][ T7361] usb 3-1: config 0 descriptor?? [ 439.569707][T10519] tipc: Resetting bearer [ 439.769318][ T7361] usb 3-1: USB disconnect, device number 38 [ 439.904829][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.911212][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 439.932546][T10516] tipc: Disabling bearer [ 442.465569][T10561] tipc: Enabled bearer , priority 0 [ 442.507154][ T4569] tipc: Subscription rejected, illegal request [ 442.507384][T10561] tipc: Resetting bearer [ 442.676346][T10560] tipc: Disabling bearer [ 443.035019][T10571] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1902'. [ 443.383640][T10575] binder: BINDER_SET_CONTEXT_MGR already set [ 443.412352][T10575] binder: 10574:10575 ioctl 4018620d 200000004a80 returned -16 [ 446.329321][ T4343] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 446.382164][ T4314] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 446.472638][T10611] tipc: Enabled bearer , priority 0 [ 446.520388][T10611] tipc: Resetting bearer [ 446.594264][ T4314] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 446.612146][ T4343] usb 5-1: Using ep0 maxpacket: 32 [ 446.619356][ T4343] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 446.628084][ T4314] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 446.638029][ T4343] usb 5-1: config 0 has no interface number 0 [ 446.662760][ T4343] usb 5-1: config 0 interface 184 has no altsetting 0 [ 446.672561][ T4314] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 446.699270][ T4314] usb 1-1: config 0 descriptor?? [ 446.714824][T10603] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 446.715686][ T4343] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 446.738797][ T4314] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 446.772411][ T4343] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.789223][ T4314] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 446.803694][ T4343] usb 5-1: Product: syz [ 446.807888][ T4343] usb 5-1: Manufacturer: syz [ 446.832162][ T4343] usb 5-1: SerialNumber: syz [ 446.868048][ T4343] usb 5-1: config 0 descriptor?? [ 446.884170][T10610] tipc: Disabling bearer [ 447.038826][ T4343] smsc75xx v1.0.0 [ 447.047400][ T4343] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 447.078301][ T4343] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 448.179331][T10632] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1914'. [ 448.352841][ T9578] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 448.543730][ T9578] usb 4-1: Using ep0 maxpacket: 8 [ 448.565220][ T9578] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 449.175024][ T9578] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.180600][ T7030] usb 1-1: USB disconnect, device number 47 [ 449.234571][ T9578] usb 4-1: config 0 descriptor?? [ 449.354891][ T4314] usb 5-1: USB disconnect, device number 39 [ 449.486769][ T9578] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 450.992124][ T7030] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 451.192172][ T7030] usb 1-1: Using ep0 maxpacket: 16 [ 451.198958][ T7030] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 451.209900][ T7030] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 451.221690][T10675] fuse: Unknown parameter '0xffffffffffffffff' [ 451.230768][ T7030] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 451.241250][ T7030] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 451.255257][ T7030] usb 1-1: Product: syz [ 451.259467][ T7030] usb 1-1: Manufacturer: syz [ 451.264688][ T7030] usb 1-1: SerialNumber: syz [ 451.422241][ T4343] usb 5-1: new full-speed USB device number 40 using dummy_hcd [ 451.496890][ T7030] usb 1-1: 0:2 : does not exist [ 451.515513][ T7030] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 451.573395][ T7030] usb 1-1: USB disconnect, device number 48 [ 451.608959][ T4451] udevd[4451]: setting mode of /dev/snd/controlC3 to 020660 failed: No such file or directory [ 451.634252][ T4343] usb 5-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 451.650113][ T4389] tipc: Subscription rejected, illegal request [ 451.652138][ T4343] usb 5-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 451.671381][ T4451] udevd[4451]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 451.682929][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.692532][ T9578] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 451.706953][ T4343] usb 5-1: config 0 descriptor?? [ 451.713967][T10672] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 451.724964][ T4343] pegasus_notetaker 5-1:0.0: Invalid number of endpoints [ 451.733271][ T4343] pegasus_notetaker: probe of 5-1:0.0 failed with error -22 [ 451.759683][ T9578] asix: probe of 4-1:0.0 failed with error -71 [ 451.805095][ T9578] usb 4-1: USB disconnect, device number 51 [ 453.924409][T10724] fuse: Unknown parameter '0xffffffffffffffff' [ 454.166415][ T4314] usb 5-1: USB disconnect, device number 40 [ 454.240290][ T4410] tipc: Subscription rejected, illegal request [ 454.862073][ T7030] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 455.072327][ T7030] usb 5-1: Using ep0 maxpacket: 8 [ 455.094404][ T7030] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 455.444652][ T7030] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 455.457230][ T7030] usb 5-1: config 0 descriptor?? [ 455.669471][ T7030] asix 5-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 456.200808][ T4564] tipc: Subscription rejected, illegal request [ 456.340134][T10772] overlayfs: conflicting lowerdir path [ 456.412106][ T2120] usb 3-1: new full-speed USB device number 39 using dummy_hcd [ 456.801667][ T2120] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 456.960753][ T2120] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 456.974765][ T2120] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 456.999564][ T2120] usb 3-1: config 0 descriptor?? [ 457.005803][T10763] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 457.026876][ T2120] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 457.060053][ T2120] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 457.549526][ T4343] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 457.881550][ T4343] usb 2-1: Using ep0 maxpacket: 16 [ 458.127758][ T4343] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 458.136101][ T4343] usb 2-1: config 0 has an invalid descriptor of length 120, skipping remainder of the config [ 458.146797][ T4343] usb 2-1: config 0 has no interface number 0 [ 458.156969][ T4343] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 458.166764][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.215708][ T4343] usb 2-1: Product: syz [ 458.219913][ T4343] usb 2-1: Manufacturer: syz [ 458.236065][ T4343] usb 2-1: SerialNumber: syz [ 458.260875][ T4343] usb 2-1: config 0 descriptor?? [ 458.352726][ T7030] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 458.416823][ T7030] asix: probe of 5-1:0.0 failed with error -71 [ 458.461138][ T7030] usb 5-1: USB disconnect, device number 41 [ 458.505888][ T4343] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 458.535787][ T4343] usb 2-1: No valid video chain found. [ 458.576476][ T4343] usb 2-1: USB disconnect, device number 39 [ 459.080811][ T35] tipc: Subscription rejected, illegal request [ 459.102642][T10811] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1973'. [ 459.161154][ T7361] usb 3-1: USB disconnect, device number 39 [ 459.672147][T10822] overlayfs: conflicting lowerdir path [ 460.136757][T10826] tipc: Enabled bearer , priority 0 [ 460.185610][T10826] device syzkaller0 entered promiscuous mode [ 460.301322][T10826] tipc: Resetting bearer [ 460.347204][T10825] tipc: Resetting bearer [ 460.413170][T10825] tipc: Disabling bearer [ 460.966090][ T4428] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 461.123287][ T4314] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 461.172124][ T4428] usb 2-1: Using ep0 maxpacket: 8 [ 461.179101][ T4428] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 461.189707][ T4428] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.206844][ T4428] usb 2-1: config 0 descriptor?? [ 461.312159][ T4314] usb 5-1: Using ep0 maxpacket: 16 [ 461.320025][ T4314] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 461.332150][ T7361] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 461.341337][ T4314] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 461.357969][ T4314] usb 5-1: config 0 has no interface number 0 [ 461.368216][ T4314] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 461.383082][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 461.391522][ T4314] usb 5-1: Product: syz [ 461.404733][ T4314] usb 5-1: Manufacturer: syz [ 461.409344][ T4314] usb 5-1: SerialNumber: syz [ 461.422734][ T4314] usb 5-1: config 0 descriptor?? [ 461.424341][ T4428] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 461.433550][ T4314] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 461.447851][ T4314] usb 5-1: No valid video chain found. [ 461.544526][ T7361] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 461.559085][ T7361] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 461.568731][ T7361] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.591499][ T7361] usb 3-1: config 0 descriptor?? [ 461.601665][T10851] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 461.619257][ T7361] pegasus_notetaker 3-1:0.0: Invalid number of endpoints [ 461.640581][ T7030] usb 5-1: USB disconnect, device number 42 [ 461.652444][ T7361] pegasus_notetaker: probe of 3-1:0.0 failed with error -22 [ 462.000740][ T4343] usb 3-1: USB disconnect, device number 40 [ 462.093595][T10869] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1989'. [ 462.602915][T10871] overlayfs: conflicting lowerdir path [ 462.989988][T10884] tipc: Enabling of bearer rejected, failed to enable media [ 463.417067][ T7361] usb 5-1: new full-speed USB device number 43 using dummy_hcd [ 463.456234][ T4428] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 463.641736][ T4428] asix: probe of 2-1:0.0 failed with error -71 [ 463.653230][ T4428] usb 2-1: USB disconnect, device number 40 [ 463.683980][ T7361] usb 5-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 463.713475][ T7361] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 463.740665][ T7361] usb 5-1: config 0 descriptor?? [ 465.034788][T10933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2003'. [ 465.368032][ T7361] pegasus: probe of 5-1:0.0 failed with error -71 [ 465.384301][ T7361] usb 5-1: USB disconnect, device number 43 [ 465.572123][ T4428] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 465.612137][ T4342] usb 1-1: new full-speed USB device number 49 using dummy_hcd [ 465.714503][T10948] overlayfs: conflicting lowerdir path [ 465.815391][ T4428] usb 3-1: Using ep0 maxpacket: 32 [ 465.904527][ T4428] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 466.167008][ T4428] usb 3-1: config 0 has no interface number 0 [ 466.189899][ T4428] usb 3-1: config 0 interface 184 has no altsetting 0 [ 466.217145][ T4428] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 466.230691][ T4428] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 466.251770][ T4428] usb 3-1: Product: syz [ 466.259335][ T4428] usb 3-1: Manufacturer: syz [ 466.265455][ T4428] usb 3-1: SerialNumber: syz [ 466.294394][ T4428] usb 3-1: config 0 descriptor?? [ 466.348352][ T4342] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 466.365414][ T4428] smsc75xx v1.0.0 [ 466.369083][ T4428] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 466.369502][ T4342] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 466.400304][ T4342] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 466.417541][ T4342] usb 1-1: config 0 descriptor?? [ 466.429553][T10939] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 466.439551][ T4342] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 466.451313][ T4342] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 466.626343][ T4428] smsc75xx: probe of 3-1:0.184 failed with error -22 [ 467.275370][ T4428] usb 1-1: USB disconnect, device number 49 [ 468.339939][ T4428] usb 3-1: USB disconnect, device number 41 [ 468.494257][T10981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2016'. [ 468.933219][T10984] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 468.939757][T10984] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 468.966810][T10984] vhci_hcd vhci_hcd.0: Device attached [ 468.990791][T10992] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 468.997404][T10992] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 469.252092][ T4428] vhci_hcd: vhci_device speed not set [ 469.277880][T10992] vhci_hcd vhci_hcd.0: Device attached [ 469.292119][T10984] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 469.298649][T10984] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 469.326818][T10984] vhci_hcd vhci_hcd.0: Device attached [ 469.336724][ T4428] usb 39-1: new full-speed USB device number 2 using vhci_hcd [ 469.725937][T11015] overlayfs: conflicting lowerdir path [ 469.884595][T10992] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(15) [ 469.891263][T10992] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 469.898822][T10984] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(12) [ 469.905423][T10984] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 469.997204][T10992] vhci_hcd vhci_hcd.0: Device attached [ 470.049825][T10984] vhci_hcd vhci_hcd.0: Device attached [ 470.094187][T11024] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.130998][T11028] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 470.202210][T10984] vhci_hcd vhci_hcd.0: pdev(3) rhport(7) sockfd(21) [ 470.208823][T10984] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 470.235352][T10984] vhci_hcd vhci_hcd.0: Device attached [ 470.246486][T11020] vhci_hcd: connection closed [ 470.246521][T11029] vhci_hcd: connection closed [ 470.251676][ T4569] vhci_hcd: stop threads [ 470.264284][T11017] vhci_hcd: connection closed [ 470.264629][T11009] vhci_hcd: connection closed [ 470.269601][T11003] vhci_hcd: connection closed [ 470.272759][ T4569] vhci_hcd: release socket [ 470.291502][T11032] tipc: Enabling of bearer rejected, failed to enable media [ 470.292776][T10999] vhci_hcd: connection reset by peer [ 470.300733][ T4569] vhci_hcd: disconnect device [ 470.310849][ T4343] usb 1-1: new full-speed USB device number 50 using dummy_hcd [ 470.330835][ T4569] vhci_hcd: stop threads [ 470.786134][ T4569] vhci_hcd: release socket [ 470.801721][ T4569] vhci_hcd: disconnect device [ 470.841343][ T4569] vhci_hcd: stop threads [ 470.862605][ T4569] vhci_hcd: release socket [ 470.881518][ T4569] vhci_hcd: disconnect device [ 470.891463][ T4569] vhci_hcd: stop threads [ 470.904574][ T4569] vhci_hcd: release socket [ 470.919678][ T4569] vhci_hcd: disconnect device [ 470.944379][ T4343] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x19, skipping [ 470.956337][ T4569] vhci_hcd: stop threads [ 470.960786][ T4569] vhci_hcd: release socket [ 470.975046][ T4569] vhci_hcd: disconnect device [ 470.992079][ T4343] usb 1-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 471.001145][ T4343] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 471.023437][ T4569] vhci_hcd: stop threads [ 471.027720][ T4569] vhci_hcd: release socket [ 471.042287][ T4569] vhci_hcd: disconnect device [ 471.055527][ T4343] usb 1-1: config 0 descriptor?? [ 471.075892][T11026] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 471.088225][ T4343] pegasus_notetaker 1-1:0.0: Invalid number of endpoints [ 471.122102][ T4342] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 471.151818][ T4343] pegasus_notetaker: probe of 1-1:0.0 failed with error -22 [ 471.454179][ T4342] usb 5-1: Using ep0 maxpacket: 32 [ 471.471604][ T9578] usb 1-1: USB disconnect, device number 50 [ 471.478721][ T4342] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 471.500272][ T4342] usb 5-1: config 0 has no interface number 0 [ 471.513075][ T4342] usb 5-1: config 0 interface 184 has no altsetting 0 [ 471.532587][ T4342] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 471.550305][ T4342] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.565672][T11058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2031'. [ 471.575594][ T4342] usb 5-1: Product: syz [ 471.580472][ T4342] usb 5-1: Manufacturer: syz [ 471.588558][ T4342] usb 5-1: SerialNumber: syz [ 471.608018][ T4342] usb 5-1: config 0 descriptor?? [ 471.628256][ T4342] smsc75xx v1.0.0 [ 471.642352][ T4342] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22 [ 471.661406][T11056] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2030'. [ 471.681161][ T4342] smsc75xx: probe of 5-1:0.184 failed with error -22 [ 472.803370][T11088] overlayfs: conflicting lowerdir path [ 474.177331][ T4342] usb 5-1: USB disconnect, device number 44 [ 474.286474][T11103] tipc: Enabled bearer , priority 0 [ 474.313995][T11103] device syzkaller0 entered promiscuous mode [ 474.332814][T11105] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2042'. [ 474.404451][T11103] tipc: Resetting bearer [ 474.451043][T11102] tipc: Resetting bearer [ 474.533067][T11102] tipc: Disabling bearer [ 474.559990][T11112] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 474.566519][T11112] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 474.589265][T11112] vhci_hcd vhci_hcd.0: Device attached [ 474.602176][T11113] vhci_hcd: connection closed [ 474.602958][ T4592] vhci_hcd: stop threads [ 474.622235][ T4592] vhci_hcd: release socket [ 474.627893][ T4592] vhci_hcd: disconnect device [ 474.702133][ T4428] vhci_hcd: vhci_device speed not set [ 476.338323][T11145] fuse: Bad value for 'group_id' [ 476.526488][T11135] overlayfs: conflicting lowerdir path [ 477.003080][T11154] loop0: detected capacity change from 0 to 4096 [ 477.011363][T11155] netlink: 1624 bytes leftover after parsing attributes in process `syz.4.2053'. [ 477.086693][T11154] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 477.224184][T11162] overlayfs: missing 'lowerdir' [ 477.353617][T11164] tipc: Enabled bearer , priority 0 [ 477.369439][T11164] device syzkaller0 entered promiscuous mode [ 477.465267][ T4342] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 477.678551][T11169] tipc: Resetting bearer [ 477.699639][T11177] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 477.706191][T11177] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 477.714833][T11163] tipc: Resetting bearer [ 477.740256][T11177] vhci_hcd vhci_hcd.0: Device attached [ 477.752080][ T4342] usb 2-1: Using ep0 maxpacket: 16 [ 477.759940][ T4342] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 477.778462][T11178] vhci_hcd: connection closed [ 477.779327][ T9] vhci_hcd: stop threads [ 477.784079][ T4342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 477.784100][ T4342] usb 2-1: config 0 has no interface number 0 [ 477.786595][ T4342] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 477.814690][T11163] tipc: Disabling bearer [ 477.818686][ T9] vhci_hcd: release socket [ 477.825489][ T9] vhci_hcd: disconnect device [ 477.827852][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 477.838542][ T4342] usb 2-1: Product: syz [ 477.844053][ T4342] usb 2-1: Manufacturer: syz [ 477.849740][ T4342] usb 2-1: SerialNumber: syz [ 477.875129][ T4342] usb 2-1: config 0 descriptor?? [ 477.898669][ T4342] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 477.906505][ T4342] usb 2-1: No valid video chain found. [ 477.935063][T11171] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 478.097311][ T4342] usb 2-1: USB disconnect, device number 41 [ 479.551675][T11208] fuse: Bad value for 'group_id' [ 479.726490][ T9] tipc: Subscription rejected, illegal request [ 479.829301][T11220] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 480.825333][T11222] overlayfs: conflicting lowerdir path [ 480.964647][T11238] tipc: Enabled bearer , priority 0 [ 481.005980][T11238] device syzkaller0 entered promiscuous mode [ 481.079969][T11238] tipc: Resetting bearer [ 481.095421][T11237] tipc: Resetting bearer [ 481.187258][T11237] tipc: Disabling bearer [ 481.222097][ T4313] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 481.412075][ T4313] usb 5-1: Using ep0 maxpacket: 16 [ 481.418777][ T4313] usb 5-1: config 0 has an invalid interface number: 105 but max is 0 [ 481.464722][ T4314] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 481.492080][ T4313] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.502544][ T4313] usb 5-1: config 0 has no interface number 0 [ 481.517649][ T4313] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 481.564854][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 481.608412][ T4313] usb 5-1: Product: syz [ 481.613385][ T4313] usb 5-1: Manufacturer: syz [ 481.618395][ T4313] usb 5-1: SerialNumber: syz [ 481.640056][ T4313] usb 5-1: config 0 descriptor?? [ 481.652178][ T4314] usb 2-1: Using ep0 maxpacket: 8 [ 481.659704][ T4314] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 481.662570][ T4313] usb 5-1: Found UVC 0.00 device syz (046d:08f3) [ 481.684077][ T4313] usb 5-1: No valid video chain found. [ 481.722508][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.765897][ T4314] usb 2-1: config 0 descriptor?? [ 481.864086][ T4342] usb 5-1: USB disconnect, device number 45 [ 481.977800][ T4314] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 483.533662][ T4564] tipc: Subscription rejected, illegal request [ 484.102047][ T4428] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 484.112974][T11284] tipc: Enabled bearer , priority 0 [ 484.121173][T11284] device syzkaller0 entered promiscuous mode [ 484.167016][T11284] tipc: Resetting bearer [ 484.187344][T11283] tipc: Resetting bearer [ 484.227327][T11283] tipc: Disabling bearer [ 484.302124][ T4428] usb 5-1: Using ep0 maxpacket: 32 [ 484.303336][ T4314] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x8001: -71 [ 484.310046][ T4428] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 484.327280][ T4314] asix: probe of 2-1:0.0 failed with error -71 [ 484.354369][ T4314] usb 2-1: USB disconnect, device number 42 [ 484.397871][ T4428] usb 5-1: config 0 has no interface number 0 [ 484.415079][T11292] loop2: detected capacity change from 0 to 1024 [ 484.421567][ T4428] usb 5-1: config 0 interface 184 has no altsetting 0 [ 484.433079][ T4428] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 484.433953][T11292] hfsplus: gid requires an argument [ 484.468566][T11292] hfsplus: unable to parse mount options [ 484.493321][ T4428] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 484.535425][ T4428] usb 5-1: Product: syz [ 484.554558][ T4428] usb 5-1: Manufacturer: syz [ 484.559196][ T4428] usb 5-1: SerialNumber: syz [ 484.585509][ T4428] usb 5-1: config 0 descriptor?? [ 484.594629][ T4428] smsc75xx v1.0.0 [ 486.148020][T11296] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 486.154565][T11296] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 486.169584][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 486.181028][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 486.193961][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 486.212775][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 486.224549][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 486.236619][ T4428] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 486.252760][ T4428] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 486.324048][T11296] vhci_hcd vhci_hcd.0: Device attached [ 486.335529][ T4428] usb 5-1: USB disconnect, device number 46 [ 486.352207][T11300] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10) [ 486.358823][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 486.391286][T11300] vhci_hcd vhci_hcd.0: Device attached [ 486.458352][T11296] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(9) [ 486.464887][T11296] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 486.506607][T11300] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(14) [ 486.513244][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 486.527650][ T4342] vhci_hcd: vhci_device speed not set [ 486.533701][T11307] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17) [ 486.540661][T11307] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 486.571891][T11300] vhci_hcd vhci_hcd.0: Device attached [ 486.590587][T11307] vhci_hcd vhci_hcd.0: Device attached [ 486.591145][T11325] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 486.622242][ T4342] usb 39-1: new full-speed USB device number 3 using vhci_hcd [ 486.630012][T11296] vhci_hcd vhci_hcd.0: Device attached [ 486.697638][T11330] overlayfs: conflicting lowerdir path [ 486.719571][T11300] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(16) [ 486.726173][T11300] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 486.757745][T11300] vhci_hcd vhci_hcd.0: Device attached [ 486.818247][T11331] vhci_hcd: connection closed [ 486.818796][T11321] vhci_hcd: connection closed [ 486.823952][T11317] vhci_hcd: connection closed [ 486.828963][T11315] vhci_hcd: connection closed [ 486.836226][T11311] vhci_hcd: connection closed [ 486.841243][T11309] vhci_hcd: connection reset by peer [ 486.862333][ T4592] vhci_hcd: stop threads [ 486.866636][ T4592] vhci_hcd: release socket [ 486.990999][ T4592] vhci_hcd: disconnect device [ 487.215998][ T4592] vhci_hcd: stop threads [ 487.229326][ T4592] vhci_hcd: release socket [ 487.246875][ T4592] vhci_hcd: disconnect device [ 487.258542][ T4592] vhci_hcd: stop threads [ 487.274063][ T4592] vhci_hcd: release socket [ 487.300823][ T4592] vhci_hcd: disconnect device [ 487.341001][ T4592] vhci_hcd: stop threads [ 487.348503][ T4592] vhci_hcd: release socket [ 487.360569][ T4592] vhci_hcd: disconnect device [ 487.377782][ T4592] vhci_hcd: stop threads [ 487.392118][ T4592] vhci_hcd: release socket [ 487.408263][ T4592] vhci_hcd: disconnect device [ 487.458776][ T4592] vhci_hcd: stop threads [ 487.475215][ T4592] vhci_hcd: release socket [ 487.496269][ T4592] vhci_hcd: disconnect device [ 487.644891][T11351] netlink: 320 bytes leftover after parsing attributes in process `syz.2.2118'. [ 487.660925][T11352] loop3: detected capacity change from 0 to 256 [ 487.699889][T11352] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 487.751023][T11352] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 487.801713][T11352] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 488.901665][ T26] audit: type=1326 audit(1756273276.933:2015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 489.016507][ T26] audit: type=1326 audit(1756273276.933:2016): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=292 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 489.039165][ T26] audit: type=1326 audit(1756273276.933:2017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11368 comm="syz.3.2114" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 490.192074][ T4314] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 490.268278][T11382] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 490.274819][T11382] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 490.297480][T11382] vhci_hcd vhci_hcd.0: Device attached [ 490.324471][T11389] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(10) [ 490.331070][T11389] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 490.352650][T11389] vhci_hcd vhci_hcd.0: Device attached [ 490.371542][T11382] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(9) [ 490.378072][T11382] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 490.383503][ T4314] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 490.407001][T11382] vhci_hcd vhci_hcd.0: Device attached [ 490.412652][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 490.441137][ T4314] usb 3-1: config 0 descriptor?? [ 490.452602][T11389] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(12) [ 490.456350][ T4314] cp210x 3-1:0.0: cp210x converter detected [ 490.459209][T11389] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 490.486484][T11389] vhci_hcd vhci_hcd.0: Device attached [ 490.500705][T11382] vhci_hcd vhci_hcd.0: pdev(0) rhport(4) sockfd(14) [ 490.507295][T11382] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 490.514882][ T4343] vhci_hcd: vhci_device speed not set [ 490.524787][T11382] vhci_hcd vhci_hcd.0: Device attached [ 491.184816][ T4343] usb 33-1: new full-speed USB device number 3 using vhci_hcd [ 491.193603][T11382] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 491.207523][T11389] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 491.214147][T11389] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 491.230468][T11389] vhci_hcd vhci_hcd.0: Device attached [ 491.269249][T11407] vhci_hcd: connection closed [ 491.271146][T11403] vhci_hcd: connection closed [ 491.280902][T11399] vhci_hcd: connection closed [ 491.285845][ T9] vhci_hcd: stop threads [ 491.292303][T11393] vhci_hcd: connection reset by peer [ 491.295267][ T9] vhci_hcd: release socket [ 491.300327][T11395] vhci_hcd: connection closed [ 491.304590][T11397] vhci_hcd: connection closed [ 491.304761][ T9] vhci_hcd: disconnect device [ 491.381126][ T9] vhci_hcd: stop threads [ 491.386605][ T9] vhci_hcd: release socket [ 491.400734][ T9] vhci_hcd: disconnect device [ 491.415039][ T9] vhci_hcd: stop threads [ 491.422325][ T9] vhci_hcd: release socket [ 491.435111][ T9] vhci_hcd: disconnect device [ 491.456832][ T9] vhci_hcd: stop threads [ 491.492119][ T9] vhci_hcd: release socket [ 491.501712][ T9] vhci_hcd: disconnect device [ 491.522163][ T9] vhci_hcd: stop threads [ 491.526435][ T9] vhci_hcd: release socket [ 491.564305][ T9] vhci_hcd: disconnect device [ 491.572710][ T9] vhci_hcd: stop threads [ 491.576987][ T9] vhci_hcd: release socket [ 491.599226][ T4314] cp210x 3-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 491.623681][ T4314] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 491.640355][ T9] vhci_hcd: disconnect device [ 491.657783][ T4314] usb 3-1: cp210x converter now attached to ttyUSB0 [ 491.695353][ T4314] usb 3-1: USB disconnect, device number 42 [ 491.745624][ T4342] vhci_hcd: vhci_device speed not set [ 491.769030][ T4314] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 491.785396][ T4314] cp210x 3-1:0.0: device disconnected [ 492.023343][T11422] loop4: detected capacity change from 0 to 2048 [ 492.224894][T11432] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 492.310851][ T26] audit: type=1800 audit(1756273280.343:2018): pid=11422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2129" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 492.493588][T11432] NILFS (loop4): vblocknr = 22 has abnormal lifetime: start cno (= 1099511627778) > current cno (= 3) [ 493.352101][ T4328] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 493.365470][T11448] netlink: 'syz.3.2136': attribute type 1 has an invalid length. [ 493.373296][T11432] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=6) [ 493.429458][T11432] Remounting filesystem read-only [ 493.434268][T11439] overlayfs: conflicting lowerdir path [ 493.459695][ T4277] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer [ 493.552130][ T4328] usb 3-1: device descriptor read/64, error -71 [ 493.822063][ T4328] usb 3-1: new full-speed USB device number 44 using dummy_hcd [ 493.938163][T11463] process 'syz.4.2142' launched './file0' with NULL argv: empty string added [ 494.002050][ T4328] usb 3-1: device descriptor read/64, error -71 [ 494.062228][ T4314] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 494.128332][ T4328] usb usb3-port1: attempt power cycle [ 494.252159][ T4314] usb 2-1: Using ep0 maxpacket: 32 [ 494.259062][ T4314] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 494.270369][ T4314] usb 2-1: config 0 has no interface number 0 [ 494.277253][ T4314] usb 2-1: config 0 interface 184 has no altsetting 0 [ 494.290076][ T4314] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 494.300459][ T4314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.311113][ T4314] usb 2-1: Product: syz [ 494.315670][ T4314] usb 2-1: Manufacturer: syz [ 494.320361][ T4314] usb 2-1: SerialNumber: syz [ 494.332746][ T4314] usb 2-1: config 0 descriptor?? [ 494.342914][ T4314] smsc75xx v1.0.0 [ 494.412080][ T4428] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 494.542667][ T4328] usb 3-1: new full-speed USB device number 45 using dummy_hcd [ 494.572754][ T4328] usb 3-1: device descriptor read/8, error -71 [ 494.614199][ T4428] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 494.623589][ T4428] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 494.642979][ T4428] usb 4-1: config 0 descriptor?? [ 494.657471][ T4428] cp210x 4-1:0.0: cp210x converter detected [ 494.751118][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 494.765184][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 494.776243][ T4314] smsc75xx 2-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 494.787438][ T4314] smsc75xx: probe of 2-1:0.184 failed with error -32 [ 494.842155][ T4328] usb 3-1: new full-speed USB device number 46 using dummy_hcd [ 494.882520][ T4328] usb 3-1: device descriptor read/8, error -71 [ 495.012298][ T4328] usb usb3-port1: unable to enumerate USB device [ 495.260773][ T4428] cp210x 4-1:0.0: failed to get vendor val 0x3711 size 2: -71 [ 495.271715][ T4428] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 495.283895][ T4428] usb 4-1: cp210x converter now attached to ttyUSB0 [ 495.304637][ T4428] usb 4-1: USB disconnect, device number 52 [ 495.321780][ T4428] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 495.336585][ T4428] cp210x 4-1:0.0: device disconnected [ 496.322221][ T4343] vhci_hcd: vhci_device speed not set [ 496.354396][T11483] netlink: 320 bytes leftover after parsing attributes in process `syz.0.2148'. [ 496.557724][T11490] netlink: 'syz.2.2151': attribute type 1 has an invalid length. [ 496.797846][ T4428] usb 2-1: USB disconnect, device number 43 [ 496.925081][T11509] overlayfs: conflicting lowerdir path [ 497.798761][ T4314] usb 3-1: new full-speed USB device number 47 using dummy_hcd [ 497.962087][ T4314] usb 3-1: device descriptor read/64, error -71 [ 498.136557][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056301800: rx timeout, send abort [ 498.644826][ C1] vcan0: j1939_tp_rxtimer: 0xffff888056301800: abort rx timeout. Force session deactivation [ 498.922230][ T4314] usb 3-1: new full-speed USB device number 48 using dummy_hcd [ 498.937830][T11524] device vlan2 entered promiscuous mode [ 499.092205][ T4314] usb 3-1: device descriptor read/64, error -71 [ 499.181366][T11532] netlink: 'syz.4.2166': attribute type 1 has an invalid length. [ 499.212645][ T4314] usb usb3-port1: attempt power cycle [ 500.460626][ T4314] usb 3-1: new full-speed USB device number 49 using dummy_hcd [ 500.469262][ T4342] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 500.552316][ T4314] usb 3-1: device descriptor read/8, error -71 [ 500.703383][ T4342] usb 4-1: Using ep0 maxpacket: 32 [ 500.712870][ T4342] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 500.756322][ T4342] usb 4-1: config 0 has no interface number 0 [ 500.776197][ T4342] usb 4-1: config 0 interface 184 has no altsetting 0 [ 500.796815][ T4342] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 500.822147][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 500.844815][ T4342] usb 4-1: Product: syz [ 500.856912][ T4342] usb 4-1: Manufacturer: syz [ 500.866003][ T4342] usb 4-1: SerialNumber: syz [ 500.889119][ T4342] usb 4-1: config 0 descriptor?? [ 500.910518][ T4342] smsc75xx v1.0.0 [ 501.414674][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.424827][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.716174][T11564] loop2: detected capacity change from 0 to 16 [ 501.759818][T11564] erofs: (device loop2): mounted with root inode @ nid 36. [ 501.829204][T11552] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(7) [ 501.830687][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 501.835737][T11552] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 501.859336][T11552] vhci_hcd vhci_hcd.0: Device attached [ 501.867977][T11560] vhci_hcd vhci_hcd.0: pdev(1) rhport(1) sockfd(10) [ 501.874597][T11560] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 501.884909][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 501.895697][T11560] vhci_hcd vhci_hcd.0: Device attached [ 501.912064][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 501.922336][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802451c000: rx timeout, send abort [ 501.938429][ T4342] smsc75xx: probe of 4-1:0.184 failed with error -32 [ 501.947811][T11552] vhci_hcd vhci_hcd.0: pdev(1) rhport(2) sockfd(9) [ 501.954331][T11552] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 501.968069][T11552] vhci_hcd vhci_hcd.0: Device attached [ 502.008344][T11560] vhci_hcd vhci_hcd.0: pdev(1) rhport(3) sockfd(13) [ 502.014963][T11560] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 502.042866][T11560] vhci_hcd vhci_hcd.0: Device attached [ 502.055983][T11552] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 502.064532][ T4343] vhci_hcd: vhci_device speed not set [ 502.074131][T11552] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 502.094915][T11552] vhci_hcd vhci_hcd.0: pdev(1) rhport(6) sockfd(19) [ 502.101525][T11552] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 502.120543][T11552] vhci_hcd vhci_hcd.0: Device attached [ 502.130766][T11581] vhci_hcd: connection closed [ 502.131069][ T9] vhci_hcd: stop threads [ 502.141545][T11577] vhci_hcd: connection closed [ 502.159759][T11572] vhci_hcd: connection closed [ 502.164703][ T4343] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 502.187338][T11570] vhci_hcd: connection closed [ 502.187622][T11566] vhci_hcd: connection closed [ 502.201602][ T9] vhci_hcd: release socket [ 502.202191][T11568] vhci_hcd: sendmsg failed!, ret=-32 for 48 [ 502.206389][ T9] vhci_hcd: disconnect device [ 502.229468][ T9] vhci_hcd: stop threads [ 502.234896][ T9] vhci_hcd: release socket [ 502.239580][ T9] vhci_hcd: disconnect device [ 502.257759][T11586] netlink: 'syz.0.2179': attribute type 1 has an invalid length. [ 502.270864][ T9] vhci_hcd: stop threads [ 502.291821][ T9] vhci_hcd: release socket [ 502.296381][ T9] vhci_hcd: disconnect device [ 502.323998][ T9] vhci_hcd: stop threads [ 502.331729][ T9] vhci_hcd: release socket [ 502.336595][ T9] vhci_hcd: disconnect device [ 502.341513][ T9] vhci_hcd: stop threads [ 502.346267][ T9] vhci_hcd: release socket [ 502.422396][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802451c000: abort rx timeout. Force session deactivation [ 502.449662][ T9] vhci_hcd: disconnect device [ 503.443802][ T4314] usb 4-1: USB disconnect, device number 53 [ 503.674981][ T4313] usb 3-1: new full-speed USB device number 51 using dummy_hcd [ 505.026206][ T4313] usb 3-1: device descriptor read/64, error -71 [ 505.069409][T11620] loop3: detected capacity change from 0 to 1024 [ 505.281170][T11629] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2193'. [ 505.290904][T11629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2193'. [ 505.316001][ T4313] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 505.412184][ T4314] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 505.602309][ T4314] usb 5-1: Using ep0 maxpacket: 32 [ 505.615065][ T4314] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.643015][ T4342] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 505.674740][ T4314] usb 5-1: config 0 has no interface number 0 [ 505.681477][ T4314] usb 5-1: config 0 interface 184 has no altsetting 0 [ 505.734523][ T4314] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 505.788999][ T4314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 505.834300][ T4314] usb 5-1: Product: syz [ 505.842582][ T4342] usb 1-1: Using ep0 maxpacket: 32 [ 505.857954][ T4342] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 505.879113][ T4314] usb 5-1: Manufacturer: syz [ 505.904254][ T4342] usb 1-1: config 0 has no interface number 0 [ 505.911704][ T4314] usb 5-1: SerialNumber: syz [ 505.947601][ T4342] usb 1-1: config 0 interface 184 has no altsetting 0 [ 506.002149][ T4314] usb 5-1: config 0 descriptor?? [ 506.048329][ T4313] usb 3-1: device descriptor read/64, error -71 [ 506.057212][ T4342] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 506.068147][ T4314] smsc75xx v1.0.0 [ 506.071864][ T4342] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.080227][ T4342] usb 1-1: Product: syz [ 506.084559][ T4342] usb 1-1: Manufacturer: syz [ 506.089322][ T4342] usb 1-1: SerialNumber: syz [ 506.096123][ T4342] usb 1-1: config 0 descriptor?? [ 506.103542][ T4342] smsc75xx v1.0.0 [ 506.172731][ T4313] usb usb3-port1: attempt power cycle [ 506.479958][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055db3c00: rx timeout, send abort [ 506.582287][ T4313] usb 3-1: new full-speed USB device number 53 using dummy_hcd [ 506.651949][ T4313] usb 3-1: device descriptor read/8, error -71 [ 506.988279][ C1] vcan0: j1939_tp_rxtimer: 0xffff888055db3c00: abort rx timeout. Force session deactivation [ 507.102727][ T4342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 507.114732][ T4342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 507.124793][ T4342] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 507.135554][ T4342] smsc75xx: probe of 1-1:0.184 failed with error -32 [ 507.325214][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71 [ 507.325242][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.325569][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 507.325592][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 507.325608][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 507.325623][ T4314] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 507.325733][ T4314] smsc75xx: probe of 5-1:0.184 failed with error -71 [ 507.330850][ T4314] usb 5-1: USB disconnect, device number 47 [ 507.342299][ T4343] vhci_hcd: vhci_device speed not set [ 507.740718][T11648] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 507.747262][T11648] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 507.772327][T11648] vhci_hcd vhci_hcd.0: Device attached [ 507.808398][T11655] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(9) [ 507.814927][T11655] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 507.832232][T11655] vhci_hcd vhci_hcd.0: Device attached [ 507.859313][T11648] vhci_hcd vhci_hcd.0: pdev(3) rhport(2) sockfd(12) [ 507.865946][T11648] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 507.886957][T11648] vhci_hcd vhci_hcd.0: Device attached [ 507.936580][T11655] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(11) [ 507.943221][T11655] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 507.954120][T11655] vhci_hcd vhci_hcd.0: Device attached [ 507.982303][ T9578] vhci_hcd: vhci_device speed not set [ 507.997361][T11648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.017222][T11648] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 508.036649][T11648] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19) [ 508.043281][T11648] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 508.051218][T11648] vhci_hcd vhci_hcd.0: Device attached [ 508.056773][ T9578] usb 39-1: new full-speed USB device number 4 using vhci_hcd [ 508.068089][T11665] vhci_hcd: connection closed [ 508.068093][T11669] vhci_hcd: connection closed [ 508.074259][T11675] vhci_hcd: connection closed [ 508.081000][ T4588] vhci_hcd: stop threads [ 508.081544][T11663] vhci_hcd: connection closed [ 508.087293][ T4588] vhci_hcd: release socket [ 508.101306][T11661] vhci_hcd: connection reset by peer [ 508.107900][ T4588] vhci_hcd: disconnect device [ 508.113496][ T4588] vhci_hcd: stop threads [ 508.117805][ T4588] vhci_hcd: release socket [ 508.123176][ T4588] vhci_hcd: disconnect device [ 508.129130][ T4588] vhci_hcd: stop threads [ 508.148707][ T4588] vhci_hcd: release socket [ 508.156145][ T4588] vhci_hcd: disconnect device [ 508.160972][ T4588] vhci_hcd: stop threads [ 508.166229][ T4588] vhci_hcd: release socket [ 508.170693][ T4588] vhci_hcd: disconnect device [ 508.175784][ T4588] vhci_hcd: stop threads [ 508.180045][ T4588] vhci_hcd: release socket [ 508.185126][ T4588] vhci_hcd: disconnect device [ 508.377762][ T4313] usb 1-1: USB disconnect, device number 51 [ 510.182117][ T4314] usb 5-1: new full-speed USB device number 48 using dummy_hcd [ 510.347245][ T4314] usb 5-1: device descriptor read/64, error -71 [ 510.453634][T11707] fuse: Unknown parameter 'group_i00000000000000000000' [ 510.622223][ T4314] usb 5-1: new full-speed USB device number 49 using dummy_hcd [ 510.850740][ T4314] usb 5-1: device descriptor read/64, error -71 [ 510.869213][T11703] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 510.875749][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 510.889595][T11703] vhci_hcd vhci_hcd.0: Device attached [ 510.899945][T11703] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 510.906455][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 510.942357][ T7030] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 511.557646][ T4314] usb usb5-port1: attempt power cycle [ 511.630604][T11703] vhci_hcd vhci_hcd.0: Device attached [ 511.642144][ T4328] vhci_hcd: vhci_device speed not set [ 511.655266][T11717] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(15) [ 511.661877][T11717] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 511.671452][T11711] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(12) [ 511.678047][T11711] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 511.688958][T11717] vhci_hcd vhci_hcd.0: Device attached [ 511.690570][T11703] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.703051][ T7030] usb 3-1: Using ep0 maxpacket: 32 [ 511.712092][ T4328] usb 33-1: new full-speed USB device number 4 using vhci_hcd [ 511.731686][T11711] vhci_hcd vhci_hcd.0: Device attached [ 511.737452][ T7030] usb 3-1: config 0 has an invalid interface number: 184 but max is 0 [ 511.754628][ T7030] usb 3-1: config 0 has no interface number 0 [ 511.773323][T11737] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 511.777486][ T7030] usb 3-1: config 0 interface 184 has no altsetting 0 [ 511.796437][ T7030] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 511.806902][ T7030] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.815092][ T7030] usb 3-1: Product: syz [ 511.819615][ T7030] usb 3-1: Manufacturer: syz [ 511.824552][ T7030] usb 3-1: SerialNumber: syz [ 511.827286][T11703] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 511.835732][T11703] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 511.867927][ T7030] usb 3-1: config 0 descriptor?? [ 511.880110][T11703] vhci_hcd vhci_hcd.0: Device attached [ 511.900612][ T7030] smsc75xx v1.0.0 [ 511.914492][T11739] vhci_hcd: connection closed [ 511.914790][ T4458] vhci_hcd: stop threads [ 511.925159][T11729] vhci_hcd: connection closed [ 511.926023][T11728] vhci_hcd: connection closed [ 511.932356][T11724] vhci_hcd: connection closed [ 511.934008][ T4458] vhci_hcd: release socket [ 511.937322][T11721] vhci_hcd: connection reset by peer [ 511.943863][ T4458] vhci_hcd: disconnect device [ 511.959752][ T4458] vhci_hcd: stop threads [ 511.966640][ T4458] vhci_hcd: release socket [ 511.971299][ T4458] vhci_hcd: disconnect device [ 511.980492][ T4458] vhci_hcd: stop threads [ 511.985309][ T4458] vhci_hcd: release socket [ 511.989935][ T4458] vhci_hcd: disconnect device [ 512.001405][ T4458] vhci_hcd: stop threads [ 512.006584][ T4458] vhci_hcd: release socket [ 512.011205][ T4458] vhci_hcd: disconnect device [ 512.019255][ T4458] vhci_hcd: stop threads [ 512.022234][ T4314] usb 5-1: new full-speed USB device number 50 using dummy_hcd [ 512.025735][ T4458] vhci_hcd: release socket [ 512.036751][ T4458] vhci_hcd: disconnect device [ 512.062832][ T4314] usb 5-1: device descriptor read/8, error -71 [ 512.262122][ T4342] usb 4-1: new full-speed USB device number 54 using dummy_hcd [ 512.299958][ T7030] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 512.311038][ T7030] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -32 [ 512.320778][ T7030] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 512.331097][ T7030] smsc75xx: probe of 3-1:0.184 failed with error -32 [ 512.443625][ T4342] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 512.452087][ T4342] usb 4-1: config 0 has no interface number 0 [ 512.458179][ T4342] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 512.469762][ T4342] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 512.479845][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 512.504168][ T4342] usb 4-1: Manufacturer: syz [ 512.508781][ T4342] usb 4-1: SerialNumber: syz [ 512.540324][ T4342] usb 4-1: config 0 descriptor?? [ 512.826868][T11758] loop0: detected capacity change from 0 to 256 [ 512.849088][T11758] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 512.860029][T11758] exFAT-fs (loop0): Medium has reported failures. Some data may be lost. [ 512.886827][T11758] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 512.889090][T11760] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2230'. [ 512.965862][ T4342] usbtouchscreen: probe of 4-1:0.214 failed with error -71 [ 512.985984][ T4342] usb 4-1: USB disconnect, device number 54 [ 513.086780][ T26] audit: type=1326 audit(1756273301.123:2019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.121886][T11765] loop0: detected capacity change from 0 to 512 [ 513.128477][ T26] audit: type=1326 audit(1756273301.153:2020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=448 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.166289][ T26] audit: type=1326 audit(1756273301.153:2021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.189594][ T9578] vhci_hcd: vhci_device speed not set [ 513.197991][ T26] audit: type=1326 audit(1756273301.153:2022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.222378][ T26] audit: type=1326 audit(1756273301.153:2023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.244994][ T26] audit: type=1326 audit(1756273301.153:2024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.245788][T11765] EXT4-fs (loop0): revision level too high, forcing read-only mode [ 513.277849][T11765] EXT4-fs (loop0): orphan cleanup on readonly fs [ 513.284381][ T26] audit: type=1326 audit(1756273301.153:2025): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.307273][ T26] audit: type=1326 audit(1756273301.153:2026): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fdf4798ebe9 code=0x7ffc0000 [ 513.315023][T11765] Quota error (device loop0): dq_insert_tree: Quota tree root isn't allocated! [ 513.329963][ T26] audit: type=1326 audit(1756273301.153:2027): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11764 comm="syz.0.2232" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fdf4798ec23 code=0x7ffc0000 [ 513.361820][T11765] EXT4-fs error (device loop0): ext4_acquire_dquot:6814: comm syz.0.2232: Failed to acquire dquot type 1 [ 513.383741][T11765] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.2232: bg 0: block 40: padding at end of block bitmap is not set [ 513.401818][T11765] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6170: Corrupt filesystem [ 513.417737][T11765] EXT4-fs (loop0): 1 truncate cleaned up [ 513.428467][T11765] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 513.580737][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 513.615005][T11776] netlink: 'syz.3.2235': attribute type 2 has an invalid length. [ 513.659381][ T4314] usb 3-1: USB disconnect, device number 55 [ 513.677575][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 513.732140][T11782] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2235'. [ 513.762206][ T4342] usb 2-1: new full-speed USB device number 44 using dummy_hcd [ 513.799741][T11785] loop2: detected capacity change from 0 to 2048 [ 513.862283][T11785] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 513.922076][ T4342] usb 2-1: device descriptor read/64, error -71 [ 513.930232][T11785] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 513.976872][ T4268] EXT4-fs (loop2): unmounting filesystem. [ 514.145022][T11781] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(7) [ 514.151580][T11781] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 514.162294][T11781] vhci_hcd vhci_hcd.0: Device attached [ 514.192133][ T4342] usb 2-1: new full-speed USB device number 45 using dummy_hcd [ 514.200205][T11789] vhci_hcd vhci_hcd.0: pdev(0) rhport(1) sockfd(9) [ 514.206729][T11789] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 514.256063][T11789] vhci_hcd vhci_hcd.0: Device attached [ 514.270108][T11781] vhci_hcd vhci_hcd.0: pdev(0) rhport(2) sockfd(11) [ 514.276726][T11781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 514.284997][T11781] vhci_hcd vhci_hcd.0: Device attached [ 514.296563][T11781] vhci_hcd vhci_hcd.0: pdev(0) rhport(3) sockfd(13) [ 514.303154][T11781] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed) [ 514.315425][T11781] vhci_hcd vhci_hcd.0: Device attached [ 514.322942][T11781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 514.331749][T11781] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 514.345007][T11781] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19) [ 514.351614][T11781] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 514.360607][T11781] vhci_hcd vhci_hcd.0: Device attached [ 514.368343][T11808] vhci_hcd: connection closed [ 514.368549][ T35] vhci_hcd: stop threads [ 514.372074][ T4342] usb 2-1: device descriptor read/64, error -71 [ 514.373803][ T35] vhci_hcd: release socket [ 514.389274][T11806] vhci_hcd: connection closed [ 514.389486][T11804] vhci_hcd: connection closed [ 514.394988][T11797] vhci_hcd: connection closed [ 514.396547][ T35] vhci_hcd: disconnect device [ 514.399825][T11793] vhci_hcd: connection closed [ 514.409460][ T35] vhci_hcd: stop threads [ 514.422364][ T35] vhci_hcd: release socket [ 514.426903][ T35] vhci_hcd: disconnect device [ 514.437448][ T35] vhci_hcd: stop threads [ 514.444941][ T35] vhci_hcd: release socket [ 514.449604][ T35] vhci_hcd: disconnect device [ 514.460895][ T35] vhci_hcd: stop threads [ 514.492191][ T4342] usb usb2-port1: attempt power cycle [ 514.498805][ T35] vhci_hcd: release socket [ 514.504649][ T35] vhci_hcd: disconnect device [ 514.509657][ T35] vhci_hcd: stop threads [ 514.518845][ T35] vhci_hcd: release socket [ 514.525802][ T35] vhci_hcd: disconnect device [ 514.532330][ T4314] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 514.552227][ T7030] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 514.666131][T11817] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 514.713574][ T4314] usb 3-1: New USB device found, idVendor=14ea, idProduct=ab11, bcdDevice=cf.a5 [ 514.728231][ T4314] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.744558][ T4314] usb 3-1: config 0 descriptor?? [ 514.772121][ T7030] usb 5-1: Using ep0 maxpacket: 16 [ 514.779011][ T7030] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 514.804282][ T7030] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 514.834702][ T7030] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 514.852779][ T7030] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.863801][ T7030] usb 5-1: Product: syz [ 514.867981][ T7030] usb 5-1: Manufacturer: syz [ 514.872836][ T7030] usb 5-1: SerialNumber: syz [ 514.903210][ T4342] usb 2-1: new full-speed USB device number 46 using dummy_hcd [ 514.942574][ T4342] usb 2-1: device descriptor read/8, error -71 [ 515.100170][ T7030] usb 5-1: 0:2 : does not exist [ 515.118237][ T7030] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 515.227080][ T4342] usb 2-1: new full-speed USB device number 47 using dummy_hcd [ 515.230702][ T7030] usb 5-1: USB disconnect, device number 52 [ 515.257392][T11825] loop0: detected capacity change from 0 to 64 [ 515.298485][ T4342] usb 2-1: device descriptor read/8, error -71 [ 515.358778][ T4314] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 515.377505][ T4314] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 515.438725][ T4342] usb usb2-port1: unable to enumerate USB device [ 515.582338][ T4314] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 515.592435][ T4314] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 515.823583][ T4314] asix 3-1:0.0 eth1: register 'asix' at usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet, aa:aa:aa:aa:aa:bb [ 515.837469][ T4314] usb 3-1: USB disconnect, device number 56 [ 515.880558][ T4314] asix 3-1:0.0 eth1: unregister 'asix' usb-dummy_hcd.2-1, ASIX AX88178 USB 2.0 Ethernet [ 516.656688][T11862] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 516.842082][ T4313] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 516.862315][ T4328] vhci_hcd: vhci_device speed not set [ 517.042188][ T4313] usb 4-1: Using ep0 maxpacket: 8 [ 517.049064][ T4313] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 517.096568][ T4313] usb 4-1: config 0 has no interface number 0 [ 517.119026][ T4313] usb 4-1: config 0 interface 239 altsetting 0 has an invalid endpoint with address 0x64, skipping [ 517.157756][ T4313] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=99.1a [ 517.192484][ T4313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.196445][T11880] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2265'. [ 517.206651][ T4313] usb 4-1: Product: syz [ 517.243450][T11880] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2265'. [ 517.252017][ T4313] usb 4-1: Manufacturer: syz [ 517.268684][ T4313] usb 4-1: SerialNumber: syz [ 517.278848][T11880] tipc: Cannot configure node identity twice [ 517.293014][ T4313] usb 4-1: config 0 descriptor?? [ 517.298501][T11855] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 517.526512][T11855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 517.551116][T11855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 517.578506][ T4313] ath6kl: Failed to submit usb control message: -71 [ 517.598817][ T4313] ath6kl: unable to send the bmi data to the device: -71 [ 517.617046][ T4313] ath6kl: Unable to send get target info: -71 [ 517.631504][ T4313] ath6kl: Failed to init ath6kl core: -71 [ 517.682251][ T4314] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 517.685055][ T4313] ath6kl_usb: probe of 4-1:0.239 failed with error -71 [ 517.708300][ T4313] usb 4-1: USB disconnect, device number 55 [ 517.852866][ T4342] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 517.899857][ T4314] usb 5-1: config 0 has an invalid interface number: 102 but max is 0 [ 517.994562][ T4314] usb 5-1: config 0 has no interface number 0 [ 518.056167][ T4314] usb 5-1: New USB device found, idVendor=2001, idProduct=1a00, bcdDevice=38.f5 [ 518.066618][ T4342] usb 2-1: Using ep0 maxpacket: 8 [ 518.129048][ T4342] usb 2-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00 [ 518.220763][ T4314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.238201][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.263621][ T4314] usb 5-1: config 0 descriptor?? [ 518.268597][ T4342] usb 2-1: Product: syz [ 518.276327][ T4342] usb 2-1: Manufacturer: syz [ 518.280954][ T4342] usb 2-1: SerialNumber: syz [ 518.295905][ T4342] usb 2-1: config 0 descriptor?? [ 518.310510][ T4342] radio-usb-si4713 2-1:0.0: Si4713 development board discovered: (10C4:8244) [ 518.683953][T11919] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 518.782121][ T4321] usb 3-1: new full-speed USB device number 57 using dummy_hcd [ 518.907694][ T4314] asix 5-1:0.102 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 518.926675][ T4314] asix: probe of 5-1:0.102 failed with error -71 [ 518.960043][ T4314] usb 5-1: USB disconnect, device number 53 [ 518.983841][ T4321] usb 3-1: config 0 has no interfaces? [ 518.989538][ T4321] usb 3-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice= 0.5a [ 519.009814][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.031938][ T4321] usb 3-1: config 0 descriptor?? [ 519.131877][ T4342] radio-usb-si4713: probe of 2-1:0.0 failed with error -71 [ 519.140566][ T4342] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 519.171199][ T4342] usb 2-1: USB disconnect, device number 48 [ 519.256946][ T4314] usb 3-1: USB disconnect, device number 57 [ 519.602047][ T4321] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 519.752957][T11921] comedi comedi2: reset error (fatal) [ 519.767237][T11934] loop4: detected capacity change from 0 to 256 [ 519.778497][T11934] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 519.793533][ T4321] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 519.812592][T11934] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 519.826607][ T4321] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.845431][T11934] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 519.862614][ T4321] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 519.900507][ T4321] usb 1-1: config 1 has no interface number 1 [ 519.925177][ T4321] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 519.962036][ T2120] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 519.964366][ T4321] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 519.990955][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.001315][T11939] loop3: detected capacity change from 0 to 2048 [ 520.008057][ T4321] usb 1-1: Product: syz [ 520.019667][ T4321] usb 1-1: Manufacturer: syz [ 520.025866][ T4321] usb 1-1: SerialNumber: syz [ 520.036302][T11941] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 520.068063][ T26] kauditd_printk_skb: 56 callbacks suppressed [ 520.068076][ T26] audit: type=1800 audit(1756273308.103:2083): pid=11939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2287" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 520.152146][ T2120] usb 2-1: Using ep0 maxpacket: 8 [ 520.165232][ T2120] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 520.212187][ T2120] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.240221][ T2120] usb 2-1: config 0 descriptor?? [ 520.293247][ T4321] usb 1-1: MIDIStreaming interface descriptor not found [ 520.507678][ T2120] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 520.722623][ T2120] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 520.733713][ T2120] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 520.762138][ T2120] asix: probe of 2-1:0.0 failed with error -61 [ 520.771461][ T4321] usb 1-1: USB disconnect, device number 52 [ 520.862860][T11952] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 521.144802][T11959] tipc: Enabling of bearer rejected, failed to enable media [ 521.165674][ T4658] udevd[4658]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 521.793317][T11981] loop3: detected capacity change from 0 to 512 [ 521.828027][T11987] loop4: detected capacity change from 0 to 256 [ 521.836939][T11981] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 521.847119][T11981] ext4 filesystem being mounted at /463/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 521.857874][T11987] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 521.922043][T11987] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 521.948700][T11987] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 522.073347][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 522.422259][ T2120] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 522.431755][T12013] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 522.493609][T12015] tipc: Enabled bearer , priority 0 [ 522.505950][T12015] tipc: Resetting bearer [ 522.523831][T12014] tipc: Disabling bearer [ 522.633886][ T2120] usb 5-1: config 220 has an invalid interface number: 76 but max is 2 [ 522.646807][ T2120] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 522.663748][ T2120] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 522.675650][ T2120] usb 5-1: config 220 has no interface number 2 [ 522.682415][ T2120] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 522.722338][ T2120] usb 5-1: config 220 interface 0 has no altsetting 0 [ 522.784403][ T2120] usb 5-1: config 220 interface 76 has no altsetting 0 [ 522.798257][ T2120] usb 5-1: config 220 interface 1 has no altsetting 0 [ 522.807208][ T4335] usb 2-1: USB disconnect, device number 49 [ 522.816816][ T2120] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 522.857522][ T2120] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.873226][ T2120] usb 5-1: Product: syz [ 522.887615][ T2120] usb 5-1: Manufacturer: syz [ 522.893876][ T2120] usb 5-1: SerialNumber: syz [ 523.106380][ T26] audit: type=1326 audit(1756273311.143:2084): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.152970][ T2120] usb 5-1: selecting invalid altsetting 0 [ 523.159031][ T2120] usb 5-1: Found UVC 7.01 device syz (8086:0b07) [ 523.187184][ T2120] usb 5-1: No valid video chain found. [ 523.194799][T12031] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2315'. [ 523.223290][ T26] audit: type=1326 audit(1756273311.143:2085): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.258739][ T2120] usb 5-1: selecting invalid altsetting 0 [ 523.267971][ T2120] usbtest: probe of 5-1:220.1 failed with error -22 [ 523.316136][ T26] audit: type=1326 audit(1756273311.143:2086): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.322255][ T2120] usb 5-1: USB disconnect, device number 54 [ 523.428677][ T26] audit: type=1326 audit(1756273311.143:2087): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=188 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.516949][ T26] audit: type=1326 audit(1756273311.143:2088): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.576000][ T26] audit: type=1326 audit(1756273311.143:2089): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=189 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.583101][T12042] netlink: 'syz.0.2319': attribute type 2 has an invalid length. [ 523.637821][ T26] audit: type=1326 audit(1756273311.143:2090): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.677625][ T26] audit: type=1326 audit(1756273311.143:2091): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=192 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.700318][ T26] audit: type=1326 audit(1756273311.143:2092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12032 comm="syz.3.2314" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f591058ebe9 code=0x7ffc0000 [ 523.786254][T12049] loop2: detected capacity change from 0 to 8192 [ 523.793540][T12049] FAT-fs (loop2): Unrecognized mount option "A" or missing value [ 523.912090][ T4335] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 523.956659][T12058] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 524.102064][ T4335] usb 4-1: Using ep0 maxpacket: 8 [ 524.108918][ T4335] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 524.137116][ T4335] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.171583][ T4335] usb 4-1: config 0 descriptor?? [ 524.285031][ T4321] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 524.380711][ T4335] asix 4-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random [ 524.472176][ T4321] usb 3-1: Using ep0 maxpacket: 32 [ 524.479246][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.540701][ T4321] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 524.581937][ T4335] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 524.595710][ T4321] usb 3-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 524.602120][ T4335] asix 4-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffc3 [ 524.638470][ T4321] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 524.646205][ T4335] asix: probe of 4-1:0.0 failed with error -61 [ 524.713516][ T4321] usb 3-1: config 0 descriptor?? [ 525.056649][T12074] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2331'. [ 525.165093][ T4321] ft260 0003:0403:6030.0010: unknown main item tag 0x7 [ 525.176050][ T4321] ft260 0003:0403:6030.0010: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.2-1/input0 [ 525.229869][T12077] loop4: detected capacity change from 0 to 2048 [ 525.285884][T12080] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 525.316231][ T26] audit: type=1800 audit(1756273313.353:2093): pid=12077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2332" name="file2" dev="loop4" ino=16 res=0 errno=0 [ 525.376044][ T4321] ft260 0003:0403:6030.0010: chip code: 6424 8183 [ 525.779741][ T4321] ft260 0003:0403:6030.0010: failed to retrieve status: -32 [ 525.797746][ T4321] ft260 0003:0403:6030.0010: failed to reset I2C controller: -71 [ 525.807742][T12094] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 525.899373][ T4321] usb 3-1: USB disconnect, device number 58 [ 526.057866][T12096] fido_id[12096]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 526.538108][T12107] netlink: 'syz.2.2343': attribute type 83 has an invalid length. [ 526.752222][ T4335] usb 4-1: USB disconnect, device number 56 [ 526.861076][T12124] loop3: detected capacity change from 0 to 256 [ 526.901320][T12124] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 526.947553][T12124] exFAT-fs (loop3): Medium has reported failures. Some data may be lost. [ 527.008406][T12124] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 528.004757][T12147] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 528.018243][T12146] loop0: detected capacity change from 0 to 512 [ 528.118517][T12146] EXT4-fs: Ignoring removed i_version option [ 528.178596][T12146] EXT4-fs: Ignoring removed nobh option [ 528.231191][T12146] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 528.273636][T12146] EXT4-fs (loop0): 1 truncate cleaned up [ 528.279918][T12146] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 528.287553][T12155] netlink: 'syz.1.2360': attribute type 83 has an invalid length. [ 528.349856][T12159] loop4: detected capacity change from 0 to 256 [ 528.386297][T12159] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 528.444125][T12159] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 528.494954][T12159] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 528.547952][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 529.253079][ T4321] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 529.512597][ T4321] usb 4-1: no configurations [ 529.517473][ T4321] usb 4-1: can't read configurations, error -22 [ 529.682126][ T4321] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 529.862898][ T4321] usb 4-1: no configurations [ 529.867540][ T4321] usb 4-1: can't read configurations, error -22 [ 529.902447][ T4321] usb usb4-port1: attempt power cycle [ 529.957099][T12191] loop0: detected capacity change from 0 to 8192 [ 529.995168][T12191] FAT-fs (loop0): Unrecognized mount option "A" or missing value [ 530.136663][T12207] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 530.202279][ T4313] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 530.301914][T12211] loop0: detected capacity change from 0 to 2048 [ 530.313593][ T4321] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 530.326706][T12212] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 530.347838][ T26] audit: type=1800 audit(1756273318.383:2094): pid=12211 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.2377" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 530.363089][ T4321] usb 4-1: no configurations [ 530.402131][ T4313] usb 5-1: Using ep0 maxpacket: 32 [ 530.403652][ T4321] usb 4-1: can't read configurations, error -22 [ 530.417917][ T4313] usb 5-1: config 0 has an invalid interface number: 184 but max is 0 [ 530.452218][ T4313] usb 5-1: config 0 has no interface number 0 [ 530.468573][ T4313] usb 5-1: config 0 interface 184 has no altsetting 0 [ 530.481528][ T4313] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 530.493668][T12214] netlink: 'syz.2.2378': attribute type 83 has an invalid length. [ 530.495842][ T4313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.517537][ T4313] usb 5-1: Product: syz [ 530.521786][ T4313] usb 5-1: Manufacturer: syz [ 530.529794][ T4313] usb 5-1: SerialNumber: syz [ 530.545013][ T4313] usb 5-1: config 0 descriptor?? [ 530.554754][ T4313] smsc75xx v1.0.0 [ 530.592182][ T4321] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 530.633122][ T4321] usb 4-1: no configurations [ 530.637908][ T4321] usb 4-1: can't read configurations, error -22 [ 530.677419][ T4321] usb usb4-port1: unable to enumerate USB device [ 530.780383][T12216] overlayfs: conflicting lowerdir path [ 530.956094][T12225] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2381'. [ 530.966144][ T4313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 530.978317][ T4313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 530.991100][ T4313] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 531.014128][ T4313] smsc75xx: probe of 5-1:0.184 failed with error -61 [ 531.505496][T12243] loop0: detected capacity change from 0 to 512 [ 531.538002][T12243] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 531.550947][T12243] ext4 filesystem being mounted at /475/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 531.612060][ T4342] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 531.687356][ T4270] EXT4-fs (loop0): unmounting filesystem. [ 531.760033][T12249] loop0: detected capacity change from 0 to 64 [ 531.792203][ T4342] usb 2-1: Using ep0 maxpacket: 16 [ 531.803576][ T4342] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 531.829973][ T4342] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 531.846594][ T4342] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 531.858501][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.866711][ T4342] usb 2-1: Product: syz [ 531.870870][ T4342] usb 2-1: Manufacturer: syz [ 531.875640][ T4342] usb 2-1: SerialNumber: syz [ 532.024580][T12252] loop3: detected capacity change from 0 to 512 [ 532.049569][T12252] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 532.058788][T12252] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -2 [ 532.081587][T12252] EXT4-fs (loop3): 1 truncate cleaned up [ 532.102449][ T4342] usb 2-1: 0:2 : does not exist [ 532.112130][ T4321] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 532.114475][T12252] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 532.137390][ T4342] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 532.171471][T12252] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 532.174530][ T4342] usb 2-1: USB disconnect, device number 50 [ 532.208599][T12256] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 532.242708][ T4280] EXT4-fs (loop3): unmounting filesystem. [ 532.304233][ T4321] usb 1-1: config 1 has an invalid descriptor of length 230, skipping remainder of the config [ 532.320735][T12258] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2393'. [ 532.330208][ T4321] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 532.339640][ T4321] usb 1-1: config 1 has no interface number 1 [ 532.352754][ T4321] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 532.365938][ T4321] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 152, changing to 7 [ 532.380717][ T4321] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 532.391405][ T4321] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.400125][ T4321] usb 1-1: Product: syz [ 532.404566][ T4321] usb 1-1: Manufacturer: syz [ 532.409451][ T4321] usb 1-1: SerialNumber: syz [ 532.433083][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 532.451805][T12249] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 532.517237][T12260] loop3: detected capacity change from 0 to 1024 [ 532.565638][T12260] hfsplus: bad catalog entry type [ 532.624652][ T4592] hfsplus: b-tree write err: -5, ino 4 [ 532.844486][ T26] audit: type=1326 audit(1756273320.883:2095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 532.855565][T12271] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2398'. [ 532.894684][T12268] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2397'. [ 532.915546][ T26] audit: type=1326 audit(1756273320.923:2096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 532.924247][ T4321] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 532.993784][ T26] audit: type=1326 audit(1756273320.933:2097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.082275][ T4321] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor [ 533.124146][ T4314] usb 5-1: USB disconnect, device number 55 [ 533.125548][ T26] audit: type=1326 audit(1756273320.933:2098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.192507][ T26] audit: type=1326 audit(1756273320.933:2099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.264887][ T26] audit: type=1326 audit(1756273320.933:2100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.313689][ T4321] usb 1-1: USB disconnect, device number 53 [ 533.350509][T12274] overlayfs: conflicting lowerdir path [ 533.386200][ T26] audit: type=1326 audit(1756273320.933:2101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.436496][ T26] audit: type=1326 audit(1756273320.933:2102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8933b8ebe9 code=0x7ffc0000 [ 533.545400][ T26] audit: type=1326 audit(1756273320.933:2103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12267 comm="syz.1.2397" exe="/root/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7f8933b90a7c code=0x7ffc0000 [ 533.598957][T12272] infiniband syz!: set active [ 533.606774][T12272] infiniband syz!: added team_slave_0 [ 533.650477][T12268] syz.1.2397 (12268) used greatest stack depth: 17544 bytes left [ 533.665322][ T4716] udevd[4716]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 533.765282][T12272] RDS/IB: syz!: added [ 533.780437][T12272] smc: adding ib device syz! with port count 1 [ 533.790402][T12272] smc: ib device syz! port 1 has pnetid [ 533.916465][T12292] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2404'. [ 534.195485][T12306] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2410'. [ 534.363743][T12311] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 534.382272][ T2120] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 534.582173][ T2120] usb 1-1: Using ep0 maxpacket: 16 [ 534.594837][ T2120] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 534.634023][ T2120] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 534.670997][ T2120] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 534.682127][ T2120] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.690188][ T2120] usb 1-1: Product: syz [ 534.694913][ T2120] usb 1-1: Manufacturer: syz [ 534.699599][ T2120] usb 1-1: SerialNumber: syz [ 535.730210][ T2120] usb 1-1: 0:2 : does not exist [ 535.754123][ T2120] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 535.817232][ T2120] usb 1-1: USB disconnect, device number 54 [ 538.913432][ T4451] udevd[4451]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 539.393291][T12505] overlayfs: conflicting lowerdir path [ 540.516107][T12528] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2423'. [ 540.795416][ T2120] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 541.027195][ T2120] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 541.047469][ T2120] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 541.057789][ T2120] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 541.067111][ T2120] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 541.079177][T12525] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 541.112071][ T4321] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 541.284340][T12541] loop0: detected capacity change from 0 to 32768 [ 541.323109][ T4321] usb 3-1: Using ep0 maxpacket: 16 [ 541.330031][ T4321] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 541.332971][T12541] (syz.0.2425,12541,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.356824][ T2120] usb 5-1: USB disconnect, device number 56 [ 541.358113][ T4321] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 541.386393][ T4321] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 541.389927][T12541] (syz.0.2425,12541,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 541.428167][ T4321] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.463043][ T4321] usb 3-1: Product: syz [ 541.467237][ T4321] usb 3-1: Manufacturer: syz [ 541.473865][ T4321] usb 3-1: SerialNumber: syz [ 541.492762][T12541] JBD2: Ignoring recovery information on journal [ 541.544075][ T4342] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 541.608951][T12541] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 541.617130][T12560] fuse: Unknown parameter 'x}hdᓃdkX7BعiЅQw&ίF[9zo*ԩٍ71~tv1H<<h1[?O$`gzÕOhd*xHu6UXXTgn' [ 541.707848][ T4321] usb 3-1: 0:2 : does not exist [ 541.729841][ T4321] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 541.742198][ T4342] usb 4-1: Using ep0 maxpacket: 32 [ 541.749670][ T4342] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 541.749972][T12541] [ 541.760160][T12541] ====================================================== [ 541.767175][T12541] WARNING: possible circular locking dependency detected [ 541.769702][ T4342] usb 4-1: config 0 has no interface number 0 [ 541.774177][T12541] 6.1.148-syzkaller #0 Not tainted [ 541.774187][T12541] ------------------------------------------------------ [ 541.774192][T12541] syz.0.2425/12541 is trying to acquire lock: [ 541.774201][T12541] ffff8880733e6650 (sb_internal#3){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x66e/0xb10 [ 541.807726][T12541] [ 541.807726][T12541] but task is already holding lock: [ 541.815070][T12541] ffff88807029bf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 541.825923][T12541] [ 541.825923][T12541] which lock already depends on the new lock. [ 541.825923][T12541] [ 541.836302][T12541] [ 541.836302][T12541] the existing dependency chain (in reverse order) is: [ 541.845296][T12541] [ 541.845296][T12541] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}: [ 541.854137][T12541] down_write+0x36/0x60 [ 541.858798][T12541] ocfs2_lock_global_qf+0x1e5/0x270 [ 541.864497][T12541] ocfs2_acquire_dquot+0x2a0/0xb10 [ 541.870107][T12541] dqget+0x778/0xeb0 [ 541.874501][T12541] __dquot_initialize+0x3b6/0xcb0 [ 541.880025][T12541] ocfs2_get_init_inode+0x138/0x1b0 [ 541.885727][T12541] ocfs2_mknod+0x8be/0x2350 [ 541.890732][T12541] ocfs2_mkdir+0x1b6/0x4a0 [ 541.895650][T12541] vfs_mkdir+0x387/0x570 [ 541.900399][T12541] do_mkdirat+0x1d0/0x430 [ 541.905240][T12541] __x64_sys_mkdir+0x6a/0x80 [ 541.910342][T12541] do_syscall_64+0x4c/0xa0 [ 541.915267][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.921676][T12541] [ 541.921676][T12541] -> #5 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}: [ 541.932178][T12541] down_write+0x36/0x60 [ 541.936846][T12541] ocfs2_lock_global_qf+0x1c7/0x270 [ 541.942548][T12541] ocfs2_acquire_dquot+0x2a0/0xb10 [ 541.948161][T12541] dqget+0x778/0xeb0 [ 541.952563][T12541] __dquot_initialize+0x3b6/0xcb0 [ 541.958092][T12541] ocfs2_get_init_inode+0x138/0x1b0 [ 541.963799][T12541] ocfs2_mknod+0x8be/0x2350 [ 541.968805][T12541] ocfs2_mkdir+0x1b6/0x4a0 [ 541.973724][T12541] vfs_mkdir+0x387/0x570 [ 541.978468][T12541] do_mkdirat+0x1d0/0x430 [ 541.983299][T12541] __x64_sys_mkdir+0x6a/0x80 [ 541.988388][T12541] do_syscall_64+0x4c/0xa0 [ 541.993306][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 541.999706][T12541] [ 541.999706][T12541] -> #4 (&dquot->dq_lock){+.+.}-{3:3}: [ 542.007343][T12541] __mutex_lock+0x120/0xaf0 [ 542.012356][T12541] dquot_commit+0x5a/0x410 [ 542.017286][T12541] ext4_write_dquot+0x1f0/0x360 [ 542.022648][T12541] mark_all_dquot_dirty+0xf9/0x400 [ 542.028270][T12541] __dquot_alloc_space+0x5fc/0xe60 [ 542.033887][T12541] ext4_mb_new_blocks+0xf74/0x4720 [ 542.039508][T12541] ext4_ext_map_blocks+0x143c/0x66d0 [ 542.045302][T12541] ext4_map_blocks+0x9d1/0x1b60 [ 542.050666][T12541] ext4_getblk+0x1ab/0x6d0 [ 542.055587][T12541] ext4_bread+0x26/0x170 [ 542.060334][T12541] ext4_append+0x2c3/0x560 [ 542.065253][T12541] ext4_init_new_dir+0x2b8/0x570 [ 542.070694][T12541] ext4_mkdir+0x47d/0xc50 [ 542.075528][T12541] vfs_mkdir+0x387/0x570 [ 542.080272][T12541] do_mkdirat+0x1d0/0x430 [ 542.085100][T12541] __x64_sys_mkdirat+0x85/0x90 [ 542.090365][T12541] do_syscall_64+0x4c/0xa0 [ 542.095284][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.101691][T12541] [ 542.101691][T12541] -> #3 (&ei->i_data_sem){++++}-{3:3}: [ 542.109316][T12541] down_write+0x36/0x60 [ 542.113975][T12541] ext4_truncate+0x987/0x1230 [ 542.119153][T12541] ext4_setattr+0x10cb/0x19f0 [ 542.124333][T12541] notify_change+0xc74/0xf40 [ 542.129427][T12541] do_truncate+0x197/0x220 [ 542.134344][T12541] do_sys_ftruncate+0x312/0x3c0 [ 542.139698][T12541] do_syscall_64+0x4c/0xa0 [ 542.144613][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.151024][T12541] [ 542.151024][T12541] -> #2 (jbd2_handle){++++}-{0:0}: [ 542.158301][T12541] start_this_handle+0x1f49/0x2150 [ 542.163916][T12541] jbd2__journal_start+0x2b7/0x5a0 [ 542.169530][T12541] jbd2_journal_start+0x26/0x30 [ 542.174884][T12541] ocfs2_start_trans+0x372/0x6c0 [ 542.180329][T12541] ocfs2_modify_bh+0xe5/0x460 [ 542.185511][T12541] ocfs2_local_read_info+0x13b1/0x16e0 [ 542.191467][T12541] dquot_load_quota_sb+0x756/0xac0 [ 542.197079][T12541] dquot_load_quota_inode+0x2d8/0x5d0 [ 542.202953][T12541] ocfs2_enable_quotas+0x1c3/0x440 [ 542.208566][T12541] ocfs2_fill_super+0x409f/0x4d00 [ 542.214095][T12541] mount_bdev+0x287/0x3c0 [ 542.218924][T12541] legacy_get_tree+0xe6/0x180 [ 542.224104][T12541] vfs_get_tree+0x88/0x270 [ 542.229021][T12541] do_new_mount+0x24a/0xa40 [ 542.234027][T12541] __se_sys_mount+0x2d6/0x3c0 [ 542.239200][T12541] do_syscall_64+0x4c/0xa0 [ 542.244116][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.250514][T12541] [ 542.250514][T12541] -> #1 (&journal->j_trans_barrier){.+.+}-{3:3}: [ 542.259012][T12541] down_read+0x42/0x2d0 [ 542.263674][T12541] ocfs2_start_trans+0x366/0x6c0 [ 542.269118][T12541] ocfs2_modify_bh+0xe5/0x460 [ 542.274299][T12541] ocfs2_local_read_info+0x13b1/0x16e0 [ 542.280271][T12541] dquot_load_quota_sb+0x756/0xac0 [ 542.285897][T12541] dquot_load_quota_inode+0x2d8/0x5d0 [ 542.291776][T12541] ocfs2_enable_quotas+0x1c3/0x440 [ 542.297399][T12541] ocfs2_fill_super+0x409f/0x4d00 [ 542.302936][T12541] mount_bdev+0x287/0x3c0 [ 542.307771][T12541] legacy_get_tree+0xe6/0x180 [ 542.312954][T12541] vfs_get_tree+0x88/0x270 [ 542.317876][T12541] do_new_mount+0x24a/0xa40 [ 542.322893][T12541] __se_sys_mount+0x2d6/0x3c0 [ 542.328069][T12541] do_syscall_64+0x4c/0xa0 [ 542.332989][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.339390][T12541] [ 542.339390][T12541] -> #0 (sb_internal#3){.+.+}-{0:0}: [ 542.346845][T12541] __lock_acquire+0x2cf8/0x7c50 [ 542.352204][T12541] lock_acquire+0x1b4/0x490 [ 542.357211][T12541] ocfs2_start_trans+0x267/0x6c0 [ 542.362658][T12541] ocfs2_acquire_dquot+0x66e/0xb10 [ 542.368269][T12541] dqget+0x778/0xeb0 [ 542.372666][T12541] __dquot_initialize+0x3b6/0xcb0 [ 542.378192][T12541] ocfs2_get_init_inode+0x138/0x1b0 [ 542.383895][T12541] ocfs2_mknod+0x8be/0x2350 [ 542.388899][T12541] ocfs2_mkdir+0x1b6/0x4a0 [ 542.393818][T12541] vfs_mkdir+0x387/0x570 [ 542.398561][T12541] do_mkdirat+0x1d0/0x430 [ 542.403389][T12541] __x64_sys_mkdir+0x6a/0x80 [ 542.408476][T12541] do_syscall_64+0x4c/0xa0 [ 542.413392][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.419793][T12541] [ 542.419793][T12541] other info that might help us debug this: [ 542.419793][T12541] [ 542.429997][T12541] Chain exists of: [ 542.429997][T12541] sb_internal#3 --> &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3 --> &ocfs2_quota_ip_alloc_sem_key [ 542.429997][T12541] [ 542.446925][T12541] Possible unsafe locking scenario: [ 542.446925][T12541] [ 542.454365][T12541] CPU0 CPU1 [ 542.459715][T12541] ---- ---- [ 542.465062][T12541] lock(&ocfs2_quota_ip_alloc_sem_key); [ 542.470680][T12541] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3); [ 542.480474][T12541] lock(&ocfs2_quota_ip_alloc_sem_key); [ 542.488609][T12541] lock(sb_internal#3); [ 542.492840][T12541] [ 542.492840][T12541] *** DEADLOCK *** [ 542.492840][T12541] [ 542.500961][T12541] 6 locks held by syz.0.2425/12541: [ 542.506137][T12541] #0: ffff8880733e6460 (sb_writers#25){.+.+}-{0:0}, at: mnt_want_write+0x3d/0x90 [ 542.515351][T12541] #1: ffff8880700f89c8 (&type->i_mutex_dir_key#15/1){+.+.}-{3:3}, at: filename_create+0x1f2/0x450 [ 542.526036][T12541] #2: ffff8880474109c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#2){+.+.}-{3:3}, at: ocfs2_reserve_suballoc_bits+0x162/0x4630 [ 542.539673][T12541] #3: ffff88805564c0a8 (&dquot->dq_lock){+.+.}-{3:3}, at: ocfs2_acquire_dquot+0x293/0xb10 [ 542.549654][T12541] #4: ffff88807029c2c8 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#3){+.+.}-{3:3}, at: ocfs2_lock_global_qf+0x1c7/0x270 [ 542.562592][T12541] #5: ffff88807029bf60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{3:3}, at: ocfs2_lock_global_qf+0x1e5/0x270 [ 542.573875][T12541] [ 542.573875][T12541] stack backtrace: [ 542.579762][T12541] CPU: 1 PID: 12541 Comm: syz.0.2425 Not tainted 6.1.148-syzkaller #0 [ 542.587896][T12541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 542.597941][T12541] Call Trace: [ 542.601203][T12541] [ 542.604121][T12541] dump_stack_lvl+0x168/0x22e [ 542.608781][T12541] ? load_image+0x3b0/0x3b0 [ 542.613268][T12541] ? show_regs_print_info+0x12/0x12 [ 542.618453][T12541] ? print_circular_bug+0x12b/0x1a0 [ 542.623638][T12541] check_noncircular+0x274/0x310 [ 542.628562][T12541] ? add_chain_block+0x940/0x940 [ 542.633481][T12541] ? lockdep_lock+0xdc/0x1e0 [ 542.638056][T12541] ? mark_lock+0x94/0x320 [ 542.642369][T12541] ? _find_first_zero_bit+0xcf/0x100 [ 542.647642][T12541] __lock_acquire+0x2cf8/0x7c50 [ 542.652480][T12541] ? do_mkdirat+0x1d0/0x430 [ 542.656967][T12541] ? verify_lock_unused+0x140/0x140 [ 542.662148][T12541] ? verify_lock_unused+0x140/0x140 [ 542.667328][T12541] ? mark_lock+0x94/0x320 [ 542.671638][T12541] ? verify_lock_unused+0x140/0x140 [ 542.676818][T12541] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 542.682783][T12541] lock_acquire+0x1b4/0x490 [ 542.687271][T12541] ? ocfs2_acquire_dquot+0x66e/0xb10 [ 542.692539][T12541] ? __might_sleep+0xd0/0xd0 [ 542.697112][T12541] ? do_raw_spin_lock+0x11d/0x280 [ 542.702118][T12541] ? read_lock_is_recursive+0x10/0x10 [ 542.707473][T12541] ? __rwlock_init+0x140/0x140 [ 542.712222][T12541] ? do_raw_spin_unlock+0x11d/0x230 [ 542.717404][T12541] ocfs2_start_trans+0x267/0x6c0 [ 542.722329][T12541] ? ocfs2_acquire_dquot+0x66e/0xb10 [ 542.727598][T12541] ? ocfs2_recovery_exit+0x50/0x50 [ 542.732693][T12541] ? do_raw_spin_unlock+0x11d/0x230 [ 542.737876][T12541] ? _raw_spin_unlock+0x24/0x40 [ 542.742713][T12541] ? ocfs2_qinfo_unlock+0x11a/0x140 [ 542.747896][T12541] ocfs2_acquire_dquot+0x66e/0xb10 [ 542.752994][T12541] ? from_kuid+0x155/0x670 [ 542.757394][T12541] ? ocfs2_destroy_dquot+0x40/0x40 [ 542.762484][T12541] ? percpu_counter_add_batch+0x13b/0x160 [ 542.768189][T12541] dqget+0x778/0xeb0 [ 542.772070][T12541] __dquot_initialize+0x3b6/0xcb0 [ 542.777075][T12541] ? dquot_initialize+0x20/0x20 [ 542.781902][T12541] ? do_raw_spin_unlock+0x11d/0x230 [ 542.787090][T12541] ocfs2_get_init_inode+0x138/0x1b0 [ 542.792268][T12541] ? ocfs2_create_inode_in_orphan+0x1080/0x1080 [ 542.798490][T12541] ? __lock_acquire+0x13c0/0x7c50 [ 542.803499][T12541] ocfs2_mknod+0x8be/0x2350 [ 542.807987][T12541] ? ocfs2_mkdir+0x4a0/0x4a0 [ 542.812568][T12541] ? ocfs2_inode_lock_tracker+0x3e8/0x660 [ 542.818271][T12541] ? __lock_acquire+0x7c50/0x7c50 [ 542.823276][T12541] ? do_raw_spin_lock+0x11d/0x280 [ 542.828291][T12541] ? ocfs2_inode_unlock_tracker+0x26c/0x2e0 [ 542.834165][T12541] ? __lock_acquire+0x7c50/0x7c50 [ 542.839173][T12541] ? __rwlock_init+0x140/0x140 [ 542.843920][T12541] ? ocfs2_lookup+0x4d7/0xa60 [ 542.848581][T12541] ? do_raw_spin_unlock+0x11d/0x230 [ 542.853763][T12541] ? _raw_spin_unlock+0x24/0x40 [ 542.858598][T12541] ? put_pid+0xda/0x120 [ 542.862739][T12541] ocfs2_mkdir+0x1b6/0x4a0 [ 542.867136][T12541] ? make_kgid+0x640/0x640 [ 542.871535][T12541] ? ocfs2_symlink+0x2650/0x2650 [ 542.876453][T12541] ? HAS_UNMAPPED_ID+0x1d3/0x230 [ 542.881374][T12541] ? ocfs2_getattr+0x350/0x350 [ 542.886120][T12541] ? inode_permission+0xef/0x480 [ 542.891040][T12541] ? bpf_lsm_inode_mkdir+0x5/0x10 [ 542.896047][T12541] ? security_inode_mkdir+0xb3/0x100 [ 542.901312][T12541] vfs_mkdir+0x387/0x570 [ 542.905537][T12541] do_mkdirat+0x1d0/0x430 [ 542.909845][T12541] ? vfs_mkdir+0x570/0x570 [ 542.914243][T12541] ? getname_flags+0x206/0x500 [ 542.918990][T12541] __x64_sys_mkdir+0x6a/0x80 [ 542.923560][T12541] do_syscall_64+0x4c/0xa0 [ 542.927958][T12541] ? clear_bhb_loop+0x60/0xb0 [ 542.932613][T12541] ? clear_bhb_loop+0x60/0xb0 [ 542.937271][T12541] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 542.943148][T12541] RIP: 0033:0x7fdf4798ebe9 [ 542.947556][T12541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.967142][T12541] RSP: 002b:00007fdf487f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 542.975536][T12541] RAX: ffffffffffffffda RBX: 00007fdf47bb5fa0 RCX: 00007fdf4798ebe9 [ 542.983488][T12541] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 542.991440][T12541] RBP: 00007fdf47a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 542.999390][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 543.007344][T12541] R13: 00007fdf47bb6038 R14: 00007fdf47bb5fa0 R15: 00007ffd228b5be8 [ 543.015305][T12541] [ 543.038117][ T4321] usb 3-1: USB disconnect, device number 59 [ 543.078943][ T4342] usb 4-1: config 0 interface 184 has no altsetting 0 [ 543.096332][T11826] udevd[11826]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 543.096792][ T4342] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 543.125543][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 543.135628][ T4342] usb 4-1: Product: syz [ 543.141037][ T4342] usb 4-1: Manufacturer: syz [ 543.172351][ T4342] usb 4-1: SerialNumber: syz [ 543.190504][ T4342] usb 4-1: config 0 descriptor?? [ 543.202185][ T4342] smsc75xx v1.0.0 [ 543.208610][ T4270] ocfs2: Unmounting device (7,0) on (node local) [ 543.599842][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 543.610665][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 543.621182][ T4342] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 543.632706][ T4342] smsc75xx: probe of 4-1:0.184 failed with error -61 [ 544.836636][ T9578] usb 4-1: USB disconnect, device number 61