last executing test programs: 19m43.602947554s ago: executing program 32 (id=60): r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000400)={0x7, 0xa, 0x3, "3258c5c00e7f94ae1e008faa001b0000f4ff4000000000000000e91aba2800", 0x48524742}) 18m43.591048463s ago: executing program 33 (id=274): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1300, 0x6}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x3, 0x2000000, &(0x7f0000000580)="b3185d"}) 18m38.060505988s ago: executing program 34 (id=290): syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file2\x00', 0x4800, &(0x7f0000000100)=ANY=[], 0x1, 0x6bb, &(0x7f00000018c0)="$eJzs3c1vXFfdB/DvHY8dT9ombpq0eR5VqtVIgIhI7FgpmA0BIWSkCqGyYG0lTmNlkhbHRW6FqMPrtov+Ad1kg1ghsWITqbBgA7vukJeVkNh0g1kNujN3XjJ+m+bF45TPJ7pzzj3nnnN/93fvnbfImgD/s5bOp34/RZbOv75Rrm/dW2hu3Vu41a0nOZZkM6knqSUp/t1qtT5OriRFb5piqNzhw9XFNz75bOvTzlq9Wtrb1/YbN6TabnOoebPbNptkoiofwQPzXX3k+Ype5FeSnKtKGLvJJK3WZFo9P/nrs72esvNkp2zsNnr68AIFnpii87pZvhjXBttnkuPVjV6+D+i+8tbGEuQIjo243fA7CAAAAHjajPIZ+OR2trNRnDiEcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOALYbP/+/9FtdS69dkU3d//n6raUtWPllc+3+b3n1QcAAAAAAAAAHCIXtnOdjZyorveKtr/5/9qe+V0+/GZvJM7WclaLmQjy1nPetYyn2RmYKKpjeX19bX5EUZe2nXkpQMCPVaVjcdz3AAAAAAAAADwBfOLLPX//x8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAI6CIpnoFCnuDjTPpFZPMp1kqmzYTP7erT/N7o87AAAAADgEJ7eznY2c6K63ipxO8mL7O4DpvJPbWc9q1tPMSq61vxfofOqvbd1baG7dW7hVLjvn/fa/HlidPiCM9ozpfPew+57Ptrdo5HpW2y0XcjVvpZlrqbVHls5W8XRnHYrrbhlT8a3KiAm6VpXlkX9QlTu8P+Jk+xv+MqWx/xcsM+2MTPYyMlfFVmbj+e6Z2f0MDZ2dgwzvaT61XmCnh/Y0FPBD5fx4VZbH85u9cj4Ww5m4NHD1vbh/zpMv//H3P56r6kfnkEYzUZWt9mNjZyYWBjLx0iiZuNG8ffPG9Tvnn7ZM7DDXzsSZ3vpSvpcf5Xxm88OsZTU/zXLWs5LZfLddW65OfjFwe++RqSudYnK33S71E9fN+1R1hU5UrZ8nplfbY09kNT/IW7mWlbzW/ncp8/l6LudyFgfO8Jn9z3D7rq89cNf3XwFaz+2axnNfqSrl095vq3JXe3Y8KWVenx/I6+Bz7ky7b7Cln6VTB2epTMsDz41/2j+U+v9XlXIfvxw49+M3nIn5gUy8sF8muhfynebtm2s3lt8ebXenPhgY/usj9ZRaXi+nypOV7gnqXx1l3wvdvqF8lX2ne321HX1nen2dO3Vzzzt1qnoPt3OmS+2+l3btW2j3nR3o2+391sHv5gAYs+NfPT7V+Gfjb42PGr9q3Gi8Pv2dY9849vJUJv88+c363MSXai8Xf8hH+Xn/8z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPDw7rz73s3lZnNlbajSarXe36Or2TqZ7NH1cJXanmGUlfoBoe6oZPYfz5QDui2t9Lq6P2f2GIM/qPJ/zyajj6p+gSedlvrjzfMYK/9ptVpVS7HHNr/7y85EPTdS6qZGvzYOqExXV3jlSKSuqtQPeadjekICDs3F9VtvX7zz7ntfW721/ObKmyu3Fy9fXpxbvPzawsXrq82Vuc7juKMEnoT+i/64IwEAAAAAAAAAAABGNdrfA+SR/pxg3McIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPN2Wzqd+P0Xm5y7Mletb9xaa5dKt97esJ6klKX6WFB8nV9JZMjMwXbHXfj5cXXzjk8+2Pu3PVS75/tUDxo1ms1oym2SiU959XPNdrcp9FfsdQtE7wjJh57qJg3H7bwAAAP//EOj9JQ==") setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) setxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB='osx.&-]:'], 0x0, 0x0, 0x0) listxattr(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) 18m33.088292465s ago: executing program 35 (id=303): syz_usb_connect(0x3, 0x36, 0x0, 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) 17m53.482150353s ago: executing program 36 (id=406): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r1, 0xc0184800, &(0x7f0000000100)={0x20004, r0, 0x80000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086201, &(0x7f0000000140)=0x6) 17m47.656463149s ago: executing program 37 (id=421): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="000000000000001166ffffff1f00000018000000000000000000000000000a009500000000000000360a020000000001180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50af8ff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x34}, 0x94) 10m19.320752852s ago: executing program 38 (id=3292): r0 = bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = creat(0x0, 0x0) syz_emit_ethernet(0x67, &(0x7f00000002c0)={@link_local, @empty, @val={@void, {0x8100, 0x6, 0x1, 0x4}}, {@ipv4={0x800, @udp={{0xc, 0x4, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x73, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x1c, 0xbb, 0x3, 0x2, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@multicast1, 0x3ff}, {@empty, 0x6}]}]}}, {0x0, 0x0, 0x25, 0x0, @gue={{0x2, 0x0, 0x0, 0xfb, 0x100, @val=0x80}, "aff06bfd485be628e8f8c2a86d59b9238636c133bf"}}}}}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000480)={0x58, r3, 0x405, 0x70bd27, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004c0}, 0x44084) bind$xdp(r1, 0x0, 0x0) fcntl$setsig(r0, 0xa, 0x91) mremap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000ffe000/0x2000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480f0000005e140602000000000e000a001000000002800000121f", 0x2e}], 0x1}, 0x0) 10m15.120495338s ago: executing program 39 (id=3303): socket(0x22, 0x2, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r1 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r2, &(0x7f0000000240)="f2435f0100088000001f00850800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x4, r3, 0x1, 0x0, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00000013000100000000000000000000000002", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB="1400350064756d6d7930"], 0x3c}}, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'dummy0\x00'}) 9m3.230287658s ago: executing program 40 (id=3591): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000240)="f2435f0100088000001f00850800", 0xe, 0x0, &(0x7f0000000300)={0x11, 0x4, r1, 0x1, 0x0, 0x6, @remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[], 0x3c}}, 0x0) 9m3.131089229s ago: executing program 41 (id=3593): socket$netlink(0x10, 0x3, 0x4) syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000009b768405e0483020b9901e40201090227000100000000090400fb015cc7aa"], 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x183a00) 8m41.288565979s ago: executing program 9 (id=3648): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 8m40.16082383s ago: executing program 9 (id=3652): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x60, 0x0, &(0x7f0000000800)={@fd, @ptr={0x70742a85, 0x0, &(0x7f0000000500)=""/221, 0xdd, 0x1, 0xffffffffffffffff}, @fda={0x66646185, 0x9, 0x1}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0}) 8m39.326726742s ago: executing program 9 (id=3653): sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00042d"], 0x14}, 0x1, 0x0, 0x0, 0x2010}, 0x4001) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x2a002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xe, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x5a, 0x9e, 0xa, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x5, 0x4005, 0x6, 0x0, 0x45, 0x1, 0xbdb], 0x1, 0x1c4213}) syz_open_procfs(0x0, &(0x7f0000000180)='coredump_filter\x00') sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x20004840) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m38.371633758s ago: executing program 9 (id=3660): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) fsync(r0) 8m36.918503275s ago: executing program 9 (id=3665): r0 = openat$adsp1(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 8m36.183217082s ago: executing program 9 (id=3669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m34.201881605s ago: executing program 42 (id=3669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f000000bbc0)=[{{0x0, 0x0, &(0x7f0000000380)=[{0x0}], 0x1, 0x0, 0x0, 0x20000041}}], 0x1, 0xc004) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r0, &(0x7f00003a1000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="9a01000000f800b8d58800000f23d00f21f8351000000d0f23f864640f79ea66baf80cb8c85f5480ef66bafc0cecc4c2adac17b9550200000f320f2860c7c4e11751df0f2e2d00000080b9800000c00f3235008000000f30", 0x58}], 0x1, 0x4a, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG_x86(r2, 0x4048ae9b, &(0x7f0000000080)={0xe0003, 0x0, {[0xffffffffffffffff, 0x1f8, 0x83, 0xffffffffefffff15, 0x3, 0x4, 0x4, 0x4]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8m31.77691258s ago: executing program 1 (id=3679): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'lo\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='illinois', 0x8) sendto$inet(r0, &(0x7f0000000900)="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", 0xffffff5d, 0x12, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080), 0xffffffffffffffa9, 0xc9100120, 0x0, 0x0) 8m29.813325941s ago: executing program 1 (id=3683): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, 0x52f}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="7c02000021000100000000000100000000000000000000000000000000000000fe8000000000000000000000002800bb000000000000b43d9800000000000000", @ANYRES32=0x0, @ANYBLOB="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"], 0x27c}}, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000400)=ANY=[@ANYBLOB="0800000000000000b2000040"]) 8m28.730527923s ago: executing program 1 (id=3686): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 8m27.410787562s ago: executing program 1 (id=3692): openat$kvm(0xffffffffffffff9c, 0x0, 0x6c4840, 0x0) syz_mount_image$nilfs2(&(0x7f0000000dc0), &(0x7f0000000400)='./file0\x00', 0x94, &(0x7f0000003280)=ANY=[@ANYBLOB="0001def4774774366f0b8a20db13db64e85fc9322c3fe018b91ff1291b4f4c56de7e4543f49818e1307d98d09daa1e2a7dbf88003e9401dc73aad0b7dbb5685565c7825ba8340621faeae92abed19c524ab06c4303258d253722e159642af447aeb096c6a26d345d82f2925163331b0e9157441a9c61dd1051d3b970f9ac12f5975cf1ad4e45acef1a54921c492a77bcb1858b68758ed339608b8e43c733219f1f9e0b867840f821e03bc0e8a497c4d5dde436000090a397637dedb2f3"], 0x1, 0xd99, &(0x7f0000006900)="$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") r0 = open(&(0x7f0000000240)='./file1\x00', 0xc4142, 0x0) syz_clone(0x0, &(0x7f00000002c0), 0x0, 0x0, &(0x7f0000000100), 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = open(&(0x7f0000000180)='./file1\x00', 0x185102, 0x2b) sendfile(r0, r1, 0x0, 0x1000000201001) 8m25.199660998s ago: executing program 1 (id=3697): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(0x0, 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000240)={0x2, 0x5, 0x40003}) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 8m24.021217841s ago: executing program 1 (id=3703): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 8m21.832557002s ago: executing program 43 (id=3703): openat$vnet(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$inet6(0xa, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x118) openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0)=[0x7fffffff], 0x0, 0x1}) 7m52.814759645s ago: executing program 5 (id=3802): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x800, &(0x7f0000001900)=ANY=[@ANYBLOB='iocharset=iso8859-9,utf8,dmask=00000000000000000000011,utf8,errors=remount-ro,utf8,fmask=00000000000000000000001,errors=remount-ro,iocharset=iso8859-5,gid=', @ANYRESOCT, @ANYBLOB="0002"], 0x1, 0x1548, &(0x7f0000000380)="$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") r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000", @ANYRES32, @ANYBLOB], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r1, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r2, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) socket$netlink(0x10, 0x3, 0xa) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, 0x0) r4 = syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000240)=ANY=[@ANYBLOB='iocharset=macceltic,fmask=00000000000000000000240,errors=remount-ro,iocharset=cp936,iocharset=cp852,dmask=00000000000000000000000,gid=', @ANYRESHEX=0x0, @ANYBLOB="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"], 0x1, 0x152f, &(0x7f00000037c0)="$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") r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fdatasync(r4) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000600)={0xffffffffffffffff, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000080)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), 0x0, 0x0, 0xe8, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000440), &(0x7f0000000480), 0x8, 0xdc, 0x8, 0x8, &(0x7f00000004c0)}}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl(r5, 0x3, &(0x7f00000006c0)="5dfbfe4525bcab8ba4a88d5d8e41d18eb0dde874e0073c9f485872f7b79ba2360c3258e98812fa5bf7b31f456ac6036f638d4d93f41dc03c79c09ba60285086d6542f5726642ef7fe9a4a094b2a9046a4cece06bad1c379271f5af8a1dec7f0f9d6addf816d0e0ccd2bcc280a5e4ec981da97760bcf1d44920457544c239e8b2a55291bc09e2503ce95c18426ba865104f84082b7d") landlock_create_ruleset(&(0x7f0000000140)={0x4000}, 0x18, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1b, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000181100"/80, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000020000000000000080000000950000000000000018180000", @ANYRES32, @ANYBLOB="00000000000000000000000010ffffff00b15b84000000000000001812f70df20f84a8", @ANYRES32=0x1, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000030000009500000000000000"], &(0x7f0000000080)='syzkaller\x00', 0x3, 0x29, &(0x7f00000000c0)=""/41, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000140)={0x2, 0xa, 0x6, 0x9}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000180)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f00000001c0)=[{0x3, 0x1, 0x6, 0x3}, {0x2, 0x6, 0x5, 0x5}], 0x10, 0xffff}, 0x94) r6 = socket$unix(0x1, 0x1, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000000000)={0x1a, {"a2e3ad21ed6b52f99cfbf4c087f71e9b230963ff7fc6e5539b9b3b09719b711b5d30101b080d29558f0e1ac6e7049b3468959b189a242a9b45f3988f7ef319520100ffe8d178708c523c921b1b23380a169b63d336cd3b78130daa61d8e81aea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f309f4cff7738596ecae8707ce065cd5b91cd0ae193973735b36d5b1b63e91c00305d3f46635eb016d5b1dda98e2d749be7bd1d020000000000000075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecd03aded6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801000000005b6bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27afc953854a642c57519544ae15a7e454dea05918b412435111c8f11baa500a3621c56cea8d20ff911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269caf12c31357c8219793e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a687974e7b4ab01b7f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a60560a22f1fca567e65d5e880572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5120000008213b704c7fb082ff27590678ef9f190bae979babc7041d860420c5664ba7921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da3710ac000000001a527777a5371f87d0d4aa202fd28f28381aab144a5d429a04a689b83c7068ae949ef06e288e810bac9c76600025e19c907f8ea2e2f05dd3318271a1f5f8528f227e79c1388dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eefc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f103000000416d59fdee5325928974d12dad99dac44c3f0008047096a44060bebc2420aed92fa9b6578b4779415d97b9a6d601005c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac292d9e53803ed000000009737d214060005ea6f1783e287b3bee96e3a7288afe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f48fe4eae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf02b98a269b891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efedfd71af9444e197f47e866101496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b09114edb8e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615f7084a607a7eceb6243378e0610060f02cca4051c2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c4e15a7b6eb65ca8104e1b4da1fbb67ab2fc043aead87c32ab875ee7c2e7b7019c902cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe529003d1802d5676d95f160ec97b1ad948741b2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd73643de50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c1023bf70cc77737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73c497579773767075428067e7f16f4dde374f8211fef42cb468e623daf60b3569d462f4f19eacdb3ed70eeebb4483f070077d443e8b40426db6fe29068c0ca3d3414442e863a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae44369ddb4581c55925d0f6f1ba471eba281f259152f85e654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b405177548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd84e935e00785ec27e923911fab964c271556527697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9ddbfb96d6144345f48843dd014e5c5ad8fe995754bd9cf32fce1e7027132f2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5336651b1b9bd522d60399473296b831dbd933d93994ba30b4279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee29165895ac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463181f4b87c10772d2b13f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76d57227edff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f84fad6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b30f0b932a4d02da711b757fe43c06d21e759595e4e98b27faea8aa12bc8040000000000000033eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d0000010000000000fcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4908b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cb0b3e35cb80dd349e891aef595dc4d080e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c60edddab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec014508e5247d33ae6c962d35603ff8454c16f8342856935125102bb784ed704887071f3d998efdd9923c954ab6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6ff7ffb1d62458d0741a12830052fcc460db043afe525629b40d7cee65802cb5e930ed624806c43a006dc9336d07c2b8081c188d26558f48261f7897084c2a1a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da3932ba5c04c24a560ad80a3ce654578376e599aff3565b1d531f30912b99e6619ebe93cc0b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c0ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e6491953264c7b34252600c9654e502dcea39cb0800eb69992e234b4ca7db2f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc640df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c6000064b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ff1aa7082ead01a9b03c37b0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058093fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) write$fb(r8, &(0x7f0000000780)="2f89f504efe7ed71b84bbb6da0e7ab57a53619a4b27dc503fbfc2bb96a80e483cb543ac69eb5a6a3914983bec16460929d24870d162aa2b3f677da3906f5c6a8faf2280833d501df64bc098c3a8102cb0cd4cc373e61acef9f349f3b697dfe497ae0a55a51dff27e1eb961eab773b004f89eda772ba8f8532e9bed0c5c16dee480d3ed4638887672da39ae18fef68909a8d7454c13678c51ac65e2a57f477e5ca669cec186849dfe76af91eb9fc89c1da432318999589e0036f16699e8230894c7c7a3", 0xc3) r9 = socket$unix(0x1, 0x1, 0x0) bind$unix(r9, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r9, 0x0) connect$unix(r6, &(0x7f0000000640)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 7m50.308711172s ago: executing program 5 (id=3808): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f0000000000)={0x7fff, 0x8, 0x100}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x20400) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000340)={0x9c, 0x8163, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000200)={0x200, 0x1fb, 0xc38}) r4 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000340)={0x8, 0x8169, 0x6}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r2, 0xc02064b2, &(0x7f00000001c0)={0x7, 0x1, 0x7}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r1, 0xc02064b2, &(0x7f0000000040)={0x40045, 0x6, 0x4}) close_range(r0, 0xffffffffffffffff, 0x0) 7m49.49938143s ago: executing program 5 (id=3813): sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c80)=[{{0x0, 0x0, &(0x7f0000001ac0)=[{0x0}], 0x1}}], 0x1, 0x20000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c616e00000c"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0), 0x0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 7m48.945111034s ago: executing program 5 (id=3817): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(0xffffffffffffffff, 0x0, 0x482, 0x0, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) fsync(r0) 7m47.576229925s ago: executing program 5 (id=3822): r0 = syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file2\x00', 0x8, &(0x7f0000000080)={[{@nodioread_nolock}, {@sb={'sb', 0x3d, 0x1}}]}, 0x4, 0x523, &(0x7f00000018c0)="$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") r1 = getpid() openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x22000, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) r2 = socket(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e22, 0x2, @loopback, 0x3}, 0x1c) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@dstopts={{0x14, 0x29, 0x37, {0x84}}}], 0x14}}], 0x2, 0x4000000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_procfs$pagemap(0x0, &(0x7f0000001080)) r3 = syz_pidfd_open(r1, 0x0) setns(r3, 0x24020000) syz_clone(0x120e1100, 0x0, 0x13, 0x0, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x107042, 0x20) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file2\x00', 0x187842, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r5, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, &(0x7f00000000c0)=[0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x15, &(0x7f0000000180), 0x0, 0x10, &(0x7f00000001c0), &(0x7f0000000240), 0x8, 0xa7, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) r7 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r4, r4, 0x19, 0x0, @val=@target_btf_id=r6}, 0x14) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x10, 0x7fff0000}]}) set_thread_area(&(0x7f0000000000)={0xffffffff, 0x0, 0x0, 0x1}) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0x8a) ioctl$VHOST_SET_VRING_ERR(r5, 0x4008af22, &(0x7f0000000580)={0x1, r7}) fcntl$setflags(r4, 0x2, 0x0) syz_usb_connect(0x5, 0x5a, 0x0, 0x0) r9 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r8, @ANYBLOB=',wfd', @ANYRESHEX=r9]) syz_usb_connect$uac1(0x0, 0xb1, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d010140010102030109029f0003010000000904000000010100000a24010000000201020d24060000030800000031ce21c798329740594c137d0000000c24020201010608000010000c24020000000300000000000924060006010000000924030000000005000924060500", @ANYBLOB="a2"], 0x0) r10 = signalfd(r0, &(0x7f0000000180)={[0xb, 0x10]}, 0x8) fstat(r10, &(0x7f0000000440)) bind$phonet(r8, &(0x7f0000000540)={0x23, 0x0, 0xfc, 0x2}, 0x10) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000100)={0x3920e, r7, 0x5, 0x1, 0x2000000000000003}) 7m46.908998118s ago: executing program 5 (id=3823): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 7m44.740289705s ago: executing program 44 (id=3823): openat$nvram(0xffffffffffffff9c, &(0x7f0000000040), 0xa02, 0x0) syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0xa41) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="05000000070000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r1, @ANYBLOB="0000000000000000b703000000000000850000000d000000b70000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x36, 0x0, &(0x7f0000000900)="c1dfb080cd21d308098ee68886dd", 0x0, 0xadf0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 6m45.305000594s ago: executing program 0 (id=4049): r0 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r1 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000340)="7ae0c6d4ea38398e", 0x8}], 0x1) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000005c0)={0xffffffffffffffff, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x7], 0x0, 0x0, 0x1}}, 0x40) 6m44.940968658s ago: executing program 0 (id=4050): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) 6m44.426627909s ago: executing program 0 (id=4051): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000340)='./file0\x00', 0x4410, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x28f, &(0x7f0000002940)="$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") lseek(0xffffffffffffffff, 0x4, 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0) 6m43.85372308s ago: executing program 0 (id=4054): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@nobarrier}]}, 0xff, 0x485, &(0x7f0000001040)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]}) fsync(r0) io_submit(0x0, 0x0, 0x0) 6m41.541331679s ago: executing program 0 (id=4062): r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') syz_init_net_socket$rose(0xb, 0x5, 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0) write(r2, &(0x7f0000000180)="01010101", 0x4) close(r2) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000003c0)=0x3, &(0x7f0000000400)=0x4) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000800)={[&(0x7f0000000740)='syztnl0\x00', &(0x7f0000000780)='\x00', &(0x7f00000007c0)='syztnl0\x00']}, &(0x7f0000000200), 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) close(r4) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) setitimer(0x1, 0x0, &(0x7f0000000000)) syz_usb_connect(0x0, 0x3f, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000263c6fa101aeb502782e20000000109022d0002000040090904040901276d260609aad5a7f000ffbe08090404"], 0x0) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000340), &(0x7f0000000380), 0x0) 6m41.062220861s ago: executing program 0 (id=4066): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r2, 0x36545000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 6m38.072328045s ago: executing program 45 (id=4066): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x0) r0 = socket(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) syz_mount_image$erofs(&(0x7f0000000400), &(0x7f0000000140)='./file1\x00', 0x3000801, &(0x7f0000000840)=ANY=[], 0x1, 0x1f3, &(0x7f0000000500)="$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") r1 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) r2 = dup(r1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000f, 0x38011, r2, 0x36545000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0xff}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r3, &(0x7f00000000c0)=[{&(0x7f0000000140)='2', 0x1}], 0x1) 1m8.13679153s ago: executing program 6 (id=5164): syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x2000006, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'macceltic'}}, {@umask={'umask', 0x3d, 0x20009}}, {@anchor={'anchor', 0x3d, 0xffff}}, {@gid_forget}, {@volume={'volume', 0x3d, 0x3ff}}, {}, {}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}]}, 0x1, 0xc32, &(0x7f0000000e00)="$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") socket$inet_mptcp(0x2, 0x1, 0x106) r0 = socket(0x1e, 0x4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) r4 = socket(0x1e, 0x4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r6, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0x4}}}, 0x24}}, 0x0) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r0, &(0x7f0000003240), 0x4000000000000e4, 0x0) 59.213001272s ago: executing program 6 (id=5173): socket$nl_generic(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x1, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000680)=ANY=[], 0x0}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x1) syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5883, 0x0, 0x0, 0xfffffdfc}, 0x0, &(0x7f0000000280)) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x200000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x4}, &(0x7f0000000140)=0x8) syz_genetlink_get_family_id$tipc2(&(0x7f0000001ec0), 0xffffffffffffffff) 56.465255773s ago: executing program 6 (id=5178): sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f00000006c0)=ANY=[@ANYBLOB='<'], 0x3c}, 0x1, 0x0, 0x0, 0x4000014}, 0x4000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x4c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@GTPA_MS_ADDR6={0x14, 0xc, @private2}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010101}, @GTPA_FAMILY={0x5, 0xd, 0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40880) writev(0xffffffffffffffff, &(0x7f0000000340)=[{&(0x7f0000000080)='~', 0x1}], 0x1) writev(0xffffffffffffffff, &(0x7f0000000540)=[{&(0x7f0000000140)='Q', 0x1}], 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) rt_sigaction(0x4, &(0x7f00000001c0)={&(0x7f0000000140)="44dfa3998999998f083087649e0d0036660f38df2b660fbab97500000000c3c4a37905d708f246ad66450f28e20f9218c401f5e84c5700", 0x50000003, 0x0, {[0x1]}}, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CAP_EXIT_HYPERCALL(r0, 0x4068aea3, &(0x7f0000000280)={0xc9, 0x0, 0xc}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x0, 0xf, 0x24, 0x3, 0x6, 0x3, 0x0, 0x9e, 0x2, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x8000000000000035, 0x400fff, 0x14000000215b9037, 0x40180, 0x1, 0x11, 0x8000000000f2, 0x0, 0x3, 0x20000005, 0x5, 0xc6bd, 0x566, 0x45, 0x5, 0x7], 0x6006, 0x1c0293}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 55.417070691s ago: executing program 6 (id=5179): syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f00000012c0), 0xfe, 0x244, &(0x7f0000000400)="$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") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000400)='\b', 0x1}], 0x1}, 0x40010) syz_mount_image$fuse(0x0, &(0x7f0000002d40)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 54.875863948s ago: executing program 6 (id=5180): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) 50.833078903s ago: executing program 6 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x3c1e, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000180)}) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4c", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000001c0)=@add_del={0x2, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}}, 0x8000) 48.758466551s ago: executing program 46 (id=5185): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = syz_io_uring_setup(0x3c1e, 0x0, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r1, 0x47f6, 0x0, 0x2, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000003, 0x50032, 0xffffffffffffffff, 0x0) mlock(&(0x7f00007d8000/0x800000)=nil, 0x800000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000004c0)={0x0, &(0x7f0000000180)}) syz_clone(0x100, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r5}, 0x10) r6 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r6, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4c", 0x4}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFBR(r7, 0x8940, &(0x7f00000001c0)=@add_del={0x2, 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x4c, 0x0, 0x8, 0x301, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6002}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}}, 0x8000) 45.032395057s ago: executing program 2 (id=5196): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_open_dev$sndctrl(&(0x7f0000000e00), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x40000, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r4, 0x8946, 0x0) r5 = socket(0x1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={0x0, 0x0, 0x37}, 0x28) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0x9, 0x4, 0x4, 0x7, 0x0, r3, 0x0, '\x00', 0x0, r6, 0x2, 0x1}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000004440)=@base={0xd, 0x4, 0x4, 0x7, 0x0, r7, 0x0, '\x00', 0x0, r6, 0x0, 0x1}, 0x48) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r5, 0x5452, &(0x7f0000000380)={'gre0\x00', 0x0}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) 41.381685451s ago: executing program 7 (id=5197): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$DRM_IOCTL_GET_CLIENT(0xffffffffffffffff, 0xc0286405, &(0x7f0000000040)={0xe, 0xf, {}, {0xee01}, 0xffffffffffffffe5, 0x8}) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)={0x58, 0x3b, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x28, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @nested={0x14, 0xeb, 0x0, 0x1, [@nested={0x10, 0x85, 0x0, 0x1, [@nested={0x4, 0x7a}, @typed={0x8, 0x94, 0x0, 0x0, @ipv4=@multicast1}]}]}, @generic, @nested={0x4, 0xfe}, @nested={0x4, 0xd3}]}, @nested={0x18, 0x2, 0x0, 0x1, [@typed={0x14, 0x138, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}]}]}, 0x58}}, 0xc000) 40.652633228s ago: executing program 7 (id=5198): close(0xffffffffffffffff) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) 38.387484178s ago: executing program 8 (id=5199): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYBLOB="2c616e63686f723d30303030000088be0900303030303030303030312c7569643d666f726765742c00215e8c2e42462f3ab5e1f7c0527abbb422be9178aa60681964adb069ae876c4a599d560075ac47c0de1a9bb9146af6433efdcdac853a8e8f16d6bad90ecce0a1fab46f48331e6b3c325c08df3c334e4da28067a30b3b1dc64bf692c712fc273bc1702008f563765c6f3e67d97e1369973c2a87f0ecca7320819863179fb85e394a8cf1d62c70d8306633b6958ebf998a0685bc5cdd1f97291328743add4c867115fae1082f8faf482e15eb939968"], 0xfd, 0xc34, &(0x7f0000001080)="$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") r0 = gettid() timer_create(0x9, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 37.600705178s ago: executing program 3 (id=5201): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x1a1c098, &(0x7f00000001c0)=ANY=[], 0x6, 0x2d2, &(0x7f00000008c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x15e) setresuid(0xee01, 0xee01, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x8) 37.452829222s ago: executing program 8 (id=5202): socket$inet6_sctp(0xa, 0x5, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(r2, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r2, 0xc0045002, &(0x7f0000000000)) read$dsp(r2, &(0x7f0000000300)=""/79, 0x4f) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) 36.841799117s ago: executing program 3 (id=5203): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x10, 0x0, 0x3, 0x80}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_FILES_UPDATE={0x14, 0x0, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000040), 0x1b}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) 34.392733903s ago: executing program 2 (id=5204): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_mount_image$erofs(&(0x7f00000002c0), &(0x7f0000000380)='./file1\x00', 0x4002, &(0x7f0000000f80)=ANY=[@ANYRES16=0x0], 0x1, 0x215, &(0x7f0000000080)="$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") socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002d00)=[{{&(0x7f0000001580)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40042}}], 0x1, 0x20000000) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fadvise64(r0, 0xfcff, 0x0, 0x3) 33.849865127s ago: executing program 2 (id=5205): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080), 0x13f, 0x9}}, 0x20) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0xfffb, 0x2, @empty, 0xa098}, {0xa, 0x4e21, 0x8000009, @mcast1}, r2, 0x4040099d}}, 0x48) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000100), 0x86}], 0x2) 33.35315073s ago: executing program 2 (id=5206): r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0xdafbe5d6891b6e4) r3 = inotify_init1(0x0) r4 = inotify_add_watch(r3, &(0x7f0000000440)='.\x00', 0x20000000) write$binfmt_elf32(r2, &(0x7f0000005640)=ANY=[@ANYRES16=r4], 0x69) close(r2) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 31.856893651s ago: executing program 3 (id=5207): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000300), 0x1c3902, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0xa4242, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000007, 0x38011, r2, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000040)) sendfile(r1, r1, 0x0, 0x2000fb) 31.654317176s ago: executing program 8 (id=5208): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./bus\x00', 0x2000410, &(0x7f00000001c0)=ANY=[@ANYBLOB="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", @ANYRES8=0x0], 0x1, 0x555e, &(0x7f0000005f80)="$eJzs3EtvG1UUAOA7TpPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKKhJ48R9fJ80PjPX12fusUaRzkzkADy15tPff03CxXAmhDATQjifhHw/KbbcSgwvhBAuhRBK/9iSYvzvgbkQwtkQwsVR8pgzKd768srw8vIvb/323Q+nT5376tsfp1c1MG0vhhC6m3F/pxtj1orxTjFeG7bz2L0+LGJ8o3u3OM5i3Gmu5xl2auN5tTxea8X52eZ2fxQ3OrX6KLbaG/n4Zi+esD9sjfPkH7hT28qPG831PLb7WR5be3Fdu3vxb9tefxDzNIp8H+fpw2AwjnG8uduM9WzezWO9NyjGY96s0dwdxWERi9OFetZp5OtYP8o3/Wh7u93b3k2Hza1+O+uly5XqS5XqjXJ1K2s0B83r5Vq3ceN6utDqjKaVB81ad6WVZa1Os1LPuovpQqteL1er6cLN5nq71kur1cq1ytXy8mKxdyV9/fb7aaeRLoziq+3e9ly70083sq00fmIxXapce3kxvVxN311dS9feuXVrde29D29+cPuV1TdfKybdt6x0Yenq0lK5erW8VF18cI1zx13/6AQHrH9wlPo/KxZ9iPqTQ10NcEguMIBDu6//D/p/4OFdPOC8x73/D5Ps/0ctlf7/wf1v6ej9/5H634fs/ydW/wTufzxq9cOR6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5aP81+/Ua+Mx+PzxXjF4qh54rjJIRQCiH8+R9mwty+nDNFntn/mT/7rzV8n4Q8w+gcp4vtbAhhpdj+ePa4vwUAAAB4cn3zyaUvYrceX+anvSBOUrxpUzr/0YTyJSGE2fmfJ5StNHp5fkLJ8uv7VNidULb8BtYzE0oWb7mdmlS2A5kZh08v3BvMC0piKJ3ocgAAgBMxsy+cbBcCAADASfp82gtgOpIwfpQ5fhac/+f9vUebZ/a9BwAAADyGkmkvAAAAADh2ef/v9/8AAADgyRZ//w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiLnbvJWRqI4wD8b/uWDz8iMe69ijs4hkdw6VI4gJfgCHgFL8AZcOcRDDW0E5IqJMZObSTPk3TKtOQ3M9DNTJMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAMX2rD5svn95+HppzbobJMxoAAADgllN92LQfVl39ebr+Ml16nepFRJQR8fvMfRlVzHqZVcqpb36/aepf+vA1ok24tDFPx7OIeJeO6tXYvwIAAAA8ruNuv+5m612xmrpD/Evdok354n2mvCIi6tX3TGnlpXiTKax9vp/iY6a0dgFrkSmsW3J7un1vlquRvqp3SiNZbNs/sa2V47QLAABMqT8TuDMLAQAA4AF8mLoDTKO4Ftf3jPPulF4ILns1AAAA4D9UTN0BAAAAYHTt/H/4/n9NM/b+fz/s/wcAAAB/rdv/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDGd6sPmuNuv793f/mHOuRkm34gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+Mn+vKNACIRBGOxd35nM/Q8rDRoam1SB8PE3BgMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvPndX/5PTI0zydxrY+l5JFk7NbZOjb1z4+gP4+vXAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF/vzkgIhEARRMGf876Tvf1hJ0DOIEAENjypq0QAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABf9Ltf/k9MjTPJ3Glj6XgkWbtqbF019h40jh6Mt38DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFzv38xtFFQcA/Ls7O0tBibWaHqoGEw96kXZBkKMeNI0H/wSTpmyxuogCByGNphc9mZ5J1OjRGBNNvfE/cKYJF7xx6KEmnjXzqww/lA2pM0v7+SRv3nd2J+993+yG8O2bFgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKttvx4vdMk6yw3QRV6/d3Flbzvqt+/rM9Y1bc1nL4s6jJvr6rb1PfrK9VD85Nls7+bL5ZAAAADgYkqq+j4jb6eZi1nen8/o/ra7Jav4fjhZxVc/fX/dv7axNlW/NVfX/77/deX53oulinmzQldXRcOHBVHr/0xIn3jOPvKKX3/n8Zy9J/oF031t/bjvN72fnmxs33unn4aEmsgUAHsfxqi+D6v9DWT9oMzEADoxerfCu6v9kut2cAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJqwvR5PVXEnIuZ6d+PM1s7a8sP66xu35qp2+tq1jfqY2RBpRKysjoZpg2uZdJeuXP14aTQaXmw+OBYR7c1eBh+McU3Ef19Tfj2jvVX8e9CZjDRaDbrl5zMp+exlUH339n7klv5BAgBgH0qORlmPp2VdfzvdXMxe68xE/P3jvfX/q7U4xqz/73x4+mZ9xnr9P2hqmRPv2+8izn86f+nK1ddXzy+dG54bfvLGicGbg5NnTp06M5/dq4X5legOF9pOFAAAgCdYv2z1+r878+D+/5FaHGPW/599P/iiPlei/n+ou5t+bWcCAABwEPV3o2df/uvPTv2tqaLr9Pvx+dLlyxcHxXH3/ERxbDzlx3CobPX6P5lpOysAAACgCdvrnXv2/8/W4hhz///pn174pT5mEhGHIy5ExPD48oXR2eaWM9Ga+EXlfKJ+2ysFAACgLYfLVuz/9/L9/zR//r+7+8hDNyJee6WIq791NU79n7z71c/1uerP/59sbokTqTtb3I+8n43ozbadEQAAAPvZVNmyYv+PdHPxo1+PvN/3/D8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA0/4JAAD//880Myg=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./file1\x00', 0x143041, 0x0) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r0, 0xf501, 0x0) write$uinput_user_dev(r0, &(0x7f00000006c0)={'syz1\x00', {0x5, 0x2, 0x0, 0x5}, 0xe, [0x4, 0x5, 0x8, 0x9, 0x2fb46e05, 0x6, 0x8, 0x7, 0xa6, 0x1000, 0x0, 0x8, 0x6fcf, 0x1, 0xb16, 0x5, 0x9, 0x8, 0x200, 0x0, 0x7, 0x6, 0xcd7, 0x6, 0x3, 0x200, 0x0, 0x37, 0x2, 0xc, 0x6, 0xa4, 0x6, 0xc, 0x10, 0x3, 0x0, 0x181, 0x8, 0x9, 0x6, 0x7f, 0x7fff, 0x8, 0x22, 0xfc, 0x7ff, 0xafa6, 0x4, 0xc2fa, 0x401, 0x7, 0xccde, 0x2, 0x5, 0x0, 0x4, 0x51ef, 0x83ab, 0x8, 0x1, 0x3, 0x9, 0x7], [0x5, 0x2, 0xc, 0xc, 0x1, 0x6c2, 0x5, 0x126a, 0x1ff, 0x1, 0x3, 0x60000000, 0x4, 0x1ff, 0x9, 0x1, 0x8000, 0x9, 0x40, 0x1, 0x5, 0xe, 0xff, 0x5, 0x200, 0x8, 0x2, 0xfff, 0x6, 0x6, 0x5, 0x5, 0x8001, 0x7ff, 0x6, 0x8001, 0x3, 0x0, 0x5, 0x7, 0x6, 0x8001, 0x100, 0xfff, 0x7, 0x5, 0x0, 0x5, 0x4, 0x7, 0xc13, 0x5af, 0x6, 0xffff380b, 0x8, 0x9, 0x3b55ef37, 0x6, 0x687a3019, 0x7fffffff, 0x4, 0x7, 0x4], [0x5, 0x3, 0x200, 0x58, 0x5, 0x0, 0x1, 0x101, 0x1ebd3942, 0x7fff, 0x5, 0x31f1, 0x7ff, 0x8001, 0x8001, 0x1, 0x85c2, 0x8001, 0x6, 0xfffffa3a, 0x13c1, 0x10001, 0x10, 0x200, 0xa, 0x7, 0x7, 0x31, 0xf1, 0x0, 0x0, 0x0, 0x0, 0x9, 0xd4, 0x5, 0x9, 0x3, 0x0, 0xfffffffa, 0x4, 0x8, 0x8, 0x7fff, 0x8, 0x4, 0x16, 0x2, 0x2, 0x9, 0x1, 0x2, 0x7, 0x4, 0x5, 0x6, 0x1, 0x3, 0x1, 0x9, 0xa, 0x9, 0xe, 0x8b7], [0x1, 0xfffffffc, 0x4, 0x5, 0x9, 0x81, 0x8, 0x6, 0x5, 0xa11, 0x4, 0xffffffff, 0x10001, 0x49da, 0x6, 0xfff, 0x6, 0x8000, 0x8, 0x5, 0x7, 0x7f, 0x3, 0x7, 0xffffffff, 0x2, 0x4, 0x7, 0x0, 0x8, 0xbaf, 0x63fa7ef5, 0x9, 0x9, 0x80000000, 0x45e, 0xe9ef, 0x7fffffff, 0x2, 0x5, 0x41d, 0xea39, 0x401, 0x8, 0x1f5, 0x1, 0x4, 0x80, 0x3, 0x7f, 0x8, 0x400, 0x1, 0x6a55bcbd, 0x8, 0xfffffff9, 0x10, 0xff, 0x8, 0xffff, 0x40, 0x3, 0x2, 0x8]}, 0x45c) mknod$loop(&(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) write$binfmt_register(r0, &(0x7f0000000080)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0x5, 0x3a, 'GPL\x00', 0x3a, 'f2fs\x00', 0x3a, './file0'}, 0x30) 30.844649217s ago: executing program 3 (id=5210): openat(0xffffffffffffff9c, &(0x7f0000000540)='./file1\x00', 0xc4042, 0x1ff) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 30.311265262s ago: executing program 7 (id=5211): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_devices(r0, &(0x7f0000000480)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r1, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_devices(r2, &(0x7f0000000080)='devices.deny\x00', 0x2, 0x0) mkdirat$cgroup(r2, 0x0, 0x1ff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000480)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1e0000000000000004000000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000570000"], 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x5, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000600)='./file0\x00', 0xc8d0, &(0x7f0000000140)=ANY=[@ANYRES8=0x0], 0x1, 0x2e3, &(0x7f0000000280)="$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") openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) 30.255531291s ago: executing program 3 (id=5212): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r4, 0x0, 0x0, 0x0, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c) dup(0xffffffffffffffff) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[], 0x50) recvmmsg(r4, &(0x7f0000008880), 0x45b, 0x2, 0x0) 29.17287401s ago: executing program 2 (id=5213): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xcc657405ba8b63ff}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2a, 0xa9}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$netlink(0x10, 0x3, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/seq/clients\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000940)=[{&(0x7f0000000880)=""/7, 0x7}], 0x1, 0xf2, 0xc) 29.024549871s ago: executing program 7 (id=5214): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000040)) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x6) prctl$PR_SET_SECUREBITS(0x1c, 0x2c) r4 = openat$comedi(0xffffff9c, &(0x7f0000000440)='/dev/comedi0\x00', 0x101001, 0x0) ioctl$COMEDI_DEVCONFIG(r4, 0x40946400, &(0x7f0000000080)={'aio_iiro_16\x00', [0x2e, 0x80008000, 0x9, 0x2, 0x0, 0x0, 0x2, 0xf, 0xffe, 0x4, 0x7, 0x2, 0x1006, 0x3, 0xffff, 0xffff, 0xffffffa8, 0x40000009, 0x3c, 0x24, 0x3ff, 0x10000, 0x100, 0xe2df, 0x2, 0x8, 0x7, 0x3, 0x7, 0x4, 0x8045]}) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x3c, 0x3) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) mount$bind(0x0, 0x0, 0x0, 0x100000, 0x0) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000400)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffffff6a) tee(0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffc01, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, 0x0, 0x4080) 27.319884312s ago: executing program 4 (id=5215): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x2000082, &(0x7f0000000500)={[{@numtail}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp862'}}, {@numtail}, {@shortname_mixed}, {@shortname_mixed}, {@utf8}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}, {@fat=@codepage={'codepage', 0x3d, '860'}}, {@shortname_mixed}, {@utf8}, {@shortname_mixed}, {@utf8no}, {@rodir}]}, 0x26, 0x367, &(0x7f00000009c0)="$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") openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) 26.840816436s ago: executing program 8 (id=5216): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) read$FUSE(0xffffffffffffffff, &(0x7f0000002400)={0x2020}, 0xfffffec2) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) setresuid(0xee01, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f00000002c0)={0x0, 0x900, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffff0000000008000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) keyctl$get_persistent(0x16, 0x0, 0xfffffffffffffffb) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r6 = socket$rds(0x15, 0x5, 0x0) bind$rds(r6, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r6, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x5c, 0x8}}], 0x58}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$kcm(0x2b, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=@framed={{0x16, 0xa, 0x0, 0x0, 0x8000000, 0x61, 0x10, 0x28}, [@ldst={0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xce, &(0x7f0000000580)=""/206, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94) socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x8}, &(0x7f00000000c0)=0x8) 25.649391451s ago: executing program 4 (id=5217): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa07, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) 24.130516384s ago: executing program 4 (id=5218): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) recvmmsg(r0, &(0x7f0000000600), 0x0, 0x10042, 0x0) syz_open_dev$video(0x0, 0x3ff, 0x2000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140), &(0x7f0000000180)=0xc) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$6lowpan_control(0xffffff9c, &(0x7f0000002540), 0x2, 0x0) preadv(r2, &(0x7f0000002c00)=[{&(0x7f0000002a40)=""/166, 0xa6}], 0x1, 0x3, 0x10001) syz_open_dev$MSR(&(0x7f0000000200), 0x1, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) r3 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r3, 0xc0045627, &(0x7f0000000000)=0x2) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=") r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x101000, 0x2) getdents64(r4, 0x0, 0x0) r5 = userfaultfd(0x80801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) 18.664945366s ago: executing program 3 (id=5219): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 17.958788822s ago: executing program 8 (id=5220): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/handlers\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$MISDN_TIME_STAMP(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000000), 0x4) kexec_load(0x3, 0x1, &(0x7f0000000300)=[{&(0x7f0000000280), 0x0, 0xfffffffff00143be, 0x93}], 0x0) preadv2(r0, &(0x7f0000000840)=[{&(0x7f0000000200)=""/100, 0x64}, {&(0x7f0000000640)=""/215, 0xd7}], 0x2, 0x2b, 0x0, 0x0) 17.350680164s ago: executing program 7 (id=5221): syz_mount_image$ext4(&(0x7f0000000c80)='ext4\x00', &(0x7f0000000cc0)='./file0\x00', 0x0, &(0x7f0000000d00), 0x1, 0xc65, &(0x7f0000000d40)="$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") 16.612993387s ago: executing program 2 (id=5222): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r1, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=@newchain={0x60, 0x64, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x13, 0x10}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x2c, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000200), 0x0, &(0x7f0000000040), 0x0, 0x300}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) 16.485530004s ago: executing program 7 (id=5223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000050) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x10000000) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$media(&(0x7f00000004c0), 0x3a6380000000, 0x8800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000005e40), 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x88a, &(0x7f00000001c0)={[{@usrquota}, {@usrjquota, 0x22}, {@data_ordered}, {@noload}, {@grpid}, {@grpjquota, 0x22}, {@init_itable}, {@jqfmt_vfsold}, {@noblock_validity}]}, 0xfe, 0x44e, &(0x7f0000000900)="$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") 8.054225361s ago: executing program 4 (id=5226): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmmsg$inet(r4, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2.953796623s ago: executing program 47 (id=5219): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r0 = socket$igmp(0x2, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_rdma(0x10, 0x3, 0x14) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f000001aa40)=""/102400, 0x19000) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x8081}, 0x20000000) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x4, 0x40000006}, 0x3c) 775.457336ms ago: executing program 48 (id=5222): bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r1, 0xae80, 0x0) setrlimit(0xf, &(0x7f0000000000)={0x1, 0x5}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=@newchain={0x60, 0x64, 0x300, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xe, 0x6}, {0x13, 0x10}, {0xfff1, 0xfff2}}, [@filter_kind_options=@f_fw={{0x7}, {0x2c, 0x2, [@TCA_FW_POLICE={0x10, 0x2, [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7fff}]}, @TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xa}}, @TCA_FW_CLASSID={0x8, 0x1, {0x8, 0x3}}, @TCA_FW_MASK={0x8, 0x5, 0x4}]}}, @TCA_RATE={0x6, 0x5, {0x3}}]}, 0x60}, 0x1, 0x0, 0x0, 0x400c000}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r3, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r3, 0xc02064b6, 0x0) ioctl$DRM_IOCTL_MODE_GET_LEASE(r3, 0xc01064c8, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r3, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) ioctl$DRM_IOCTL_MODE_ATOMIC(r3, 0xc03864bc, &(0x7f0000000380)={0x0, 0x1, &(0x7f00000002c0)=[0x0], &(0x7f0000000200), 0x0, &(0x7f0000000040), 0x0, 0x300}) r4 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_TIMELINE_SIGNAL(r4, 0xc01864cd, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1}) 22.684704ms ago: executing program 49 (id=5223): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x20000050) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, 0x0}, 0x10000000) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) r2 = syz_open_dev$media(&(0x7f00000004c0), 0x3a6380000000, 0x8800) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, 0x0) getpeername$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0xecf86c37d53049cc) write$binfmt_script(r3, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '\x86\x81\t\n\xac\"\xff4l\xaa\x91\xec\x99M.p\xdc4\x0e\x1c\xdf\xd3\xd4\x8d\xad\x99\x1c\xae\xb2vt\r@0K\x989\x1c\xd7%\x82\x94\x05\x06\xbeJ\x90\xd8&\xa6?~\x88\x01;\r7\xdf\xb7\xfb\x85\x133\x17I\xb4\xbc`7\xda\x91\xefP p4 < > [ 1180.861035][T18540] loop8: partition table partially beyond EOD, truncated [ 1180.869014][T18540] loop8: p3 start 4284289 is beyond EOD, truncated [ 1180.952188][T18540] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4704'. [ 1180.973983][T13905] usb 9-1: USB disconnect, device number 42 [ 1181.000500][T18554] loop6: detected capacity change from 0 to 512 [ 1181.064573][T18554] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1181.078440][T18554] ext4 filesystem being mounted at /196/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1181.161583][ T5440] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1181.173882][ T5440] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1181.181937][ T5440] cp210x 3-1:0.0: GPIO initialisation failed: -121 [ 1181.198841][ T5858] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 1181.236938][ T5440] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1181.381787][ T5858] usb 4-1: device descriptor read/64, error -71 [ 1181.497401][T18563] overlayfs: missing 'lowerdir' [ 1181.628382][ T5858] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 1181.783014][ T5858] usb 4-1: device descriptor read/64, error -71 [ 1181.893011][ T5858] usb usb4-port1: attempt power cycle [ 1182.149341][T15500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1182.262620][ T5858] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 1182.322333][ T5858] usb 4-1: device descriptor read/8, error -71 [ 1182.481595][ T5440] usb 9-1: new high-speed USB device number 43 using dummy_hcd [ 1182.574176][ T5858] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 1182.623804][ T5858] usb 4-1: device descriptor read/8, error -71 [ 1182.662195][ T5440] usb 9-1: Using ep0 maxpacket: 32 [ 1182.690850][ T5440] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1182.701865][ T5440] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1182.711021][ T5440] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1182.736176][ T5858] usb usb4-port1: unable to enumerate USB device [ 1182.763730][ T5440] usb 9-1: config 0 descriptor?? [ 1182.787746][ T5440] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1183.200493][ T5440] gspca_spca501: reg write: error -71 [ 1183.206260][ T5440] spca501 9-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1183.214027][ T5440] spca501 9-1:0.0: probe with driver spca501 failed with error -22 [ 1183.256095][ T5440] usb 9-1: USB disconnect, device number 43 [ 1183.363970][T18578] overlayfs: missing 'lowerdir' [ 1183.392019][ T5858] usb 3-1: USB disconnect, device number 40 [ 1183.412342][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1183.423166][ T5858] cp210x 3-1:0.0: device disconnected [ 1183.573839][T18583] loop2: detected capacity change from 0 to 16 [ 1183.587387][T18583] erofs (device loop2): mounted with root inode @ nid 36. [ 1183.667678][T18583] syz.2.4718 (18583): drop_caches: 2 [ 1183.808191][T18585] loop6: detected capacity change from 0 to 256 [ 1183.835883][T18585] exfat: Deprecated parameter 'utf8' [ 1183.842170][T18585] exfat: Deprecated parameter 'utf8' [ 1183.852327][T18585] exfat: Deprecated parameter 'utf8' [ 1183.858022][T18585] exfat: Bad value for 'gid' [ 1183.864890][T18585] exfat: Bad value for 'gid' [ 1183.955774][T18585] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4719'. [ 1184.122864][T18588] loop6: detected capacity change from 0 to 256 [ 1184.222900][T18588] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1184.442932][ T5851] usb 9-1: new high-speed USB device number 44 using dummy_hcd [ 1184.619139][ T5851] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1184.619295][ T5851] usb 9-1: config 1 has no interface number 0 [ 1184.619422][ T5851] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1184.619584][ T5851] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1184.619740][ T5851] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1184.647298][ T5851] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1184.647462][ T5851] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1184.647590][ T5851] usb 9-1: Product: syz [ 1184.647693][ T5851] usb 9-1: Manufacturer: syz [ 1184.647795][ T5851] usb 9-1: SerialNumber: syz [ 1184.703666][T18592] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1184.753211][T18599] overlayfs: missing 'lowerdir' [ 1184.939999][T18592] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1184.947815][ T5851] usb 9-1: No status endpoint found [ 1185.045277][T18601] syz.2.4725 (18601): drop_caches: 2 [ 1185.162639][T18603] loop7: detected capacity change from 0 to 512 [ 1185.228316][T18603] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1185.228787][T18603] ext4 filesystem being mounted at /327/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1185.258563][T18592] loop8: detected capacity change from 0 to 2048 [ 1185.326052][T18592] loop8: p3 < > p4 < > [ 1185.326190][T18592] loop8: partition table partially beyond EOD, truncated [ 1185.326554][T18592] loop8: p3 start 4284289 is beyond EOD, truncated [ 1185.340999][T18592] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4722'. [ 1185.348946][ T5851] usb 9-1: USB disconnect, device number 44 [ 1185.715474][T18614] loop3: detected capacity change from 0 to 256 [ 1185.750356][T18614] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1186.022308][ T5851] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 1186.210598][ T5851] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1186.220328][ T5851] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1186.234740][ T5851] usb 4-1: config 0 descriptor?? [ 1186.247299][ T5851] cp210x 4-1:0.0: cp210x converter detected [ 1186.313252][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1186.324493][ T5858] usb 9-1: new high-speed USB device number 45 using dummy_hcd [ 1186.471867][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1186.664544][ T5851] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1186.681763][ T5851] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1186.689845][ T5851] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1186.706490][ T5851] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1186.721407][ T5858] usb 9-1: new high-speed USB device number 46 using dummy_hcd [ 1186.895291][T18626] overlayfs: missing 'lowerdir' [ 1186.901634][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1187.013335][ T5858] usb usb9-port1: attempt power cycle [ 1187.172094][ T5440] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 1187.352083][ T5440] usb 3-1: Using ep0 maxpacket: 32 [ 1187.373955][ T5440] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1187.385159][ T5440] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1187.394758][ T5440] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1187.413209][ T5858] usb 9-1: new high-speed USB device number 47 using dummy_hcd [ 1187.425393][ T5440] usb 3-1: config 0 descriptor?? [ 1187.445945][ T5440] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1187.482627][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1187.722047][ T5858] usb 9-1: new high-speed USB device number 48 using dummy_hcd [ 1187.765772][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1187.811055][T18634] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1187.820451][T18634] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1187.862044][ T5440] gspca_spca501: reg write: error -71 [ 1187.867739][ T5440] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1187.877632][ T5440] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 1187.893187][ T5858] usb usb9-port1: unable to enumerate USB device [ 1187.926216][ T5440] usb 3-1: USB disconnect, device number 41 [ 1188.034328][T18636] loop7: detected capacity change from 0 to 16 [ 1188.253295][T18636] erofs (device loop7): mounted with root inode @ nid 36. [ 1188.282233][T18636] erofs (device loop7): corrupted dir block 8200 @ nid 36 [ 1188.500803][T18642] loop7: detected capacity change from 0 to 256 [ 1188.511397][T18642] exfat: Deprecated parameter 'utf8' [ 1188.517074][T18642] exfat: Deprecated parameter 'utf8' [ 1188.523349][T18642] exfat: Deprecated parameter 'utf8' [ 1188.529307][T18642] exfat: Bad value for 'gid' [ 1188.534332][T18642] exfat: Bad value for 'gid' [ 1188.627831][T18642] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4739'. [ 1188.768680][T18643] loop7: detected capacity change from 0 to 256 [ 1188.846797][T18643] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1189.452169][ T5440] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 1189.608313][ T5440] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1189.616843][ T5440] usb 3-1: config 1 has no interface number 0 [ 1189.623504][ T5440] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1189.635428][ T5440] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1189.645624][ T5440] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1189.647528][ T5851] usb 4-1: USB disconnect, device number 46 [ 1189.732977][ T5851] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1189.742518][ T5851] cp210x 4-1:0.0: device disconnected [ 1189.752706][ T5440] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1189.762364][ T5440] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1189.770575][ T5440] usb 3-1: Product: syz [ 1189.775143][ T5440] usb 3-1: Manufacturer: syz [ 1189.779918][ T5440] usb 3-1: SerialNumber: syz [ 1189.790547][T18650] loop8: detected capacity change from 0 to 512 [ 1189.836405][T18645] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1189.875072][T18650] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1189.892408][T18650] ext4 filesystem being mounted at /227/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1190.075543][T18645] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 1190.108783][ T5440] usb 3-1: No status endpoint found [ 1190.406352][T18645] loop2: detected capacity change from 0 to 2048 [ 1190.464144][T18645] loop2: p3 < > p4 < > [ 1190.468642][T18645] loop2: partition table partially beyond EOD, truncated [ 1190.476715][T18645] loop2: p3 start 4284289 is beyond EOD, truncated [ 1190.513937][T18645] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4740'. [ 1190.531064][ T5851] usb 3-1: USB disconnect, device number 42 [ 1190.570826][T18664] syz.3.4745 (18664): drop_caches: 2 [ 1190.909939][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1190.938097][T18669] overlayfs: missing 'lowerdir' [ 1191.033432][T18671] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1191.043483][T18671] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1191.298370][T18674] loop8: detected capacity change from 0 to 16 [ 1191.333047][T18674] erofs (device loop8): mounted with root inode @ nid 36. [ 1191.394618][T18674] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1191.791784][ T5440] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 1191.862632][T18687] loop8: detected capacity change from 0 to 256 [ 1191.891833][ T5851] usb 8-1: new high-speed USB device number 44 using dummy_hcd [ 1191.922862][T18687] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1191.954743][ T5440] usb 4-1: device descriptor read/64, error -71 [ 1192.020586][T18689] loop6: detected capacity change from 0 to 256 [ 1192.029812][T18689] exfat: Deprecated parameter 'utf8' [ 1192.035595][T18689] exfat: Deprecated parameter 'utf8' [ 1192.043883][T18689] exfat: Deprecated parameter 'utf8' [ 1192.049614][T18689] exfat: Bad value for 'gid' [ 1192.055653][T18689] exfat: Bad value for 'gid' [ 1192.073601][T18689] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4754'. [ 1192.161736][T18690] loop6: detected capacity change from 0 to 256 [ 1192.198985][T18690] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1192.213665][ T5440] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 1192.224702][ T5858] usb 9-1: new high-speed USB device number 49 using dummy_hcd [ 1192.366268][ T5440] usb 4-1: device descriptor read/64, error -71 [ 1192.436312][ T5858] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1192.436478][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1192.456288][ T5858] usb 9-1: config 0 descriptor?? [ 1192.473409][ T5440] usb usb4-port1: attempt power cycle [ 1192.519982][ T5858] cp210x 9-1:0.0: cp210x converter detected [ 1192.884799][ T5440] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 1192.906195][ T5440] usb 4-1: device descriptor read/8, error -71 [ 1193.074447][ T5858] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1193.089075][ T5858] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1193.097398][ T5858] cp210x 9-1:0.0: GPIO initialisation failed: -121 [ 1193.118436][ T5858] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1193.141615][ T5440] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 1193.167746][ T5440] usb 4-1: device descriptor read/8, error -71 [ 1193.283487][ T5440] usb usb4-port1: unable to enumerate USB device [ 1193.555420][T18703] loop7: detected capacity change from 0 to 512 [ 1193.798453][T18703] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1193.812048][T18703] ext4 filesystem being mounted at /335/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1194.690892][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1194.769456][T18714] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1194.780412][T18714] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1194.881441][ T5851] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 1195.012825][T18718] loop7: detected capacity change from 0 to 16 [ 1195.037277][T18718] erofs (device loop7): mounted with root inode @ nid 36. [ 1195.052940][T18719] overlayfs: missing 'lowerdir' [ 1195.077996][ T5851] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1195.086772][ T5851] usb 3-1: config 1 has no interface number 0 [ 1195.093246][ T5851] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1195.105065][ T5851] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1195.107999][T18718] erofs (device loop7): corrupted dir block 8200 @ nid 36 [ 1195.117607][ T5851] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1195.202515][ T5851] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1195.211941][ T5851] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1195.223770][ T5851] usb 3-1: Product: syz [ 1195.228130][ T5851] usb 3-1: Manufacturer: syz [ 1195.233131][ T5851] usb 3-1: SerialNumber: syz [ 1195.282949][T18712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1195.526872][T12914] usb 9-1: USB disconnect, device number 49 [ 1195.553206][T12914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1195.562868][T12914] cp210x 9-1:0.0: device disconnected [ 1195.586947][T18712] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1195.628710][ T5851] usb 3-1: No status endpoint found [ 1195.971915][ T5851] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1196.075634][T18712] loop2: detected capacity change from 0 to 2048 [ 1196.120414][T18734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4762'. [ 1196.155052][T18712] loop2: p3 < > p4 < > [ 1196.159460][T18712] loop2: partition table partially beyond EOD, truncated [ 1196.164855][T18736] loop6: detected capacity change from 0 to 256 [ 1196.168040][T18712] loop2: p3 start 4284289 is beyond EOD, truncated [ 1196.194229][T18736] exfat: Deprecated parameter 'utf8' [ 1196.199899][T18736] exfat: Deprecated parameter 'utf8' [ 1196.206440][T18736] exfat: Deprecated parameter 'utf8' [ 1196.212702][T18736] exfat: Bad value for 'gid' [ 1196.217470][T18736] exfat: Bad value for 'gid' [ 1196.239735][T12914] usb 3-1: USB disconnect, device number 43 [ 1196.286321][T18736] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4768'. [ 1196.416050][T18739] loop6: detected capacity change from 0 to 256 [ 1196.480168][T18739] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1197.082486][ T5440] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 1197.211587][ T5440] usb 4-1: device descriptor read/64, error -71 [ 1197.227124][T18749] loop2: detected capacity change from 0 to 16 [ 1197.244211][T18749] erofs (device loop2): mounted with root inode @ nid 36. [ 1197.358354][T18752] loop7: detected capacity change from 0 to 512 [ 1197.440027][T18752] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1197.453489][T18752] ext4 filesystem being mounted at /338/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1197.473112][ T5440] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 1197.630808][T18760] overlayfs: missing 'lowerdir' [ 1197.636713][ T5440] usb 4-1: device descriptor read/64, error -71 [ 1197.752999][ T5440] usb usb4-port1: attempt power cycle [ 1197.985671][T18764] loop2: detected capacity change from 0 to 256 [ 1198.025387][T18764] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1198.122227][ T5440] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 1198.163108][ T5440] usb 4-1: device descriptor read/8, error -71 [ 1198.205967][T18767] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1198.215393][T18767] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1198.301581][ T5858] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 1198.379369][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1198.403913][ T5440] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 1198.445757][ T5440] usb 4-1: device descriptor read/8, error -71 [ 1198.471118][ T5858] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1198.480846][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1198.505707][ T5858] usb 3-1: config 0 descriptor?? [ 1198.525665][ T5858] cp210x 3-1:0.0: cp210x converter detected [ 1198.562891][ T5440] usb usb4-port1: unable to enumerate USB device [ 1198.650950][T18772] loop6: detected capacity change from 0 to 16 [ 1198.679707][T18772] erofs (device loop6): mounted with root inode @ nid 36. [ 1198.706613][T18772] erofs (device loop6): corrupted dir block 8200 @ nid 36 [ 1198.934729][ T5858] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1199.461794][ T5440] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1199.668425][ T5440] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1199.677008][ T5440] usb 8-1: config 1 has no interface number 0 [ 1199.683766][ T5440] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1199.695896][ T5440] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1199.706278][ T5440] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1199.732393][T13905] usb 9-1: new high-speed USB device number 50 using dummy_hcd [ 1199.812574][ T5440] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1199.824683][ T5440] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1199.833739][ T5440] usb 8-1: Product: syz [ 1199.838175][ T5440] usb 8-1: Manufacturer: syz [ 1199.843143][ T5440] usb 8-1: SerialNumber: syz [ 1199.888262][T18780] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1199.931892][T13905] usb 9-1: Using ep0 maxpacket: 32 [ 1199.971525][T13905] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1199.982471][T13905] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1199.992091][T13905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1200.016000][T13905] usb 9-1: config 0 descriptor?? [ 1200.049221][T13905] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1200.112132][T18789] loop3: detected capacity change from 0 to 256 [ 1200.145091][T18789] exfat: Deprecated parameter 'utf8' [ 1200.150893][T18789] exfat: Deprecated parameter 'utf8' [ 1200.157468][T18789] exfat: Deprecated parameter 'utf8' [ 1200.163645][T18789] exfat: Bad value for 'gid' [ 1200.168413][T18789] exfat: Bad value for 'gid' [ 1200.176527][T18780] raw-gadget.2 gadget.7: fail, usb_ep_enable returned -22 [ 1200.230504][ T5440] usb 8-1: No status endpoint found [ 1200.338938][T18789] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4785'. [ 1200.499632][T18792] loop3: detected capacity change from 0 to 256 [ 1200.511564][T18782] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4784'. [ 1200.592704][T13905] gspca_spca501: reg write: error -71 [ 1200.598613][T13905] spca501 9-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1200.600143][T18780] loop7: detected capacity change from 0 to 2048 [ 1200.606585][T13905] spca501 9-1:0.0: probe with driver spca501 failed with error -22 [ 1200.658224][T18780] loop7: p3 < > p4 < > [ 1200.663143][T18780] loop7: partition table partially beyond EOD, truncated [ 1200.670756][T18780] loop7: p3 start 4284289 is beyond EOD, truncated [ 1200.682124][T13905] usb 9-1: USB disconnect, device number 50 [ 1200.716999][T18792] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1200.773658][T18780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4783'. [ 1200.984048][T13905] usb 8-1: USB disconnect, device number 46 [ 1201.076177][T18795] overlayfs: missing 'lowerdir' [ 1201.912139][ T5858] cp210x 3-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1201.922608][ T5858] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 1201.968023][ T5858] usb 3-1: cp210x converter now attached to ttyUSB0 [ 1202.005548][ T5858] usb 3-1: USB disconnect, device number 44 [ 1202.055799][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1202.065197][ T5858] cp210x 3-1:0.0: device disconnected [ 1202.148627][T18804] loop7: detected capacity change from 0 to 512 [ 1202.289476][T18804] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1202.303150][T18804] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1202.429868][T18816] loop8: detected capacity change from 0 to 16 [ 1202.443490][T18816] erofs (device loop8): mounted with root inode @ nid 36. [ 1202.467122][T18816] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1202.782433][T18822] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1202.794165][T18822] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1203.072070][ T5851] usb 9-1: new high-speed USB device number 51 using dummy_hcd [ 1203.243631][ T5851] usb 9-1: device descriptor read/64, error -71 [ 1203.344648][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1203.379148][T18831] overlayfs: missing 'lowerdir' [ 1203.491714][ T5851] usb 9-1: new high-speed USB device number 52 using dummy_hcd [ 1203.651673][ T5851] usb 9-1: device descriptor read/64, error -71 [ 1203.762961][ T5851] usb usb9-port1: attempt power cycle [ 1203.829380][T18840] loop2: detected capacity change from 0 to 256 [ 1203.839332][T18840] exfat: Deprecated parameter 'utf8' [ 1203.845466][T18840] exfat: Deprecated parameter 'utf8' [ 1203.851107][T18840] exfat: Deprecated parameter 'utf8' [ 1203.857577][T18840] exfat: Bad value for 'gid' [ 1203.862441][T18840] exfat: Bad value for 'gid' [ 1203.872576][T12914] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 1203.920652][T18840] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4801'. [ 1204.035941][T18833] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4799'. [ 1204.047639][T18841] loop2: detected capacity change from 0 to 256 [ 1204.064691][T14338] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1204.079370][T12914] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1204.088146][T12914] usb 4-1: config 1 has no interface number 0 [ 1204.094837][T12914] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1204.100739][T18841] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1204.107145][T12914] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1204.131695][T12914] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1204.160651][T12914] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1204.172950][T12914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1204.181099][T12914] usb 4-1: Product: syz [ 1204.185694][T12914] usb 4-1: Manufacturer: syz [ 1204.190419][T12914] usb 4-1: SerialNumber: syz [ 1204.202212][ T5851] usb 9-1: new high-speed USB device number 53 using dummy_hcd [ 1204.431740][ T5851] usb 9-1: device descriptor read/8, error -71 [ 1204.443540][T18835] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1204.641539][T18845] loop6: detected capacity change from 0 to 256 [ 1204.666710][T18835] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1204.673665][T12914] usb 4-1: No status endpoint found [ 1204.709659][T18845] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1204.791679][ T5851] usb 9-1: new high-speed USB device number 54 using dummy_hcd [ 1204.813561][ T5851] usb 9-1: device descriptor read/8, error -71 [ 1204.922419][ T5851] usb usb9-port1: unable to enumerate USB device [ 1204.965976][T18835] loop3: detected capacity change from 0 to 2048 [ 1205.002743][T12914] usb 7-1: new high-speed USB device number 51 using dummy_hcd [ 1205.023857][T18835] loop3: p3 < > p4 < > [ 1205.028429][T18835] loop3: partition table partially beyond EOD, truncated [ 1205.036459][T18835] loop3: p3 start 4284289 is beyond EOD, truncated [ 1205.119546][T18835] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4800'. [ 1205.160832][ T5858] usb 4-1: USB disconnect, device number 55 [ 1205.184583][T12914] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1205.194487][T12914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1205.238820][T12914] usb 7-1: config 0 descriptor?? [ 1205.267016][T12914] cp210x 7-1:0.0: cp210x converter detected [ 1205.430060][T18852] loop2: detected capacity change from 0 to 16 [ 1205.446747][T18852] erofs (device loop2): mounted with root inode @ nid 36. [ 1205.482546][T18852] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 1205.669615][T12914] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1206.106933][T18862] loop8: detected capacity change from 0 to 512 [ 1206.175185][T18862] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1206.188497][T18862] ext4 filesystem being mounted at /239/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1206.363795][T18868] overlayfs: missing 'workdir' [ 1206.918597][T18873] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1206.927992][T18873] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1207.109339][T18877] loop2: detected capacity change from 0 to 256 [ 1207.121640][T18877] exfat: Deprecated parameter 'utf8' [ 1207.127347][T18877] exfat: Deprecated parameter 'utf8' [ 1207.133503][T18877] exfat: Deprecated parameter 'utf8' [ 1207.139456][T18877] exfat: Bad value for 'gid' [ 1207.144470][T18877] exfat: Bad value for 'gid' [ 1207.172307][T18877] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4813'. [ 1207.286542][T18879] loop2: detected capacity change from 0 to 256 [ 1207.353807][T18879] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1207.567856][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1207.568164][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1208.045754][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1208.894490][T12914] cp210x 7-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1208.903055][T12914] cp210x 7-1:0.0: GPIO initialisation failed: -71 [ 1208.918024][T12914] usb 7-1: cp210x converter now attached to ttyUSB0 [ 1208.930354][T12914] usb 7-1: USB disconnect, device number 51 [ 1208.951807][ T5858] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 1209.007144][T12914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1209.017506][T12914] cp210x 7-1:0.0: device disconnected [ 1209.084565][T18893] loop2: detected capacity change from 0 to 16 [ 1209.110735][T18893] erofs (device loop2): mounted with root inode @ nid 36. [ 1209.158429][ T5858] usb 4-1: Using ep0 maxpacket: 32 [ 1209.195389][T18893] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 1209.204119][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1209.214712][ T5858] usb 4-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1209.224195][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.284759][ T5858] usb 4-1: config 0 descriptor?? [ 1209.302196][ T5858] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1209.441624][T14338] usb 9-1: new high-speed USB device number 55 using dummy_hcd [ 1209.570099][T18904] overlayfs: missing 'workdir' [ 1209.618855][T14338] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1209.627368][T14338] usb 9-1: config 1 has no interface number 0 [ 1209.633926][T14338] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1209.645862][T14338] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1209.658298][T14338] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1209.675235][T12914] usb 7-1: new high-speed USB device number 52 using dummy_hcd [ 1209.704927][T14338] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1209.714750][T14338] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1209.723175][T14338] usb 9-1: Product: syz [ 1209.727495][T14338] usb 9-1: Manufacturer: syz [ 1209.732395][T14338] usb 9-1: SerialNumber: syz [ 1209.747400][T18895] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1209.772293][T18883] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1209.788582][ T5858] gspca_spca501: reg write: error -71 [ 1209.794606][ T5858] spca501 4-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1209.802442][ T5858] spca501 4-1:0.0: probe with driver spca501 failed with error -22 [ 1209.821904][T12914] usb 7-1: device descriptor read/64, error -71 [ 1209.827385][ T5858] usb 4-1: USB disconnect, device number 56 [ 1210.009263][T18895] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1210.024181][T14338] usb 9-1: No status endpoint found [ 1210.071543][T12914] usb 7-1: new high-speed USB device number 53 using dummy_hcd [ 1210.211839][T12914] usb 7-1: device descriptor read/64, error -71 [ 1210.282731][T18895] loop8: detected capacity change from 0 to 2048 [ 1210.323702][T12914] usb usb7-port1: attempt power cycle [ 1210.337517][T18895] loop8: p3 < > p4 < > [ 1210.342493][T18895] loop8: partition table partially beyond EOD, truncated [ 1210.350035][T18895] loop8: p3 start 4284289 is beyond EOD, truncated [ 1210.386160][T18895] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4818'. [ 1210.409751][T14338] usb 9-1: USB disconnect, device number 55 [ 1210.642408][T18913] overlayfs: missing 'lowerdir' [ 1210.670227][T18914] loop7: detected capacity change from 0 to 512 [ 1210.701859][T12914] usb 7-1: new high-speed USB device number 54 using dummy_hcd [ 1210.719364][T18914] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1210.732611][T18914] ext4 filesystem being mounted at /350/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1210.745625][T12914] usb 7-1: device descriptor read/8, error -71 [ 1211.001917][T12914] usb 7-1: new high-speed USB device number 55 using dummy_hcd [ 1211.023785][T12914] usb 7-1: device descriptor read/8, error -71 [ 1211.138595][T12914] usb usb7-port1: unable to enumerate USB device [ 1211.174119][T18923] loop8: detected capacity change from 0 to 256 [ 1211.183969][T18923] exfat: Deprecated parameter 'utf8' [ 1211.192948][T18923] exfat: Deprecated parameter 'utf8' [ 1211.198697][T18923] exfat: Deprecated parameter 'utf8' [ 1211.204916][T18923] exfat: Bad value for 'gid' [ 1211.209679][T18923] exfat: Bad value for 'gid' [ 1211.228160][T18923] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4827'. [ 1211.315238][T18925] loop8: detected capacity change from 0 to 256 [ 1211.348486][T18925] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1211.806365][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1212.496271][T18936] loop3: detected capacity change from 0 to 256 [ 1212.609059][T18936] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1212.699100][T18940] overlayfs: missing 'workdir' [ 1212.746258][T18942] loop8: detected capacity change from 0 to 16 [ 1212.776688][T18942] erofs (device loop8): mounted with root inode @ nid 36. [ 1212.817745][T18942] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1212.931749][ T5858] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 1213.119559][ T5858] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1213.129261][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.192608][ T5858] usb 4-1: config 0 descriptor?? [ 1213.207071][ T5858] cp210x 4-1:0.0: cp210x converter detected [ 1213.309036][T18956] overlayfs: missing 'lowerdir' [ 1213.323199][T12914] usb 7-1: new high-speed USB device number 56 using dummy_hcd [ 1213.422384][T14338] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 1213.497619][T12914] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1213.506230][T12914] usb 7-1: config 1 has no interface number 0 [ 1213.512786][T12914] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1213.524761][T12914] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1213.535159][T12914] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1213.563697][T12914] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1213.573187][T12914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.582083][T12914] usb 7-1: Product: syz [ 1213.586440][T12914] usb 7-1: Manufacturer: syz [ 1213.591445][T12914] usb 7-1: SerialNumber: syz [ 1213.604407][T18949] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1213.613912][ T5858] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1213.631765][T14338] usb 3-1: Using ep0 maxpacket: 32 [ 1213.651643][T14338] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1213.662374][T14338] usb 3-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1213.671925][T14338] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1213.689740][T14338] usb 3-1: config 0 descriptor?? [ 1213.713522][T14338] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1213.845517][T18949] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 1213.869658][T12914] usb 7-1: No status endpoint found [ 1214.344144][T14338] gspca_spca501: reg write: error -71 [ 1214.349713][T14338] spca501 3-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1214.357736][T14338] spca501 3-1:0.0: probe with driver spca501 failed with error -22 [ 1214.437605][T14338] usb 3-1: USB disconnect, device number 45 [ 1214.549858][T18949] loop6: detected capacity change from 0 to 2048 [ 1214.577020][T18958] loop7: detected capacity change from 0 to 512 [ 1214.606515][T18949] loop6: p3 < > p4 < > [ 1214.610910][T18949] loop6: partition table partially beyond EOD, truncated [ 1214.618855][T18949] loop6: p3 start 4284289 is beyond EOD, truncated [ 1214.650060][T18959] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4837'. [ 1214.712103][T18958] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1214.725463][T18958] ext4 filesystem being mounted at /354/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1214.768831][T13905] usb 7-1: USB disconnect, device number 56 [ 1215.904207][T18976] loop2: detected capacity change from 0 to 256 [ 1215.927242][T18976] exfat: Deprecated parameter 'utf8' [ 1215.933097][T18976] exfat: Deprecated parameter 'utf8' [ 1215.938817][T18976] exfat: Deprecated parameter 'utf8' [ 1215.945068][T18976] exfat: Bad value for 'gid' [ 1215.949835][T18976] exfat: Bad value for 'gid' [ 1215.996713][ T5858] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71 [ 1216.009054][ T5858] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 1216.033198][T18976] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4844'. [ 1216.053276][ T5858] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1216.077298][ T5858] usb 4-1: USB disconnect, device number 57 [ 1216.099872][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1216.111908][T14338] usb 7-1: new high-speed USB device number 57 using dummy_hcd [ 1216.112886][ T5858] cp210x 4-1:0.0: device disconnected [ 1216.203577][T18979] loop2: detected capacity change from 0 to 256 [ 1216.250021][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1216.282765][T14338] usb 7-1: Using ep0 maxpacket: 16 [ 1216.300475][T18979] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1216.310954][T14338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1216.323226][T14338] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1216.333144][T14338] usb 7-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1216.342574][T14338] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1216.443858][T14338] usb 7-1: config 0 descriptor?? [ 1216.604091][T18985] loop8: detected capacity change from 0 to 16 [ 1216.645153][T18985] erofs (device loop8): mounted with root inode @ nid 36. [ 1216.752038][T18986] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1216.831424][T14338] usb 7-1: USB disconnect, device number 57 [ 1217.204064][T18997] overlayfs: missing 'lowerdir' [ 1217.944584][T14338] usb 7-1: new high-speed USB device number 58 using dummy_hcd [ 1217.962350][T13905] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1218.164517][T14338] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1218.173111][T14338] usb 7-1: config 1 has no interface number 0 [ 1218.179423][T14338] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1218.191787][T14338] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1218.201972][T14338] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1218.228096][T14338] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1218.237585][T14338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1218.246073][T14338] usb 7-1: Product: syz [ 1218.250536][T14338] usb 7-1: Manufacturer: syz [ 1218.257953][T14338] usb 7-1: SerialNumber: syz [ 1218.274599][T19005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1218.317474][T19013] loop3: detected capacity change from 0 to 256 [ 1218.328193][T19015] loop8: detected capacity change from 0 to 512 [ 1218.375309][T19013] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1218.398208][T19015] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1218.411832][T19015] ext4 filesystem being mounted at /250/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1218.576081][T19005] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1218.631083][T14338] usb 7-1: No status endpoint found [ 1218.672064][T12914] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 1218.855022][T12914] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1218.864774][T12914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1218.904151][T12914] usb 4-1: config 0 descriptor?? [ 1218.920830][T12914] cp210x 4-1:0.0: cp210x converter detected [ 1218.941651][T19005] loop6: detected capacity change from 0 to 2048 [ 1219.003921][T19005] loop6: p3 < > p4 < > [ 1219.008616][T19005] loop6: partition table partially beyond EOD, truncated [ 1219.016463][T19005] loop6: p3 start 4284289 is beyond EOD, truncated [ 1219.068227][T19005] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4853'. [ 1219.091738][T13905] usb 7-1: USB disconnect, device number 58 [ 1219.262230][T19027] loop2: detected capacity change from 0 to 16 [ 1219.282290][T19027] erofs (device loop2): mounted with root inode @ nid 36. [ 1219.334951][T19027] erofs (device loop2): corrupted dir block 8200 @ nid 36 [ 1219.335206][T12914] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1219.356921][T12914] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1219.364960][T12914] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1219.376365][T19029] loop7: detected capacity change from 0 to 256 [ 1219.401991][T12914] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1219.433912][T19029] exfat: Deprecated parameter 'utf8' [ 1219.439573][T19029] exfat: Deprecated parameter 'utf8' [ 1219.445638][T19029] exfat: Deprecated parameter 'utf8' [ 1219.451766][T19029] exfat: Bad value for 'gid' [ 1219.462017][T19029] exfat: Bad value for 'gid' [ 1219.474069][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1219.488931][T19029] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4861'. [ 1219.596499][T19030] loop7: detected capacity change from 0 to 256 [ 1219.731545][T19030] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1220.073913][T12914] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 1220.251558][T12914] usb 3-1: Using ep0 maxpacket: 16 [ 1220.264355][T12914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1220.264492][T12914] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1220.264680][T12914] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1220.264828][T12914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.269666][T12914] usb 3-1: config 0 descriptor?? [ 1220.532143][T12914] usb 3-1: USB disconnect, device number 46 [ 1221.036824][T19045] overlayfs: missing 'workdir' [ 1221.802277][T12914] usb 9-1: new high-speed USB device number 56 using dummy_hcd [ 1222.081718][T13905] usb 4-1: USB disconnect, device number 58 [ 1222.097208][T13905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1222.106479][T13905] cp210x 4-1:0.0: device disconnected [ 1222.172163][T12914] usb 9-1: device not accepting address 56, error -71 [ 1222.298728][T19061] loop3: detected capacity change from 0 to 512 [ 1222.365969][T19061] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1222.379272][T19061] ext4 filesystem being mounted at /317/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1222.722265][T13905] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 1222.855025][T19072] loop8: detected capacity change from 0 to 16 [ 1222.880863][T19072] erofs (device loop8): mounted with root inode @ nid 36. [ 1222.899041][T13905] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1222.910412][T13905] usb 3-1: config 1 has no interface number 0 [ 1222.918134][T13905] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1222.930023][T13905] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1222.940547][T13905] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1223.000569][T19072] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1223.007415][T19074] loop7: detected capacity change from 0 to 256 [ 1223.019269][T19074] exfat: Deprecated parameter 'utf8' [ 1223.025045][T19074] exfat: Deprecated parameter 'utf8' [ 1223.030852][T19074] exfat: Deprecated parameter 'utf8' [ 1223.037122][T19074] exfat: Bad value for 'gid' [ 1223.042041][T19074] exfat: Bad value for 'gid' [ 1223.069977][T19074] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4877'. [ 1223.088054][T13905] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1223.097947][T13905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1223.106397][T13905] usb 3-1: Product: syz [ 1223.110793][T13905] usb 3-1: Manufacturer: syz [ 1223.116055][T13905] usb 3-1: SerialNumber: syz [ 1223.153932][T19067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1223.221486][T19077] loop7: detected capacity change from 0 to 256 [ 1223.293449][T19077] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1223.587706][T19067] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1223.597581][T13905] usb 3-1: No status endpoint found [ 1223.718948][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1223.976968][T19067] loop2: detected capacity change from 0 to 2048 [ 1224.015888][T19067] loop2: p3 < > p4 < > [ 1224.016015][T19067] loop2: partition table partially beyond EOD, truncated [ 1224.016393][T19067] loop2: p3 start 4284289 is beyond EOD, truncated [ 1224.022323][T12914] usb 9-1: new high-speed USB device number 58 using dummy_hcd [ 1224.035289][T19067] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4874'. [ 1224.043425][T14338] usb 3-1: USB disconnect, device number 47 [ 1224.171517][T12914] usb 9-1: Using ep0 maxpacket: 16 [ 1224.185761][T12914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1224.198639][T12914] usb 9-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 1224.208996][T12914] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1224.218403][T12914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.264684][T12914] usb 9-1: config 0 descriptor?? [ 1224.316329][T19090] overlayfs: missing 'workdir' [ 1224.491537][T12914] usb 9-1: USB disconnect, device number 58 [ 1224.520620][T19093] loop7: detected capacity change from 0 to 256 [ 1224.563601][T19093] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1224.831913][T14338] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1224.991717][T13905] usb 7-1: new high-speed USB device number 59 using dummy_hcd [ 1225.013200][T14338] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1225.023727][T14338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.063632][T14338] usb 8-1: config 0 descriptor?? [ 1225.092891][T14338] cp210x 8-1:0.0: cp210x converter detected [ 1225.155685][T13905] usb 7-1: device descriptor read/64, error -71 [ 1225.177146][ T5858] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 1225.362267][ T5858] usb 3-1: Using ep0 maxpacket: 32 [ 1225.380305][ T5858] usb 3-1: device descriptor read/all, error -71 [ 1225.411805][T13905] usb 7-1: new high-speed USB device number 60 using dummy_hcd [ 1225.505376][T14338] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1225.516524][T14338] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1225.528244][T14338] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1225.555247][T14338] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1225.562623][T13905] usb 7-1: device descriptor read/64, error -71 [ 1225.614489][T19108] loop8: detected capacity change from 0 to 16 [ 1225.632975][T19108] erofs (device loop8): mounted with root inode @ nid 36. [ 1225.649614][T19108] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1225.681937][T13905] usb usb7-port1: attempt power cycle [ 1226.032013][T13905] usb 7-1: new high-speed USB device number 61 using dummy_hcd [ 1226.075320][T13905] usb 7-1: device descriptor read/8, error -71 [ 1226.217329][T19113] loop8: detected capacity change from 0 to 512 [ 1226.293588][T19113] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1226.307269][T19113] ext4 filesystem being mounted at /259/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1226.332817][T13905] usb 7-1: new high-speed USB device number 62 using dummy_hcd [ 1226.404570][T13905] usb 7-1: device descriptor read/8, error -71 [ 1226.478222][T19120] loop2: detected capacity change from 0 to 256 [ 1226.487803][T19120] exfat: Deprecated parameter 'utf8' [ 1226.493696][T19120] exfat: Deprecated parameter 'utf8' [ 1226.499499][T19120] exfat: Deprecated parameter 'utf8' [ 1226.505868][T19120] exfat: Bad value for 'gid' [ 1226.510636][T19120] exfat: Bad value for 'gid' [ 1226.515027][T13905] usb usb7-port1: unable to enumerate USB device [ 1226.537758][T19120] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4893'. [ 1226.669076][T19123] loop2: detected capacity change from 0 to 256 [ 1226.798231][T19123] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1227.544344][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1228.220428][T19138] overlayfs: missing 'workdir' [ 1228.341648][ T5858] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 1228.363434][T14338] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 1228.509306][ T5858] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 1228.517890][ T5858] usb 3-1: config 1 has no interface number 0 [ 1228.524577][ T5858] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1228.536443][ T5858] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1228.546771][ T5858] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1228.558367][T14338] usb 4-1: Using ep0 maxpacket: 16 [ 1228.593139][T19140] loop8: detected capacity change from 0 to 16 [ 1228.605537][T14338] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 1228.614143][T14338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1228.624725][T14338] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1228.633901][T14338] usb 4-1: config 0 has no interface number 0 [ 1228.640179][T14338] usb 4-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1228.647732][T19140] erofs (device loop8): mounted with root inode @ nid 36. [ 1228.653400][T14338] usb 4-1: config 0 interface 4 has no altsetting 0 [ 1228.653578][T14338] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1228.675425][ T5440] usb 8-1: USB disconnect, device number 49 [ 1228.677032][T14338] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.696636][ T5440] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1228.709678][ T5440] cp210x 8-1:0.0: device disconnected [ 1228.717189][T19140] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1228.738444][ T5858] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1228.748748][ T5858] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1228.758185][ T5858] usb 3-1: Product: syz [ 1228.763978][ T5858] usb 3-1: Manufacturer: syz [ 1228.768763][ T5858] usb 3-1: SerialNumber: syz [ 1228.777491][T14338] usb 4-1: config 0 descriptor?? [ 1228.887045][T19133] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1229.062108][T14338] usb 4-1: string descriptor 0 read error: -71 [ 1229.102802][T14338] usb 4-1: USB disconnect, device number 59 [ 1229.142997][T19133] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 1229.189241][ T5858] usb 3-1: No status endpoint found [ 1229.529343][T19133] loop2: detected capacity change from 0 to 2048 [ 1229.603035][T19133] loop2: p3 < > p4 < > [ 1229.607436][T19133] loop2: partition table partially beyond EOD, truncated [ 1229.615960][T19133] loop2: p3 start 4284289 is beyond EOD, truncated [ 1229.701985][ T5858] usb 9-1: new high-speed USB device number 59 using dummy_hcd [ 1229.727049][T19133] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4896'. [ 1229.764732][T14338] usb 3-1: USB disconnect, device number 50 [ 1229.877079][ T5858] usb 9-1: Using ep0 maxpacket: 32 [ 1229.898527][ T5858] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1229.908361][T19159] loop3: detected capacity change from 0 to 256 [ 1229.909372][ T5858] usb 9-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 1229.919417][T19159] exfat: Deprecated parameter 'utf8' [ 1229.924687][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.931605][T19159] exfat: Deprecated parameter 'utf8' [ 1229.931841][T19159] exfat: Deprecated parameter 'utf8' [ 1229.932397][T19159] exfat: Bad value for 'gid' [ 1229.957329][T19159] exfat: Bad value for 'gid' [ 1229.996509][ T5858] usb 9-1: config 0 descriptor?? [ 1230.009924][T19159] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4906'. [ 1230.040414][ T5858] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1230.093040][T19161] loop6: detected capacity change from 0 to 512 [ 1230.135200][T19161] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1230.148703][T19161] ext4 filesystem being mounted at /235/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1230.163638][T19162] loop3: detected capacity change from 0 to 256 [ 1230.219620][T19162] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1230.561521][ T5858] gspca_spca501: reg write: error -71 [ 1230.561601][ T5858] spca501 9-1:0.0: Reg write failed for 0x02,0xa048,0x00 [ 1230.561938][ T5858] spca501 9-1:0.0: probe with driver spca501 failed with error -22 [ 1230.579280][ T5858] usb 9-1: USB disconnect, device number 59 [ 1231.422463][T19179] loop8: detected capacity change from 0 to 16 [ 1231.435572][T19179] erofs (device loop8): mounted with root inode @ nid 36. [ 1231.472296][T19179] erofs (device loop8): corrupted dir block 8200 @ nid 36 [ 1231.490591][T19180] loop7: detected capacity change from 0 to 256 [ 1231.634958][T19180] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1231.657510][T15500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1231.922431][T14338] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1232.085870][T14338] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1232.095281][T14338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.109965][T14338] usb 8-1: config 0 descriptor?? [ 1232.120286][T14338] cp210x 8-1:0.0: cp210x converter detected [ 1232.293330][T13905] usb 9-1: new high-speed USB device number 60 using dummy_hcd [ 1232.301512][T12914] usb 7-1: new high-speed USB device number 63 using dummy_hcd [ 1232.451577][T13905] usb 9-1: Using ep0 maxpacket: 16 [ 1232.464494][T13905] usb 9-1: config 0 has an invalid interface number: 4 but max is 1 [ 1232.466723][T12914] usb 7-1: device descriptor read/64, error -71 [ 1232.473106][T13905] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1232.492295][T13905] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1232.502234][T13905] usb 9-1: config 0 has no interface number 0 [ 1232.508525][T13905] usb 9-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1232.521981][T13905] usb 9-1: config 0 interface 4 has no altsetting 0 [ 1232.528848][T13905] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1232.530175][T14338] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1232.538302][T13905] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1232.543743][T13905] usb 9-1: config 0 descriptor?? [ 1232.553560][T14338] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1232.567530][T14338] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1232.578545][T14338] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1232.731709][T12914] usb 7-1: new high-speed USB device number 64 using dummy_hcd [ 1232.804876][T13905] usb 9-1: string descriptor 0 read error: -71 [ 1232.828251][T13905] usb 9-1: USB disconnect, device number 60 [ 1232.891471][T12914] usb 7-1: device descriptor read/64, error -71 [ 1233.004608][T12914] usb usb7-port1: attempt power cycle [ 1233.062080][T14338] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 1233.240258][T14338] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1233.249262][T14338] usb 4-1: config 1 has no interface number 0 [ 1233.255759][T14338] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1233.267622][T14338] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1233.277880][T14338] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1233.351114][T14338] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1233.360964][T14338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1233.369383][T14338] usb 4-1: Product: syz [ 1233.373850][T14338] usb 4-1: Manufacturer: syz [ 1233.378627][T14338] usb 4-1: SerialNumber: syz [ 1233.385948][T12914] usb 7-1: new high-speed USB device number 65 using dummy_hcd [ 1233.400989][T19194] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1233.414257][T12914] usb 7-1: device descriptor read/8, error -71 [ 1233.659494][T12914] usb 7-1: new high-speed USB device number 66 using dummy_hcd [ 1233.672934][T19194] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 1233.687916][T14338] usb 4-1: No status endpoint found [ 1233.706358][T12914] usb 7-1: device descriptor read/8, error -71 [ 1233.826186][T12914] usb usb7-port1: unable to enumerate USB device [ 1233.979628][T19194] loop3: detected capacity change from 0 to 2048 [ 1234.016116][T19194] loop3: p3 < > p4 < > [ 1234.020458][T19194] loop3: partition table partially beyond EOD, truncated [ 1234.030742][T19194] loop3: p3 start 4284289 is beyond EOD, truncated [ 1234.060247][T19194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4918'. [ 1234.078684][T13905] usb 4-1: USB disconnect, device number 60 [ 1234.134661][T12914] usb 8-1: USB disconnect, device number 50 [ 1234.154599][T12914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1234.163979][T12914] cp210x 8-1:0.0: device disconnected [ 1234.323338][T19200] loop8: detected capacity change from 0 to 256 [ 1234.337860][T19200] exfat: Deprecated parameter 'utf8' [ 1234.344234][T19200] exfat: Deprecated parameter 'utf8' [ 1234.349999][T19200] exfat: Deprecated parameter 'utf8' [ 1234.356298][T19200] exfat: Bad value for 'gid' [ 1234.361083][T19200] exfat: Bad value for 'gid' [ 1234.388257][T19200] netlink: 44 bytes leftover after parsing attributes in process `syz.8.4920'. [ 1234.479751][T19203] loop8: detected capacity change from 0 to 256 [ 1234.520656][T19203] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1235.343004][T13905] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 1235.396078][T19212] loop7: detected capacity change from 0 to 16 [ 1235.429133][T19212] erofs (device loop7): mounted with root inode @ nid 36. [ 1235.482326][T19212] erofs (device loop7): corrupted dir block 8200 @ nid 36 [ 1235.629376][T19214] loop6: detected capacity change from 0 to 512 [ 1235.710263][T19214] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1235.723753][T19214] ext4 filesystem being mounted at /238/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1236.501766][T12914] usb 9-1: new high-speed USB device number 61 using dummy_hcd [ 1236.674268][T12914] usb 9-1: Using ep0 maxpacket: 16 [ 1236.688805][T12914] usb 9-1: config 0 has an invalid interface number: 4 but max is 1 [ 1236.698165][T12914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.709386][T12914] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1236.718820][T12914] usb 9-1: config 0 has no interface number 0 [ 1236.725268][T12914] usb 9-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1236.738643][T12914] usb 9-1: config 0 interface 4 has no altsetting 0 [ 1236.745680][T12914] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1236.755103][T12914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.768286][T12914] usb 9-1: config 0 descriptor?? [ 1236.892508][T15500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1237.055339][T12914] usb 9-1: string descriptor 0 read error: -71 [ 1237.077345][T12914] usb 9-1: USB disconnect, device number 61 [ 1237.397767][T19245] loop7: detected capacity change from 0 to 256 [ 1237.408686][T13905] usb 7-1: new high-speed USB device number 67 using dummy_hcd [ 1237.414874][T19247] loop3: detected capacity change from 0 to 256 [ 1237.426158][T19247] exfat: Deprecated parameter 'utf8' [ 1237.433067][T19247] exfat: Deprecated parameter 'utf8' [ 1237.438884][T19247] exfat: Deprecated parameter 'utf8' [ 1237.445062][T19247] exfat: Bad value for 'gid' [ 1237.449826][T19247] exfat: Bad value for 'gid' [ 1237.459483][T19245] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1237.470842][T19247] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4936'. [ 1237.563319][T19248] loop3: detected capacity change from 0 to 256 [ 1237.579775][T13905] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1237.588610][T13905] usb 7-1: config 1 has no interface number 0 [ 1237.595233][T13905] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1237.609325][T13905] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1237.620023][T13905] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1237.659011][T19248] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1237.737007][T13905] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1237.737170][T13905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.737297][T13905] usb 7-1: Product: syz [ 1237.737403][T13905] usb 7-1: Manufacturer: syz [ 1237.737507][T13905] usb 7-1: SerialNumber: syz [ 1237.777130][T19240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1237.950955][T12914] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1238.026220][T19240] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1238.133900][ T5858] usb 9-1: new high-speed USB device number 62 using dummy_hcd [ 1238.154695][T13905] usb 7-1: No status endpoint found [ 1238.178902][T12914] usb 8-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1238.179067][T12914] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1238.184625][T12914] usb 8-1: config 0 descriptor?? [ 1238.192863][T12914] cp210x 8-1:0.0: cp210x converter detected [ 1238.293505][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1238.336544][T19240] loop6: detected capacity change from 0 to 2048 [ 1238.379768][T19240] loop6: p3 < > p4 < > [ 1238.395572][T19240] loop6: partition table partially beyond EOD, truncated [ 1238.396133][T19240] loop6: p3 start 4284289 is beyond EOD, truncated [ 1238.437149][T19240] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4933'. [ 1238.447909][T14338] usb 7-1: USB disconnect, device number 67 [ 1238.531627][ T5858] usb 9-1: new high-speed USB device number 63 using dummy_hcd [ 1238.615348][T12914] cp210x 8-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1238.631574][T12914] cp210x 8-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1238.640067][T12914] cp210x 8-1:0.0: GPIO initialisation failed: -121 [ 1238.654619][T12914] usb 8-1: cp210x converter now attached to ttyUSB0 [ 1238.682256][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1238.793426][ T5858] usb usb9-port1: attempt power cycle [ 1239.241727][ T5858] usb 9-1: new high-speed USB device number 64 using dummy_hcd [ 1239.273477][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1239.511653][ T5858] usb 9-1: new high-speed USB device number 65 using dummy_hcd [ 1239.544040][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1239.658856][ T5858] usb usb9-port1: unable to enumerate USB device [ 1239.699712][T19265] loop6: detected capacity change from 0 to 512 [ 1239.771694][T19265] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1239.785686][T19265] ext4 filesystem being mounted at /241/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1240.819989][T13905] usb 8-1: USB disconnect, device number 51 [ 1240.834779][T13905] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1240.847633][T13905] cp210x 8-1:0.0: device disconnected [ 1240.856849][ T5858] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 1241.016802][T19282] loop3: detected capacity change from 0 to 256 [ 1241.026241][T19282] exfat: Deprecated parameter 'utf8' [ 1241.032319][T19282] exfat: Deprecated parameter 'utf8' [ 1241.038048][T19282] exfat: Deprecated parameter 'utf8' [ 1241.044215][T19282] exfat: Bad value for 'gid' [ 1241.048974][T19282] exfat: Bad value for 'gid' [ 1241.074799][ T5858] usb 3-1: Using ep0 maxpacket: 16 [ 1241.098978][ T5858] usb 3-1: config 0 has an invalid interface number: 4 but max is 1 [ 1241.107481][ T5858] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.118076][ T5858] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1241.127410][ T5858] usb 3-1: config 0 has no interface number 0 [ 1241.133841][ T5858] usb 3-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1241.147340][ T5858] usb 3-1: config 0 interface 4 has no altsetting 0 [ 1241.154347][ T5858] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1241.163764][ T5858] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1241.214051][ T5858] usb 3-1: config 0 descriptor?? [ 1241.220899][T19282] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4948'. [ 1241.228844][T15500] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1241.344244][T19287] loop3: detected capacity change from 0 to 256 [ 1241.387854][T12914] usb 9-1: new high-speed USB device number 66 using dummy_hcd [ 1241.438225][T19287] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1241.562187][T12914] usb 9-1: Using ep0 maxpacket: 8 [ 1241.570625][T12914] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1241.595821][T12914] usb 9-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1241.595987][T12914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1241.596117][T12914] usb 9-1: Product: syz [ 1241.596225][T12914] usb 9-1: Manufacturer: syz [ 1241.596337][T12914] usb 9-1: SerialNumber: syz [ 1241.618831][T12914] usb 9-1: config 0 descriptor?? [ 1241.754524][ T5858] usb 3-1: string descriptor 0 read error: -71 [ 1241.766345][ T5858] usb 3-1: USB disconnect, device number 52 [ 1241.891596][T13905] usb 7-1: new high-speed USB device number 68 using dummy_hcd [ 1242.050470][T13905] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1242.050609][T13905] usb 7-1: config 1 has no interface number 0 [ 1242.050735][T13905] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1242.050890][T13905] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1242.051052][T13905] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1242.065474][T13905] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1242.065636][T13905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1242.065765][T13905] usb 7-1: Product: syz [ 1242.065866][T13905] usb 7-1: Manufacturer: syz [ 1242.065972][T13905] usb 7-1: SerialNumber: syz [ 1242.088461][T19291] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1242.320272][T19291] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1242.326833][T13905] usb 7-1: No status endpoint found [ 1242.629547][T19291] loop6: detected capacity change from 0 to 2048 [ 1242.684731][T19291] loop6: p3 < > p4 < > [ 1242.689139][T19291] loop6: partition table partially beyond EOD, truncated [ 1242.697213][T19291] loop6: p3 start 4284289 is beyond EOD, truncated [ 1242.759667][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4951'. [ 1242.784037][T12914] usb 7-1: USB disconnect, device number 68 [ 1243.739479][T19314] loop3: detected capacity change from 0 to 256 [ 1243.807983][T19314] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1243.996322][T19316] loop2: detected capacity change from 0 to 512 [ 1244.040623][T19316] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1244.054194][T19316] ext4 filesystem being mounted at /177/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1244.096486][T13905] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 1244.214252][ T5858] usb 9-1: USB disconnect, device number 66 [ 1244.318235][T13905] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1244.328014][T13905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1244.348071][T13905] usb 4-1: config 0 descriptor?? [ 1244.379696][T13905] cp210x 4-1:0.0: cp210x converter detected [ 1244.701950][ T5858] usb 9-1: new high-speed USB device number 67 using dummy_hcd [ 1244.763005][T19311] loop6: detected capacity change from 0 to 32768 [ 1244.765627][T13905] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1244.786794][T13905] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1244.795026][T13905] cp210x 4-1:0.0: GPIO initialisation failed: -121 [ 1244.797552][T19311] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1244.807928][T13905] usb 4-1: cp210x converter now attached to ttyUSB0 [ 1244.846069][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1244.943154][T19311] XFS (loop6): Ending clean mount [ 1244.957920][T19311] XFS (loop6): Quotacheck needed: Please wait. [ 1244.982521][T19311] XFS (loop6): Quotacheck: Done. [ 1244.997315][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 1244.997400][ T30] audit: type=1800 audit(1760921798.354:596): pid=19311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4959" name="file2" dev="loop6" ino=9287 res=0 errno=0 [ 1245.097043][ T5858] usb 9-1: new high-speed USB device number 68 using dummy_hcd [ 1245.251515][ T5858] usb 9-1: device descriptor read/64, error -71 [ 1245.304489][T16706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.373271][ T5858] usb usb9-port1: attempt power cycle [ 1245.761674][ T5858] usb 9-1: new high-speed USB device number 69 using dummy_hcd [ 1245.812431][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1246.061938][ T5858] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1246.067288][T19340] loop7: detected capacity change from 0 to 256 [ 1246.101747][T19340] exfat: Deprecated parameter 'utf8' [ 1246.108253][ T5858] usb 9-1: device descriptor read/8, error -71 [ 1246.115517][T19340] exfat: Deprecated parameter 'utf8' [ 1246.121635][T19340] exfat: Deprecated parameter 'utf8' [ 1246.127579][T19340] exfat: Bad value for 'gid' [ 1246.132745][T19340] exfat: Bad value for 'gid' [ 1246.193941][T19340] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4966'. [ 1246.212946][ T5858] usb usb9-port1: unable to enumerate USB device [ 1246.309061][T19342] loop7: detected capacity change from 0 to 256 [ 1246.405703][T19342] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1247.063804][T13905] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 1247.230247][T13905] usb 3-1: Using ep0 maxpacket: 16 [ 1247.268255][T13905] usb 3-1: config 0 has an invalid interface number: 4 but max is 1 [ 1247.276648][T13905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1247.287608][T13905] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1247.297011][T13905] usb 3-1: config 0 has no interface number 0 [ 1247.303513][T13905] usb 3-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1247.317155][T13905] usb 3-1: config 0 interface 4 has no altsetting 0 [ 1247.324191][T13905] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1247.333729][T13905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1247.442289][T13905] usb 3-1: config 0 descriptor?? [ 1247.735883][T13905] usb 3-1: string descriptor 0 read error: -71 [ 1247.778863][T13905] usb 3-1: USB disconnect, device number 53 [ 1247.866988][ T5858] usb 4-1: USB disconnect, device number 61 [ 1247.882155][T15500] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1247.882784][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1247.900153][ T5858] cp210x 4-1:0.0: device disconnected [ 1248.053169][T12914] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1248.265606][T12914] usb 9-1: config 1 has an invalid interface number: 7 but max is 0 [ 1248.274222][T12914] usb 9-1: config 1 has no interface number 0 [ 1248.280517][T12914] usb 9-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1248.292531][T12914] usb 9-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1248.302717][T12914] usb 9-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1248.397638][T12914] usb 9-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1248.407223][T12914] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1248.415751][T12914] usb 9-1: Product: syz [ 1248.420110][T12914] usb 9-1: Manufacturer: syz [ 1248.425660][T12914] usb 9-1: SerialNumber: syz [ 1248.453368][T19349] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1248.649409][T19358] loop2: detected capacity change from 0 to 512 [ 1248.712724][T19358] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1248.716888][T19349] raw-gadget.1 gadget.8: fail, usb_ep_enable returned -22 [ 1248.726031][T19358] ext4 filesystem being mounted at /181/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1248.733443][T14338] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 1248.790397][T12914] usb 9-1: No status endpoint found [ 1248.961551][T14338] usb 4-1: Using ep0 maxpacket: 8 [ 1248.994238][T14338] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1249.039088][T14338] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1249.049077][T14338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1249.057575][T14338] usb 4-1: Product: syz [ 1249.062046][T14338] usb 4-1: Manufacturer: syz [ 1249.066833][T14338] usb 4-1: SerialNumber: syz [ 1249.092226][T14338] usb 4-1: config 0 descriptor?? [ 1249.109434][T19349] loop8: detected capacity change from 0 to 2048 [ 1249.173231][T19349] loop8: p3 < > p4 < > [ 1249.180295][T19349] loop8: partition table partially beyond EOD, truncated [ 1249.190977][T19349] loop8: p3 start 4284289 is beyond EOD, truncated [ 1249.216344][T19349] netlink: 8 bytes leftover after parsing attributes in process `syz.8.4969'. [ 1249.234096][ T5858] usb 9-1: USB disconnect, device number 71 [ 1249.737377][T16706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1250.175549][T19377] loop6: detected capacity change from 0 to 256 [ 1250.208804][T19377] exfat: Deprecated parameter 'utf8' [ 1250.215348][T19377] exfat: Deprecated parameter 'utf8' [ 1250.221093][T19377] exfat: Deprecated parameter 'utf8' [ 1250.227350][T19377] exfat: Bad value for 'gid' [ 1250.232408][T19377] exfat: Bad value for 'gid' [ 1250.256537][T19377] netlink: 44 bytes leftover after parsing attributes in process `syz.6.4978'. [ 1250.341882][T19382] loop6: detected capacity change from 0 to 256 [ 1250.384439][T19382] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1250.441725][ T5858] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 1250.572256][ T5858] usb 3-1: device descriptor read/64, error -71 [ 1250.812196][ T5858] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 1251.003894][T19388] loop8: detected capacity change from 0 to 256 [ 1251.044654][T19388] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1251.060231][ T5858] usb 3-1: device descriptor read/64, error -71 [ 1251.165229][ T5858] usb usb3-port1: attempt power cycle [ 1251.312417][T14338] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1251.502326][T14338] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1251.511917][T14338] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1251.527359][ T5858] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 1251.530178][T14338] usb 9-1: config 0 descriptor?? [ 1251.545100][T13905] usb 4-1: USB disconnect, device number 62 [ 1251.583982][ T5858] usb 3-1: device descriptor read/8, error -71 [ 1251.595110][T14338] cp210x 9-1:0.0: cp210x converter detected [ 1251.821708][ T5858] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 1251.844510][ T5858] usb 3-1: device descriptor read/8, error -71 [ 1251.961747][ T5858] usb usb3-port1: unable to enumerate USB device [ 1251.981032][T14338] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1252.005016][T14338] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1252.013261][T14338] cp210x 9-1:0.0: GPIO initialisation failed: -121 [ 1252.032608][T14338] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1252.061813][T12914] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 1252.241863][T12914] usb 4-1: Using ep0 maxpacket: 16 [ 1252.266052][T12914] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 1252.274547][T12914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1252.285088][T12914] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1252.294273][T12914] usb 4-1: config 0 has no interface number 0 [ 1252.300584][T12914] usb 4-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1252.314089][T12914] usb 4-1: config 0 interface 4 has no altsetting 0 [ 1252.320954][T12914] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1252.330378][T12914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1252.422813][T12914] usb 4-1: config 0 descriptor?? [ 1252.437062][T19392] loop6: detected capacity change from 0 to 32768 [ 1252.495423][T19392] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1252.676394][T12914] usb 4-1: string descriptor 0 read error: -71 [ 1252.695882][T12914] usb 4-1: USB disconnect, device number 63 [ 1252.842852][T19392] XFS (loop6): Ending clean mount [ 1252.855105][T19392] XFS (loop6): Quotacheck needed: Please wait. [ 1252.888268][T19392] XFS (loop6): Quotacheck: Done. [ 1252.917664][ T30] audit: type=1800 audit(1760921806.274:597): pid=19392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4984" name="file2" dev="loop6" ino=9287 res=0 errno=0 [ 1253.121060][T15500] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1253.841950][T19407] loop3: detected capacity change from 0 to 512 [ 1253.937587][T19407] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.950842][T19407] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1254.372574][T12914] usb 7-1: new high-speed USB device number 69 using dummy_hcd [ 1254.564218][T12914] usb 7-1: config 1 has an invalid interface number: 7 but max is 0 [ 1254.572869][T12914] usb 7-1: config 1 has no interface number 0 [ 1254.579178][T12914] usb 7-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1254.591124][T12914] usb 7-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1254.601480][T12914] usb 7-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1254.631766][T12914] usb 7-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1254.641071][T12914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1254.649608][T12914] usb 7-1: Product: syz [ 1254.654220][T12914] usb 7-1: Manufacturer: syz [ 1254.659004][T12914] usb 7-1: SerialNumber: syz [ 1254.684974][T19418] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1254.918778][T19418] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1254.957059][T12914] usb 7-1: No status endpoint found [ 1254.974851][T19426] loop7: detected capacity change from 0 to 256 [ 1254.998367][T14338] usb 9-1: USB disconnect, device number 72 [ 1255.016183][T14338] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1255.025590][T14338] cp210x 9-1:0.0: device disconnected [ 1255.036513][T19426] exfat: Deprecated parameter 'utf8' [ 1255.042418][T19426] exfat: Deprecated parameter 'utf8' [ 1255.048199][T19426] exfat: Deprecated parameter 'utf8' [ 1255.055346][T19426] exfat: Bad value for 'gid' [ 1255.060147][T19426] exfat: Bad value for 'gid' [ 1255.122450][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.158433][T19426] netlink: 44 bytes leftover after parsing attributes in process `syz.7.4993'. [ 1255.286899][T19429] loop7: detected capacity change from 0 to 256 [ 1255.327357][T19418] loop6: detected capacity change from 0 to 2048 [ 1255.381588][T19418] loop6: p3 < > p4 < > [ 1255.385985][T19418] loop6: partition table partially beyond EOD, truncated [ 1255.393995][T19418] loop6: p3 start 4284289 is beyond EOD, truncated [ 1255.420915][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4987'. [ 1255.444152][ T5858] usb 7-1: USB disconnect, device number 69 [ 1255.477973][T19429] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1255.771630][T13905] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 1255.923130][ T5858] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1255.938883][T13905] usb 3-1: Using ep0 maxpacket: 8 [ 1255.964830][T13905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1255.981559][T13905] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1255.981722][T13905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1255.981850][T13905] usb 3-1: Product: syz [ 1255.981959][T13905] usb 3-1: Manufacturer: syz [ 1255.982075][T13905] usb 3-1: SerialNumber: syz [ 1255.997430][T13905] usb 3-1: config 0 descriptor?? [ 1256.121713][ T5858] usb 9-1: Using ep0 maxpacket: 16 [ 1256.128812][ T5858] usb 9-1: config 0 has an invalid interface number: 4 but max is 1 [ 1256.144592][ T5858] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1256.144726][ T5858] usb 9-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1256.144865][ T5858] usb 9-1: config 0 has no interface number 0 [ 1256.144989][ T5858] usb 9-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1256.145161][ T5858] usb 9-1: config 0 interface 4 has no altsetting 0 [ 1256.145334][ T5858] usb 9-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1256.145487][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1256.160265][ T5858] usb 9-1: config 0 descriptor?? [ 1256.404950][ T5858] usb 9-1: string descriptor 0 read error: -71 [ 1256.419959][ T5858] usb 9-1: USB disconnect, device number 73 [ 1256.571849][T14338] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1256.721765][T14338] usb 7-1: device descriptor read/64, error -71 [ 1256.971988][T14338] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1257.117197][T14338] usb 7-1: device descriptor read/64, error -71 [ 1257.241786][T14338] usb usb7-port1: attempt power cycle [ 1257.404183][T19456] loop8: detected capacity change from 0 to 256 [ 1257.437885][T19456] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1257.591618][T14338] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1257.613331][T14338] usb 7-1: device descriptor read/8, error -71 [ 1257.712229][T12914] usb 9-1: new high-speed USB device number 74 using dummy_hcd [ 1257.798640][T19458] loop7: detected capacity change from 0 to 512 [ 1257.832079][T19458] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1257.845029][T19458] ext4 filesystem being mounted at /390/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1257.862172][T14338] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1257.906696][T14338] usb 7-1: device descriptor read/8, error -71 [ 1257.917130][T12914] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1257.926671][T12914] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1257.942729][T12914] usb 9-1: config 0 descriptor?? [ 1257.957143][T12914] cp210x 9-1:0.0: cp210x converter detected [ 1258.023578][T14338] usb usb7-port1: unable to enumerate USB device [ 1258.360497][T12914] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1258.370879][T12914] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1258.379220][T12914] cp210x 9-1:0.0: GPIO initialisation failed: -121 [ 1258.390149][T12914] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1258.542243][ T5858] usb 3-1: USB disconnect, device number 58 [ 1258.757510][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1259.092862][T12914] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1259.156473][T19470] loop2: detected capacity change from 0 to 256 [ 1259.166194][T19470] exfat: Deprecated parameter 'utf8' [ 1259.172049][T19470] exfat: Deprecated parameter 'utf8' [ 1259.177780][T19470] exfat: Deprecated parameter 'utf8' [ 1259.181850][T14338] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1259.184001][T19470] exfat: Bad value for 'gid' [ 1259.195731][T19470] exfat: Bad value for 'gid' [ 1259.222704][T19470] netlink: 44 bytes leftover after parsing attributes in process `syz.2.5010'. [ 1259.251772][T12914] usb 4-1: Using ep0 maxpacket: 8 [ 1259.269102][T12914] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.279772][T12914] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1259.307592][T12914] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1259.318248][T12914] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1259.327223][T12914] usb 4-1: Product: syz [ 1259.331725][T12914] usb 4-1: Manufacturer: syz [ 1259.336507][T12914] usb 4-1: SerialNumber: syz [ 1259.343128][T19471] loop2: detected capacity change from 0 to 256 [ 1259.355281][T12914] usb 4-1: config 0 descriptor?? [ 1259.384869][T14338] usb 8-1: config 1 has an invalid interface number: 7 but max is 0 [ 1259.393524][T14338] usb 8-1: config 1 has no interface number 0 [ 1259.399832][T14338] usb 8-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1259.411968][T14338] usb 8-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1259.423293][T14338] usb 8-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1259.446283][T12914] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1259.454265][T12914] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1259.463923][T12914] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1259.503609][T19471] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1259.511047][T14338] usb 8-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1259.526251][T14338] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.534975][T14338] usb 8-1: Product: syz [ 1259.539329][T14338] usb 8-1: Manufacturer: syz [ 1259.544280][T14338] usb 8-1: SerialNumber: syz [ 1259.562610][T19468] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1259.590543][T12914] usb 4-1: USB disconnect, device number 64 [ 1259.947833][T19468] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 1259.967088][T14338] usb 8-1: No status endpoint found [ 1260.482983][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5009'. [ 1260.503359][T19468] loop7: detected capacity change from 0 to 2048 [ 1260.564913][T19468] loop7: p3 < > p4 < > [ 1260.569474][T19468] loop7: partition table partially beyond EOD, truncated [ 1260.577263][T19468] loop7: p3 start 4284289 is beyond EOD, truncated [ 1260.624290][T14338] usb 8-1: USB disconnect, device number 52 [ 1261.016392][ T5858] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1261.177216][ T5858] usb 4-1: Using ep0 maxpacket: 16 [ 1261.208163][ T5858] usb 4-1: config 0 has an invalid interface number: 4 but max is 1 [ 1261.216753][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.227309][ T5858] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1261.236797][ T5858] usb 4-1: config 0 has no interface number 0 [ 1261.254796][ T5858] usb 4-1: config 0 interface 4 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1261.270654][ T5858] usb 4-1: config 0 interface 4 has no altsetting 0 [ 1261.278251][ T5858] usb 4-1: New USB device found, idVendor=eb1a, idProduct=2750, bcdDevice=e2.82 [ 1261.287750][ T5858] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1261.302571][T12914] usb 9-1: USB disconnect, device number 74 [ 1261.337881][T12914] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1261.347218][T12914] cp210x 9-1:0.0: device disconnected [ 1261.377306][ T5858] usb 4-1: config 0 descriptor?? [ 1261.412940][T14338] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1261.561964][T19493] loop8: detected capacity change from 0 to 512 [ 1261.592055][T14338] usb 7-1: Using ep0 maxpacket: 8 [ 1261.605879][T14338] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.616785][T14338] usb 7-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1261.647506][T14338] usb 7-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1261.652096][T19493] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1261.657267][T14338] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1261.669961][T19493] ext4 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 1261.689990][T14338] usb 7-1: Product: syz [ 1261.694539][T14338] usb 7-1: Manufacturer: syz [ 1261.699117][ T5858] usb 4-1: string descriptor 0 read error: -71 [ 1261.699295][T14338] usb 7-1: SerialNumber: syz [ 1261.719107][T14338] usb 7-1: config 0 descriptor?? [ 1261.726124][ T5858] usb 4-1: USB disconnect, device number 65 [ 1261.748038][T14338] radio-si470x 7-1:0.0: could not find interrupt in endpoint [ 1261.756109][T14338] radio-si470x 7-1:0.0: probe with driver radio-si470x failed with error -5 [ 1261.765646][T14338] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 1262.451843][T14338] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 1262.561043][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1262.642945][T14338] usb 3-1: Using ep0 maxpacket: 8 [ 1262.679981][T14338] usb 3-1: config 0 has no interfaces? [ 1262.698049][T14338] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1262.707993][T14338] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1262.716465][T14338] usb 3-1: Product: syz [ 1262.720833][T14338] usb 3-1: Manufacturer: syz [ 1262.725830][T14338] usb 3-1: SerialNumber: syz [ 1262.735933][T14338] usb 3-1: config 0 descriptor?? [ 1262.754975][T19509] loop8: detected capacity change from 0 to 256 [ 1262.764872][T19509] exfat: Deprecated parameter 'utf8' [ 1262.770466][T19509] exfat: Deprecated parameter 'utf8' [ 1262.776213][T19509] exfat: Deprecated parameter 'utf8' [ 1262.782304][T19509] exfat: Bad value for 'gid' [ 1262.787056][T19509] exfat: Bad value for 'gid' [ 1262.806546][T19509] netlink: 44 bytes leftover after parsing attributes in process `syz.8.5024'. [ 1262.888621][T19510] loop8: detected capacity change from 0 to 256 [ 1262.919416][T19510] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1262.921969][ T5858] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 1263.091792][ T5858] usb 4-1: Using ep0 maxpacket: 8 [ 1263.119376][ T5858] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.119533][ T5858] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 1263.134730][ T5858] usb 4-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 1263.134997][ T5858] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 1263.135127][ T5858] usb 4-1: Product: syz [ 1263.135233][ T5858] usb 4-1: Manufacturer: syz [ 1263.135533][ T5858] usb 4-1: SerialNumber: syz [ 1263.142376][ T5858] usb 4-1: config 0 descriptor?? [ 1263.165190][ T5858] radio-si470x 4-1:0.0: could not find interrupt in endpoint [ 1263.165510][ T5858] radio-si470x 4-1:0.0: probe with driver radio-si470x failed with error -5 [ 1263.166222][ T5858] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1263.371706][ T5858] usb 4-1: USB disconnect, device number 66 [ 1264.266436][ T5858] usb 7-1: USB disconnect, device number 74 [ 1264.405949][T19528] loop8: detected capacity change from 0 to 256 [ 1264.450963][T19528] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1264.541601][ T5440] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 1264.705879][ T5440] usb 4-1: config 1 has an invalid interface number: 7 but max is 0 [ 1264.714522][ T5440] usb 4-1: config 1 has no interface number 0 [ 1264.720850][ T5440] usb 4-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 1264.732831][ T5440] usb 4-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 1264.745267][ T5440] usb 4-1: config 1 interface 7 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1264.757719][ T5858] usb 9-1: new high-speed USB device number 75 using dummy_hcd [ 1264.796163][ T5440] usb 4-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 1264.805787][ T5440] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1264.814329][ T5440] usb 4-1: Product: syz [ 1264.818672][ T5440] usb 4-1: Manufacturer: syz [ 1264.823634][ T5440] usb 4-1: SerialNumber: syz [ 1264.856860][T19523] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1264.933970][ T5858] usb 9-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 1264.943628][ T5858] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1264.964143][ T5858] usb 9-1: config 0 descriptor?? [ 1264.981579][ T5858] cp210x 9-1:0.0: cp210x converter detected [ 1265.126001][T19523] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1265.156087][ T5440] usb 4-1: No status endpoint found [ 1265.392145][ T5858] cp210x 9-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 1265.402307][ T5858] cp210x 9-1:0.0: failed to get vendor val 0x370c size 73: -121 [ 1265.410301][ T5858] cp210x 9-1:0.0: GPIO initialisation failed: -121 [ 1265.434715][ T5858] usb 9-1: cp210x converter now attached to ttyUSB0 [ 1265.470516][T14338] usb 3-1: USB disconnect, device number 59 [ 1265.484765][T19538] netlink: 'syz.6.5033': attribute type 10 has an invalid length. [ 1265.541530][T19523] loop3: detected capacity change from 0 to 2048 [ 1265.618633][T19523] loop3: p3 < > p4 < > [ 1265.623391][T19523] loop3: partition table partially beyond EOD, truncated [ 1265.626626][T19540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5028'. [ 1265.631040][T19523] loop3: p3 start 4284289 is beyond EOD, truncated [ 1265.748236][ T5858] usb 4-1: USB disconnect, device number 67 [ 1265.859948][T19537] loop7: detected capacity change from 0 to 4096 [ 1266.200535][T19537] ntfs3(loop7): failed to convert "0080" to koi8-ru [ 1266.239107][T19537] ntfs3(loop7): failed to convert name for inode 1e. [ 1266.275050][T19537] ntfs3(loop7): ino=1f, mi_enum_attr [ 1266.283463][T19537] ntfs3(loop7): Mark volume as dirty due to NTFS errors [ 1267.198371][T19552] loop3: detected capacity change from 0 to 256 [ 1267.311483][T19552] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1268.732521][ T5858] usb 9-1: USB disconnect, device number 75 [ 1268.794022][ T5858] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 1268.805865][ T5858] cp210x 9-1:0.0: device disconnected [ 1269.020887][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1269.027716][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1271.719472][T19576] loop3: detected capacity change from 0 to 256 [ 1272.003288][T19582] tipc: Started in network mode [ 1272.008359][T19582] tipc: Node identity 2, cluster identity 3142 [ 1272.018016][T19582] tipc: Node number set to 2 [ 1272.024307][T19582] tipc: Cannot configure node identity twice [ 1272.307941][T19584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1272.317269][T19584] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5053'. [ 1273.283767][T19590] loop3: detected capacity change from 0 to 16 [ 1273.316146][T19590] erofs (device loop3): mounted with root inode @ nid 36. [ 1273.358363][T19590] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 1273.379863][T19590] erofs (device loop3): read error -117 @ 8200 of nid 36 [ 1273.890591][T19594] loop3: detected capacity change from 0 to 2048 [ 1273.939568][T19594] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1274.001459][ T30] audit: type=1800 audit(1760921827.354:598): pid=19594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5057" name="file1" dev="loop3" ino=1346 res=0 errno=0 [ 1275.690487][T19601] loop7: detected capacity change from 0 to 256 [ 1275.721715][T19601] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1275.804763][T19601] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010364, chksum : 0x43f9f21b, utbl_chksum : 0xe619d30d) [ 1278.872517][T19620] loop2: detected capacity change from 0 to 16 [ 1278.902554][T19620] erofs (device loop2): mounted with root inode @ nid 36. [ 1282.684658][T19628] sp0: Synchronizing with TNC [ 1282.957896][T19628] loop7: detected capacity change from 0 to 8 [ 1283.712818][T19631] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5067'. [ 1284.147543][T19637] loop2: detected capacity change from 0 to 512 [ 1284.164562][T19637] EXT4-fs: Ignoring removed i_version option [ 1284.183606][T19637] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 1284.248652][T19637] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1284.262293][T19637] ext4 filesystem being mounted at /207/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1287.043129][T19649] binder: 19648:19649 ioctl 0 80000040 returned -22 [ 1288.418518][T19660] loop8: detected capacity change from 0 to 64 [ 1293.054023][T19670] loop8: detected capacity change from 0 to 32768 [ 1293.286019][T19670] __jfs_setxattr: xattr_size = 72, new_size = 12051 [ 1294.011850][T16706] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1298.670263][T19686] loop8: detected capacity change from 0 to 32768 [ 1298.731784][T19686] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5085 (19686) [ 1298.781844][T19686] BTRFS info (device loop8): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1298.792588][T19686] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm [ 1299.064548][T19686] BTRFS error (device loop8): open_ctree failed: -4 [ 1300.478714][T19715] veth1_to_bond: entered allmulticast mode [ 1300.512656][T19714] veth1_to_bond: left allmulticast mode [ 1304.233721][T19726] loop3: detected capacity change from 0 to 8 [ 1304.677338][T19728] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5094'. [ 1305.338840][T19738] loop2: detected capacity change from 0 to 2048 [ 1305.354445][T19738] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024) [ 1305.364613][T19738] NILFS (loop2): mounting unchecked fs [ 1305.370258][T19738] NILFS (loop2): recovery required for readonly filesystem [ 1305.377995][T19738] NILFS (loop2): write access will be enabled during recovery [ 1305.439264][T19738] NILFS (loop2): recovery complete [ 1306.060792][T19743] loop3: detected capacity change from 0 to 64 [ 1306.326585][T19743] hfs: unable to load codepage "none" [ 1311.533358][T19771] loop8: detected capacity change from 0 to 4096 [ 1311.783819][T19773] loop6: detected capacity change from 0 to 4096 [ 1311.801448][T19771] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1311.825295][T19771] ntfs3(loop8): Failed to initialize $Extend/$ObjId. [ 1311.842765][T19773] ntfs3(loop6): Different NTFS sector size (1024) and media sector size (512). [ 1312.126736][T19773] ntfs3(loop6): ino=1a, mi_enum_attr [ 1312.132483][T19773] ntfs3(loop6): Mark volume as dirty due to NTFS errors [ 1312.904810][T19785] Set syz1 is full, maxelem 65536 reached [ 1314.344502][T19789] loop8: detected capacity change from 0 to 4096 [ 1314.490387][T19789] ntfs3(loop8): Mark volume as dirty due to NTFS errors [ 1314.559677][T19789] ntfs3(loop8): Failed to load $Extend (-22). [ 1314.566514][T19789] ntfs3(loop8): Failed to initialize $Extend. [ 1316.433976][T19806] loop8: detected capacity change from 0 to 1024 [ 1316.501793][T19806] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1316.757203][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1317.391795][T19825] loop3: detected capacity change from 0 to 512 [ 1317.495347][T19825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1317.845026][T14228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1319.851618][T19849] warning: `syz.6.5135' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1324.498931][T19866] input: syz1 as /devices/virtual/input/input11 [ 1330.027608][T19883] loop3: detected capacity change from 0 to 32768 [ 1330.066195][T19883] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.5147 (19883) [ 1330.463018][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1330.469648][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1334.567106][T19891] loop3: detected capacity change from 0 to 40427 [ 1334.629625][T19891] F2FS-fs (loop3): build fault injection rate: 771 [ 1334.663966][T19891] F2FS-fs (loop3): invalid crc value [ 1335.319185][T19891] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1339.071969][ T5858] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1339.183517][T19926] loop8: detected capacity change from 0 to 512 [ 1339.239315][T19926] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1339.274521][ T5858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1339.286449][ T5858] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1339.298563][ T5858] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 1339.308452][ T5858] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1339.463303][ T5858] usb 8-1: config 0 descriptor?? [ 1339.557889][T15172] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1339.990592][T19933] loop6: detected capacity change from 0 to 2048 [ 1340.035510][T19933] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=27485, location=27485 [ 1340.085196][T19933] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1340.299240][ T5858] hid-led 0003:27B8:01ED.0003: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.7-1/input0 [ 1340.319229][ T5858] hid-led 0003:27B8:01ED.0003: ThingM blink(1) v1 initialized [ 1340.498644][ T5858] usb 8-1: USB disconnect, device number 53 [ 1342.676560][T19956] tipc: Started in network mode [ 1342.681984][T19956] tipc: Node identity 4, cluster identity 4711 [ 1342.688439][T19956] tipc: Node number set to 4 [ 1342.760863][T19959] loop8: detected capacity change from 0 to 2048 [ 1342.797522][T19959] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1342.853533][ T30] audit: type=1800 audit(1760921896.214:599): pid=19959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5171" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 1344.516446][T19962] kAFS: unable to lookup cell './' [ 1349.092349][ T5858] usb 7-1: new high-speed USB device number 75 using dummy_hcd [ 1349.282000][ T5858] usb 7-1: Using ep0 maxpacket: 8 [ 1349.340623][ T5858] usb 7-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c [ 1349.350121][ T5858] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1349.358580][ T5858] usb 7-1: Product: syz [ 1349.363084][ T5858] usb 7-1: Manufacturer: syz [ 1349.367908][ T5858] usb 7-1: SerialNumber: syz [ 1349.453779][ T5858] usb 7-1: config 0 descriptor?? [ 1349.469832][ T5858] gspca_main: se401-2.14.0 probing 047d:5003 [ 1351.486218][ T5858] gspca_se401: read req failed req 0x06 error -19 [ 1351.521699][ T5858] usb 7-1: USB disconnect, device number 75 [ 1352.517139][T19990] loop6: detected capacity change from 0 to 128 [ 1352.573893][T19990] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1352.613275][T19990] ext4 filesystem being mounted at /284/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1352.974220][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1353.031539][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1353.092821][T15500] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1353.115783][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1353.171743][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1353.209721][T15500] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1353.258506][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1353.291751][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 1353.331990][T15500] EXT4-fs error (device loop6): ext4_empty_dir:3109: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 1353.373958][T15500] EXT4-fs error (device loop6): ext4_readdir:224: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 1355.616652][T19994] loop2: detected capacity change from 0 to 2048 [ 1355.668156][T19994] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=2361, location=2361 [ 1355.734966][T19994] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1355.785119][T19994] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 1355.819771][T19994] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 2016: 0x5c != 0x1b [ 1355.852559][T19994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1356.204579][T15500] bridge0: port 3(syz_tun) entered disabled state [ 1356.247395][T15500] syz_tun (unregistering): left allmulticast mode [ 1356.254247][T15500] syz_tun (unregistering): left promiscuous mode [ 1356.261092][T15500] bridge0: port 3(syz_tun) entered disabled state [ 1356.713581][T15500] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1358.935184][T19998] loop3: detected capacity change from 0 to 32768 [ 1358.985425][ T30] audit: type=1800 audit(1760921912.334:600): pid=19996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5182" name="file2" dev="loop3" ino=5 res=0 errno=0 [ 1360.015020][T20013] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1360.034064][T20013] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1360.044649][T20013] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1360.056526][T20013] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1360.066890][T20013] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1361.494827][T20012] chnl_net:caif_netlink_parms(): no params data found [ 1362.183056][ T5801] Bluetooth: hci4: command tx timeout [ 1362.439096][T20012] bridge0: port 1(bridge_slave_0) entered blocking state [ 1362.447199][T20012] bridge0: port 1(bridge_slave_0) entered disabled state [ 1362.455231][T20012] bridge_slave_0: entered allmulticast mode [ 1362.464984][T20012] bridge_slave_0: entered promiscuous mode [ 1362.514580][T20012] bridge0: port 2(bridge_slave_1) entered blocking state [ 1362.523059][T20012] bridge0: port 2(bridge_slave_1) entered disabled state [ 1362.530906][T20012] bridge_slave_1: entered allmulticast mode [ 1362.542639][T20012] bridge_slave_1: entered promiscuous mode [ 1362.819055][T20012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1362.866244][T20012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1363.034397][T20012] team0: Port device team_slave_0 added [ 1363.058205][T20012] team0: Port device team_slave_1 added [ 1363.220718][T20012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1363.228280][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.256240][T20012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1363.286809][T20012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1363.294307][T20012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1363.321064][T20012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1363.340219][T20039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1363.346853][T20039] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1363.421482][T20039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1363.428090][T20039] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1363.513018][T20012] hsr_slave_0: entered promiscuous mode [ 1363.523823][T20012] hsr_slave_1: entered promiscuous mode [ 1363.535144][T20012] debugfs: 'hsr0' already exists in 'hsr' [ 1363.541073][T20012] Cannot create hsr debugfs directory [ 1363.550714][T20039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1363.557502][T20039] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 1363.626240][T20039] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1363.632967][T20039] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1363.715371][T20039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1363.722145][T20039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1363.824699][T20039] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1364.646748][T20012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1364.722838][T20012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1364.741486][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 1364.813171][T20012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1364.913010][T20012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1365.482552][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 1365.623653][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1365.667320][T20012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1365.706202][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1365.731933][T20012] 8021q: adding VLAN 0 to HW filter on device team0 [ 1365.760972][ T135] bridge0: port 1(bridge_slave_0) entered blocking state [ 1365.768576][ T135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1365.781824][ T5801] Bluetooth: hci4: command 0x040f tx timeout [ 1365.938849][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 1365.946518][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1366.086118][T20012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1366.737495][T20051] netlink: 'syz.7.5197': attribute type 1 has an invalid length. [ 1366.745657][T20051] netlink: 'syz.7.5197': attribute type 2 has an invalid length. [ 1366.821835][ T5801] Bluetooth: hci3: command 0x0406 tx timeout [ 1367.437892][T20012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1367.544766][ T5801] Bluetooth: hci1: command 0x0406 tx timeout [ 1367.701973][ T5801] Bluetooth: hci0: command 0x0406 tx timeout [ 1367.781577][ T5801] Bluetooth: hci2: command 0x0406 tx timeout [ 1367.861435][ T5801] Bluetooth: hci4: command 0x040f tx timeout [ 1369.123642][T20012] veth0_vlan: entered promiscuous mode [ 1369.219254][T20012] veth1_vlan: entered promiscuous mode [ 1369.471959][T20012] veth0_macvtap: entered promiscuous mode [ 1369.553474][T20012] veth1_macvtap: entered promiscuous mode [ 1369.692019][T20012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1369.766891][T20012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1369.847138][ T135] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.862926][T20064] loop8: detected capacity change from 0 to 2048 [ 1369.874856][ T135] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.917622][ T135] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.929730][T20064] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1369.952845][ T5801] Bluetooth: hci4: command 0x040f tx timeout [ 1369.976073][ T135] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1369.993233][T20064] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1370.655578][T20074] loop3: detected capacity change from 0 to 256 [ 1372.025160][ T5801] Bluetooth: hci4: command 0x040f tx timeout [ 1373.635654][T20092] loop2: detected capacity change from 0 to 16 [ 1373.667137][T20092] erofs (device loop2): mounted with root inode @ nid 36. [ 1374.114160][ T5801] Bluetooth: hci4: command 0x040f tx timeout [ 1375.158474][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.166799][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1375.419278][ T135] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.427613][ T135] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.755470][T20110] loop4: detected capacity change from 0 to 1024 [ 1377.204975][T20113] overlay: ./file1 is not a directory [ 1377.823830][T20118] loop7: detected capacity change from 0 to 128 [ 1377.899849][ T30] audit: type=1800 audit(1760921931.254:601): pid=20118 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5211" name="file1" dev="loop7" ino=1048888 res=0 errno=0 [ 1380.874473][T20127] loop4: detected capacity change from 0 to 256 [ 1381.156495][T20127] FAT-fs (loop4): Directory bread(block 64) failed [ 1381.163714][T20127] FAT-fs (loop4): Directory bread(block 65) failed [ 1381.174505][T20127] FAT-fs (loop4): Directory bread(block 66) failed [ 1381.182582][T20127] FAT-fs (loop4): Directory bread(block 67) failed [ 1381.189745][T20127] FAT-fs (loop4): Directory bread(block 68) failed [ 1381.196734][T20127] FAT-fs (loop4): Directory bread(block 69) failed [ 1381.203792][T20127] FAT-fs (loop4): Directory bread(block 70) failed [ 1381.210552][T20127] FAT-fs (loop4): Directory bread(block 71) failed [ 1381.217764][T20127] FAT-fs (loop4): Directory bread(block 72) failed [ 1381.224778][T20127] FAT-fs (loop4): Directory bread(block 73) failed [ 1385.633897][T20145] loop4: detected capacity change from 0 to 1024 [ 1390.924575][T20152] loop7: detected capacity change from 0 to 4096 [ 1391.007528][T20152] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1391.305723][T13816] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1391.919862][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1391.927765][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 1394.221496][ C0] vkms_vblank_simulate: vblank timer overrun [ 1398.457517][ T135] hfsplus: b-tree write err: -5, ino 4 [ 1398.906450][T20174] loop4: detected capacity change from 0 to 512 [ 1398.974591][T20174] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 1398.983238][T20174] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -2 [ 1399.017534][T20174] EXT4-fs (loop4): 1 truncate cleaned up [ 1399.024941][T20174] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1399.747403][T20012] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1405.630990][T20013] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1405.647838][T20013] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1405.659212][T20013] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1405.679359][T20013] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1405.689901][T20013] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1407.446572][T20184] chnl_net:caif_netlink_parms(): no params data found [ 1407.791618][T20013] Bluetooth: hci5: command tx timeout [ 1408.285933][T20195] ===================================================== [ 1408.288093][ T5801] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1408.293499][T20195] BUG: KMSAN: uninit-value in ieee802154_max_payload+0x399/0x3c0 [ 1408.310525][T20195] ieee802154_max_payload+0x399/0x3c0 [ 1408.316769][T20195] ieee802154_header_create+0x99b/0xb90 [ 1408.322583][T20195] dgram_sendmsg+0xb40/0x16d0 [ 1408.327380][T20195] ieee802154_sock_sendmsg+0x92/0xd0 [ 1408.333046][T20195] __sock_sendmsg+0x333/0x3d0 [ 1408.337915][T20195] ____sys_sendmsg+0x7e0/0xd80 [ 1408.342877][T20195] ___sys_sendmsg+0x271/0x3b0 [ 1408.347641][T20195] __sys_sendmsg+0x1aa/0x300 [ 1408.352458][T20195] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1408.358160][T20195] ia32_sys_call+0x3f6c/0x4310 [ 1408.363268][T20195] __do_fast_syscall_32+0xb0/0x150 [ 1408.368505][T20195] do_fast_syscall_32+0x38/0x80 [ 1408.373569][T20195] do_SYSENTER_32+0x1f/0x30 [ 1408.378143][T20195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.384668][T20195] [ 1408.387019][T20195] Local variable filename created at: [ 1408.392554][T20195] process_measurement+0x101/0x40e0 [ 1408.397868][T20195] ima_file_check+0x8e/0xd0 [ 1408.402554][T20195] [ 1408.404943][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.4.5230 Not tainted syzkaller #0 PREEMPT(none) [ 1408.416802][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.427986][T20195] ===================================================== [ 1408.435932][T20195] Disabling lock debugging due to kernel taint [ 1408.442319][T20195] Kernel panic - not syncing: kmsan.panic set ... [ 1408.448883][T20195] CPU: 0 UID: 0 PID: 20195 Comm: syz.4.5230 Tainted: G B syzkaller #0 PREEMPT(none) [ 1408.460014][T20195] Tainted: [B]=BAD_PAGE [ 1408.464221][T20195] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 1408.474341][T20195] Call Trace: [ 1408.477671][T20195] [ 1408.480645][T20195] __dump_stack+0x26/0x30 [ 1408.485075][T20195] dump_stack_lvl+0x53/0x270 [ 1408.489764][T20195] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1408.495666][T20195] dump_stack+0x1e/0x25 [ 1408.499906][T20195] vpanic+0x435/0xd30 [ 1408.504004][T20195] panic+0x15d/0x160 [ 1408.508037][T20195] kmsan_report+0x31c/0x320 [ 1408.512651][T20195] ? do_fast_syscall_32+0x38/0x80 [ 1408.517820][T20195] ? __msan_warning+0x1b/0x30 [ 1408.522570][T20195] ? ieee802154_max_payload+0x399/0x3c0 [ 1408.528230][T20195] ? ieee802154_header_create+0x99b/0xb90 [ 1408.534036][T20195] ? dgram_sendmsg+0xb40/0x16d0 [ 1408.538986][T20195] ? ieee802154_sock_sendmsg+0x92/0xd0 [ 1408.544546][T20195] ? __sock_sendmsg+0x333/0x3d0 [ 1408.549507][T20195] ? ____sys_sendmsg+0x7e0/0xd80 [ 1408.554528][T20195] ? ___sys_sendmsg+0x271/0x3b0 [ 1408.559480][T20195] ? __sys_sendmsg+0x1aa/0x300 [ 1408.564350][T20195] ? __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1408.570192][T20195] ? ia32_sys_call+0x3f6c/0x4310 [ 1408.575243][T20195] ? __do_fast_syscall_32+0xb0/0x150 [ 1408.580603][T20195] ? do_fast_syscall_32+0x38/0x80 [ 1408.585700][T20195] ? do_SYSENTER_32+0x1f/0x30 [ 1408.590443][T20195] ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.597054][T20195] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 1408.603255][T20195] ? kmsan_get_metadata+0xfb/0x160 [ 1408.608460][T20195] ? kmsan_internal_memmove_metadata+0x91/0x230 [ 1408.614836][T20195] ? kmsan_get_metadata+0xfb/0x160 [ 1408.620114][T20195] ? kmsan_internal_memmove_metadata+0x181/0x230 [ 1408.626581][T20195] ? __msan_memcpy+0x108/0x1c0 [ 1408.631424][T20195] ? kmsan_get_metadata+0xfb/0x160 [ 1408.636625][T20195] __msan_warning+0x1b/0x30 [ 1408.641208][T20195] ieee802154_max_payload+0x399/0x3c0 [ 1408.646741][T20195] ieee802154_header_create+0x99b/0xb90 [ 1408.652407][T20195] ? kmsan_get_metadata+0xfb/0x160 [ 1408.657618][T20195] ? __pfx_ieee802154_header_create+0x10/0x10 [ 1408.663771][T20195] dgram_sendmsg+0xb40/0x16d0 [ 1408.668557][T20195] ? __pfx_dgram_sendmsg+0x10/0x10 [ 1408.673750][T20195] ieee802154_sock_sendmsg+0x92/0xd0 [ 1408.679143][T20195] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1408.685220][T20195] ? __pfx_ieee802154_sock_sendmsg+0x10/0x10 [ 1408.691300][T20195] __sock_sendmsg+0x333/0x3d0 [ 1408.696088][T20195] ____sys_sendmsg+0x7e0/0xd80 [ 1408.700959][T20195] ___sys_sendmsg+0x271/0x3b0 [ 1408.705738][T20195] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1408.711658][T20195] ? __rcu_read_unlock+0x6d/0xd0 [ 1408.716691][T20195] ? __fget_files+0x3b4/0x4a0 [ 1408.722041][T20195] ? __fget_files+0x3b9/0x4a0 [ 1408.726808][T20195] ? kmsan_get_metadata+0xfb/0x160 [ 1408.732012][T20195] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 1408.737915][T20195] __sys_sendmsg+0x1aa/0x300 [ 1408.742618][T20195] __ia32_compat_sys_sendmsg+0xa4/0x100 [ 1408.748268][T20195] ia32_sys_call+0x3f6c/0x4310 [ 1408.753153][T20195] __do_fast_syscall_32+0xb0/0x150 [ 1408.758349][T20195] ? irqentry_exit_to_user_mode+0x7f/0xa0 [ 1408.764189][T20195] do_fast_syscall_32+0x38/0x80 [ 1408.769199][T20195] do_SYSENTER_32+0x1f/0x30 [ 1408.773772][T20195] entry_SYSENTER_compat_after_hwframe+0x84/0x8e [ 1408.780221][T20195] RIP: 0023:0xf7fd5539 [ 1408.784343][T20195] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 [ 1408.804041][T20195] RSP: 002b:00000000f54c655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172 [ 1408.812547][T20195] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080002480 [ 1408.820581][T20195] RDX: 0000000004040044 RSI: 0000000000000000 RDI: 0000000000000000 [ 1408.828611][T20195] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 1408.836637][T20195] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1408.844661][T20195] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 1408.852712][T20195] [ 1408.855955][T20195] Kernel Offset: disabled [ 1408.860336][T20195] Rebooting in 86400 seconds..