last executing test programs: 2m26.32100218s ago: executing program 2 (id=184): r0 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000002c0)='./file0\x00', 0x800700, &(0x7f0000000340)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x5}}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4c}}, {@minixdf}, {@resgid}, {@nomblk_io_submit}, {@usrjquota}]}, 0x3, 0x44d, &(0x7f0000000b00)="$eJzs289vFFUcAPDvTLtF+dWC+ANErRJj44+WFlQOXjSaeMBoogc81m0hhIUaWhMhRFAMXkwMiZ6NRxP/Am9ejHoy8ap3Q0KUC+hpzczOlt1lt7CwZWv380mmfW/e233v7Zs382bebgADazz7k0RsjojfI2K0Fm3OMF77d+3KmfI/V86Uk6hW3/4ryfNdvXKmXM9af92mIjKRRqSfJkUhzRZPnT42W6nMnyziU0vH359aPHX6uaPHZ4/MH5k/MXPgwP590y++MPN8T9qZtevqro8Wdu98/d2Lb5QPXXzv5++y+m4u0hvb0SvjWcP/ruZa057sdWF9tqUhnAz3sSJ0ZSgisu4q5eN/NIbieueNxmuf9LVywKqqnl8x+Vz1uuEqsM5ks3lgENUv9Nn9b327G/OOteLyy7UboKzd14qtljIcaZGn1HJ/20vjEXHo3L9fZ1us0nMIAIBGn5e/OhjPtpv/pfFAQ76txRrKWERpW0Rsj4j7ImJHRNwfked9MCIe6rL81qWhG+c/6aXbatgtyuZ/LxVrW83zv/rsL8aGitiWvP2l5PDRyvzeYt9ElDZk8ekVyvjh1d++6JTWOP/Ltqz8+lywqMel4Q3Nr5mbXZrNJ6U9cPnjiF3D7dqfLK8EJBGxMyJ2dffWW+uBo09/u7tTppu3fwU9WGeqfhPxVK3/q6Mt7a9LVl6fnLonKvN7p+pHxY1++fXCW53Kv6P290DW/xubj//WLGNJ43rtYvdlXPjjs473NLd7/I8k7+Tjb6TY9+Hs0tLJ6YiR5GBT3+X7Z+KGeD1/1v6JPe3H//biNdm7PRwR2UH8SEQ8GhGPFXV/PCKeiIg9K7T/p1c6p62F/p9re/5b/gxb+r/7wNCxH7/vVP6t9f/+PDRR7MnPfzdxqxW8k88OAAAA/i/S/DvwSTq5HE7Tycnad/h3xMa0srC49MzhhQ9OzNW+Kz8WpbT+pGu04XnodHKueMdafKb2rHg5fV9EbIuIL4fuzeOT5YXKXJ/bDoNuU4fxn/lzqN+1A1Zdu3W0mZE+VAS461rHf9ocPftm6x5g3fB7bRhcNxn/Lv6wjrn+w+BqN/7PtsStBcD65PoPg6u78X/e6QLWEQMaBlVq/MNgupPf9QsMciDSNVENgVUK9PvMBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA0Bv/BQAA//9ulOxg") syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c000000"], 0x0, 0x0, 0x0}, 0x0) 2m25.158655155s ago: executing program 2 (id=189): bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xc, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000e00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000001200)=@broute={'broute\x00', 0x5e04, 0x0, 0x90, [0x0, 0x0, 0x80000000], 0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) 2m24.73638463s ago: executing program 2 (id=192): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x20, 0x0, 0x4, {0x120, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)='\x006\"\x00\x00\x00Q') 2m21.183904644s ago: executing program 2 (id=213): syz_mount_image$erofs(&(0x7f0000000180), &(0x7f0000000140)='./file0\x00', 0x1000801, &(0x7f0000000080)=ANY=[@ANYRES16=0x0], 0x0, 0x1ca, &(0x7f00000008c0)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./bus\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 2m20.860770367s ago: executing program 2 (id=215): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000180)=""/53, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000ac0)={0x2, 0x0, [{0x3000, 0x8f, &(0x7f0000000380)=""/143}, {0xe980c971206c8c5e, 0xbe, &(0x7f0000000880)=""/190}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000500)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0xc000000) 2m20.491636452s ago: executing program 2 (id=217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x81e, &(0x7f0000000f40)={[{@quota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}]}, 0x3, 0x472, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000069108e0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0x404043000, 0x400000000101, 0x1, 0x101}) 2m19.946090499s ago: executing program 32 (id=217): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x81e, &(0x7f0000000f40)={[{@quota}, {@data_err_ignore}, {@barrier_val={'barrier', 0x3d, 0x3}}, {@stripe={'stripe', 0x3d, 0x4}}, {@block_validity}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x80}}]}, 0x3, 0x472, &(0x7f0000001740)="$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") bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="b40000000000000069108e0000"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xfecc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000000340)={0x404043000, 0x400000000101, 0x1, 0x101}) 1m51.707226764s ago: executing program 4 (id=335): syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f00000016c0)=ANY=[@ANYBLOB="040e0c790320"], 0xf) syz_emit_vhci(&(0x7f0000000580)=ANY=[@ANYBLOB="02c820fe00fa0001000c09050005000800090b7fdf00060005003e4358efd2dd201c43939b5cf9bf3e4842d86f18b841acd001a07c83a1be1e4eb285d83768ea2377c52a24c1f1f2d4d5d2ee6df7341f0397d381972005fd6f4f4f04dfb8a05798a8201a0d2a8bcb88eb5d15533322389ff8db98754f16d4623754d61e4134f743f5bcd6a7e07e757b6c139344acb2ae069fe0e1b8cef032142b0762c9568f5d93f3e4ca1dd780cc1c262b5cf59256ec895a584831048f63c324155a4a4b3ab5e0a8faf718fadde2fee8d3e956984cd6cc3a83a7eec8aa206aa1960e64f31b92d425f7bd656a6ab24273f9ba50c20ec145fa22fa27021b04000400c6001110020009"], 0x103) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCMGET(r0, 0x5415, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) gettid() prctl$PR_SET_SECCOMP(0x16, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x4c, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x31}, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) rseq(0x0, 0x0, 0x1, 0x0) 1m51.456162977s ago: executing program 4 (id=336): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000140)='coredump_filter\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r5, &(0x7f0000000180)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e25, 0x10001, @local, 0xb}, r6}}, 0x30) timer_delete(0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_cmd={0x19, 0x9, 0x3, 0x6, 0x2, 0x0, 0x8b, 0x5, 0x2, 0x7, 0x3d95, 0x2, 0x40, 0x4, 0x3, 0x6, [0x200, 0x7ff]}}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$KVM_GET_VCPU_EVENTS(0xffffffffffffffff, 0x4048aecb, &(0x7f00000000c0)) lstat(&(0x7f0000000000)='./file1/file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$msdos(&(0x7f0000000380), &(0x7f0000000280)='./file1\x00', 0x80, &(0x7f00000002c0)={[{@nodots}, {@fat=@check_strict}, {@dots}, {@fat=@flush}, {@nodots}, {@fat=@allow_utime={'allow_utime', 0x3d, 0x2}}, {@dots}, {@nodots}, {@nodots}], [{@fowner_lt={'fowner<', r7}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'euid>'}}, {@obj_role={'obj_role', 0x3d, 'check=strict'}}]}, 0x1, 0x250, &(0x7f0000000900)="$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") 1m49.58845061s ago: executing program 4 (id=341): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r2, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x10}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) 1m49.344470323s ago: executing program 4 (id=343): syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100), 0x2, 0x500, &(0x7f0000000500)="$eJzs3U9sI1cZAPBvJn/sTdMmhR4AFbqUwoJWayfeNqp6oZwqhCoheuSwDYkTRbHjKHZKE/aQPXJHohInOHHmgMQBqSfuSBzgxqUckAqsQA0SByOP7V3njzfWbmzvxr+fNJo38+L53tvRvGd91s4LYGJdj4ijiJiNiPcjYqFzPuls8XZ7a/3dZ/fvrh3fv7uWRLP53j+TrL51Lno+0/Jc55r5iPjBOxE/Sk4F/VNE/eBwe7VSKe91ThUb1d1i/eDw1lZ1dbO8Wd4plVaWV5bevP1G6dL6+kr1N59ei4jf/+7Ln/zx6Fs/aTVrvlPX24/L1O76zIM4LdMR8b1hBBuDqU5/Zh/nw4/1IS5TGhGfi4hXs+d/Iaayu3nSydv07RG2DgAYhmZzIZoLvccAwFWXZjmwJC10cgHzkaaFQjuH91LMpZVavXFzo7a/s97OlS3GTLqxVSkvdXKFizGTbGxNl5ezcve4Ui6dOr4dES9GxM9y17Ljwlqtsj7OLz4AMMGeOzX//yfXnv8BgCsu/7CYG2c7AIDRyY+7AQDAyJn/AWDymP8BYPKY/wFg8pj/AWDymP8BYKJ8/913W1vzuPP+6/UPDva3ax/cWi/XtwvV/bXCWm1vt7BZq21m7+ypXnS9Sq22u/x67H9YbJTrjWL94PBOtba/07iTvdf7TnlmJL0CAB7lxVc+/ksSEUdvXcu26Hnf/4Vz9cvDbh0wTOm4GwCMzdS4GwCMzdnVvoBJIR8P9CzRe6/ndP5M4bSPBrp8at1QePrc+OIT5P+BZ5r8P0yux8v/+y4PV4H8P0yuZjOx5j8ATBg5fiC5oL739/+lZs/BYL//AwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwJU0n21JWuisBT4faVooRDwfEYsxk2xsVcpLEfFCRPw5N5NrHS9HhHWDAOBZlv496az/dWPhtfnTtbO5/+ayfUT8+Bfv/fzD1UZjbzliNvnXg/ONjzrnS+NoPwBwke483Z3Huz67f3etu42yPZ9+p724aCvucWdr10zHdLbPZ7mGuX8nneO21veVqUuIf3QvIr5wXv+TLDey2Fn59HT8VuznRxo/PRE/zera+9a/xecvoS0waT5ujT9vn/f8pXE925///OezEerJdce/4zPjX/pg/JvqM/5dHzTG63/47pmTzYV23b2IL01HHHcv3jP+dOMnfeK/NmD8v778lVf71TV/GXEjzut/ciJWsVHdLdYPDm9tVVc3y5vlnVJpZXll6c3bb5SKWY662M1Un/WPt26+0C9+q/9zfeLnL+j/1wfs/6/+9/4Pv/qI+N/82vn3/6VHxG/Nid8YMP7q3G/z/epa8df79P+i+39zwPif/O1wfcA/BQBGoH5wuL1aqZT3hl1Ihx8iKyQRRyPoTruQ+/VP3xlVrCEW4ulohsLTVBj3yAQM28OHftwtAQAAAAAAAAAAAAAA+hnFfycadx8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4uv4fAAD//5iA1Hs=") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x8) creat(&(0x7f0000000000)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x5, 0x0, "ef359f413bb901527f00d1ce5d29c3ee5e5ca9000f7c41499dc2aac63a01000000000000004faa2ad9c084a003ea0000000000000000000800002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) truncate(&(0x7f0000000900)='./file1\x00', 0xbf39) mkdir(0x0, 0x0) 1m47.264129658s ago: executing program 4 (id=354): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f00000000c0)={0xf0f03f, 0x6e}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, 0x25, r4, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f00000005c0), 0x10, 0x10000, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xf, &(0x7f0000000280)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m46.217163521s ago: executing program 4 (id=360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) dup(0xffffffffffffffff) r0 = gettid() rt_sigqueueinfo(r0, 0x21, 0x0) 1m45.438910661s ago: executing program 33 (id=360): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7ffffeb9}]}) dup(0xffffffffffffffff) r0 = gettid() rt_sigqueueinfo(r0, 0x21, 0x0) 12.295590569s ago: executing program 6 (id=737): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$xfs(&(0x7f0000009800), &(0x7f00000004c0)='./bus\x00', 0x1000000, &(0x7f0000000280)={[{@pqnoenforce}, {@noquota}, {@nouuid}, {@usrquota}, {@pquota}, {@pqnoenforce}, {@nodiscard}]}, 0x1, 0x9895, &(0x7f0000009840)="$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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x4008586f, &(0x7f00000007c0)=ANY=[]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000040)=ANY=[], 0xf9, 0x187, &(0x7f0000000200)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000340)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f00000005c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) 9.80167558s ago: executing program 6 (id=744): syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000018c0)=@ready={0x0, 0x0, 0x8, "fc471d9e", {0x1, 0x3, 0x1, 0xd, 0x81}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) 7.824144934s ago: executing program 5 (id=749): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = dup(r0) io_setup(0x19, &(0x7f00000009c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000500)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}]) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 7.060630724s ago: executing program 3 (id=754): open(0x0, 0x16f67f, 0x93) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) utime(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 7.025690744s ago: executing program 6 (id=755): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000"], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) 7.010046214s ago: executing program 1 (id=756): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xa, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setitimer(0xfcbfcdce955e2e67, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000007900)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0x216822a75a8bdd29, 0x70bd29, 0x0, {}, [{0x58, 0x1, [@m_skbmod={0x54, 0x1, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x0, 0x0, 0x300}, 0xd}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x6c}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) setregid(0xee00, 0xee00) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f00000000c0)={0x0, 0x0, 0xfe, 0x2, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r4, 0x1) recvmmsg(r4, &(0x7f0000000840)=[{{0x0, 0x0, 0x0}}], 0x414, 0x0, 0x0) 6.795042027s ago: executing program 1 (id=757): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 6.709730758s ago: executing program 6 (id=758): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009"], 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000300)='\x006\"\x00\x00\x00Q') 6.578843769s ago: executing program 5 (id=759): bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x8d, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) 5.998988677s ago: executing program 3 (id=760): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff, r2}, 0x13) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$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") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) pwrite64(r3, &(0x7f0000000140), 0x0, 0x8) 5.260597706s ago: executing program 1 (id=761): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) r0 = openat$cuse(0xffffffffffffff9c, &(0x7f00000047c0), 0x2, 0x0) read$FUSE(r0, &(0x7f0000004800)={0x2020}, 0x2020) preadv(r0, &(0x7f000000a3c0)=[{&(0x7f00000081c0)=""/4096, 0x1000}, {&(0x7f00000093c0)=""/4096, 0x1000}], 0x2, 0x1000, 0x7) 4.750324692s ago: executing program 3 (id=762): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b97208000066b8d04a000066ba000000000f30da4300bad004edb8dd008ed0650f0199009867362ea5752f2e0f73d3990f0f0ea866970f20e06635040000000f22e0", 0x43}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.706710242s ago: executing program 0 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x140) sendfile(r4, r3, 0x0, 0x80000000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x3920e, r2, 0x5, 0x1, 0x9000000, 0x6}) 4.274603378s ago: executing program 0 (id=764): ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18}, './file0\x00'}) socket$inet6(0xa, 0x3, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000002c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0) mount$cgroup(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f00000001c0), 0x201004a, &(0x7f0000000280)={[{@name={'name', 0x3d, 'NET_DM\x00'}}, {}, {@none}]}) syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) syz_io_uring_setup(0x4553, 0x0, &(0x7f0000000080), 0x0) 3.760726074s ago: executing program 1 (id=765): syz_usb_ep_write$ath9k_ep2(0xffffffffffffffff, 0x83, 0x10, &(0x7f00000018c0)=@ready={0x0, 0x0, 0x8, "fc471d9e", {0x1, 0x3, 0x1, 0xd, 0x81}}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5}]}}, 0x0}, 0x0) 3.553968946s ago: executing program 5 (id=766): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x87c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {}, {0xa, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x84c, 0x2, [@TCA_FLOW_POLICE={0x848, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0x3, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0x66c, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x87c}}, 0x20040000) 3.464428307s ago: executing program 3 (id=767): openat$sndseq(0xffffffffffffff9c, 0x0, 0x22803) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$inet6(0xffffffffffffffff, 0x0, 0xb, 0x1, &(0x7f0000000400)={0xa, 0xfffc, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x32}}}, 0x1c) r4 = syz_open_procfs(0x0, &(0x7f0000004440)='net/ptype\x00') read$FUSE(r4, &(0x7f0000002040)={0x2020}, 0x2020) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="d4", 0x1, 0x40000, &(0x7f0000000100)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000240)=@assoc_value, 0x0) 3.450438098s ago: executing program 5 (id=768): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.197958311s ago: executing program 0 (id=769): r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000"], 0x54}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {0x4}, {0x0, 0x9}}}, 0x24}}, 0x0) 2.928622704s ago: executing program 1 (id=770): open(0x0, 0x16f67f, 0x93) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) utime(0x0, 0x0) socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) futex(0x0, 0x5, 0x0, 0x0, 0x0, 0x40000000) close(r2) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00'], 0x70}}], 0x1, 0x2000c044) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r5], 0x20}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000240), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x7151, 0x0) 2.704522727s ago: executing program 0 (id=771): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0) read$FUSE(r0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0x0, 0x0, 0x10000000}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x8, 0x0, 0x0, 0x2, 0x7}, 0x0, 0x0) 2.635727787s ago: executing program 5 (id=772): r0 = socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000180)={0x20ffffff, r2}, 0x13) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f4f, &(0x7f0000009040)="$eJzs3V1vHFf9B/DfPnj90H/TqPqrChEXbgqlpTTPCZSnplxwAUggoVyTyHWrQFpQEhCtIuIqF4gLHl4C3PSGi76RIvEKEC+ASAlXlaAMGvucZDxeex1i76x9Ph/JmfntmfGeydfj2fXM7AkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIL7z7R+e6UXElV+kB45G/F8MIvoRi3W9HPXMpbz8MCKOxXpzPBcRg/mIev31f56JOB8RHx+JuP/g9kr98Nld9uPC6Vs3Pv3ut/7269/fPfbjN3/0Ybv9B/9/7qPf3Ik4+v3XPvr0zt5sOwAAAJSiqqqql97mH0/v7/tddwoAmIp8/K+S/LharVar97T+XX+2+qMutG6qxrvTLCJirblO/ZrB6XgAOGDW4pOuu0CH5F+0YUQ81XUngJnW67oD7Iv7D26v9FK+vebxYHmjPf+dclP+a72H93dsN52kfY3JtH6+7sYgnt2mP4tT6sMsyfn32/lf2WgfpeX2O/9p2S7/0catT8XJ+Q/a+bdsyv8PEXFg8++Pzb9UOf/h4+S/NjjA+7/8AQAAAAA4/PLf/492fP53/sk3ZVd2Ov+7PKU+AAAAAAAAAMBee9Lx/x4y/h8AAADMrPq9eu2PRx49tt1nsdWPX+5FPN1aHihMullmqet+AAAAAAAAAAAAAEBJhhvX8F7uRcxFxNNLS1VV1V9N7fpxPen6B13p2w8l6/qXPAAAbPj4SOte/l7EQkRcTp/1N7e0tFRVC4tL1VK1OJ9fz47mF6rFxvvaPK0fmx/t4gXxcFTV32yhsV7TpPfLk9rb369+rlE12EXHpqPDwAEgIjaORvcdkQ6Zqnomun6Vw8Fg/z987P/sRtc/pwAAAMD+q6qq6qWP8z6ezvn3u+4UADANC/n43z4voFar1Wq1+vDVTdV4d5pFRKw116lfMxiOHwAOmLX4pOsu0CH5F20YEce67gQw03pdd4B9cf/B7ZVeyrfXPB6k8d3ztSCb8l/rra+X1x83naR9jcm0fr7uxiCe3aY/z02pD7Mk599v539lo32Ultvv/Kdlu/zr7TzaQX+6lvMftPNvOTz598fmX6qc//Cx8h/IHwAAAAAAZlj++//Rcs//DnJ/lqfUBwAAAAAAAADYa/cf3F7J973m8/+fHbNcrznn/s9DI+ff23X+7v89THL+/Xb+rQtyBo35e288yv+fD26vfHjrH5/J05nPf24wqp97rtcfDNM1P9XcW3EtrsdqnN6y/HBT+5kt7XOb2s9OaD+3pX1Uty/m9pOxEj+N6/Hmw/b5CRdGLUxorya05/wH9v8i5fyHja86/6XU3mtNa/c+6G/Z75vTcc9z6c//fnHr3jV9d2PwcNua6u070UF/1v9PnhrFz2+u3jj5y6u3bt04E2my6dGzkSZ7LOc/l75y/i+9sNGef+8399d7H4weO/9ZcTeG2+b/QmO+3t6Xp9y3LuT8R+kr55+PQOP3/4Oc//b7/ysd9AcAAAAAAAAAAAAAAAB2UlXV+i2ilyLiYrr/p6t7MwGAqfrt99JMlYRarVar1epDWzdV473eLGJh8zoXI+JX474ZADDL/hMRf++6E3RG/gXLn/dXTz/XdWeAqbr53vs/uXr9+uqNm133BAAAAAAAAAD4X+XxP5cb4z+vXwfUGjd60/ivb8TygR3/sz8arI91njbo+dh5/O8TsfP438MJzzc3oX00oX1+QvvChPaxN3o05PyfTxnn/I+nDStp/NeXOuhP13L+J9JYzzn/L7SWa+Zf/ekg59/flP+pW+/87NTN995/9do7V99efXv13TOnL54/d+H8uQsXTr117frq6Y1/O+zx/sr557GvXQdalpx/zlz+Zcn5fz7V8i9Lzv/FVMu/LDn//HpP/mXJ+ef3PvIvS87/5VTLvyw5/y+mWv5lyfm/kmr5lyXn/6VUy78sOf9XUy3/suT8T6Za/mXJ+Z9KtfzLkvPPZ7jkX5acf76yQf5lyfmfTbX8y5LzP5dq+Zcl538+1fIvS87/QqrlX5ac/8VUy78sOf8vp1r+Zcn5fyXV8i9Lzv+1VMu/LDn/r6Za/mXJ+X8t1fIvS87/66mWf1ly/t9ItfzLkvP/ZqrlX5ac/+upln9ZHn3+v5kpz/zrLxEz0A0zpc68+9edlun6NxMAAAAAAAAAAAAA0DaNK4273kYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+C87cCAAAAAAAOT/2ghVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV2IEDAQAAAAAg/9dGqKqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqsLe3cXIVd5nAD/7Za8NCW4ghBAnrI0BA4t311/gEINJQkpJm1IS0qYlNY69Nk78Ve86AYTKUmhLFKQitRf0omkSpVGktgJFkZpKNEJqpPauXCXiJmolLiwVKgcllVIFtjpz3vfdmdnZmfXH4jnn/H4I/70zZ2beOXNmdp+1nhkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLbhY9N/PpBlWf5/4491WXZp/vc12Z78y7mdF3uFAAAAwPl6q/HnP1yWTtizjAs1bfNvH/qP78/Pz89nX3jz9Nt/OT+fzhjLsqHVWdY4L/r3X/5ivnmb4KlsdGCw6evBHjc/1OP84R7nj/Q4f1WP81f3OH+0x/mLdsAia4rfxzSubFPjr+uKXZpdkY00ztvU4VJPDaweHIy/y2kYaFxmfuRgdjg7kk1nk4suM9D4L8te2pDf1j1ZvK3Bpttan2XZmZ89vj+uYSDs401Zy401ND92b9yVjb35s8f3f2f29fd3mj13w6KVZtnmjfk6n86yhV9XZQPZ6rRP4joHm9a5vsM6h1rWOdC4XP739nWeWeY64/0eDet8pcs614fTHrk2y7K5bMlt2j2VDWZr22417e/R4ojIryN/KN+TDZ/VcbJhGcdJfpnXrm09TtqPybj/N4R9MrzEGpofjjeeXLVov5/rcZLf6344VvPrvi+/0dHR5l+tthyr+TaPX7f0MdDxsetwDKRjuekY2NjrGBhcNdQ4BgYX1ryx5RiYWnSZwWygcVunr+t+DEzMHj0xMfPoY7ccPrrv0PSh6WNTkzu3b9uxfduOHRMHDx+Zniz+PLtdWiJrs8F0DG4MrzXxGLyhbdvmQ3L+mxfueTDaJ8+D/L5/5vp8QZcOZksc4/k2T28+/+dB+r7f9DwYbnoedHxN7fA8GF7G8yDf5szm5X3PHG76v9MaVuq1cF3TMXAxvx/mt/ngjUu/Fq4P63rmprP9fji06BiId2sgPPfyU9LPe6O3hf2y+Li4Oj/jklXZqZnpk1se2Tc7e3IqC+MdcXnTY9V+vKxtuk/ZouNl8KyPlz1//6vrr+5w+rqwr0Zv7v5Y5dtsH+/+WDVe3Vv356qs2J8tp27NwrjA3un92em7Wb4/U5bosj/zbZ6+5fx/Fky5pOn1b6TX69/QyHDx+jeU9sZIy+vf4odmqLGyLDtzy/Je/0bC/+/0698VffL6l++rB7d0PwbybZ6ZONtjYLjr69+1YQ6E9dwYEsNoU+5/u3H+XHGYNj2WPY+b4eGRcNwMx1tsPW62LbpMfm35bW+ePLfjZvO1rY9Vy88tFTxu8n31V5Pdj5t8m5enzv+1Y038a9Nrx6pex8DI0Kp8vSPpIChe7+bXxGNgS7Y/O54dyQ6ky+SPcn5b41uXdwysCv+/068dV/XJMZDvq+e3dj8G8m1+tO3C/uy0OZyStmn62an99wtLZf6rhxeur323XejMn6/z4z/+VDqtU4bIt3l9+9nmjO776eZwyiUd9lP782epY/pA9s7sp6vCOo/s6P67qXybK3Yu83jak2XZq1OvNn7fFX6/+71TP/5+y+99O/1O+dWpV++duP8nZ7N+AADO3duNP+dWFT9rNv2L9XL+/R8AAAAohZj7B8NM5H8AAACojJj7h8JM5H8AAACojJj7h8NMapL/H75t1wtvPZGldwOcD+L5cTfcd0exXex4z4Wvx+YX5Kd/9NsjL3z1ieXd9mCWZb+69wMdt3/4jriuwom4zg+3nr7IVdcs6/YfemBhu+b3Tzizq7j+eH+WexjErvJLE1sb1zv26FRjvnxv1pj3zz3zVHH9xddx+9Pbiu3/JrxpyZ6DAy2X3xzWsynMsfCeMvftWdgP+YyXe2H9h/718s8u3F683MDGdzfu5vN/XFxvfI+o5y4vto/3e6n1/8vXvvtCvv0j13Ve/xODndd/Olzva2H+cnexffM+/2rT+v80rD/eXrzclm/9sOP6X3xfsf2L4bj4Rpjt67/rLz74VqfHK97OntuLy8Xbn/zf7Y3LxeuL19++/tEnplr2R/v1v/xmcT27v/zzoebt4+nxdqKHbm89vgfC49vSI8+y7Lt/lrXs5+wjxeX+uW398fpO3N55/Te3rfPEwDWNyy/cn3Ut9+vrf7e14/2N69nzj+ta7s9zd4f99+bEj/LrPX1/OB7D+f/3SnF97e9l+uLdra83cftvrCuet/H6JtrW/1zb+ueuyfdd7/Xf82ax/hfvXN2y/j2fCMfTPcXstf5Df3tZy+W/+Z3i8Tj5lfFjx2dOHT7QtFebn8erR9esveTSd737svBa2v713uOzD0+fHJscm8yysRK+ZeBKr/9bYf5PMeYu/C0UfvLz4rh79pPF960bflF8/Vw4/aHweMbvj1//65GW47X9cZ+7s5jnu/6bwjqW631f+69rlrXh6c+/dOqf/uT19p8L4v058d7Rxv17fsOVjfMGXi7Ob3+96uU/39v6vP7p8GRj/iDs1/nwzswbryxur/3643uTPPvp4vkbf5KLl8/a3k9k3VDr/Tjf9f80/Bzzw6taX//i8fGDJ9rezXldNpAvYS68PmRzxflxq7i/nz1zZcfbi+/Dk829/2yWuaSZR2cmjhw+duqRidnpmdmJmUcf23v0+Kljs3sb712694u9Lr/w/F7beH4fmN65PWs8248XY4Vd7PWfeGD/gVsnrz8wfXDfqYOzD5yYPnlo/8zM/ukDM9fvO3hw+iu9Ln/4wO6prbu23bp1/NDhA7tv27Vr267xw8eO58soFtXDzskvjR87ubdxkZnd23dN7dixfXL86PED07tvnZwcP9Xr8o3vTeP5pb88fnL6yL7Zw0enx2cOPza9e2rXzp1be77749ETB2fGJk6eOjZxamb65ERxX8ZmGyfn3/t6XZ56mDkeXu/aDISfzj938870/ri5bz+55FUVm7T+eJq9Ed4LKn5/6/V1zP0jYSY1yf8AAABQBzH3hzf+XzhD/gcAAIDKiLl/dZiJ/A8AAACVEXN/kfxH08e/1yX/X6j+/5P6/w36//r/mf5/ov+v/5/p/+v/96D/r/9f5vXr/+v/01u/9f9D7s/WZJl//wcAAICKirl/bZiJ/A8AAACVEXP/JWEm8j8AAABURsz9l4aZ1CT/+/x//X/9/279/7it/n+m/98P/f9N/63/v4j+v/5/pv9/zi52f77s6+/D/v8a/X/6Tb/1/2Puf1eYSU3yPwAAANRBzP3vDjOR/wEAAKAyYu6/LMxE/gcAAIDKiLl/XZhJTfK//r/+v/6/z//X/y9N/9/n/3eg/6//n+n/n7OL3Z8v+/r7sP/v8//pO/3W/4+5/9fCTGqS/wEAAKAOYu5/T5iJ/A8AAACVEXP/5WEm8j8AAABURsz9V4SZ1CT/17P//1qWZfr/mf6//n/bOvX/9f9Xgv6//n83+v/6/2Vev/6//j+99Vv/P+b+94aZ1CT/AwAAQB3E3H9lmIn8DwAAAJURc//7wkzkfwAAAKiMmPuvCjOpSf6vZ//f5//r/xf0/1vXqf+v/78S9P/1/7vR/9f/L/P69f/1/+mt3/r/Mfe/P8ykJvkfAAAA6iDm/qvDTOR/AAAAqIyY+z8QZiL/AwAAQGXE3L8+zKQm+V//X/9f/1//X/9f/38llav/P7jkOfr/Bf3/Vheu/z+3sAD9/9KsX/9f/5/e+q3/H3P/B8NMapL/AQAAoA5i7v9QmIn8DwAAAJURc/81YSbyPwAAAFRGzP1jYSY1yf/6//r/+v/6//r/+v8rqVz9/6Xp/xf0/1v5/H/9f/1//X+667f+f8z9G8JMapL/AQAAoA5i7t8YZiL/AwAAQGXE3H9tmIn8DwAAAJURc/+mMJOa5H/9f/1//X/9f/1//f+VpP+v/9+N/r/+f5nXr/+v/09v/db/j7n/ujCTmuR/AAAAqIOY+68PM5H/AQAAoDJi7r8hzET+BwAAgMqIuX9zmElN8r/+v/6//n+J+/9D+v+Z/n/f0//X/+9G/1//v8zr1//X/6e3fuv/x9x/Y5hJTfI/AAAA1EHM/TeFmcj/AAAAUBkx998cZiL/AwAAQGXE3D8eZlKT/K//r/+v/1/i/r/P/29Zv/5/f9L/L0v/f6T1S/3/ZdH/1//X/9f/p7t+6//H3H9LmElN8j8AAADUQcz9W8JM5H8AAACojJj7J8JM5H8AAACojJj7J8NMapL/9f/1//X/9f/1//X/V5L+f1n6/230/5dF/1//X/9f/5/u+q3/H3P/VJhJTfI/AAAA1EHM/VvDTOR/AAAAqIyY+7eFmcj/AAAAUBkx928PM6lJ/i9J/39LKkDp/+v/6//r/+v/l4r+v/5/N/r/+v9lXr/+v/4/rQY7nNZv/f+Y+3eEmdQk/wMAAEAdxNy/M8xE/gcAAIDKiLn/1jAT+R8AAAAqI+b+28JMapL/S9L/9/n/+v/6/030//X/y0T/X/+/G/1//f8yr1//X/+f3vqt/x9z/64wk5rkfwAAAKiDmPs/HGYi/wMAAEBlxNx/e5iJ/A8AAACl0ulzCKOY+z8SZlKT/K//X/X+//xq/X/9f/3/7uvX/19Z+v/6/93o/+v/l3n9+v/6//TWb/3/mPt3h5nUJP8DAABAHcTcf0eYifwPAAAAlRFz/51hJvI/AAAAVEbM/XvCTGqS//X/q97/9/n/+v/6/73Wr/+/svT/9f+70f8vZ/8//Nii/99H/f/8GNL/px/1W/8/5v67wkxqkv8BAACgDmLu/2iYifwPAAAAlRFz/8fCTOR/AAAAqIyY+z8eZlKT/K//r/+v/6//r/+v/7+S9P9XrP/feCnU/y/o/5+bi92fL/v6+6n/7/P/6Vf91v+Puf/uMJOa5H8AAACog5j7PxFmIv8DAABAZcTc/+thJvI/AAAAVEbM/feEmdQk/+v/6//r/+v/6//r/68k/X+f/9+N/r/+f5nXr/+v/09v/db/j7n/N8JMapL/AQAAoA5i7r83zET+BwAAgMqIuf+TYSbyPwAAAJTMqiXPibn/N8NMapL/y9f/Hytl/38wXb/+v/6//r/+v/7/haT/r/+f6f+fs4vdny/7+vX/9f/prd/6/zH3/1aYSU3yPwAAANRBzP2fCjOR/wEAAKAyYu7/7TAT+R8AAAAqI+b++8JMapL/L3T/v/3y3fj8f/3/TP9f/1//X///POn/6/9n+v/n7GL350u8/vijiP6//j899Fv/P+b+3wkzqUn+BwAAgDqIuf/+MBP5HwAAAPrUw2d9iZj7Px1mIv8DAABAZcTc/5kwk5rk//J9/r/+v/6//r/+v/5/mej/6/93o/+v/1/m9fv8f/1/euu3/n/M/Q+EmdQk/wMAAEAdxNz/2TAT+R8AAAAqI+b+3w0zkf8BAACgMmLu/70wk5rkf/1//X/9f/1//X/9/5Wk/7+4/5+/hun/F/T/9f/LvH79f/1/euu3/n/M/Z8LM6lJ/gcAAIA6iLn/98NM5H8AAACojJj7/yDMRP4HAACAyoi5/8Ewk5rkf/1//X/9f/1//X/9/5Wk/+/z/7vR/9f/L/P69f/1/+mt3/r/Mfd/PsykJvkfAAAA6iDm/j8MM5H/AQAAoDJi7t8bZiL/AwAAQGXE3P9QmElN8r/+v/6//r/+v/6//v9K0v/X/+9G/1//v8zr1//X/6e3fuv/x9y/L8xkT+vNAAAAAOUVc/8Xwkxq8u//AAAAUAcx9+8PM5H/AQAAoDJi7j8QZlKT/K//r/+v/6//r/+v/7+S9P/1/7vR/9f/L/P69f/1/+mt3/r/MfdPh5nUJP8DAABAHcTcfzDMRP4HAACAyoi5/1CYifwPAAAAlRFz/8NhJjXJ//r/+v/6/7Xt/7/yvbZ16v/r/68E/X/9/270//X/y7x+/X/9f3rrt/5/zP2Hw0xqkv8BAACgDmLu/2KYifwPAAAAlRFz/5fCTOR/AAAAqIyY+4+EmdQk/+v/6//r/9e2/7+8z/9fs3C7+v/6/+dC/1//vxv9f/3/Mq9f/1//n976rf8fc//RMJOa5H8AAACog5j7j4WZyP8AAABQGTH3Hw8zkf8BAACgMmLuPxFmUpP8r/9/dv3/gSW6gfr/ndev/1+B/n8T/X/9/3Oh/6//343+v/5/mdev/6//T2/91v+Puf+Pwkxqkv8BAACgDmLuPxlmIv8DAABAZcTcPxNmIv8DAABAZcTcPxtmUpP8r//v8//1//X/9f/1/1eS/r/+fzf6//r/ZV6//r/+P731W/8/5v5TYSY1yf8A8P/s3XeuXlfVx/HndV6Do4g5RMyAETAExoCEGAK9JPTQIfTeQm+hQ+i99x56b4HQqwTK9Vor2Nx7zrV9H3ufvT6fP7LCDSg7SpD4yXx1AAA6yN1/v7jF/gcAAIBp5O6/f9xi/wMAAMA0cvc/IG5psv/1//p//b/+X/+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/d/8C4pcn+BwAAgA5y9z8obrH/AQAAYBq5+x8ct9j/AAAAMI3c/Q+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/c/NG5psv8BAACgg9z9D4tb7H8AAACYRu7+h8ct9j8AAABMI3f/dXFLk/2v/9f/6/832P//v/5f/78d+n/9/xL9v/5/y+/X/+v/WTda/5+7//q4pcn+BwAAgA5y9z8ibrH/AQAAYHPuft/Df567/5Fxi/0PAAAA08jd/6i4pcn+1//r//X/G+z/ff9f/78h+n/9/xL9v/5/y+/X/+v/WTda/5+7/9FxS5P9DwAAAB3k7n9M3GL/AwAAwDRy9z82brH/AQAAYOtO5+/k7n9c3NJk/+v/9f/6f/2//l//v0/6f/3/Ev2//n/L79f/6/9Zt/f+/143HNzj9v+5+2+IW5rsfwAAAOggd//j4xb7HwAAAKaRu/8JcYv9DwAAANPI3f/EuKXJ/tf/6//v7P///X/6f/2//v/On+v/T4b+X/+/RP+v/9/y+/X/+n/W7b3/X+n9z//XufufFLc02f8AAADQQe7+J8ct9j8AAABMI3f/U+IW+x8AAACmkbv/qXFLk/2v/9f/+/6//l//r//fJ/3/sP3/+f/VO5f+/1j0//r/o/r/ex7j/fp/Ohit/8/d/7S4pcn+BwAAgA5y9z89brH/AQAAYBq5+2+MW+x/AAAAmEbu/mfELU32v/5f/6//1/+f2/+fatn/3/Ez/f9+6P+H7f+X6f+PRf+v//f9f/0/y0br/3P3PzNuabL/AQAAoIPc/c+KW+x/AAAAmEbu/mfHLfY/AAAATCN3/3Pilib7X/+v/9f/6/8v6fv/V83R//v+//7o//X/S/T/+v8tv1//r/9n3Wj9f+7+58YtTfY/AAAATO/Urnb/8+IW+x8AAACmkbv/+XGL/Q8AAADTyN3/grilyf7X/+v/9f/6/0vq/yf5/r/+f3/0//r/Jcft/3f6//pr0f+P8379v/6fdaP1/7n7Xxi3NNn/AAAA0EHu/hfFLfY/AAAATCN3/4vjFvsfAAAAppG7/yVxS5P9r//X/+v/9f/6f/3/Pun/9f9LfP9f/7/l9+v/9f+sG63/z93/0rilyf4HAACADnL3vyxusf8BAABgGrn7Xx632P8AAAAwjdz9r4hbzt//py7nqy4f/b/+X/+v/9f/6//3Sf+v/1+i/z+8/z9zxJ9P/z/W+/X/+n/Wjdb/5+6/KW7x6/8AAAAwjdz9r4xb7H8AAACYRu7+V8Ut9j8AAABMI3f/q+OWJvv/qP7/9mvO/nH9//Ho/w9/v/5f/6//1//r//X/S/T/vv+/5ffr//X/rBut/8/d/5q4pcn+BwAAgA5y9782brH/AQAAYBq5+18Xt9j/AAAAMI3c/a+PW5rs/5P//v+1+n/9v/4/rv5f/6//1//r/5fp//X/W36//l//z7rR+v/c/W+IW5rsfwAAAOggd/8b4xb7HwAAAKaRu/9NcYv9DwAAANPI3f/muKXJ/j/5/t/3//X/F9j/n9L/J/1//H3V/+v/L4D+X/+/0/9ftCvdz2/9/fp//T/rRuv/c/fffDD1+u1/AAAA6ODmg9+e2b0lbrH/AQAAYBq5+98at9j/AAAAMI3c/W+LW5rsf/2//v+K9/++/1/0//H3Vf+v/78A+n/9/07/f9GudD+/9ffr//X/rBut/8/d//a4pcn+BwAAgA5y978jbrH/AQAAYBqx+8/+n9/tfwAAAJjSOw9+e2b3rrilyf5v3P9fe6n9/9X/9fv6/8Pfr/8/kf7/5vP/2dP/6/+3RP+v/1+i/9f/b/n94/T/8YPr9P+MZ7T+P3f/u+OWJvsfAAAAOsjd/564xf4HAACAaeTuvyVusf8BAABgGrn73xu3NNn/jfv/Sb7/f+/b4gX6/3n7f9//j6v/1/8fRv8/Qf9/x//80v/Xn1//v533j9P/+/4/4xqt/8/d/764pcn+BwAAgA5y978/brH/AQAAYBq5+z8Qt9j/AAAAMI3c/R+MW5rsf/3/1vt/3//X/+v/9f9j0//r/5f4/r/+f8vv1//r/1k3Wv+fu/9DcUuT/Q8AAAAd5O7/cNxi/wMAAMA0cvd/JG6x/wEAAGAaufs/Grc02f/6f/3/vvr/O/4k+v8m/f/1+v+d/v9I+n/9/xL9v/5/y+/X/+v/WTda/5+7/2NxS5P9DwAAAB3k7v943GL/AwAAwDRy938ibrH/AQAAYBq5+z8ZN9zjblfuSSfr9BE/j95c/6//9/1//b/v/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/Km7x6/8AAAAwjdz9n45b7H8AAACYRu7+z8Qt9j8AAABMI3f/Z+OWJvtf/6//1/9vtv+/Wv9/7vv1/2PS/+v/l+j/9f9bfv+x+/9bD//P6//pYLT+P3f/5+KWJvsfAAAAOsjd//m4xf4HAACAaeTu/0LcYv8DAADANHL3fzFuabL/9f/6f/3/Zvt/3/8/7/36/zHp//X/S/T/+v8tv9/3//X/rBut/8/d/6W4pcn+BwAAgA5y9385brH/AQAAYBq5+78St9j/AAAAMI3c/V+NW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/fp//T/rRuv/c/d/LW5psv8BAACgg9z9X49b7H8AAACYRu7+b8Qt9j8AAABMI3f/N+OWJvt/5v5/6d+m/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3Wj9f+5+78VtzTZ/wAAANBB7v5vxy32PwAAAEwjd/+tcYv9DwAAANPI3f+duKXJ/p+5/1+i/z9L/6//3+n/9f97pv/X/y/R/+v/t/x+/b/+n3VXqP8/vTui/8/d/924pcn+BwAAgA5y938vbrH/AQAAYBq5+78ft9j/AAAAMI3c/T+IW+bZ//e5ZeEP6v9PvP8/+IdI/6//3+n/9f/6/wP6f/3/Ev2//n/L79f/6/9ZN9r3/3P3/zBumWf/AwAAQHu5+38Ut9j/AAAAMI3c/T+OW+x/AAAAmEbu/p/ELU32v/7f9//1/636/6t2+n/9/2Wm/9f/L9H/6/+3/H79v/6fdaP1/7n7fxq35PC75mL+KgEAAICR5O7/WdzS5Nf/AQAAoIPc/T+PW+x/AAAAmEbu/l/ELU32v/5f/6//b9X/+/6//v+y0//r/5fo//X/W35/9v/5z53+X//P/xqt/8/d/8u4pcn+BwAAgA5y9/8qbrH/AQAAYBq5+38dt9j/AAAAMI3c/b+JW5rsf/2//l//r//X/+v/90n/r/9fov/X/2/5/b7/r/9n3Wj9f+7+2+KWJvsfAAAAOsjd/9u4xf4HAACAaeTu/13cYv8DAADANHL33x63NNn/+n/9/5T9/131//p//f8o9P/6/yX6f/3/lt+v/9f/s260/j93/+/jlib7HwAAADrI3f+HuMX+BwAAgGnk7v9j3GL/AwAAwDRy9/8pbmmy//X/+v8L7/9P11/3sP2/7//r//X/w5i3/7+L/v+w/v/Mhb2/e/9/401nf6z/3+b79f/6f9aN1v/n7v9z3NJk/wMAAEAHufv/ErfY/wAAADCN3P1/jVvsfwAAAJhG7v6/xS1N9r/+X/8/5ff/9f/6f/3/MObt/33/3/f/ff9f/6//1/+zZrT+P3f/3+OWJvsfAAAAOsjd/4+4xf4HAACAaeTu/2fcYv8DAADANHL3/ytuabL/9f/6f/2//l//r//fJ/2//n+J/l//v+X36//1/6wbrf/P3f+fAAAA///vXi84") socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000006c0)={0xffffffffffffffff}) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000000)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x1e) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000180)=0x4a9a, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r5, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x0, 0x0, 0x21) pwrite64(r3, &(0x7f0000000140), 0x0, 0x8) 2.406598531s ago: executing program 3 (id=773): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca0000c441f96ec80fc4c60066400fe2def3ad46c7045300101000f00fc01ec422e10399c5c1202066410f6f15040000000000e1f563df", 0xdc000006, 0x0}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x100008b}, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r1, 0x0, 0x0) write$USERIO_CMD_REGISTER(r1, &(0x7f00000000c0), 0x2) preadv(r1, 0x0, 0x0, 0x1000, 0x3) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0xc, 0x45) ioctl$HDIO_GETGEO(0xffffffffffffffff, 0x301, &(0x7f0000000240)) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffdd9, 0x0}}], 0x40001b6, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) mkdir(&(0x7f0000000580)='./file0\x00', 0x0) r3 = inotify_init1(0x800) inotify_add_watch(r3, &(0x7f00000002c0)='./file0\x00', 0x600010c) r4 = syz_io_uring_setup(0x27f3, &(0x7f0000000340)={0x0, 0x4, 0x10100, 0x0, 0xfffffffe}, &(0x7f0000000140), &(0x7f0000000100)) syz_io_uring_setup(0x7414, &(0x7f00000003c0)={0x0, 0xd326, 0x800, 0x0, 0x2ac}, &(0x7f0000000040), &(0x7f0000000180)) io_uring_enter(r4, 0x184c, 0x0, 0x0, 0x0, 0x0) setxattr$incfs_metadata(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000080)) 2.106245874s ago: executing program 6 (id=774): r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000040)={0x1d, r1, 0x8000000000000003}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000004740)=@newtaction={0x14, 0x30, 0x1, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4c804}, 0x4091) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) close(r0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_subtree(r3, &(0x7f0000000200), 0x2, 0x0) rmdir(&(0x7f00000000c0)='./cgroup/../file0\x00') r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x28, 0x5, 0x6, 0x301, 0x0, 0x0, {0x0, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x8800) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r5 = userfaultfd(0x1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000004c0)) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x3}) ioctl$UFFDIO_ZEROPAGE(r5, 0xc020aa04, &(0x7f0000000140)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}}) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xf) sendmsg$NFQNL_MSG_VERDICT_BATCH(r4, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x3, 0x3, 0x301, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x400}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xd}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x80) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 1.361662393s ago: executing program 5 (id=775): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="00f50100000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 943.970448ms ago: executing program 1 (id=776): bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x8d, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[], 0xfffffe2b}}, 0x2200c840) 760.72661ms ago: executing program 0 (id=777): socket$inet6_icmp(0xa, 0x2, 0x3a) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/netfilter\x00') fchdir(r0) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0x5000009) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x20000000, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x2c) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fc}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x8, 0xb6, 0x7f, 0x8003, 0x9, 0x1, 0x3, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) getdents64(r2, &(0x7f0000000040)=""/52, 0x34) getdents64(r2, 0xfffffffffffffffe, 0x29) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400)={[{@sysvgroups}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}]}, 0xff, 0x23f, &(0x7f0000000540)="$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") ftruncate(0xffffffffffffffff, 0x7bc7) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00') getdents64(r5, 0xffffffffffffffff, 0x43) 338.948685ms ago: executing program 6 (id=778): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x60600, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) umount2(&(0x7f0000000080)='./cgroup\x00', 0x5) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f00000000c0)="66b97208000066b8d04a000066ba000000000f30da4300bad004edb8dd008ed0650f0199009867362ea5752f2e0f73d3990f0f0ea866970f20e06635040000000f22e0", 0x43}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 270.339216ms ago: executing program 3 (id=779): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_print_times', 0x40901, 0x88) write$FUSE_DIRENT(r0, &(0x7f0000000580)=ANY=[@ANYRESHEX=r0], 0x200001d0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r3, 0x0, 0x8000f28, 0x0) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x3d, 0x0, &(0x7f0000000080)) syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f00000022c0)=ANY=[], 0x1, 0x6ca, &(0x7f0000000500)="$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") mkdir(&(0x7f0000000080)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) execve(&(0x7f0000000040)='./file0/file0\x00', 0x0, 0x0) 0s ago: executing program 0 (id=780): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x400, &(0x7f0000000000)={[{@grpjquota}, {@stripe={'stripe', 0x3d, 0x2}}]}, 0x1, 0x4bb, &(0x7f0000000580)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x107042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x187842, 0x147) r4 = open(&(0x7f0000000080)='./file1\x00', 0x10b942, 0x140) sendfile(r4, r3, 0x0, 0x80000000) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000040)={0x3920e, r2, 0x5, 0x1, 0x9000000, 0x6}) kernel console output (not intermixed with test programs): ] usb 5-1: device descriptor read/8, error -71 [ 149.234475][ T5247] sp0: Synchronizing with TNC [ 149.464299][ T4253] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 149.472981][ T4253] Bluetooth: hci4: Injecting HCI hardware error event [ 149.482494][ T4268] Bluetooth: hci4: hardware error 0x00 [ 149.493361][ T4299] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 149.563947][ T4299] usb 5-1: device descriptor read/8, error -71 [ 149.766903][ T4299] usb usb5-port1: unable to enumerate USB device [ 149.771175][ T7] usb 6-1: USB disconnect, device number 3 [ 151.411177][ T4299] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 151.484527][ T5303] netlink: 4 bytes leftover after parsing attributes in process `syz.1.294'. [ 151.543299][ T4268] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 151.573479][ T4299] usb 4-1: device descriptor read/64, error -71 [ 151.741665][ T5308] fuse: Unknown parameter 'user_id00000000000000000000' [ 151.963336][ T4299] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 152.123413][ T4299] usb 4-1: device descriptor read/64, error -71 [ 152.255443][ T4299] usb usb4-port1: attempt power cycle [ 152.528427][ T5328] loop5: detected capacity change from 0 to 512 [ 152.564183][ T5328] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 152.664065][ T4299] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 152.680053][ T5328] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 152.682107][ T5331] loop4: detected capacity change from 0 to 512 [ 152.695785][ T4250] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 152.696042][ T5328] ext4 filesystem being mounted at /5/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 152.718237][ T4299] usb 4-1: device descriptor read/8, error -71 [ 152.760485][ T27] kauditd_printk_skb: 2 callbacks suppressed [ 152.760501][ T27] audit: type=1800 audit(1742542191.188:15): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.300" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 152.762242][ T5331] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz.4.301: invalid indirect mapped block 256 (level 2) [ 152.808281][ T27] audit: type=1800 audit(1742542191.238:16): pid=5328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.300" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 152.842671][ T5331] EXT4-fs (loop4): 2 truncates cleaned up [ 152.863409][ T4250] usb 2-1: device descriptor read/64, error -71 [ 152.869808][ T5331] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 152.919712][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 153.003443][ T4299] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 153.034315][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 153.050522][ T4299] usb 4-1: device descriptor read/8, error -71 [ 153.133444][ T4250] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 153.173568][ T4299] usb usb4-port1: unable to enumerate USB device [ 153.304739][ T4250] usb 2-1: device descriptor read/64, error -71 [ 153.328315][ T5344] netlink: 4 bytes leftover after parsing attributes in process `syz.4.305'. [ 153.427303][ T4250] usb usb2-port1: attempt power cycle [ 153.666452][ T5354] ptrace attach of "./syz-executor exec"[4964] was attempted by "./syz-executor exec"[5354] [ 153.709246][ T5354] sp0: Synchronizing with TNC [ 153.835555][ T4250] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 153.875984][ T4250] usb 2-1: device descriptor read/8, error -71 [ 154.162383][ T4250] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 154.234133][ T4250] usb 2-1: device descriptor read/8, error -71 [ 154.353717][ T4250] usb usb2-port1: unable to enumerate USB device [ 155.086896][ T5369] loop5: detected capacity change from 0 to 1024 [ 155.129789][ T5369] EXT4-fs: Ignoring removed i_version option [ 155.167454][ T5369] EXT4-fs: Ignoring removed orlov option [ 155.186345][ T5369] EXT4-fs: Ignoring removed oldalloc option [ 155.209079][ T5369] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 155.298304][ T5369] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 155.379561][ T5369] EXT4-fs (loop5): invalid journal inode [ 155.441124][ T5369] EXT4-fs (loop5): can't get journal size [ 155.494625][ T5369] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 155.795885][ T4250] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0 [ 155.850265][ T4250] hid-generic 0000:0000:0000.0004: hidraw0: HID v0.00 Device [syz1] on syz0 [ 156.055139][ T5380] fuse: Unknown parameter 'user_id00000000000000000000' [ 156.075712][ T4342] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 156.309844][ T4342] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 156.315999][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 156.320325][ T4299] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 156.335242][ T4342] usb 2-1: config 0 has no interfaces? [ 156.355732][ T4342] usb 2-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=87.c0 [ 156.393257][ T4342] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 156.401302][ T4342] usb 2-1: Product: syz [ 156.416187][ T4342] usb 2-1: Manufacturer: syz [ 156.420840][ T4342] usb 2-1: SerialNumber: syz [ 156.434869][ T4342] usb 2-1: config 0 descriptor?? [ 156.551219][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.562199][ T4298] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 156.591267][ T4299] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 156.610881][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 156.631387][ T4299] usb 5-1: config 0 descriptor?? [ 156.696898][ T4342] usb 2-1: USB disconnect, device number 20 [ 156.723379][ T4298] usb 4-1: device descriptor read/64, error -71 [ 156.846983][ T4299] usbhid 5-1:0.0: can't add hid device: -71 [ 156.853080][ T4299] usbhid: probe of 5-1:0.0 failed with error -71 [ 156.884477][ T4299] usb 5-1: USB disconnect, device number 18 [ 157.048501][ T4298] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 157.058168][ T5394] ptrace attach of "./syz-executor exec"[4248] was attempted by "./syz-executor exec"[5394] [ 157.207885][ T4298] usb 4-1: device descriptor read/64, error -71 [ 157.217026][ T5394] sp0: Synchronizing with TNC [ 157.355796][ T4298] usb usb4-port1: attempt power cycle [ 157.383279][ T4299] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 157.590738][ T4299] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 157.616368][ T4299] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 157.628403][ T4444] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 157.640152][ T4299] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.662219][ T4299] usb 5-1: config 0 descriptor?? [ 157.671104][ T4299] hub 5-1:0.0: USB hub found [ 157.764002][ T4298] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 157.804212][ T4298] usb 4-1: device descriptor read/8, error -71 [ 157.845182][ T4444] usb 2-1: config index 0 descriptor too short (expected 65535, got 27) [ 157.860789][ T4444] usb 2-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 157.875952][ T4299] hub 5-1:0.0: 1 port detected [ 157.895655][ T4444] usb 2-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 157.910571][ T4444] usb 2-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 157.926838][ T4444] usb 2-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 157.944706][ T4444] usb 2-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 157.958054][ T4444] usb 2-1: Product: syz [ 157.962358][ T4444] usb 2-1: Manufacturer: syz [ 157.969546][ T4444] usb 2-1: SerialNumber: syz [ 158.074394][ T4298] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 158.114825][ T4298] usb 4-1: device descriptor read/8, error -71 [ 158.210930][ T26] usb 2-1: USB disconnect, device number 21 [ 158.243494][ T4298] usb usb4-port1: unable to enumerate USB device [ 158.898575][ T26] usb 5-1: USB disconnect, device number 19 [ 159.123324][ T7] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 159.315199][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 159.343563][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 159.395695][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 159.433162][ T7] usb 2-1: config 0 descriptor?? [ 159.588982][ T5419] cgroup: No subsys list or none specified [ 159.753536][ T7] usbhid 2-1:0.0: can't add hid device: -71 [ 159.839744][ T7] usbhid: probe of 2-1:0.0 failed with error -71 [ 160.014095][ T7] usb 2-1: USB disconnect, device number 22 [ 160.643455][ T7] usb 2-1: new full-speed USB device number 23 using dummy_hcd [ 160.715616][ T5430] loop0: detected capacity change from 0 to 4096 [ 160.835140][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 160.866893][ T5435] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 160.888047][ T7] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 160.908520][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 160.954912][ T7] usb 2-1: config 0 descriptor?? [ 161.020365][ T7] hub 2-1:0.0: USB hub found [ 161.086053][ T27] audit: type=1800 audit(1742542199.520:17): pid=5430 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.333" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 161.115929][ T5440] fuse: Bad value for 'fd' [ 161.210614][ T5441] loop4: detected capacity change from 0 to 128 [ 161.218753][ T5441] FAT-fs (loop4): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 161.237970][ T7] hub 2-1:0.0: 1 port detected [ 161.499317][ T4454] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 162.562920][ T4444] usb 2-1: USB disconnect, device number 23 [ 162.755955][ T5454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.341'. [ 162.948006][ T5460] loop4: detected capacity change from 0 to 512 [ 162.969112][ T5459] loop0: detected capacity change from 0 to 2048 [ 162.991094][ T5459] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 163.015991][ T5460] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 163.053538][ T5460] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.124573][ T4268] Bluetooth: Wrong link type (-22) [ 163.129930][ T4268] Bluetooth: hci3: link tx timeout [ 163.135629][ T4268] Bluetooth: hci3: killing stalled connection 10:aa:aa:aa:aa:aa [ 163.155537][ T4268] Bluetooth: hci3: link tx timeout [ 163.160738][ T4268] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 163.398904][ T5479] netlink: 132 bytes leftover after parsing attributes in process `syz.1.349'. [ 163.408444][ T5460] loop4: detected capacity change from 512 to 0 [ 163.511876][ C1] I/O error, dev loop4, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 163.535180][ T5473] EXT4-fs error (device loop4): ext4_get_inode_loc:4644: inode #18: block 35: comm syz.4.343: unable to read itable block [ 163.586361][ C1] I/O error, dev loop4, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.596187][ C1] I/O error, dev loop4, sector 136 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 163.658031][ T5482] loop0: detected capacity change from 0 to 256 [ 163.681814][ T4357] loop: Write error at byte offset 9223372036854775807, length 2048. [ 163.714989][ T5482] exfat: Deprecated parameter 'namecase' [ 163.749692][ T5487] loop3: detected capacity change from 0 to 512 [ 163.766794][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 163.776411][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 163.786582][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 163.803504][ T5473] EXT4-fs (loop4): I/O error while writing superblock [ 163.813507][ T5487] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 163.831924][ T5473] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: IO failure [ 163.869829][ T4425] loop: Write error at byte offset 9223372036854775807, length 2048. [ 164.061962][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 164.071747][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 164.081270][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 164.098165][ T5473] EXT4-fs (loop4): I/O error while writing superblock [ 164.113221][ T5473] EXT4-fs error (device loop4): ext4_setattr:5567: inode #18: comm syz.4.343: mark_inode_dirty error [ 164.127508][ T4357] loop: Write error at byte offset 9223372036854775807, length 2048. [ 164.136310][ T5487] EXT4-fs (loop3): invalid journal inode [ 164.136336][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 164.142796][ T5487] EXT4-fs (loop3): can't get journal size [ 164.151525][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 164.166836][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 164.175158][ T5473] EXT4-fs (loop4): I/O error while writing superblock [ 164.203561][ T5473] EXT4-fs error (device loop4) in ext4_setattr:5628: IO failure [ 164.230621][ T4357] loop: Write error at byte offset 9223372036854775807, length 2048. [ 164.284587][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 164.293341][ T5473] EXT4-fs (loop4): I/O error while writing superblock [ 164.483585][ T5482] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x8ce3369d, utbl_chksum : 0xe619d30d) [ 164.860032][ T4249] EXT4-fs error (device loop4): ext4_get_inode_loc:4644: inode #2: block 34: comm syz-executor: unable to read itable block [ 164.892233][ T56] loop: Write error at byte offset 9223372036854775807, length 2048. [ 164.937662][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 164.947727][ T4249] EXT4-fs (loop4): I/O error while writing superblock [ 165.005833][ T5487] EXT4-fs (loop3): 1 truncate cleaned up [ 165.032122][ T4249] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5885: IO failure [ 165.046213][ T5487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 165.151177][ T56] loop: Write error at byte offset 9223372036854775807, length 2048. [ 165.183995][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 165.192452][ T4249] EXT4-fs (loop4): I/O error while writing superblock [ 165.229242][ T4249] EXT4-fs error (device loop4): ext4_dirty_inode:6089: inode #2: comm syz-executor: mark_inode_dirty error [ 165.241005][ T4268] Bluetooth: hci3: command 0x0406 tx timeout [ 165.264671][ T56] loop: Write error at byte offset 9223372036854775807, length 2048. [ 165.273962][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 165.282868][ T4249] EXT4-fs (loop4): I/O error while writing superblock [ 165.429593][ T56] EXT4-fs error (device loop4): __ext4_get_inode_loc_noinmem:4629: inode #2: block 34: comm kworker/u4:4: unable to read itable block [ 165.535972][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 165.566274][ T4357] loop: Write error at byte offset 9223372036854775807, length 2048. [ 165.591447][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 165.601494][ T56] EXT4-fs (loop4): I/O error while writing superblock [ 165.644379][ T4249] EXT4-fs (loop4): unmounting filesystem. [ 165.658274][ T56] loop: Write error at byte offset 9223372036854775807, length 2048. [ 165.691376][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 165.701265][ T4357] loop: Write error at byte offset 9223372036854800383, length 2048. [ 165.711277][ T5519] loop0: detected capacity change from 0 to 512 [ 165.718657][ C1] Buffer I/O error on dev loop4, logical block 12, lost sync page write [ 165.809794][ T5519] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 166.068000][ T56] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.173533][ T4342] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 166.246365][ T56] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.484863][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 166.598579][ T4342] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 166.644821][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.677756][ T4342] usb 4-1: config 0 descriptor?? [ 166.741841][ T56] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.890900][ T56] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.895911][ T4342] usbhid 4-1:0.0: can't add hid device: -71 [ 166.943091][ T4342] usbhid: probe of 4-1:0.0 failed with error -71 [ 166.981001][ T5541] loop5: detected capacity change from 0 to 2048 [ 166.990172][ T4342] usb 4-1: USB disconnect, device number 16 [ 167.175413][ T5541] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 167.211984][ T5541] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 167.303627][ T4253] Bluetooth: hci3: command 0x0406 tx timeout [ 167.369500][ T5541] fs-verity: sha256 using implementation "sha256-avx2" [ 167.643286][ T4342] usb 4-1: new full-speed USB device number 17 using dummy_hcd [ 167.961643][ T4342] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 168.061236][ T5541] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.364: bg 0: block 137: padding at end of block bitmap is not set [ 168.116931][ T4342] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 168.163966][ T5552] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.364: bg 0: block 137: padding at end of block bitmap is not set [ 168.182136][ T4342] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 168.297028][ T4342] usb 4-1: config 0 descriptor?? [ 168.337031][ T4342] hub 4-1:0.0: USB hub found [ 168.353334][ T5541] fs-verity (loop5, inode 13): ext4_end_enable_verity() failed with err -117 [ 168.510035][ T5541] syz.5.364 (5541) used greatest stack depth: 19064 bytes left [ 168.512687][ T5557] loop0: detected capacity change from 0 to 4096 [ 168.531491][ T4342] hub 4-1:0.0: 1 port detected [ 168.540425][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 168.595943][ T5557] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 168.660254][ T4268] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.692923][ T4268] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.702905][ T4268] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.712137][ T4268] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.736644][ T4268] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.744753][ T4268] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.356998][ T4342] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 169.376536][ T4342] usb 4-1: USB disconnect, device number 17 [ 170.247548][ T5559] chnl_net:caif_netlink_parms(): no params data found [ 170.313323][ T4250] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 170.367279][ T5591] loop5: detected capacity change from 0 to 512 [ 170.463956][ T5591] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 170.523303][ T5591] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 170.542709][ T5591] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 170.663375][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 170.679262][ T27] audit: type=1800 audit(1742542209.020:18): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.372" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 170.699888][ T4344] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 170.708558][ T27] audit: type=1800 audit(1742542209.020:19): pid=5591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.372" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 170.763681][ T4250] usb 2-1: config 0 has no interfaces? [ 170.772242][ T4250] usb 2-1: New USB device found, idVendor=1c9e, idProduct=9b05, bcdDevice=f2.fe [ 170.786110][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 170.802328][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.825317][ T4253] Bluetooth: hci1: command 0x0409 tx timeout [ 170.843662][ T4250] usb 2-1: Product: syz [ 170.848041][ T4250] usb 2-1: Manufacturer: syz [ 170.852715][ T4250] usb 2-1: SerialNumber: syz [ 170.925061][ T4344] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 170.936665][ T4344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 170.947727][ T4344] usb 1-1: config 0 descriptor?? [ 170.957067][ T4344] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 171.074763][ T5559] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.078705][ T4250] usb 2-1: config 0 descriptor?? [ 171.086199][ T5559] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.104705][ T5559] device bridge_slave_0 entered promiscuous mode [ 171.129603][ T5559] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.153456][ T5559] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.162630][ T5559] device bridge_slave_1 entered promiscuous mode [ 171.253084][ T56] device hsr_slave_0 left promiscuous mode [ 171.267455][ T56] device hsr_slave_1 left promiscuous mode [ 171.279510][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.297965][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.314297][ T56] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.323470][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.332956][ T4250] usb 2-1: USB disconnect, device number 24 [ 171.340677][ T56] device bridge_slave_1 left promiscuous mode [ 171.349648][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.366651][ T56] device bridge_slave_0 left promiscuous mode [ 171.372946][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.402926][ T56] device veth1_macvtap left promiscuous mode [ 171.410168][ T56] device veth0_macvtap left promiscuous mode [ 171.416804][ T56] device veth1_vlan left promiscuous mode [ 171.422674][ T56] device veth0_vlan left promiscuous mode [ 171.977784][ T4344] gspca_stv06xx: HDCS-1000/1100 sensor detected [ 172.214585][ T56] team0 (unregistering): Port device team_slave_1 removed [ 172.268381][ T4344] STV06xx: probe of 1-1:0.0 failed with error -71 [ 172.294388][ T4344] usb 1-1: USB disconnect, device number 20 [ 172.336530][ T56] team0 (unregistering): Port device team_slave_0 removed [ 172.403492][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.454237][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.903616][ T4253] Bluetooth: hci1: command 0x041b tx timeout [ 173.421496][ T5631] ptrace attach of "./syz-executor exec"[4248] was attempted by "./syz-executor exec"[5631] [ 173.441497][ T56] bond0 (unregistering): Released all slaves [ 173.588933][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 173.614080][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.621696][ T5611] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.646327][ T5611] device bridge_slave_0 left promiscuous mode [ 173.656412][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.704781][ T5611] device bridge_slave_1 left promiscuous mode [ 173.711065][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.735672][ T5611] bond0: (slave bond_slave_0): Releasing backup interface [ 173.772508][ T5611] bond0: (slave bond_slave_1): Releasing backup interface [ 173.842561][ T5631] Falling back ldisc for ptm0. [ 173.851742][ T5611] team0: Port device team_slave_0 removed [ 173.892502][ T5611] team0: Port device team_slave_1 removed [ 173.934210][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.951935][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.964938][ T5611] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.972386][ T5611] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.071241][ T5559] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.108654][ T5613] team0: Mode changed to "loadbalance" [ 174.125023][ T5621] device vlan0 entered promiscuous mode [ 174.178327][ T5622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.379'. [ 174.274990][ T5559] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.303517][ T7] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 174.339744][ T5643] loop5: detected capacity change from 0 to 256 [ 174.401982][ T5559] team0: Port device team_slave_0 added [ 174.414438][ T5643] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 174.462650][ T5559] team0: Port device team_slave_1 added [ 174.497909][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 174.533291][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.572267][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.577136][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 174.612546][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.633322][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.671565][ T5649] loop1: detected capacity change from 0 to 512 [ 174.689465][ T5559] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.691374][ T7] usb 4-1: config 0 descriptor?? [ 174.732023][ T5649] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 174.760779][ T5559] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.793013][ T5559] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.856674][ T5649] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.900956][ T5658] loop5: detected capacity change from 0 to 164 [ 174.909511][ T5649] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 174.983335][ T4253] Bluetooth: hci1: command 0x040f tx timeout [ 175.002439][ T5559] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 175.029208][ T5658] rock: directory entry would overflow storage [ 175.044215][ T27] audit: type=1800 audit(1742542213.470:20): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.385" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 175.131652][ T5658] rock: sig=0x66, size=4, remaining=3 [ 175.153442][ T27] audit: type=1800 audit(1742542213.530:21): pid=5659 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.385" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 175.156224][ T5559] device hsr_slave_0 entered promiscuous mode [ 175.240035][ T5658] rock: directory entry would overflow storage [ 175.259983][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 175.273263][ T5658] rock: sig=0x66, size=4, remaining=3 [ 175.280932][ T5559] device hsr_slave_1 entered promiscuous mode [ 175.332096][ T5658] iso9660: Corrupted directory entry in block 4 of inode 1792 [ 175.342110][ T5559] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.380955][ T5559] Cannot create hsr debugfs directory [ 175.394510][ T5664] rock: directory entry would overflow storage [ 175.431163][ T5664] rock: sig=0x66, size=4, remaining=3 [ 175.643455][ T4250] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 175.789892][ T7] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #100: -71 [ 175.804980][ T7] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 175.833365][ T7] uclogic 0003:256C:006D.0005: failed probing pen v1 parameters: -71 [ 175.843441][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 175.863322][ T4250] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 175.880503][ T7] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 175.904212][ T4250] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 175.918662][ T7] uclogic: probe of 0003:256C:006D.0005 failed with error -71 [ 175.948228][ T4250] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.958943][ T5559] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 175.967386][ T7] usb 4-1: USB disconnect, device number 18 [ 175.997007][ T5559] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 176.023545][ T4250] usb 1-1: config 0 descriptor?? [ 176.046160][ T5559] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 176.087637][ T5559] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 176.220604][ T5692] netlink: 4 bytes leftover after parsing attributes in process `syz.1.394'. [ 176.248577][ T5690] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 176.255659][ T5690] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 176.305939][ T5690] vhci_hcd vhci_hcd.0: Device attached [ 176.324368][ T5691] vhci_hcd: connection closed [ 176.326622][ T4352] vhci_hcd: stop threads [ 176.355134][ T4352] vhci_hcd: release socket [ 176.373427][ T4352] vhci_hcd: disconnect device [ 176.382858][ T5559] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.415176][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 176.424350][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 176.441367][ T5559] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.470871][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 176.490946][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 176.613012][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.620316][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.714854][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 176.723707][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 176.732446][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 176.741335][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.748500][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.760788][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 176.781673][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 176.812709][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 176.834651][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 176.854215][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 176.873541][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 176.893619][ T5708] ptrace attach of "./syz-executor exec"[4258] was attempted by "./syz-executor exec"[5708] [ 176.944359][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 176.955829][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 176.985857][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 177.015540][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 177.034964][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 177.062685][ T4250] uclogic 0003:256C:006D.0006: failed retrieving string descriptor #100: -71 [ 177.069813][ T5559] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 177.071823][ T4253] Bluetooth: hci1: command 0x0419 tx timeout [ 177.085195][ T4250] uclogic 0003:256C:006D.0006: failed retrieving pen parameters: -71 [ 177.094126][ T4250] uclogic 0003:256C:006D.0006: failed probing pen v1 parameters: -71 [ 177.102352][ T4250] uclogic 0003:256C:006D.0006: failed probing parameters: -71 [ 177.110095][ T4257] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 177.118172][ T4250] uclogic: probe of 0003:256C:006D.0006 failed with error -71 [ 177.140519][ T4250] usb 1-1: USB disconnect, device number 21 [ 177.165982][ T5708] sp0: Synchronizing with TNC [ 177.220948][ T5713] loop5: detected capacity change from 0 to 512 [ 177.253656][ T5713] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 177.310077][ T4257] usb 2-1: config 0 has an invalid interface number: 95 but max is 0 [ 177.345347][ T4257] usb 2-1: config 0 has no interface number 0 [ 177.355239][ T5713] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 177.413322][ T4257] usb 2-1: config 0 interface 95 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 177.430942][ T5713] ext4 filesystem being mounted at /30/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 177.462020][ T4257] usb 2-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 177.519615][ T27] audit: type=1800 audit(1742542215.950:22): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.398" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 177.563527][ T4257] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 177.571616][ T4257] usb 2-1: Product: syz [ 177.613277][ T4257] usb 2-1: Manufacturer: syz [ 177.617941][ T4257] usb 2-1: SerialNumber: syz [ 177.630611][ T27] audit: type=1800 audit(1742542215.980:23): pid=5713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.398" name="file2" dev="loop5" ino=16 res=0 errno=0 [ 177.667357][ T4257] usb 2-1: config 0 descriptor?? [ 177.673149][ T5707] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 177.728200][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 177.763925][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 177.781891][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 177.840037][ T5559] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.922733][ T4257] usb 2-1: MIDIStreaming interface descriptor not found [ 177.997499][ T4257] usb 2-1: USB disconnect, device number 25 [ 178.094879][ T4389] udevd[4389]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 178.172116][ T5733] loop5: detected capacity change from 0 to 4096 [ 178.211620][ T5733] ntfs3: loop5: Different NTFS' sector size (2048) and media sector size (512) [ 178.295325][ T5733] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 178.366022][ T5733] ntfs3: loop5: Failed to load $Extend. [ 178.417204][ T27] audit: type=1800 audit(1742542216.850:24): pid=5733 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.400" name="file1" dev="loop5" ino=30 res=0 errno=0 [ 178.431461][ T5742] netlink: 32 bytes leftover after parsing attributes in process `syz.0.402'. [ 178.987712][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 179.011810][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.097094][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 179.127546][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.173102][ T5559] device veth0_vlan entered promiscuous mode [ 179.190630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.211471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.257072][ T5559] device veth1_vlan entered promiscuous mode [ 179.360899][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.420209][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.453868][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.476668][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.518757][ T5559] device veth0_macvtap entered promiscuous mode [ 179.582136][ T5559] device veth1_macvtap entered promiscuous mode [ 179.629149][ T5771] loop5: detected capacity change from 0 to 256 [ 179.685471][ T5771] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 179.694021][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.723774][ T5773] fuse: Unknown parameter '0x0000000000000004' [ 179.730068][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.772882][ T5777] cgroup: No subsys list or none specified [ 179.783708][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.805598][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.822590][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.833520][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.845412][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.869135][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.894512][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.961186][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.021345][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.045010][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.078693][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.125308][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.159191][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.188394][ T5559] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.221533][ T5559] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.298958][ T5559] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 180.331229][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 180.342783][ T4354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 180.889050][ T5787] syz.0.413 (5787): drop_caches: 2 [ 180.937778][ T5559] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 180.986553][ T5559] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.030784][ T5559] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.093425][ T5559] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.228102][ T5800] loop5: detected capacity change from 0 to 256 [ 181.266303][ T5793] loop3: detected capacity change from 0 to 4096 [ 181.439577][ T4354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.476699][ T4354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.581923][ T4299] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 181.706633][ T7] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 181.725766][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.831580][ T4354] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.852149][ T4299] usb 1-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 181.864721][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 181.938136][ T4299] usb 1-1: config 0 descriptor?? [ 182.053970][ T7] usb 6-1: device descriptor read/64, error -71 [ 182.090525][ T4299] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 182.125636][ T4354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.181712][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.393376][ T7] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 182.416531][ T4253] Bluetooth: Wrong link type (-22) [ 182.553265][ T7] usb 6-1: device descriptor read/64, error -71 [ 182.673372][ T7] usb usb6-port1: attempt power cycle [ 182.852027][ T5823] loop1: detected capacity change from 0 to 256 [ 182.882916][ T5823] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 182.909548][ T5826] fuse: Unknown parameter 'fd0x0000000000000004' [ 183.000990][ T4299] usb 1-1: USB disconnect, device number 22 [ 183.083499][ T7] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 183.163008][ T7] usb 6-1: device descriptor read/8, error -71 [ 183.442758][ T7] usb 6-1: new full-speed USB device number 7 using dummy_hcd [ 183.494124][ T7] usb 6-1: device descriptor read/8, error -71 [ 183.522657][ T5841] loop6: detected capacity change from 0 to 4096 [ 183.623533][ T7] usb usb6-port1: unable to enumerate USB device [ 183.653488][ T4250] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 183.865256][ T4250] usb 4-1: Using ep0 maxpacket: 32 [ 183.976009][ T4250] usb 4-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 184.264097][ T4250] usb 4-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 184.348918][ T4250] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 184.439282][ T4250] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 184.469679][ T4250] usb 4-1: Product: syz [ 184.489951][ T4250] usb 4-1: Manufacturer: syz [ 184.531477][ T4250] hub 4-1:4.0: bad descriptor, ignoring hub [ 184.561360][ T4250] hub: probe of 4-1:4.0 failed with error -5 [ 184.579758][ T4250] usbhid 4-1:4.0: couldn't find an input interrupt endpoint [ 184.759314][ T5842] loop3: detected capacity change from 0 to 512 [ 184.813924][ T5842] EXT4-fs: Ignoring removed nomblk_io_submit option [ 184.834000][ T5868] fuse: Unknown parameter 'fd0x0000000000000004' [ 184.899800][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.428: missing EA_INODE flag [ 184.967102][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.428: error while reading EA inode 2 err=-117 [ 185.044428][ T5855] cgroup: No subsys list or none specified [ 185.054512][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #2: comm syz.3.428: missing EA_INODE flag [ 185.076535][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.428: error while reading EA inode 2 err=-117 [ 185.104002][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.428: inode #65536: comm syz.3.428: iget: illegal inode # [ 185.178779][ T5842] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.428: error while reading EA inode 65536 err=-117 [ 185.222492][ T5842] EXT4-fs (loop3): 1 orphan inode deleted [ 185.248972][ T5842] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 185.461515][ T5889] loop1: detected capacity change from 0 to 256 [ 185.823264][ T4299] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 185.939626][ T5899] loop0: detected capacity change from 0 to 256 [ 185.993243][ T4299] usb 2-1: device descriptor read/64, error -71 [ 186.001487][ T5899] FAT-fs (loop0): Directory bread(block 64) failed [ 186.008743][ T5899] FAT-fs (loop0): Directory bread(block 65) failed [ 186.016502][ T5899] FAT-fs (loop0): Directory bread(block 66) failed [ 186.031981][ T5899] FAT-fs (loop0): Directory bread(block 67) failed [ 186.046823][ T5899] FAT-fs (loop0): Directory bread(block 68) failed [ 186.066443][ T5899] FAT-fs (loop0): Directory bread(block 69) failed [ 186.082106][ T5899] FAT-fs (loop0): Directory bread(block 70) failed [ 186.088935][ T5899] FAT-fs (loop0): Directory bread(block 71) failed [ 186.096293][ T5899] FAT-fs (loop0): Directory bread(block 72) failed [ 186.114759][ T5899] FAT-fs (loop0): Directory bread(block 73) failed [ 186.173385][ T4250] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 186.283886][ T4299] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 186.375676][ T4250] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.407222][ T4250] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 186.464665][ T4250] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 186.473400][ T4299] usb 2-1: device descriptor read/64, error -71 [ 186.488028][ T4250] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.502507][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 186.508050][ T4250] usb 7-1: config 0 descriptor?? [ 186.607194][ T4344] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 186.618326][ T4299] usb usb2-port1: attempt power cycle [ 186.633526][ T7] usb 4-1: USB disconnect, device number 19 [ 186.807176][ T4344] usb 6-1: Using ep0 maxpacket: 32 [ 186.816510][ T4344] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 186.850093][ T4344] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 186.872115][ T4344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 186.905978][ T4344] usb 6-1: Product: syz [ 186.920197][ T4344] usb 6-1: Manufacturer: syz [ 186.930609][ T4344] usb 6-1: SerialNumber: syz [ 186.955150][ T4344] usb 6-1: config 0 descriptor?? [ 186.972488][ T4344] quatech2 6-1:0.0: Quatech 2nd gen USB to Serial Driver converter detected [ 187.033283][ T4299] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 187.083946][ T4299] usb 2-1: device descriptor read/8, error -71 [ 187.177377][ T4344] usb 6-1: qt2_setup_urbs - submit read urb failed -8 [ 187.186850][ T4344] quatech2: probe of 6-1:0.0 failed with error -8 [ 187.330672][ T4250] uclogic 0003:256C:006D.0007: failed retrieving Huion firmware version: -71 [ 187.352933][ T4250] uclogic 0003:256C:006D.0007: failed probing parameters: -71 [ 187.363259][ T4299] usb 2-1: new full-speed USB device number 29 using dummy_hcd [ 187.374450][ T4250] uclogic: probe of 0003:256C:006D.0007 failed with error -71 [ 187.383674][ T4444] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 187.404333][ T4299] usb 2-1: device descriptor read/8, error -71 [ 187.410748][ T4344] usb 6-1: USB disconnect, device number 8 [ 187.438451][ T4250] usb 7-1: USB disconnect, device number 2 [ 187.548214][ T4299] usb usb2-port1: unable to enumerate USB device [ 187.605159][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 187.633908][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 187.653457][ T4444] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 187.672908][ T4444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 187.695192][ T4444] usb 1-1: config 0 descriptor?? [ 187.702663][ T5940] loop3: detected capacity change from 0 to 512 [ 187.727408][ T5940] EXT4-fs: Ignoring removed oldalloc option [ 187.775602][ T5940] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.452: iget: bad extended attribute block 1 [ 187.798772][ T5940] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.452: couldn't read orphan inode 15 (err -117) [ 187.817038][ T5940] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 188.037105][ T4253] Bluetooth: Wrong link type (-22) [ 188.046606][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 188.483324][ T4344] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 188.535646][ T4444] uclogic 0003:256C:006D.0008: failed retrieving Huion firmware version: -71 [ 188.560033][ T4444] uclogic 0003:256C:006D.0008: failed probing parameters: -71 [ 188.574342][ T4444] uclogic: probe of 0003:256C:006D.0008 failed with error -71 [ 188.593085][ T4444] usb 1-1: USB disconnect, device number 23 [ 188.698994][ T4344] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 188.713519][ T4344] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.730556][ T4344] usb 4-1: Product: syz [ 188.735512][ T4344] usb 4-1: Manufacturer: syz [ 188.740231][ T4344] usb 4-1: SerialNumber: syz [ 188.762911][ T4344] usb 4-1: config 0 descriptor?? [ 188.803258][ T4342] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 188.976861][ T4344] hso 4-1:0.0: Failed to find BULK IN ep [ 188.993371][ T4342] usb 6-1: Using ep0 maxpacket: 32 [ 189.000585][ T4342] usb 6-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 189.023588][ T4344] usb-storage 4-1:0.0: USB Mass Storage device detected [ 189.030922][ T4342] usb 6-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.081103][ T4342] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.100667][ T4342] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 189.147391][ T4342] usb 6-1: Product: syz [ 189.174291][ T4342] usb 6-1: Manufacturer: syz [ 189.234324][ T4342] hub 6-1:4.0: bad descriptor, ignoring hub [ 189.250514][ T4342] hub: probe of 6-1:4.0 failed with error -5 [ 189.264840][ T4342] usbhid 6-1:4.0: couldn't find an input interrupt endpoint [ 189.300029][ T4444] usb 4-1: USB disconnect, device number 20 [ 189.452663][ T5962] loop5: detected capacity change from 0 to 512 [ 189.484923][ T5962] EXT4-fs: Ignoring removed nomblk_io_submit option [ 189.543074][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #2: comm syz.5.458: missing EA_INODE flag [ 189.581014][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.458: error while reading EA inode 2 err=-117 [ 189.614151][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: inode #2: comm syz.5.458: missing EA_INODE flag [ 189.700760][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.458: error while reading EA inode 2 err=-117 [ 189.710008][ T5994] input: syz0 as /devices/virtual/input/input6 [ 189.764644][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:404: comm syz.5.458: inode #65536: comm syz.5.458: iget: illegal inode # [ 189.794037][ T5962] EXT4-fs error (device loop5): ext4_xattr_inode_iget:409: comm syz.5.458: error while reading EA inode 65536 err=-117 [ 189.840525][ T5962] EXT4-fs (loop5): 1 orphan inode deleted [ 189.858166][ T5962] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 189.913388][ T4250] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 190.025666][ T6004] loop6: detected capacity change from 0 to 1024 [ 190.115959][ T4250] usb 2-1: Using ep0 maxpacket: 16 [ 190.127485][ T4250] usb 2-1: config 8 has an invalid interface number: 39 but max is 0 [ 190.136589][ T4250] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 190.148470][ T4250] usb 2-1: config 8 has no interface number 0 [ 190.161881][ T4250] usb 2-1: config 8 interface 39 altsetting 1 endpoint 0xC has invalid wMaxPacketSize 0 [ 190.183270][ T4250] usb 2-1: config 8 interface 39 altsetting 1 bulk endpoint 0xC has invalid maxpacket 0 [ 190.214148][ T4250] usb 2-1: config 8 interface 39 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 190.238069][ T6011] loop6: detected capacity change from 0 to 256 [ 190.243971][ T4250] usb 2-1: config 8 interface 39 has no altsetting 0 [ 190.264200][ T4444] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 190.269005][ T4250] usb 2-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 190.311989][ T4250] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.338400][ T4250] usb 2-1: Product: syz [ 190.343128][ T4250] usb 2-1: Manufacturer: syz [ 190.356244][ T4250] usb 2-1: SerialNumber: syz [ 190.446114][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 190.463647][ T4444] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 190.472759][ T4444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.491239][ T4444] usb 4-1: config 0 descriptor?? [ 190.563564][ T4342] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 190.581234][ T4250] ipheth 2-1:8.39: Unable to find endpoints [ 190.602973][ T4250] usb 2-1: USB disconnect, device number 30 [ 190.716876][ T4444] usbhid 4-1:0.0: can't add hid device: -71 [ 190.734308][ T4444] usbhid: probe of 4-1:0.0 failed with error -71 [ 190.755275][ T4342] usb 7-1: config 0 has an invalid interface number: 206 but max is 1 [ 190.764502][ T4444] usb 4-1: USB disconnect, device number 21 [ 190.774096][ T4342] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 190.805604][ T4342] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 190.815055][ T4342] usb 7-1: config 0 has no interface number 0 [ 190.821187][ T4342] usb 7-1: config 0 interface 206 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 190.839718][ T4342] usb 7-1: config 0 interface 206 has no altsetting 0 [ 190.850466][ T4342] usb 7-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 190.860902][ T4342] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.869666][ T4342] usb 7-1: Product: syz [ 190.877173][ T4342] usb 7-1: Manufacturer: syz [ 190.881813][ T4342] usb 7-1: SerialNumber: syz [ 190.901620][ T4342] usb 7-1: config 0 descriptor?? [ 191.043536][ T7] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 191.159898][ T4342] snd-usb-audio: probe of 7-1:0.206 failed with error -2 [ 191.201437][ T4342] usb 7-1: USB disconnect, device number 3 [ 191.215315][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 191.233625][ T7] usb 1-1: Using ep0 maxpacket: 8 [ 191.260371][ T7] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2 [ 191.283848][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.312980][ T7] usb 1-1: Product: syz [ 191.317579][ T7] usb 1-1: Manufacturer: syz [ 191.322335][ T7] usb 1-1: SerialNumber: syz [ 191.331334][ T7] usb 1-1: config 0 descriptor?? [ 191.336445][ T4444] usb 4-1: new full-speed USB device number 22 using dummy_hcd [ 191.524644][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 191.547241][ T4444] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 191.559265][ T7] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state [ 191.574457][ T4444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.600076][ T4444] usb 4-1: config 0 descriptor?? [ 191.619355][ T4444] hub 4-1:0.0: USB hub found [ 191.633380][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 191.723543][ T951] usb 6-1: USB disconnect, device number 9 [ 191.767944][ T7] usb write operation failed. (-71) [ 191.804669][ T7] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 191.818600][ T4444] hub 4-1:0.0: 1 port detected [ 191.825810][ T7] dvbdev: DVB: registering new adapter (Terratec H7) [ 191.881073][ T7] usb 1-1: media controller created [ 191.920496][ T7] usb read operation failed. (-71) [ 191.938071][ T7] usb write operation failed. (-71) [ 191.951350][ T7] dvb_usb_az6007: probe of 1-1:0.0 failed with error -5 [ 192.060403][ T7] usb 1-1: USB disconnect, device number 24 [ 192.238274][ T951] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 192.455061][ T951] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 192.574731][ T951] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 192.622797][ T4444] hub 4-1:0.0: hub_ext_port_status failed (err = -71) [ 192.632959][ T951] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.670183][ T951] usb 2-1: Product: syz [ 192.825314][ T951] usb 2-1: Manufacturer: syz [ 192.843373][ T951] usb 2-1: SerialNumber: syz [ 192.860518][ T7] usb 4-1: USB disconnect, device number 22 [ 192.892999][ T951] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 193.331726][ T6074] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 193.529937][ T951] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 193.933457][ T7] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 194.110963][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.126709][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.128654][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 194.236841][ T7] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 194.363314][ T7] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 194.372426][ T7] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.472385][ T7] usb 7-1: config 0 descriptor?? [ 194.550519][ T6087] syz.5.485 (6087): drop_caches: 2 [ 194.875504][ T4344] usb 2-1: USB disconnect, device number 31 [ 195.094269][ T6112] loop3: detected capacity change from 0 to 256 [ 195.125325][ T6110] netlink: 32 bytes leftover after parsing attributes in process `syz.5.492'. [ 195.146020][ T6112] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 195.337809][ T7] uclogic 0003:256C:006D.0009: failed retrieving Huion firmware version: -71 [ 195.351815][ T7] uclogic 0003:256C:006D.0009: failed probing parameters: -71 [ 195.364030][ T7] uclogic: probe of 0003:256C:006D.0009 failed with error -71 [ 195.804930][ T7] usb 7-1: USB disconnect, device number 4 [ 195.919002][ T6120] loop3: detected capacity change from 0 to 256 [ 196.413520][ T7] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 196.827513][ T7] usb 1-1: Using ep0 maxpacket: 32 [ 197.009627][ T6135] syz.3.500 (6135): drop_caches: 2 [ 197.091863][ T6140] loop6: detected capacity change from 0 to 512 [ 197.121447][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 197.140422][ T7] usb 1-1: config 0 has no interfaces? [ 197.155997][ T7] usb 1-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 197.164573][ T6140] EXT4-fs: Ignoring removed bh option [ 197.173317][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.195134][ T7] usb 1-1: Product: syz [ 197.200624][ T6140] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock [ 197.208135][ T7] usb 1-1: Manufacturer: syz [ 197.223404][ T7] usb 1-1: SerialNumber: syz [ 197.230698][ T6140] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 197.234255][ T7] usb 1-1: config 0 descriptor?? [ 197.278259][ T6140] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=884ec128, mo2=0002] [ 197.323935][ T6140] EXT4-fs (loop6): orphan cleanup on readonly fs [ 197.349033][ T6140] EXT4-fs error (device loop6): ext4_quota_enable:6982: comm syz.6.502: Bad quota inum: 4294967291, type: 0 [ 197.365192][ T6140] EXT4-fs (loop6): Remounting filesystem read-only [ 197.371966][ T6140] EXT4-fs warning (device loop6): ext4_enable_quotas:7030: Failed to enable quota tracking (type=0, err=-117, ino=4294967291). Please run e2fsck to fix. [ 197.422300][ T6140] EXT4-fs (loop6): Cannot turn on quotas: error -117 [ 197.431199][ T6146] netlink: 4 bytes leftover after parsing attributes in process `syz.5.503'. [ 197.449548][ T6140] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 197.483303][ T4298] usb 1-1: USB disconnect, device number 25 [ 197.529759][ T6140] EXT4-fs error (device loop6): ext4_lookup:1862: inode #2: comm syz.6.502: deleted inode referenced: 12 [ 197.555251][ T6152] loop5: detected capacity change from 0 to 16 [ 197.574777][ T6152] erofs: (device loop5): mounted with root inode @ nid 36. [ 197.641318][ T5559] EXT4-fs (loop6): unmounting filesystem. [ 197.733720][ T6154] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.739692][ T4444] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 197.744247][ T7] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 197.934774][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.943414][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 197.945927][ T4444] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.954959][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.961017][ T4444] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 197.978898][ T7] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.980855][ T4444] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.999264][ T4298] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 198.007538][ T7] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00 [ 198.017772][ T4444] usb 4-1: config 0 descriptor?? [ 198.023431][ T7] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.040414][ T7] usb 2-1: config 0 descriptor?? [ 198.173295][ T4298] usb 6-1: device descriptor read/64, error -71 [ 198.373333][ T4257] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 198.443349][ T4298] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 198.464792][ T7] lua 0003:1E7D:2C2E.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.1-1/input0 [ 198.567549][ T4257] usb 1-1: Using ep0 maxpacket: 32 [ 198.583030][ T4257] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 198.603268][ T4298] usb 6-1: device descriptor read/64, error -71 [ 198.609750][ T4257] usb 1-1: config 4 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 198.610967][ T6165] loop6: detected capacity change from 0 to 256 [ 198.661058][ T4299] usb 2-1: USB disconnect, device number 32 [ 198.682716][ T4257] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 198.698581][ T4257] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 198.708001][ T4257] usb 1-1: Product: syz [ 198.712261][ T4257] usb 1-1: Manufacturer: syz [ 198.725380][ T4257] hub 1-1:4.0: bad descriptor, ignoring hub [ 198.731334][ T4257] hub: probe of 1-1:4.0 failed with error -5 [ 198.742003][ T4257] usbhid 1-1:4.0: couldn't find an input interrupt endpoint [ 198.774160][ T4298] usb usb6-port1: attempt power cycle [ 198.852007][ T4444] uclogic 0003:256C:006D.000A: failed retrieving Huion firmware version: -71 [ 198.861057][ T4444] uclogic 0003:256C:006D.000A: failed probing parameters: -71 [ 198.868701][ T4444] uclogic: probe of 0003:256C:006D.000A failed with error -71 [ 198.889551][ T4444] usb 4-1: USB disconnect, device number 23 [ 198.923370][ T7] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 198.942878][ T6159] loop0: detected capacity change from 0 to 512 [ 198.950327][ T6159] EXT4-fs: Ignoring removed nomblk_io_submit option [ 198.971042][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.509: missing EA_INODE flag [ 198.986949][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.509: error while reading EA inode 2 err=-117 [ 199.000100][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: inode #2: comm syz.0.509: missing EA_INODE flag [ 199.013794][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.509: error while reading EA inode 2 err=-117 [ 199.026687][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:404: comm syz.0.509: inode #65536: comm syz.0.509: iget: illegal inode # [ 199.040567][ T6159] EXT4-fs error (device loop0): ext4_xattr_inode_iget:409: comm syz.0.509: error while reading EA inode 65536 err=-117 [ 199.055276][ T6159] EXT4-fs (loop0): 1 orphan inode deleted [ 199.061200][ T6159] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 199.116581][ T7] usb 7-1: config 0 has an invalid interface number: 206 but max is 1 [ 199.125113][ T7] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 199.135480][ T7] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 199.144454][ T7] usb 7-1: config 0 has no interface number 0 [ 199.150752][ T7] usb 7-1: config 0 interface 206 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 7 [ 199.168232][ T7] usb 7-1: config 0 interface 206 has no altsetting 0 [ 199.177622][ T7] usb 7-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 199.191022][ T4298] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 199.199951][ T7] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 199.209748][ T7] usb 7-1: Product: syz [ 199.214195][ T7] usb 7-1: Manufacturer: syz [ 199.218819][ T7] usb 7-1: SerialNumber: syz [ 199.230203][ T7] usb 7-1: config 0 descriptor?? [ 199.257401][ T4298] usb 6-1: device descriptor read/8, error -71 [ 199.512896][ T7] snd-usb-audio: probe of 7-1:0.206 failed with error -2 [ 199.530878][ T7] usb 7-1: USB disconnect, device number 5 [ 199.537117][ T4298] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 199.657765][ T4298] usb 6-1: device descriptor read/8, error -71 [ 199.937593][ T4298] usb usb6-port1: unable to enumerate USB device [ 199.946687][ T6167] EXT4-fs error (device loop0): ext4_validate_block_bitmap:429: comm ext4lazyinit: bg 0: block 5: invalid block bitmap [ 200.151218][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 200.842110][ T6181] syz.6.515 (6181): drop_caches: 2 [ 201.225902][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 201.300183][ T4298] usb 1-1: USB disconnect, device number 26 [ 201.629394][ T6194] cgroup: No subsys list or none specified [ 202.240696][ T6190] device pim6reg1 entered promiscuous mode [ 202.803313][ T4344] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 203.003232][ T4344] usb 2-1: Using ep0 maxpacket: 32 [ 203.010876][ T4344] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 203.020574][ T4344] usb 2-1: config 0 has no interface number 0 [ 203.030700][ T4344] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 203.040466][ T4344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 203.049030][ T4344] usb 2-1: Product: syz [ 203.061689][ T4344] usb 2-1: Manufacturer: syz [ 203.066768][ T4344] usb 2-1: SerialNumber: syz [ 203.083547][ T7] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 203.092100][ T4344] usb 2-1: config 0 descriptor?? [ 203.129774][ T4344] smsc95xx v2.0.0 [ 203.287801][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.304417][ T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.319185][ T7] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 203.329516][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.361830][ T7] usb 4-1: config 0 descriptor?? [ 203.735118][ T6211] loop0: detected capacity change from 0 to 256 [ 203.819572][ T6211] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 204.002234][ T7] usb 4-1: language id specifier not provided by device, defaulting to English [ 204.140292][ T4344] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71 [ 204.152776][ T4344] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 204.170600][ T4344] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 204.182348][ T4344] smsc95xx: probe of 2-1:0.67 failed with error -71 [ 204.192147][ T4344] usb 2-1: USB disconnect, device number 33 [ 204.204843][ T7] uclogic 0003:256C:006D.000C: failed retrieving Huion firmware version: -71 [ 204.221645][ T7] uclogic 0003:256C:006D.000C: failed probing parameters: -71 [ 204.230065][ T7] uclogic: probe of 0003:256C:006D.000C failed with error -71 [ 204.242360][ T7] usb 4-1: USB disconnect, device number 24 [ 205.813401][ T7] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 205.906680][ T6213] netlink: 36 bytes leftover after parsing attributes in process `syz.0.526'. [ 205.973484][ T7] usb 4-1: device descriptor read/64, error -71 [ 206.205625][ T27] audit: type=1326 audit(1742542244.640:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.243273][ T7] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 206.365529][ T27] audit: type=1326 audit(1742542244.640:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.403277][ T7] usb 4-1: device descriptor read/64, error -71 [ 206.415484][ T27] audit: type=1326 audit(1742542244.640:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.438431][ T27] audit: type=1326 audit(1742542244.640:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.461706][ T27] audit: type=1326 audit(1742542244.640:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.534031][ T7] usb usb4-port1: attempt power cycle [ 206.775890][ T27] audit: type=1326 audit(1742542244.640:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=287 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 206.994720][ T7] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 207.087038][ T7] usb 4-1: device descriptor read/8, error -71 [ 207.104930][ T6245] netlink: 666 bytes leftover after parsing attributes in process `syz.1.535'. [ 207.133086][ T27] audit: type=1326 audit(1742542244.640:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 207.213222][ T4444] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 207.226716][ T27] audit: type=1326 audit(1742542244.640:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 207.248968][ T27] audit: type=1326 audit(1742542244.640:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 207.288872][ T27] audit: type=1326 audit(1742542244.640:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6229 comm="syz.1.530" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f25df38d169 code=0x7ffc0000 [ 207.373241][ T7] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 207.422160][ T7] usb 4-1: device descriptor read/8, error -71 [ 207.442116][ T4444] usb 7-1: config 0 has an invalid interface number: 107 but max is 0 [ 207.465752][ T4444] usb 7-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 207.503247][ T4444] usb 7-1: config 0 has no interface number 0 [ 207.509456][ T4444] usb 7-1: config 0 interface 107 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 207.510593][ T6251] loop0: detected capacity change from 0 to 4096 [ 207.553899][ T7] usb usb4-port1: unable to enumerate USB device [ 207.565681][ T4444] usb 7-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice=16.60 [ 207.613311][ T4444] usb 7-1: New USB device strings: Mfr=175, Product=2, SerialNumber=3 [ 207.621635][ T4444] usb 7-1: Product: syz [ 207.651199][ T4444] usb 7-1: Manufacturer: syz [ 207.678206][ T4444] usb 7-1: SerialNumber: syz [ 207.703833][ T4444] usb 7-1: config 0 descriptor?? [ 207.959085][ T4444] keyspan 7-1:0.107: Keyspan 4 port adapter converter detected [ 207.981250][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 81 [ 207.990139][ T4299] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 208.017230][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 88 [ 208.037688][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 1 [ 208.059920][ T4444] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 208.085985][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 2 [ 208.109723][ T4444] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 208.134925][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 4 [ 208.156316][ T4444] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 208.179040][ T4444] keyspan 7-1:0.107: found no endpoint descriptor for endpoint 6 [ 208.200404][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 208.217757][ T4444] usb 7-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 208.226145][ T4299] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 208.257063][ T4444] usb 7-1: USB disconnect, device number 6 [ 208.299241][ T4299] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 208.309911][ T4299] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 208.345419][ T4444] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 208.425259][ T4299] usb 6-1: config 0 descriptor?? [ 208.455945][ T4444] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 208.515401][ T4444] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 208.585984][ T4444] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 208.649573][ T4444] keyspan 7-1:0.107: device disconnected [ 209.051705][ T4299] usb 6-1: language id specifier not provided by device, defaulting to English [ 209.286582][ T4299] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 209.296131][ T4299] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 209.303918][ T4299] uclogic: probe of 0003:256C:006D.000D failed with error -71 [ 209.326301][ T4299] usb 6-1: USB disconnect, device number 14 [ 209.634892][ T6272] loop0: detected capacity change from 0 to 2048 [ 209.706173][ T6272] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 209.707148][ T6277] netlink: 28 bytes leftover after parsing attributes in process `syz.6.543'. [ 209.774993][ T6277] netlink: 8 bytes leftover after parsing attributes in process `syz.6.543'. [ 210.025814][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 210.190818][ T6298] tmpfs: Bad value for 'mpol' [ 212.384832][ T6366] cgroup: No subsys list or none specified [ 213.101482][ T6382] loop5: detected capacity change from 0 to 64 [ 214.173586][ T951] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 215.315030][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 215.333193][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 215.349176][ T951] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 215.358616][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.369416][ T951] usb 2-1: config 0 descriptor?? [ 215.633271][ T4257] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 215.813652][ T951] usbhid 2-1:0.0: can't add hid device: -32 [ 215.826013][ T4257] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 215.826174][ T6417] loop0: detected capacity change from 0 to 64 [ 215.835830][ T951] usbhid: probe of 2-1:0.0 failed with error -32 [ 215.859145][ T4257] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 215.891677][ T4257] usb 6-1: config 0 descriptor?? [ 215.918207][ T951] usb 2-1: USB disconnect, device number 34 [ 215.932448][ T4257] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 216.566123][ T951] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 216.770929][ T6443] loop6: detected capacity change from 0 to 4096 [ 216.808056][ T6437] loop3: detected capacity change from 0 to 4096 [ 216.893250][ T951] usb 1-1: Using ep0 maxpacket: 16 [ 216.904421][ T951] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 217.114020][ T4257] usb 6-1: USB disconnect, device number 15 [ 217.122547][ T951] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 217.146546][ T951] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 217.158445][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 217.162992][ T6437] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 217.175398][ T951] usb 1-1: Product: syz [ 217.180233][ T6449] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 217.212641][ T27] kauditd_printk_skb: 21 callbacks suppressed [ 217.212659][ T27] audit: type=1800 audit(1742542255.640:56): pid=6443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.570" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 217.221122][ T951] usb 1-1: Manufacturer: syz [ 217.246299][ T6443] syz.6.570: attempt to access beyond end of device [ 217.246299][ T6443] loop6: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 217.282957][ T6443] syz.6.570: attempt to access beyond end of device [ 217.282957][ T6443] loop6: rw=0, sector=2097320, nr_sectors = 8 limit=4096 [ 217.303123][ T951] usb 1-1: SerialNumber: syz [ 217.364624][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 217.551647][ T951] usb 1-1: 0:2 : does not exist [ 217.579384][ T951] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 217.793849][ T951] usb 1-1: USB disconnect, device number 27 [ 219.242983][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 219.279304][ T6475] cgroup: No subsys list or none specified [ 219.282782][ T6465] loop6: detected capacity change from 0 to 1024 [ 219.423274][ T7] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 219.585844][ T6481] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 219.614922][ T7] usb 4-1: config 0 interface 0 has no altsetting 0 [ 219.623868][ T7] usb 4-1: New USB device found, idVendor=04e7, idProduct=0030, bcdDevice= 0.00 [ 219.664647][ T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 219.723962][ T7] usb 4-1: config 0 descriptor?? [ 220.178312][ T7] elo 0003:04E7:0030.000E: item fetching failed at offset 0/2 [ 220.199665][ T7] elo 0003:04E7:0030.000E: parse failed [ 220.218127][ T7] elo: probe of 0003:04E7:0030.000E failed with error -22 [ 220.433604][ T4299] usb 4-1: USB disconnect, device number 29 [ 220.490047][ T4253] Bluetooth: Wrong link type (-22) [ 220.495809][ T4253] Bluetooth: hci1: link tx timeout [ 220.501378][ T4253] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 220.973241][ T4299] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 221.061684][ T6509] loop6: detected capacity change from 0 to 1024 [ 221.175277][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.213248][ T4299] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.235033][ T4299] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 221.249747][ T4299] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.267297][ T4299] usb 1-1: config 0 descriptor?? [ 221.553738][ T4342] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 221.553789][ T4444] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 221.782089][ T4342] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.891107][ T4342] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.917630][ T4299] usbhid 1-1:0.0: can't add hid device: -32 [ 221.941560][ T4299] usbhid: probe of 1-1:0.0 failed with error -32 [ 222.033464][ T4444] usb 6-1: Using ep0 maxpacket: 8 [ 222.053846][ T4444] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 222.067633][ T4299] usb 1-1: USB disconnect, device number 28 [ 222.076498][ T4342] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 222.116571][ T4444] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.136604][ T4342] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.185246][ T4444] usb 6-1: Product: syz [ 222.189674][ T4342] usb 4-1: Product: syz [ 222.206331][ T4444] usb 6-1: Manufacturer: syz [ 222.211186][ T4342] usb 4-1: Manufacturer: syz [ 222.221372][ T4444] usb 6-1: SerialNumber: syz [ 222.231549][ T4342] usb 4-1: SerialNumber: syz [ 222.247179][ T4444] usb 6-1: config 0 descriptor?? [ 222.347024][ T6536] loop1: detected capacity change from 0 to 512 [ 222.370704][ T6536] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 222.418146][ T6536] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 222.449469][ T6536] ext4 filesystem being mounted at /125/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 222.487475][ T4342] usb 4-1: 0:2 : does not exist [ 222.493884][ T4444] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 222.518638][ T4342] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 222.583419][ T4253] Bluetooth: hci1: command 0x0406 tx timeout [ 222.591717][ T27] audit: type=1800 audit(1742542261.020:57): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.589" name="file1" dev="loop1" ino=15 res=0 errno=0 [ 222.611689][ T4342] usb 4-1: USB disconnect, device number 30 [ 222.618217][ T126] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 222.634992][ T27] audit: type=1800 audit(1742542261.060:58): pid=6536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.589" name="file2" dev="loop1" ino=16 res=0 errno=0 [ 222.813452][ T126] usb 7-1: Using ep0 maxpacket: 32 [ 222.825344][ T126] usb 7-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 222.839960][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 222.845805][ T126] usb 7-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 222.863209][ T126] usb 7-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 222.882049][ T126] usb 7-1: Product: syz [ 222.892002][ T126] usb 7-1: Manufacturer: syz [ 222.914424][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.917486][ T126] hub 7-1:4.0: bad descriptor, ignoring hub [ 222.977057][ T126] hub: probe of 7-1:4.0 failed with error -5 [ 223.034939][ T126] usbhid 7-1:4.0: couldn't find an input interrupt endpoint [ 223.156317][ T6529] loop6: detected capacity change from 0 to 512 [ 223.184572][ T6529] EXT4-fs: Ignoring removed nomblk_io_submit option [ 223.330520][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #2: comm syz.6.587: missing EA_INODE flag [ 223.377125][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.587: error while reading EA inode 2 err=-117 [ 223.460387][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: inode #2: comm syz.6.587: missing EA_INODE flag [ 223.597699][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.587: error while reading EA inode 2 err=-117 [ 223.879181][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:404: comm syz.6.587: inode #65536: comm syz.6.587: iget: illegal inode # [ 224.103117][ T6529] EXT4-fs error (device loop6): ext4_xattr_inode_iget:409: comm syz.6.587: error while reading EA inode 65536 err=-117 [ 224.173802][ T6529] EXT4-fs (loop6): 1 orphan inode deleted [ 224.213690][ T6529] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 224.540810][ T6577] cgroup: No subsys list or none specified [ 224.559655][ T4444] dvb_usb_rtl28xxu: probe of 6-1:0.0 failed with error -71 [ 224.755127][ T4444] usb 6-1: USB disconnect, device number 16 [ 224.889299][ T6583] loop3: detected capacity change from 0 to 1024 [ 225.359838][ T5559] EXT4-fs (loop6): unmounting filesystem. [ 225.550160][ T6599] loop5: detected capacity change from 0 to 128 [ 225.559883][ T4342] usb 7-1: USB disconnect, device number 7 [ 225.688794][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 225.769066][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 225.833266][ T6599] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 225.840977][ T6599] UDF-fs: Scanning with blocksize 512 failed [ 225.867561][ T6606] loop3: detected capacity change from 0 to 128 [ 225.918522][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 225.945067][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 225.949777][ T6606] FAT-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 225.993255][ T6614] loop6: detected capacity change from 0 to 256 [ 226.027234][ T6599] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 226.073457][ T6599] UDF-fs: Scanning with blocksize 1024 failed [ 226.123785][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 226.164356][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 226.202339][ T6599] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 226.234979][ T6599] UDF-fs: Scanning with blocksize 2048 failed [ 226.263440][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 226.321784][ T6599] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512 [ 226.353467][ T951] usb 7-1: new full-speed USB device number 8 using dummy_hcd [ 226.376825][ T6599] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found [ 226.389399][ T6599] UDF-fs: Scanning with blocksize 4096 failed [ 226.411603][ T6599] UDF-fs: warning (device loop5): udf_fill_super: No partition found (1) [ 226.545057][ T951] usb 7-1: config 0 has an invalid interface number: 206 but max is 1 [ 226.563348][ T951] usb 7-1: config 0 has an invalid descriptor of length 200, skipping remainder of the config [ 226.583450][ T951] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 226.592388][ T951] usb 7-1: config 0 has no interface number 0 [ 226.613244][ T951] usb 7-1: config 0 interface 206 altsetting 2 endpoint 0xB has invalid maxpacket 1024, setting to 64 [ 226.653373][ T951] usb 7-1: config 0 interface 206 altsetting 2 endpoint 0xD has invalid maxpacket 1023, setting to 64 [ 226.677385][ T951] usb 7-1: config 0 interface 206 altsetting 2 has 4 endpoint descriptors, different from the interface descriptor's value: 7 [ 226.724993][ T951] usb 7-1: config 0 interface 206 has no altsetting 0 [ 226.750187][ T951] usb 7-1: New USB device found, idVendor=0499, idProduct=1007, bcdDevice=df.8f [ 226.786531][ T951] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.809173][ T951] usb 7-1: Product: syz [ 226.816291][ T951] usb 7-1: Manufacturer: syz [ 226.831613][ T951] usb 7-1: SerialNumber: syz [ 226.851276][ T951] usb 7-1: config 0 descriptor?? [ 226.873293][ T4257] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 226.888464][ T6614] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 227.049227][ T6624] netlink: 666 bytes leftover after parsing attributes in process `syz.5.607'. [ 227.075833][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.101606][ T4257] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 227.114238][ T951] usb 7-1: invalid MIDI in EP 0 [ 227.132102][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.166967][ T4257] usb 1-1: config 0 descriptor?? [ 227.187706][ T951] snd-usb-audio: probe of 7-1:0.206 failed with error -22 [ 227.216929][ T951] usb 7-1: USB disconnect, device number 8 [ 227.276735][ T4455] udevd[4455]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.206/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 227.276745][ T6626] loop1: detected capacity change from 0 to 4096 [ 227.376859][ T6628] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 227.389378][ T4257] usbhid 1-1:0.0: can't add hid device: -71 [ 227.398405][ T4257] usbhid: probe of 1-1:0.0 failed with error -71 [ 227.428866][ T4257] usb 1-1: USB disconnect, device number 29 [ 227.602965][ T6631] loop1: detected capacity change from 0 to 1024 [ 227.814195][ T6634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.610'. [ 227.843425][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 227.943487][ T4257] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 228.119331][ T951] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 228.156051][ T4257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 228.189934][ T4257] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 228.203445][ T4257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.234912][ T4257] usb 1-1: config 0 descriptor?? [ 228.270441][ T4257] hub 1-1:0.0: USB hub found [ 228.310763][ T6648] loop3: detected capacity change from 0 to 128 [ 228.317904][ T951] usb 7-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 228.341740][ T951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.349889][ T6648] VFS: Found a Xenix FS (block size = 1024) on device loop3 [ 228.394959][ T951] usb 7-1: config 0 descriptor?? [ 228.399854][ T6648] syz.3.617: attempt to access beyond end of device [ 228.399854][ T6648] loop3: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 228.399988][ T6648] Buffer I/O error on dev loop3, logical block 3245768, async page read [ 228.566267][ T951] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 228.582830][ T4257] hub 1-1:0.0: 1 port detected [ 228.594114][ T4258] sysv_free_block: flc_count > flc_size [ 228.601482][ T4258] sysv_free_block: flc_count > flc_size [ 228.607379][ T4258] sysv_free_block: flc_count > flc_size [ 228.613768][ T4258] sysv_free_block: flc_count > flc_size [ 228.619475][ T4258] sysv_free_block: flc_count > flc_size [ 228.625264][ T4258] sysv_free_block: flc_count > flc_size [ 228.630870][ T4258] sysv_free_block: flc_count > flc_size [ 228.636965][ T4258] sysv_free_block: flc_count > flc_size [ 228.642549][ T4258] sysv_free_block: flc_count > flc_size [ 228.648327][ T4258] sysv_free_block: flc_count > flc_size [ 228.655300][ T4258] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 228.678463][ T6654] netlink: 20 bytes leftover after parsing attributes in process `syz.1.619'. [ 229.301409][ T6660] ptrace attach of "./syz-executor exec"[4258] was attempted by "./syz-executor exec"[6660] [ 229.319231][ T6660] sp0: Synchronizing with TNC [ 229.608372][ T4257] usb 1-1: USB disconnect, device number 30 [ 229.818544][ T951] usb 7-1: USB disconnect, device number 9 [ 229.991882][ T6664] loop1: detected capacity change from 0 to 128 [ 230.045747][ T6664] FAT-fs (loop1): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 230.250412][ T6671] loop3: detected capacity change from 0 to 512 [ 230.302120][ T6671] EXT4-fs: inline encryption not supported [ 230.390967][ T6671] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 230.407194][ T6671] ext4 filesystem being mounted at /121/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 230.513693][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.528112][ T6671] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.623: mark_inode_dirty error [ 230.541498][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.575191][ T6681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.587134][ T951] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 230.609990][ T6681] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.623: mark_inode_dirty error [ 230.633824][ T6681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.673320][ T26] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 230.694799][ T6681] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz.3.623: mark_inode_dirty error [ 230.728070][ T6681] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.763854][ T6681] EXT4-fs error (device loop3): ext4_dirty_inode:6089: inode #2: comm syz.3.623: mark_inode_dirty error [ 230.791660][ T951] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 230.800232][ T6671] EXT4-fs error (device loop3): ext4_do_update_inode:5224: inode #2: comm syz.3.623: corrupted inode contents [ 230.815460][ T951] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 230.843030][ T951] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 230.863250][ T26] usb 6-1: Using ep0 maxpacket: 32 [ 230.868643][ T951] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 230.870512][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 230.900557][ T951] usb 1-1: Product: syz [ 230.910684][ T951] usb 1-1: Manufacturer: syz [ 230.924355][ T951] usb 1-1: SerialNumber: syz [ 230.939387][ T26] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 230.960296][ T951] usb 1-1: config 0 descriptor?? [ 230.966539][ T26] usb 6-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00 [ 230.983125][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 230.993874][ T26] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 231.180065][ T951] usb 1-1: USB disconnect, device number 31 [ 231.197329][ T26] usb 6-1: config 0 descriptor?? [ 232.095198][ T6695] loop6: detected capacity change from 0 to 256 [ 232.156379][ T6695] FAT-fs (loop6): Directory bread(block 64) failed [ 232.167035][ T6695] FAT-fs (loop6): Directory bread(block 65) failed [ 232.176905][ T6695] FAT-fs (loop6): Directory bread(block 66) failed [ 232.187587][ T6695] FAT-fs (loop6): Directory bread(block 67) failed [ 232.198280][ T6695] FAT-fs (loop6): Directory bread(block 68) failed [ 232.207846][ T4298] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 232.219923][ T6695] FAT-fs (loop6): Directory bread(block 69) failed [ 232.240361][ T6695] FAT-fs (loop6): Directory bread(block 70) failed [ 232.264925][ T6695] FAT-fs (loop6): Directory bread(block 71) failed [ 232.282078][ T6695] FAT-fs (loop6): Directory bread(block 72) failed [ 232.293437][ T6695] FAT-fs (loop6): Directory bread(block 73) failed [ 232.358464][ T26] ft260 0003:0403:6030.000F: unknown main item tag 0x0 [ 232.384449][ T26] ft260 0003:0403:6030.000F: hidraw0: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.5-1/input0 [ 232.413352][ T4298] usb 4-1: Using ep0 maxpacket: 32 [ 232.502885][ T6700] ptrace attach of "./syz-executor exec"[4252] was attempted by "./syz-executor exec"[6700] [ 232.566708][ T6700] sp0: Synchronizing with TNC [ 232.585678][ T4444] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 232.681511][ T26] ft260 0003:0403:6030.000F: chip code: 0000 0000 [ 232.749535][ T6355] kworker/u4:19: attempt to access beyond end of device [ 232.749535][ T6355] loop6: rw=1048577, sector=1224, nr_sectors = 12 limit=256 [ 232.843909][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 233.070415][ T4298] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 233.079231][ T4444] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 233.089198][ T4298] usb 4-1: config 0 has no interface number 0 [ 233.089246][ T4298] usb 4-1: config 0 interface 184 has no altsetting 0 [ 233.098281][ T4298] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 233.103277][ T26] ft260 0003:0403:6030.000F: failed to retrieve status: -32 [ 233.117989][ T4298] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.118772][ T4444] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 233.118800][ T4444] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 233.128957][ T4444] usb 1-1: config 0 descriptor?? [ 233.149128][ T4298] usb 4-1: Product: syz [ 233.160129][ T4298] usb 4-1: Manufacturer: syz [ 233.167575][ T4298] usb 4-1: SerialNumber: syz [ 233.185076][ T4298] usb 4-1: config 0 descriptor?? [ 233.238997][ T4298] smsc75xx v1.0.0 [ 233.428360][ T4299] usb 6-1: USB disconnect, device number 17 [ 233.456536][ T6704] loop6: detected capacity change from 0 to 512 [ 233.466021][ T6704] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 233.667270][ T4444] usbhid 1-1:0.0: can't add hid device: -32 [ 233.685702][ T4444] usbhid: probe of 1-1:0.0 failed with error -32 [ 233.697662][ T6704] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 233.710327][ T6704] ext4 filesystem being mounted at /50/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 233.725282][ T4444] usb 1-1: USB disconnect, device number 32 [ 233.759309][ T27] audit: type=1800 audit(1742542272.190:59): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.636" name="file1" dev="loop6" ino=15 res=0 errno=0 [ 233.865586][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 233.883686][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 233.892875][ T27] audit: type=1800 audit(1742542272.190:60): pid=6704 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.636" name="file2" dev="loop6" ino=16 res=0 errno=0 [ 233.940682][ T5559] EXT4-fs (loop6): unmounting filesystem. [ 234.351248][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000010: -71 [ 234.367941][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write HW_CFG: -71 [ 234.387219][ T4298] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 234.404953][ T4298] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 234.415235][ T4298] usb 4-1: USB disconnect, device number 31 [ 234.536226][ T6716] netlink: 20 bytes leftover after parsing attributes in process `syz.5.639'. [ 234.753379][ T4299] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 235.083431][ T4299] usb 7-1: Using ep0 maxpacket: 8 [ 235.096302][ T4299] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 235.141823][ T4299] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 235.160379][ T4299] usb 7-1: Product: syz [ 235.174392][ T4299] usb 7-1: Manufacturer: syz [ 235.181287][ T4299] usb 7-1: SerialNumber: syz [ 235.188462][ T4299] usb 7-1: config 0 descriptor?? [ 235.193541][ T4257] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 235.326658][ T6730] loop5: detected capacity change from 0 to 128 [ 235.377886][ T6730] FAT-fs (loop5): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 235.395292][ T4257] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 235.401421][ T4299] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 235.427227][ T4257] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 235.650671][ T4257] usb 1-1: config 0 has no interface number 0 [ 235.657731][ T4257] usb 1-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 235.676633][ T4257] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 235.781629][ T6741] ptrace attach of "./syz-executor exec"[4258] was attempted by "./syz-executor exec"[6741] [ 235.832568][ T6741] sp0: Synchronizing with TNC [ 236.367282][ T4257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 236.377339][ T4257] usb 1-1: Product: syz [ 236.381921][ T4257] usb 1-1: Manufacturer: syz [ 236.386659][ T4257] usb 1-1: SerialNumber: syz [ 236.427108][ T4257] usb 1-1: config 0 descriptor?? [ 236.506052][ T6743] loop1: detected capacity change from 0 to 128 [ 236.642464][ T6743] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 236.657103][ T4257] usb 1-1: MIDIStreaming interface descriptor not found [ 236.700765][ T6743] ext4 filesystem being mounted at /139/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 236.711476][ T4257] usb 1-1: USB disconnect, device number 33 [ 236.887567][ T4299] dvb_usb_rtl28xxu: probe of 7-1:0.0 failed with error -71 [ 236.914618][ T4299] usb 7-1: USB disconnect, device number 10 [ 236.977773][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 237.462925][ T6758] loop0: detected capacity change from 0 to 2048 [ 237.547071][ T6758] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.657256][ T27] audit: type=1804 audit(1742542276.090:61): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.653" name="/newroot/140/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 237.703625][ T27] audit: type=1804 audit(1742542276.090:62): pid=6758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.653" name="/newroot/140/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 238.635938][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 239.213290][ T6775] loop5: detected capacity change from 0 to 2048 [ 239.283558][ T6775] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 239.308467][ T6777] loop1: detected capacity change from 0 to 256 [ 239.569549][ T6777] FAT-fs (loop1): Directory bread(block 64) failed [ 239.659252][ T6784] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.659: bg 0: block 234: padding at end of block bitmap is not set [ 240.216475][ T6777] FAT-fs (loop1): Directory bread(block 65) failed [ 240.223423][ T6783] tty tty30: ldisc open failed (-12), clearing slot 29 [ 240.246934][ T6784] EXT4-fs (loop5): Remounting filesystem read-only [ 240.363717][ T6777] FAT-fs (loop1): Directory bread(block 66) failed [ 240.370321][ T6777] FAT-fs (loop1): Directory bread(block 67) failed [ 240.377060][ T6777] FAT-fs (loop1): Directory bread(block 68) failed [ 240.383654][ T6777] FAT-fs (loop1): Directory bread(block 69) failed [ 240.390272][ T6777] FAT-fs (loop1): Directory bread(block 70) failed [ 240.396856][ T6777] FAT-fs (loop1): Directory bread(block 71) failed [ 240.403501][ T6777] FAT-fs (loop1): Directory bread(block 72) failed [ 240.410046][ T6777] FAT-fs (loop1): Directory bread(block 73) failed [ 240.475931][ T4964] EXT4-fs (loop5): unmounting filesystem. [ 240.667289][ T6787] loop0: detected capacity change from 0 to 8 [ 240.818932][ T6787] SQUASHFS error: Failed to read block 0x4e8: -5 [ 240.826675][ T6787] SQUASHFS error: Failed to read block 0x4de: -5 [ 240.833797][ T6787] SQUASHFS error: Failed to read block 0x4de: -5 [ 240.840575][ T6787] SQUASHFS error: Failed to read block 0x4de: -5 [ 240.943390][ T27] audit: type=1800 audit(1742542279.320:63): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.661" name="file1" dev="loop0" ino=5 res=0 errno=0 [ 241.778999][ T6797] cgroup: No subsys list or none specified [ 241.853329][ T4298] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 242.045167][ T4298] usb 1-1: config 0 has an invalid interface number: 95 but max is 0 [ 242.070773][ T4298] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 242.110333][ T4354] kworker/u4:9: attempt to access beyond end of device [ 242.110333][ T4354] loop1: rw=1048577, sector=1224, nr_sectors = 64 limit=256 [ 242.134158][ T4298] usb 1-1: config 0 has no interface number 0 [ 242.140599][ T4298] usb 1-1: config 0 interface 95 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 242.161191][ T4354] kworker/u4:9: attempt to access beyond end of device [ 242.161191][ T4354] loop1: rw=1048577, sector=1320, nr_sectors = 448 limit=256 [ 242.183320][ T4444] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 242.194999][ T4298] usb 1-1: New USB device found, idVendor=7725, idProduct=b0a8, bcdDevice= 7.46 [ 242.212543][ T4354] kworker/u4:9: attempt to access beyond end of device [ 242.212543][ T4354] loop1: rw=1048577, sector=1832, nr_sectors = 96 limit=256 [ 242.230174][ T4298] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 242.238777][ T4298] usb 1-1: Product: syz [ 242.243550][ T4298] usb 1-1: Manufacturer: syz [ 242.253434][ T4298] usb 1-1: SerialNumber: syz [ 242.259493][ T4354] kworker/u4:9: attempt to access beyond end of device [ 242.259493][ T4354] loop1: rw=1048577, sector=1960, nr_sectors = 3136 limit=256 [ 242.286246][ T4298] usb 1-1: config 0 descriptor?? [ 242.485079][ T4444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 242.503515][ T4444] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 242.514356][ T4298] usb 1-1: MIDIStreaming interface descriptor not found [ 242.532123][ T4444] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 242.554596][ T6800] loop3: detected capacity change from 0 to 512 [ 242.575876][ T4444] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 242.579909][ T4298] usb 1-1: USB disconnect, device number 34 [ 242.628500][ T4444] usb 6-1: config 0 descriptor?? [ 242.634355][ T6800] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 242.762234][ T6800] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 242.775240][ T4455] udevd[4455]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.95/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 242.798480][ T6800] ext4 filesystem being mounted at /130/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 242.842715][ T27] audit: type=1800 audit(1742542281.270:64): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.665" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 242.873417][ T6360] kworker/u4:21: attempt to access beyond end of device [ 242.873417][ T6360] loop1: rw=1, sector=5096, nr_sectors = 624 limit=256 [ 242.882482][ T27] audit: type=1800 audit(1742542281.310:65): pid=6800 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.665" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 242.982074][ T4258] EXT4-fs (loop3): unmounting filesystem. [ 243.254954][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz.0.670'. [ 243.287406][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.380804][ T6814] device bridge_slave_0 left promiscuous mode [ 243.394118][ T6814] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.698622][ T4444] uclogic 0003:256C:006D.0010: interface is invalid, ignoring [ 243.894447][ T4444] usb 6-1: USB disconnect, device number 18 [ 244.411789][ T6828] loop0: detected capacity change from 0 to 1024 [ 244.493348][ T951] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 244.721400][ T951] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 245.094784][ T951] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 245.272689][ T951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.321449][ T6831] loop3: detected capacity change from 0 to 128 [ 245.328827][ T6831] FAT-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 245.648841][ T951] usb 2-1: config 0 descriptor?? [ 245.875796][ T6838] loop6: detected capacity change from 0 to 128 [ 245.883005][ T6838] FAT-fs (loop6): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 245.968755][ T6823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 246.014927][ T6823] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 246.299036][ T6842] cgroup: No subsys list or none specified [ 246.640097][ T6846] netlink: 32 bytes leftover after parsing attributes in process `syz.3.677'. [ 246.708316][ T951] usbhid 2-1:0.0: can't add hid device: -71 [ 246.718376][ T951] usbhid: probe of 2-1:0.0 failed with error -71 [ 246.739530][ T951] usb 2-1: USB disconnect, device number 35 [ 247.853336][ T951] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 248.218096][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 248.262985][ T951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 248.390608][ T951] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 248.418387][ T951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 248.462340][ T951] usb 1-1: config 0 descriptor?? [ 248.509579][ T6867] netlink: 4 bytes leftover after parsing attributes in process `syz.6.683'. [ 248.562342][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.657295][ T6867] device bridge_slave_0 left promiscuous mode [ 248.677527][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.793438][ T6873] netlink: 36 bytes leftover after parsing attributes in process `syz.3.685'. [ 248.823263][ T4444] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 249.164929][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.176116][ T4444] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.186629][ T4444] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 249.196020][ T4444] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.212455][ T4444] usb 2-1: config 0 descriptor?? [ 249.496231][ T951] uclogic 0003:256C:006D.0011: interface is invalid, ignoring [ 249.530526][ T951] usb 1-1: USB disconnect, device number 35 [ 250.330521][ T4444] uclogic 0003:256C:006D.0012: interface is invalid, ignoring [ 250.346467][ T4444] usb 2-1: USB disconnect, device number 36 [ 250.398026][ T6890] cgroup: No subsys list or none specified [ 250.921888][ T6888] loop0: detected capacity change from 0 to 128 [ 250.949712][ T6888] FAT-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 253.394742][ T6942] loop6: detected capacity change from 0 to 512 [ 253.401972][ T6942] EXT4-fs: inline encryption not supported [ 253.457279][ T6942] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 253.467239][ T6942] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 253.484842][ T6942] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.707: corrupted inode contents [ 253.561350][ T6942] EXT4-fs error (device loop6): ext4_dirty_inode:6089: inode #2: comm syz.6.707: mark_inode_dirty error [ 253.584238][ T6942] EXT4-fs error (device loop6): ext4_do_update_inode:5224: inode #2: comm syz.6.707: corrupted inode contents [ 253.637511][ T6942] EXT4-fs error (device loop6): __ext4_ext_dirty:202: inode #2: comm syz.6.707: mark_inode_dirty error [ 253.840641][ T5559] EXT4-fs (loop6): unmounting filesystem. [ 254.153381][ T6956] loop1: detected capacity change from 0 to 8 [ 254.192673][ T6956] SQUASHFS error: Failed to read block 0x4e8: -5 [ 254.199778][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.206672][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.213837][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.267596][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.274697][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.281390][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.288125][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.294825][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.301469][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.308226][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.316195][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.322878][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.329613][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.336401][ T6956] SQUASHFS error: Failed to read block 0x4de: -5 [ 254.365206][ T27] audit: type=1800 audit(1742542292.670:66): pid=6956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.709" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 255.359756][ T6968] loop0: detected capacity change from 0 to 512 [ 255.426207][ T6968] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 255.546475][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552887][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.623303][ T6968] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 255.633625][ T6968] ext4 filesystem being mounted at /153/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 255.740147][ T27] audit: type=1800 audit(1742542294.170:67): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.714" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 255.815664][ T27] audit: type=1800 audit(1742542294.170:68): pid=6968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.714" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 256.031208][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 256.238418][ T6989] loop1: detected capacity change from 0 to 512 [ 256.264228][ T6989] EXT4-fs: inline encryption not supported [ 256.563358][ T6988] loop0: detected capacity change from 0 to 32768 [ 256.593838][ T6985] loop3: detected capacity change from 0 to 128 [ 256.601782][ T6985] FAT-fs (loop3): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 256.655997][ T6989] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 256.677315][ T6989] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 256.712581][ T6988] XFS (loop0): Mounting V5 Filesystem [ 256.762500][ T6989] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.721: corrupted inode contents [ 256.805353][ T6989] EXT4-fs error (device loop1): ext4_dirty_inode:6089: inode #2: comm syz.1.721: mark_inode_dirty error [ 256.901882][ T6989] EXT4-fs error (device loop1): ext4_do_update_inode:5224: inode #2: comm syz.1.721: corrupted inode contents [ 256.907927][ T6988] XFS (loop0): Ending clean mount [ 256.929329][ T6988] XFS (loop0): Quotacheck needed: Please wait. [ 256.948786][ T6989] EXT4-fs error (device loop1): __ext4_ext_dirty:202: inode #2: comm syz.1.721: mark_inode_dirty error [ 257.005520][ T6988] XFS (loop0): Quotacheck: Done. [ 257.228316][ T4252] EXT4-fs (loop1): unmounting filesystem. [ 257.628185][ T7009] loop6: detected capacity change from 0 to 2048 [ 257.674197][ T7009] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 257.953579][ T4248] XFS (loop0): Unmounting Filesystem [ 258.156359][ T7018] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.724: bg 0: block 234: padding at end of block bitmap is not set [ 258.226698][ T7018] EXT4-fs (loop6): Remounting filesystem read-only [ 258.533276][ T4303] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 258.693358][ T4303] usb 4-1: device descriptor read/64, error -71 [ 258.720283][ T7030] loop0: detected capacity change from 0 to 512 [ 258.749957][ T7030] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 258.792570][ T7030] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 258.812295][ T7030] ext4 filesystem being mounted at /156/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 258.879553][ T27] audit: type=1800 audit(1742542297.310:69): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 258.933555][ T27] audit: type=1800 audit(1742542297.310:70): pid=7030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.731" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 258.973368][ T4303] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 259.006067][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 259.198455][ T4303] usb 4-1: device descriptor read/64, error -71 [ 259.323625][ T4303] usb usb4-port1: attempt power cycle [ 259.679833][ T7040] loop0: detected capacity change from 0 to 128 [ 259.687416][ T7040] FAT-fs (loop0): Unrecognized mount option "fowner<00000000000000000000" or missing value [ 259.733478][ T4303] usb 4-1: new full-speed USB device number 34 using dummy_hcd [ 259.764188][ T4303] usb 4-1: device descriptor read/8, error -71 [ 259.968022][ T5559] EXT4-fs (loop6): unmounting filesystem. [ 260.033253][ T4303] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 260.063947][ T4303] usb 4-1: device descriptor read/8, error -71 [ 260.183419][ T4303] usb usb4-port1: unable to enumerate USB device [ 260.468612][ T7049] loop6: detected capacity change from 0 to 32768 [ 260.671568][ T7049] XFS (loop6): Mounting V5 Filesystem [ 260.997091][ T7052] syz.1.738 (7052): drop_caches: 2 [ 261.117283][ T7049] XFS (loop6): Ending clean mount [ 261.158728][ T7049] XFS (loop6): Quotacheck needed: Please wait. [ 261.223404][ T7049] XFS (loop6): Quotacheck: Done. [ 262.340560][ T7071] loop1: detected capacity change from 0 to 1024 [ 262.480029][ T5559] XFS (loop6): Unmounting Filesystem [ 262.539472][ T7071] VFS: Lookup of 'file0' in hfsplus loop1 would have caused loop [ 264.088733][ T7079] loop3: detected capacity change from 0 to 32768 [ 264.323336][ T7] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 264.538204][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.589200][ T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.649701][ T7] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 264.674903][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.699524][ T7] usb 1-1: config 0 descriptor?? [ 264.817325][ T7091] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 264.871104][ T7091] loop3: detected capacity change from 0 to 128 [ 264.915242][ T4454] blk_print_req_error: 18 callbacks suppressed [ 264.915262][ T4454] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 265.310905][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.6.755'. [ 266.023390][ T126] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 266.245606][ T126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 266.319359][ T7] uclogic 0003:256C:006D.0013: interface is invalid, ignoring [ 266.330137][ T126] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 266.333815][ T7] usb 1-1: USB disconnect, device number 36 [ 266.403379][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 266.446490][ T126] usb 7-1: config 0 descriptor?? [ 266.656550][ T7121] loop3: detected capacity change from 0 to 32768 [ 266.903434][ T126] usbhid 7-1:0.0: can't add hid device: -71 [ 267.248860][ T126] usbhid: probe of 7-1:0.0 failed with error -71 [ 267.451710][ T126] usb 7-1: USB disconnect, device number 11 [ 267.609798][ T7126] loop0: detected capacity change from 0 to 512 [ 267.630790][ T7126] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 267.680214][ T7126] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 267.701057][ T7126] ext4 filesystem being mounted at /162/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 267.774929][ T27] audit: type=1800 audit(1742542306.210:71): pid=7126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.763" name="file1" dev="loop0" ino=15 res=0 errno=0 [ 267.813304][ T126] usb 7-1: new full-speed USB device number 12 using dummy_hcd [ 267.861551][ T27] audit: type=1800 audit(1742542306.240:72): pid=7134 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.763" name="file2" dev="loop0" ino=16 res=0 errno=0 [ 267.931850][ T4248] EXT4-fs (loop0): unmounting filesystem. [ 268.038965][ T126] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 268.065472][ T126] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 268.088474][ T126] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.141714][ T126] usb 7-1: config 0 descriptor?? [ 268.167557][ T126] hub 7-1:0.0: USB hub found [ 268.321176][ T7137] cgroup: No subsys list or none specified [ 268.366857][ T126] hub 7-1:0.0: 1 port detected [ 269.160379][ T7154] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 269.208963][ T126] hub 7-1:0.0: hub_ext_port_status failed (err = -71) [ 269.218273][ T4344] usb 7-1: USB disconnect, device number 12 [ 270.264189][ T7164] loop5: detected capacity change from 0 to 32768 [ 271.285705][ T7166] misc userio: Invalid payload size [ 271.300081][ T7166] misc userio: No port type given on /dev/userio [ 271.421396][ T7166] trusted_key: encrypted_key: keyword 'new' not allowed when called from .update method [ 271.654630][ T7181] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input9 [ 271.772110][ T7186] loop0: detected capacity change from 0 to 128 [ 271.783501][ T4344] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 271.894710][ T4453] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 271.986789][ T4344] usb 6-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 272.041044][ T4344] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.130632][ T4344] usb 6-1: config 0 descriptor?? [ 272.179758][ T4344] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 377.213134][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 377.220197][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P4303/1:b..l [ 377.228733][ C0] (detected by 0, t=10502 jiffies, g=35589, q=218 ncpus=2) [ 377.236060][ C0] task:kworker/0:6 state:R running task stack:24536 pid:4303 ppid:2 flags:0x00004000 [ 377.248245][ C0] Workqueue: events_power_efficient gc_worker [ 377.254400][ C0] Call Trace: [ 377.257702][ C0] [ 377.260656][ C0] __schedule+0x143f/0x4570 [ 377.265206][ C0] ? mark_lock+0x9a/0x340 [ 377.269578][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 377.275512][ C0] ? print_irqtrace_events+0x210/0x210 [ 377.281008][ C0] ? mark_lock+0x9a/0x340 [ 377.285395][ C0] ? preempt_schedule_irq+0xec/0x1c0 [ 377.290715][ C0] preempt_schedule_irq+0xf7/0x1c0 [ 377.295859][ C0] ? preempt_schedule_notrace+0x140/0x140 [ 377.301628][ C0] irqentry_exit+0x53/0x80 [ 377.306079][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.312129][ C0] RIP: 0010:lock_acquire+0x26f/0x5a0 [ 377.317457][ C0] Code: 2b 00 74 08 4c 89 f7 e8 4f 55 77 00 f6 44 24 61 02 0f 85 84 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 377.337097][ C0] RSP: 0018:ffffc900040179a0 EFLAGS: 00000206 [ 377.343194][ C0] RAX: 0000000000000001 RBX: 1ffff92000802f40 RCX: 1ffff92000802ee0 [ 377.351189][ C0] RDX: dffffc0000000000 RSI: ffffffff8b0c2ec0 RDI: ffffffff8b5f6f80 [ 377.359189][ C0] RBP: ffffc90004017ae8 R08: dffffc0000000000 R09: fffffbfff225724d [ 377.367184][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff92000802f3c [ 377.375180][ C0] R13: dffffc0000000000 R14: ffffc90004017a00 R15: 0000000000000246 [ 377.383204][ C0] ? gc_worker+0x27a/0x1540 [ 377.387744][ C0] ? read_lock_is_recursive+0x10/0x10 [ 377.393151][ C0] ? gc_worker+0x27a/0x1540 [ 377.397682][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 377.402912][ C0] ? __might_sleep+0xb0/0xb0 [ 377.407616][ C0] ? seqcount_lockdep_reader_access+0x1d3/0x220 [ 377.413891][ C0] ? gc_worker+0x2c1/0x1540 [ 377.418431][ C0] gc_worker+0x29b/0x1540 [ 377.422792][ C0] ? gc_worker+0x27a/0x1540 [ 377.427329][ C0] ? gc_worker+0x27a/0x1540 [ 377.431865][ C0] ? read_lock_is_recursive+0x10/0x10 [ 377.437281][ C0] ? print_irqtrace_events+0x210/0x210 [ 377.442773][ C0] ? init_conntrack+0xfc0/0xfc0 [ 377.447651][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 377.452882][ C0] ? process_one_work+0x806/0x1260 [ 377.458024][ C0] process_one_work+0x917/0x1260 [ 377.463013][ C0] ? worker_detach_from_pool+0x260/0x260 [ 377.468696][ C0] ? _raw_spin_lock_irqsave+0x120/0x120 [ 377.474277][ C0] ? kthread_data+0x4e/0xc0 [ 377.478823][ C0] ? wq_worker_running+0x97/0x190 [ 377.483877][ C0] worker_thread+0xa47/0x1200 [ 377.488589][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 377.494532][ C0] kthread+0x28d/0x320 [ 377.498627][ C0] ? worker_clr_flags+0x190/0x190 [ 377.503678][ C0] ? kthread_blkcg+0xd0/0xd0 [ 377.508323][ C0] ret_from_fork+0x1f/0x30 [ 377.512812][ C0] [ 377.516038][ C0] rcu: rcu_preempt kthread starved for 10528 jiffies! g35589 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 377.527313][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 377.537314][ C0] rcu: RCU grace-period kthread stack dump: [ 377.543224][ C0] task:rcu_preempt state:R running task stack:25592 pid:16 ppid:2 flags:0x00004000 [ 377.554045][ C0] Call Trace: [ 377.557344][ C0] [ 377.560308][ C0] __schedule+0x143f/0x4570 [ 377.564857][ C0] ? _raw_spin_unlock+0x40/0x40 [ 377.569761][ C0] ? release_firmware_map_entry+0x18b/0x18b [ 377.575691][ C0] ? lockdep_softirqs_off+0x420/0x420 [ 377.581111][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 377.587032][ C0] ? _raw_spin_unlock+0x40/0x40 [ 377.592180][ C0] schedule+0xbf/0x180 [ 377.596293][ C0] schedule_timeout+0x1b9/0x300 [ 377.601172][ C0] ? console_conditional_schedule+0x40/0x40 [ 377.607103][ C0] ? update_process_times+0x1b0/0x1b0 [ 377.612514][ C0] ? prepare_to_swait_event+0x329/0x350 [ 377.618104][ C0] rcu_gp_fqs_loop+0x2d2/0x1150 [ 377.624040][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 377.629280][ C0] ? rcu_gp_init+0x15f0/0x15f0 [ 377.634080][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 377.640012][ C0] ? finish_swait+0xcf/0x1e0 [ 377.644644][ C0] rcu_gp_kthread+0xa3/0x3b0 [ 377.649277][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 377.654418][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 377.660347][ C0] ? __kthread_parkme+0x168/0x1c0 [ 377.665428][ C0] kthread+0x28d/0x320 [ 377.669522][ C0] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 377.674663][ C0] ? kthread_blkcg+0xd0/0xd0 [ 377.679283][ C0] ret_from_fork+0x1f/0x30 [ 377.683748][ C0] [ 377.686784][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 377.693136][ C0] CPU: 0 PID: 0 Comm: swapper/0 Not tainted 6.1.131-syzkaller #0 [ 377.700875][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.710951][ C0] RIP: 0010:acpi_idle_do_entry+0x10f/0x340 [ 377.716800][ C0] Code: ba ce f6 48 83 e3 08 0f 85 0b 01 00 00 4c 8d 74 24 20 e8 f4 76 d5 f6 0f 1f 44 00 00 e8 1a b6 ce f6 0f 00 2d 73 c4 ad 00 fb f4 <4c> 89 f3 48 c1 eb 03 42 80 3c 3b 00 74 08 4c 89 f7 e8 bb 17 26 f7 [ 377.736436][ C0] RSP: 0018:ffffffff8d007b20 EFLAGS: 000002d3 [ 377.742534][ C0] RAX: ffffffff8abbf3a6 RBX: 0000000000000000 RCX: ffffffff8d0bd980 [ 377.750530][ C0] RDX: 0000000000000000 RSI: ffffffff8b0c1d40 RDI: ffffffff8b5f6f80 [ 377.758554][ C0] RBP: ffffffff8d007bb0 R08: ffffffff8abbf388 R09: fffffbfff1a17b31 [ 377.766549][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffffffff1a00f64 [ 377.774544][ C0] R13: ffff88801c394804 R14: ffffffff8d007b40 R15: dffffc0000000000 [ 377.782546][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 377.791501][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.798135][ C0] CR2: 000020000006b000 CR3: 0000000055a2d000 CR4: 00000000003506f0 [ 377.806133][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.814139][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.822135][ C0] Call Trace: [ 377.825434][ C0] [ 377.828300][ C0] ? rcu_check_gp_kthread_starvation+0x1b8/0x220 [ 377.834667][ C0] ? print_other_cpu_stall+0x150c/0x1640 [ 377.840348][ C0] ? print_cpu_stall+0x5f0/0x5f0 [ 377.845313][ C0] ? bpf_trace_run1+0x27b/0x3d0 [ 377.850195][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 377.855284][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 377.860516][ C0] ? rcu_sched_clock_irq+0xaf6/0x1200 [ 377.865923][ C0] ? rcutree_dead_cpu+0x20/0x20 [ 377.870798][ C0] ? hrtimer_run_queues+0x163/0x450 [ 377.876033][ C0] ? update_process_times+0x147/0x1b0 [ 377.881439][ C0] ? tick_sched_timer+0x386/0x550 [ 377.886491][ C0] ? tick_setup_sched_timer+0x2f0/0x2f0 [ 377.892063][ C0] ? __hrtimer_run_queues+0x5a7/0xe50 [ 377.897485][ C0] ? hrtimer_interrupt+0x980/0x980 [ 377.902632][ C0] ? ktime_get_update_offsets_now+0x407/0x420 [ 377.908745][ C0] ? hrtimer_interrupt+0x392/0x980 [ 377.913940][ C0] ? __sysvec_apic_timer_interrupt+0x158/0x5b0 [ 377.920139][ C0] ? sysvec_apic_timer_interrupt+0x9b/0xc0 [ 377.925974][ C0] [ 377.928922][ C0] [ 377.931876][ C0] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 377.938065][ C0] ? acpi_idle_do_entry+0xe8/0x340 [ 377.943204][ C0] ? acpi_idle_do_entry+0x106/0x340 [ 377.948434][ C0] ? acpi_idle_do_entry+0x10f/0x340 [ 377.953662][ C0] ? acpi_idle_enter_bm+0x5e0/0x5e0 [ 377.958902][ C0] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 377.964929][ C0] ? __sched_clock_gtod_offset+0xe0/0xe0 [ 377.970604][ C0] acpi_idle_enter+0x352/0x4f0 [ 377.975404][ C0] cpuidle_enter_state+0x516/0xf80 [ 377.980556][ C0] ? cpuidle_enter_s2idle+0x6b0/0x6b0 [ 377.985964][ C0] ? tick_nohz_idle_stop_tick+0x238/0xad0 [ 377.991716][ C0] cpuidle_enter+0x59/0x90 [ 377.996164][ C0] do_idle+0x3ce/0x680 [ 378.000284][ C0] ? idle_inject_timer_fn+0x60/0x60 [ 378.005526][ C0] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 378.011193][ C0] ? memcpy_orig+0x91/0x10f [ 378.015745][ C0] ? schedule_idle+0x57/0x90 [ 378.020374][ C0] ? rest_init+0x31/0x300 [ 378.024738][ C0] cpu_startup_entry+0x3d/0x60 [ 378.029541][ C0] rest_init+0x2da/0x300 [ 378.033812][ C0] ? time_init+0x33/0x33 [ 378.038089][ C0] arch_call_rest_init+0xa/0xa [ 378.042879][ C0] start_kernel+0x496/0x53f [ 378.047413][ C0] secondary_startup_64_no_verify+0xcf/0xdb [ 378.053352][ C0]