last executing test programs: 9m2.926286524s ago: executing program 2 (id=72): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0xfdef}], 0x1, 0x0, 0x0, 0x800300}, 0x20000801) 9m2.662639145s ago: executing program 2 (id=76): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000b2"], 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r4, 0x1, 0x0, 0x0, {0x16}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) sched_setscheduler(0x0, 0x0, &(0x7f0000000080)=0x7) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) preadv(r5, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) io_setup(0x20, &(0x7f0000001140)) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) clock_gettime(0x0, &(0x7f0000000200)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) mkdir(&(0x7f0000000100)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x10020, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) 8m58.708846094s ago: executing program 2 (id=84): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x80000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getpid() bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[], 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000000)={'veth0_vlan\x00', @remote}) 8m58.168637566s ago: executing program 2 (id=88): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2b}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 8m57.221042134s ago: executing program 2 (id=91): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x4c, 0x0, 0x0) 8m57.120584724s ago: executing program 5 (id=94): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000100)={'vlan0\x00', 0x400}) 8m54.832886937s ago: executing program 2 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 8m54.57213692s ago: executing program 5 (id=102): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xb, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='mm_page_alloc\x00', r1}, 0x18) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x2d, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$TUNSETOFFLOAD(r3, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r2, 0x40047451, &(0x7f0000000180)) 8m53.015556057s ago: executing program 5 (id=107): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbP/D7/ejP378UBCliMbGxBYKAgcvGE28mBjxoMemrQQpYGgPQoiUxODRkHg3Ho03Y7yqN+PJxKN48GBiSIjhAnhaM7sz7XY73e7Cdpe6n0+y7Xszb+a9N/Pe7Nt5uxNAzxpL/yQR/4qImxGxoxpdnWCs+u/enSsz9+9cmYmlcvnUn0kl3d00nsm3255FxksRpY+Suh1WLVy6fHZ6fn7uYhafXDz3/uTCpcsvnDk3fXru9Nz5qRMnjh45fPzY1IutV6ogv7Red/d+eGHfntfeufH6TH++fDj7X1uPdfW3VoyxBuuebW1Xj7x/14STtcfpakcLQ9PS9j+ShW/GjugraORfd7xUQCeUy+Xy0Pqrl8r1rq1ZAmxZSXS7BEB35G/06eff/NWhoccj4fbJ6uf6tN73sld1TX+UsjQDdZ9v22ksIt5e+uuz9BWN7kP8tkkFAAB6zncn85Fg/fivFLtr0v0nm0MZjYj/RsTOiPhfROyKiP9HVNI+FhGP12eQRJQb5L+rLr52/FO69TD120g6/nspm9taPf7LR38x2leJDdduNncoOybjMTD07pn5ucMN8vj+lZ8/KVreVzf+S19p/vlYMCvHrf66G3Sz04vTD1jdNW5fi9jbX1//pD89cflMQBIReyJibwv7Ha0Jn3n+i33LkYHV6Tauf0W5YEqv5fm4IuXPI56rnv+lWHX+V3JMGs9PTg7H/NyhybQVHCrM48efrr+xXv4b1v+b3+s3efX4t6cettrL0vO/rab9Rz5/u1L/0SQiWZ6vXWg9j+u/fjwTx4rXPWj7H0zeqoQHs2UfTC8uXjwcMfhLrF0+tbJtHs/Tp/UfP1jc/3dm26RH4omISBvxkxHxVETsz8p+ICKejoiDDer/w8vPvLfeuibb/6ZJ6z9beP1bdf5X5uubDOQbp0v6zh64eX+di0dz5/9oJTSeLSm+/iWrLhHNlvThjh4AAABsDaWofPe/NLEcLpUmJqr3gHbFttL8hYXF/RFxfrb6G4HRGCjld7qq94MHkvz+52hNfKoufiS7b/xp30glPjFzYX6225WHHre90ueTNf0/9Udft0sHbLo2zKMBW9RG/X/3jQ4VBOg47//Qu2r6/9I6SZZ8Uwb+mbz/Q+8q6v9X48vBVrcBtpayvgw9Tf+H3tUfby6HS10tCdBp3v+hJ7X6u/7WAuWh4lXDUfDEgOHNKcZIQV5dCaQjqzbucCAimks88iBZ5E9TWP8JD6XWdjgUa1f1RaOtkhae45AH0qOyYeLTu9ve+MvZd+Xb3Wy+WumnA02e7jYFunI5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLu/AwAA//8zadUH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 8m49.456010909s ago: executing program 5 (id=112): bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0900000004000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000080095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='percpu_free_percpu\x00', r0}, 0x18) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 8m48.235564121s ago: executing program 5 (id=113): r0 = openat$dlm_plock(0xffffff9c, &(0x7f0000000180), 0x20642, 0x0) write$tcp_mem(r0, 0x0, 0x0) 8m47.949134438s ago: executing program 5 (id=117): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 8m39.542894536s ago: executing program 32 (id=101): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 8m32.421968722s ago: executing program 33 (id=117): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 1m26.517617195s ago: executing program 6 (id=1900): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt(r4, 0x6, 0x2, 0x0, 0x0) fallocate(r3, 0x20, 0x66, 0x4000000001) syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) 1m23.867503849s ago: executing program 3 (id=1902): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r5}, &(0x7f0000000540), &(0x7f0000000580)=r7}, 0x20) 1m21.164414376s ago: executing program 3 (id=1908): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) unshare(0x2040600) inotify_rm_watch(r0, 0x0) syz_mount_image$hfsplus(&(0x7f0000007340), &(0x7f0000000000)='./file0\x00', 0x2, &(0x7f0000000280)=ANY=[@ANYBLOB="6e6f6465636f6d706f73652c756d61736b3d30303030303030303030303030303030303030343437332c63726561746f723d1929c14f2c6769643d", @ANYRESHEX=r1, @ANYBLOB=',uid=', @ANYRESHEX=0x0, @ANYBLOB=',nls=iso8859-13,barrier,\x00'], 0x3, 0x644, &(0x7f0000000e40)="$eJzs3UtsI2cdAPD/OI4TB7RN22y7oEpEXakgInbzUArhwvIQyqFCVTlwjna9jbXetEpclFYIhZc4cOFQcS6H3Dgh7REp0nKGC9prjiuB9rIHlJvRPOw4b+e1dtjfLxp/3zffzDf/+dszHjuyJoCX1uJUlLciicWp99bT9vbmXGN7c26k6G5ERFovRZTzIpKViORx3n0nffhKOrNYPjlqO5/XFz548nz7ad4qt1dOKmlt9Oj1TpKvuFFMMRkRQ0V50HCvo+4Z7+6R4x3mP384PMg80HSfb7YTB/3WOmDjNKuf+bgFBkeSv28eMB4xlr1D59cBUZwdSi82uot3qrMcAAAAXFGv7MTORqvV6nccAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAcJUU9/9PiqnUrk9G0r7/f6Vr8UofQ70QW/0OAAAAAAAAAADOpDXU3fraTuzEelzr9CbZ//zfzhoT2eOX4pNYi1qsxq1Yj6VoRjNWYyYixrsGqqwvNZurMz2sOXvomrOXutMAAAAAAAAA8P/u17G4+/9/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYBEnEUF5k00S7Ph6lckSMRkQlXW4j4p/t+lW21e8AAAAA4AV4ZSd2Yj2utdutJPvM/0b2uX80PomVaEY9mtGIWtzLvgvIP/WXtjfnGtubcw/T6eC4f/pvK9NjGNmIkX/3cPiWb2RLVON+1LM5t+JufBSNavcoN9rxHB7Xr56lY3+v0GNk94oy3fM/FuVgGM8yMtzJyHQRW5rHV4/PxPefnWtLM1HqfPMzcQk5HyvKZF/Zf/szMRulLN+pN47PRMTXH/3lZ8uNlQfL99emBmeXzijPRKuVZ2Ika7Uz8eZLlYnpbN+vd9qL8eP4aUzFZLwfq1GPn8dSNKMWk/GjrLZUvJ7Tx/F9mSrtHfrOntb7J0VSKZ6X/Cx6upjezta9FvX4SXwU96IW72Z/szET3475mI+Frmf4eg9Hfel0R/3NbxSV9JT++6IcDGleX+3Ka/c5dzzr656zm6XXLv7cWP5qUUm38ZuI+OEF7uf57M9E+i7x6Mt53+vHZ+LP2XXCWmPlwery0sc9bu+dokyPo98N1LtE+np5LX2ystbeV0fa9/qhfTNZ30Snr3Sg73qn76QjtVJcwx0caTbre/PQvrms70ZX34Hrrc71EAADbOybY5Xqv6v/qH5R/W11ufre6A9GvjPyViWG/z783fL00Dult5K/xhfxy93P/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwNmtffrZg6VGo7Z6YiXJbv4f0dPCXZX27ZyOXzgpbuRzmpEvq1KJfm79lJXRGIgwTlVp/Cuia07S73gGoTLS5xf/34pbgXTm9PGkBLwQt5sPP7699uln36o/XPqw9mFtZXh+fmF6Yf7dudv3642hSB9r0/2OErgMu5cB/Y4EAAAAAAAAAAAA6NXxPwwYLpY63w8M+ryLAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBW3OBXlrUhiZvrWdNre3pxrpFO7vrtkOSJKEZH8IiJ5HHEn8inGu4ZLjtrO5/WFD5483366O1a5vXzpuPV6s1FMMRkRQ0V5ZiN7x7t73vGyvcv3ME3Yzcq5BoOL878AAAD//42cBVA=") syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000040)=0x7) r3 = socket(0x200000000000011, 0x2, 0x1) bind$packet(r3, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$TCSETA(r2, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) unshare(0x20000400) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='fd\x00') exit(0x7) 1m17.448553023s ago: executing program 6 (id=1913): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb95a, &(0x7f0000017a80)="$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") sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20000045, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) syz_mount_image$jfs(&(0x7f0000000400), &(0x7f00000000c0)='./file0\x00', 0x1c802, &(0x7f0000002740)=ANY=[@ANYBLOB="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"], 0x1, 0x5f23, &(0x7f0000014380)="$eJzs3c2OHFfZB/Cnunt6PvLGsaJXkbFYOA6EhBB/2xC+4rBgAQuQkNfYmkwigwORbRCJLDyRF4gNcAmwyYZFbiRL1ogLwJLNKgtCoZo+x67p6XGPsaere87vJ42rnjpd06f8n5rqnqrqEwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABA/OD7PzldRcTlX6cFhyP+L/oRvYjVpj4WzczF/PhBRByJreZ4ISL6yxHN+lv/PBdxLiI+PRRx7/6t9WbxmT324/ypm9c//+H3/v67P9458rO3f/rxePuP///sJ7+/HXH4R2988vntp7PtAAAAUIq6rusqvc0/mt7f97ruFAAwE/n4Xyd5uVqtVqufav2H3nz1R11o3VZPdrtdRMRme53mNYPT8QCwYDbjs667QIfkX7RBRDzTdSeAuVZ13QH2xb37t9arlG/VPh4cG7Xnv1Nuy3+zenB/x27TacavMZnVz9ed6Mfzu/RndUZ9mCc5/954/pdH7cP0uP3Of1Z2y384uvWpODn//nj+Y7bl/6eIWNj8exPzL1XOf/A4+W/2F3j/lz8AAAAAAAdf/vv/4Y7P/y4/+absyaPO/x6bUR8AAAAAAAAA4Gl70vH/HjD+HwAAAMyt5r1648/vP/z0s90+i61ZfqmKeLZ5/KHZ9A+YQ+lmmbWu+wEAAAAAAAAAAAAAJRmMruG9VEUsRcSza2t1XTdfbeP143rS9Rdd6dsPJev6lzwAAIx8emjsXv4qYiUiLqXP+ltaW1ur65XVtXqtXl3Or2eHyyv1aut9bZ42y5aHe3hBPBjWzTdbaa3XNu398rT28e/XPNew7u+hY7PRYeAAEBGjo9E9R6QDpNrK9bno+lUOi8H+f/DY/9mLrn9OAQAAgP1X13VdpY/zPprO+fe67hQAMAsr+fg/fl5ArVar1Wr1wavb6slut4uI2Gyv07xmMBw/ACyYzfis6y7QIfkXbRARR7ruBDDXqq47wL64d//WepXyrdrHgzS+e74WZFv+m9XWenn9SdNpxq8xmdXP153ox/O79OeFGfVhnuT8e+P5Xx61D9Pj9jv/Wdkt/2Y7D3fQn67l/Pvj+Y85OPn3JuZfqpz/4LHy78sfAAAAAADmWP77/2Hnf/MmAwAAAAAAAMDCuXf/1nq+7zWf///ihMdV7Tn3fx4YOf9qz/m7//cgyfn3xvMfuyCn35q/+9bD/P91/9b6xzf/+YU8nfv8l/rD5rmXql5/kK75qZfeiatxLTbi1I7HD7a1n97RvrSt/cyU9rM72odN+2puPxHr8cu4Fm8/aF+ecmHUypT2ekp7zr9v/y9Szn/Q+mryX0vt1di0cfej3o79vj2d9DwX//rvl3fuXbN3J/oPtq2t2b7jHfRn6//kmWH86sbG9RO/uXLz5vXTkSbblp6JNHnKcv5L6Svn/8pLo/b8e7+9v979aPjY+c+LOzHYNf+XWvPN9r464751Iec/TF85/3wEmrz/L3L+u+//r3XQHwAAAAAAAAAAAAAAAHiUuq63bhG9GBEX0v0/Xd2bCQDMVj7+10lerlar1Wq1+uDVbfVkb279W22O1lvZvk7zmuG3k74ZADDP/hMR/+i6E3RG/gXLn/fXTL/UdWeAmbrxwYc/v3Lt2sb1G133BAAAAAAAAAD4X+XxP4+1xn/eug5obNzobeO/vhXHFnb8z96wvzXWedqgF+PR438fj0eP/z2Y8nxLU9qHU9qXdy76W7tYmbL+xBs9WnL+L6aMc/5H04aVNP7rKx30p2s5/+NprOec/1fGHtfOv/7LIuff25b/yZvvvX/yxgcfvn71vSvvbry78YvTpy6cO3v+3Nnz50++c/XaxqnRvx32eH/l/PPY164DLUvOP2cu/7Lk/L+cavmXJef/cqrlX5acf369J/+y5Pzzex/5lyXn/2qq5V+WnP9XUy3/suT8X0u1/MuS8/9aquVflpz/66mWf1ly/idSLf+y5PxPplr+Zcn55zNc8i9Lzj9f2SD/suT8z6Ra/mXJ+Z9NtfzLkvM/l2r5lyXnfz7V8i9Lzv9CquVflpz/11Mt/7Lk/L+RavmXJef/RqrlX5ac/zdTLf+y5Py/lWr5lyXn/+1Uy78sOf/vpFr+Zcn5fzfV8i9Lzv/NVMu/LA8//9+MGTNm8kzXv5kAAAAAAAAAAAAAgHGzuJy4620EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/ssOHAgAAAAAAPm/NkJVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVUVduBAAAAAAADI/7URqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqrB3dzFylfcZwM9+2WtDghu+iQO2MWBgYXf9BQ4xmCSklLQpJSFtWlLj2GvjxF/1rhNAqCyFtkRBKlJ7QS+aJlEaRWorUBSpqUQjpEZq78pVIm6iVuLCUqFyUFIpVWCrM+d9352ZnZ1Zf6x95pzfD+G/d+bMzDtnzszus9YzAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAs/Ufm/rzgSzL8v8bf6zJsovzv6/KduVfzm6/0CsEAAAAzta7jT//4ZJ0wq4lXKhpm3+79j++Pzc3N5d94Z2T7/3l3Fw6Y12WDa3MssZ50b//8hdzzdsEz2ajA4NNXw/2uPmhHucP9zh/pMf5K3qcv7LH+aM9zl+wAxZYVfw+pnFlGxt/XVPs0uyybKRx3sYOl3p2YOXgYPxdTsNA4zJzI/uzg9mhbCqbWHCZgcZ/Wfbq+vy27s/ibQ023dbaLMtO/eypvXENA2Efb8xabqyh+bF7+95s3Ts/e2rvd2beurrT7LkbFqw0yzZtyNf5XJbN/7oqG8hWpn0S1znYtM61HdY51LLOgcbl8r+3r/PUEtcZ7/doWOfrXda5Npz2+PVZls1mi27T7tlsMFvddqtpf48WR0R+HflD+YFs+LSOk/VLOE7yy7x5fetx0n5Mxv2/PuyT4UXW0PxwvP3MigX7/UyPk/xel+FYza/7wfxGR0ebf7Xacqzm2zx1w+LHQMfHrsMxkI7lpmNgQ69jYHDFUOMYGJxf84aWY2BywWUGs4HGbZ28ofsxMD5z+Nj49BNP3nbw8J4DUwemjkxObN+6ZdvWLdu2je8/eGhqovjz9HZpH1mdDaZjcEN4rYnH4E1t2zYfknPfPHfPg9GSPA/y+/6ZG/MFXTyYLXKM59s8t+nsnwfp+37T82C46XnQ8TW1w/NgeAnPg3ybU5uW9j1zuOn/TmtYrtfCNU3HwIX8fpjf5iM3L/5auDas6/lbTvf74dCCYyDerYHw3MtPST/vjd4Z9svC4+Ka/IyLVmQnpqeO3/74npmZ45NZGOfFpU2PVfvxsrrpPmULjpfB0z5edv39r268psPpa8K+Gr21+2OVb7N1rPtj1Xh1b92fK7Jif7acujkL4xw73/uz03ezfH+mLNFlf+bbPHfb2f8smHJJ0+vfSK/Xv6GR4eL1byjtjZGW17+FD81QY2VZduq2pb3+jYT/z/fr32Ulef3L99Ujt3c/BvJtnh8/3WNguOvr3/VhDoT13BwSw2hT7n+vcf5scZg2PZY9j5vh4ZFw3AzHW2w9brYsuEx+bfltb5o4s+Nm0/Wtj1XLzy0VPG7yffVXE92Pm3yb1ybP/rVjVfxr02vHil7HwMjQiny9I+kgKF7v5lbFY+D2bG92NDuU7UuXyR/l/LbGNi/tGFgR/j/frx1XleQYyPfVS5u7HwP5Nj/acm5/dtoUTknbNP3s1P77hcUy/zXD89fXvtvOdebP1/nxH38qndYpQ+TbvLX1dHNG9/10azjlog77qf35s9gxvS87P/vpqrDOQ9u6/24q3+ay7Us8nnZlWfbG5BuN33eF3+9+78SPv9/ye99Ov1N+Y/KNB8Yf+snprB8AgDP3XuPP2RXFz5pN/2K9lH//BwAAAPpCzP2DYSbyPwAAAFRGzP1DYSbyPwAAAFRGzP3DYSY1yf+P3bnj5XefztK7Ac4F8fy4Gx68u9gudrxnw9fr5ublp3/02yMvf/Xppd32YJZlv3rggx23f+zuuK7CsbjOD7eevsBV1y3p9h99eH675vdPOLWjuP54f5Z6GMSu8qvjmxvXu+6JycZ87YGsMR+aff7Z4vqLr+P2J7cU2/9NeNOSXfsHWi6/KaxnY5jrwnvKPLhrfj/kM17u5bXX/uuln52/vXi5gQ3vb9zNl/64uN74HlEvXlpsH+/3Yuv/l6999+V8+8dv6Lz+pwc7r/9kuN43w/zlzmL75n3+1ab1/2lYf7y9eLnbv/XDjut/5cpi+1fCcfGNMNvXf+9ffOjdTo9XvJ1ddxWXi7c/8b9bG5eL1xevv339o09PtuyP9ut/7Z3ienZ++edDzdvH0+PtRI/e1Xp8D4THt6VHnmXZd/8sa9nP2UeKy/1z2/rj9R27q/P6b21b57GB6xqXn78/a1ru19f/bnPH+xvXs+sf17TcnxfvC/vvnfEf5dd78qFwPIbz/+/14vra38v0lftaX2/i9t9YUzxv4/WNt63/xbb1z16X77ve67//nWL9r9yzsmX9uz4Rjqf7i9lr/Qf+9pKWy3/zO8XjcfwrY0eOTp84uK9przY/j1eOrlp90cXve/8l4bW0/evdR2cemzq+bmLdRJat68O3DFzu9X8rzP8pxuy5v4XCT35eHHcvfLL4vnXTL4qvXwynPxoez/j98et/PdJyvLY/7rP3FPNs139LWMdSXfm1/7puSRue/PyrJ/7pT95q/7kg3p9jl4827t9L669onDfwWnF+++tVL/95eevz+qfDE435g7Bf58I7M2+4ori99uuP703ywqeL52/8SS5ePmt7P5E1Q63342zX/9Pwc8wPr2p9/YvHxw+ebns35zXZQL6E2fD6kM0W58et4v5+4dQVHW8vvg9PNnv16SxzUdNPTI8fOnjkxOPjM1PTM+PTTzy5+/DRE0dmdjfeu3T3F3tdfv75vbrx/N43tX1r1ni2Hy3GMrvQ6z/28N59d0zcuG9q/54T+2cePjZ1/MDe6em9U/umb9yzf//UV3pd/uC+nZObd2y5Y/PYgYP7dt65Y8eWHWMHjxzNl1EsqoftE18aO3J8d+Mi0zu37pjctm3rxNjho/umdt4xMTF2otflG9+bxvJLf3ns+NShPTMHD0+NTR98cmrn5I7t2zf3fPfHw8f2T68bP37iyPiJ6anj48V9WTfTODn/3tfr8tTD9NHwetdmIPx0/rlbt6f3x819+5lFr6rYpPXH0+zt8F5Q8ftbr69j7h8JM6lJ/gcAAIA6iLk/vPH//BnyPwAAAFRGzP0rw0zkfwAAAKiMmPuL5D+aPv69Lvn/XPX/n9H/b9D/1//P9P8T/X/9/0z/X/+/B/1//f9+Xr/+v/4/vZWt/x9yf7Yqy/z7PwAAAFRUzP2rw0zkfwAAAKiMmPsvCjOR/wEAAKAyYu6/OMykJvnf5//r/+v/d+v/x231/zP9/zL0/zf+t/7/Avr/+v+Z/v8Zu9D9+X5ffwn7/6v0/ymbsvX/Y+5/X5hJTfI/AAAA1EHM/e8PM5H/AQAAoDJi7r8kzET+BwAAgMqIuX9NmElN8r/+v/6//r/P/9f/75v+v8//70D/X/8/0/8/Yxe6P9/v6y9h/9/n/1M6Zev/x9z/a2EmNcn/AAAAUAcx938gzET+BwAAgMqIuf/SMBP5HwAAACoj5v7Lwkxqkv/r2f9/M8sy/f9M/1//v22d+v/6/8tB/1//vxv9f/3/fl6//r/+P72Vrf8fc//lYSY1yf8AAABQBzH3XxFmIv8DAABAZcTcf2WYifwPAAAAlRFz/1VhJjXJ//Xs//v8f/3/gv5/6zr1//X/l4P+v/5/N/r/+v/9vH79f/1/eitb/z/m/qvDTGqS/wEAAKAOYu6/JsxE/gcAAIDKiLn/g2Em8j8AAABURsz9a8NMapL/9f/1//X/9f/1//X/l1N/9f8HFz1H/7+g/9/q3PX/Z+cXoP/fN+vX/9f/p7ey9f9j7v9QmElN8j8AAADUQcz914aZyP8AAABQGTH3XxdmIv8DAABAZcTcvy7MpCb5X/9f/1//X/9f/1//fzn1V/9/cfr/Bf3/Vj7/X/9f/1//n+7K1v+PuX99mElN8j8AAADUQcz9G8JM5H8AAACojJj7rw8zkf8BAACgMmLu3xhmUpP8r/+v/6//r/+v/6//v5yq0f8f0P8P9P9b6f/r/+v/6//TXdn6/zH33xBmUpP8DwAAAHUQc/+NYSbyPwAAAFRGzP03hZnI/wAAAFAZMfdvCjOpSf7X/9f/1//v4/7/kP5/pv9fetXo//v8/3iy/n8r/X/9f/1//X+6K1v/P+b+m8NMapL/AQAAoA5i7r8lzET+BwAAgMqIuf/WMBP5HwAAACoj5v6xMJOa5H/9f/1//f8+7v/7/P+W9ev/l5P+v/5/N/r/+v/9vH79f/1/eitb/z/m/tvCTGqS/wEAAKAOYu6/PcxE/gcAAIDKiLl/PMxE/gcAAIDKiLl/IsykJvlf/1//X/9f/1//X/9/Oen/6/93o/+v/9/P69f/1/+nt7L1/2PunwwzqUn+BwAAgDqIuX9zmIn8DwAAAJURc/+WMBP5HwAAACoj5v6tYSY1yf/6/xXp/w/q/+v/6//r/5eT/r/+fzf6//r//bx+/X/9f1oNdjitbP3/mPu3hZnUJP8DAABAHcTcvz3MRP4HAACAyoi5/44wE/kfAAAAKiPm/jvDTGqS//X/K9L/9/n/+v/6//r/JaX/r//fjf6//n8/r1//X/+f3srW/4+5f0eYSU3yPwAAANRBzP0fDjOR/wEAAKAyYu6/K8xE/gcAAIC+0ulzCKOY+z8SZlKT/K//X/X+/9xK/X/9f/3/7uvX/19e+v/6/93o/+v/9/P69f/1/+mtbP3/mPt3hpnUJP8DAABAHcTcf3eYifwPAAAAlRFz/z1hJvI/AAAAVEbM/bvCTGqS//X/q97/9/n/+v/6/73Wr/+/vPT/9f+70f/vz/5/+LFF/79E/f/8GNL/p4zK1v+Puf/eMJOa5H8AAACog5j7PxpmIv8DAABAZcTc/7EwE/kfAAAAKiPm/o+HmdQk/+v/6//r/+v/6//r/y8n/f9l6/83Xgr1/wv6/2fmQvfn+339Zer/+/x/yqps/f+Y++9rzBXzV1ST/A8AAAB1UOT+0ewTYSbyPwAAAFRGzP2/HmYi/wMAAEBlxNx/f5hJTfK//r/+v/6//r/+v/7/ctL/9/n/3ej/6//38/r1//X/6a1s/f+Y+38jzKQm+R8AAADqIOb+B8JM5H8AAACojJj7PxlmIv8DAABAn1mx6Dkx9/9mmElN8r/+//np/w+m69f/1//X/9f/1/8/l/T/9f8z/f8z1qM//17bw7+A/r/+v/4/vZSt/x9z/2+FmdQk/wMAAEAdxNz/qTAT+R8AAAAqI+b+3w4zkf8BAACgMmLufzDMpCb5/1z3/9sv302d+v8+/1//P9P/1/9v2qv6/+eO/r/+f6b/f8YudH++39ev/6//T29l6//H3P87YSY1yf8AAABQBzH3PxRmIv8DAABAZcTc/+kwE/kfAAAAKiPm/s+EmdQk//v8f/1//X/9f/1//f/lpP+v/9+N/r/+fz+vX/9f/5/eytb/j7n/4TCTmuR/AAAAqIOY+z8bZiL/AwAAQGXE3P+7YSbyPwAAAFRGzP2/F2ZSk/yv/6//X5n+f7xS/X/9/3C6/n856P8v7P/nr2H6/wX9f/3/fl6//r/+P72Vrf8fc//nwkxqkv8BAACgDmLu//0wE/kfAAAAKiPm/j8IM5H/AQAAoDJi7n8kzKQm+V//X/+/Mv1/n/+v/6//X0r6/z7/vxv9f/3/fl6//r/+P72Vrf8fc//nw0xqkv8BAACgDmLu/8MwE/kfAAAAKiPm/t1hJvI/AAAAVEbM/Y+GmdQk/+v/6//r/+v/6//r/y8n/X/9/270//X/+3n9+v/6//RWtv5/zP17wkx2td4MAAAA0L9i7v9CmElN/v0fAAAA6iDm/r1hJvI/AAAAVEbM/fvCTGqS//X/9f/1//X/9f/1/5eT/r/+fzf6//r//bx+/X/9f3orW/8/5v6pMJOa5H8AAACog5j794eZyP8AAABQGTH3Hwgzkf8BAACgMmLufyzMpCb5X/9f/1//v7b9/9e/17ZO/X/9/+Wg/6//343+v/5/P69f/1//n97K1v+Puf9gmElN8j8AAADUQcz9Xwwzkf8BAACgMmLu/1KYifwPAAAAlRFz/6Ewk5rkf/1//X/9/9r2/33+f6D/v7z0//X/u9H/1//v5/Xr/+v/01vZ+v8x9x8OM6lJ/gcAAIA6iLn/SJiJ/A8AAACVEXP/0TAT+R8AAAAqI+b+Y2EmNcn/+v+n1/8fWKQbqP/fef36//r/+v/6//r/+v/d6P/r//fz+vX/9f/prWz9/5j7/yjMpCb5HwAAAOog5v7jYSbyPwAAAFRGzP3TYSbyPwAAAFRGzP0zYSY1yf/6/z7/X/9f/1//X/9/Oen/6/93o/+v/9/P69f/1/+nt7L1/2PuPxFmUpP8DwAAAHUQc///s3efuXadVRyHTxIsLCHEFGAIjCBDYABISAgmwBd6SeihQ+i9hd5CB9N77733Hgg9FCmIeK0FGHvv63t9fN79ruf5spQbIr+WEeiv6Kd937jF/gcAAIBp5O6/X9xi/wMAAMA0cvffP25psv/1//p//b/+/7L2//+VN+v/9f+Xgv5f/7/T/x/bofv5rb9f/6//Z91o/X/u/gfELU32PwAAAHSQu/+BcYv9DwAAANPI3f+guMX+BwAAgGnk7n9w3NJk/+v/9f/6f/2/7//r//dJ/6//X6L/1/9v+f36f/0/60br/3P3PyRuabL/AQAAoIPc/Q+NW+x/AAAAmEbu/ofFLfY/AAAATCN3/zVxS5P9r//X/+v/9f/6f/3/Pun/9f9L9P/6/y2/X/+v/2fdaP1/7v5r45Ym+x8AAAA6yN3/8LjF/gcAAIBp5O5/RNxi/wMAAMA0cvc/Mm5psv/1//p//b/+X/+v/98n/b/+f4n+X/+/5ffr//X/rBut/8/d/6i4pcn+BwAAgA5y9z86brH/AQAAYBq5+x8Tt9j/AAAAMI3c/Y+NW5rsf/2//l//r/9v1/+f878R+v/90v/r/5fo//X/W36//l//z7q99/93u+62e9T+P3f/dXFLk/0PAAAAHeTuf1zcYv8DAADANHL3Pz5usf8BAABgGrn7nxC3NNn/+n/9/3/6/1uv0P/r/1v0/+f8evr//dL/6/+X6P/1/wd9/730//p/9m3v/f9K73/uX+fuf2Lc0mT/AwAAQAe5+58Ut9j/AAAAMI3c/U+OW+x/AAAAmEbu/qfELU32v/5f/+/7//p//b/+f5/0//r/Jfp//f+W37/U/199hPfr/+lgtP4/d/9T45Ym+x8AAAA6yN3/tLjF/gcAAIBp5O6/Pm6x/wEAAGAaufufHrc02f/6f/2//l///7/9/5Ut+/9//0z/vx/6f/3/Ev2//n/s919xu6V/3vf/9f+sG63/z93/jLilyf4HAACADnL3PzNusf8BAABgGrn7nxW32P8AAAAwjdz9z45bmux//b/+X/+v/z/R9/+vmqP/9/3//dH/6/+X6P/1/1t+v/5f/8+60fr/3P3PiVua7H8AAADoIHf/c+MW+x8AAACmkbv/eXGL/Q8AAADTyN3//Lilyf7X/+v/9f/6/xP1/5N8/1//vz/6f/3/kqP2/zv9f/1e9P/jvF//r/9n3Wj9f+7+F8QtTfY/AAAAdJC7/4Vxi/0PAAAA08jd/6K4xf4HAACAaeTuf3Hc0mT/6//1//p//b/+X/+/T/p//f8S3//X/2/5/fp//T/rRuv/c/e/JG5psv8BAACgg9z9L41b7H8AAACYRu7+l8Ut9j8AAABMI3f/y+OWJvtf/6//1//r//X/+v990v/r/5fo/8/f/5++wK+n/x/r/fp//T/rRuv/c/ffELc02f8AAADQQe7+V8Qt9j8AAABMI3f/K+MW+x8AAACmkbv/VXFLk/1/of7/5juc/fv6/6PR/5///fp//b/+X/+v/9f/L9H/+/7/lt+v/9f/s260/j93/6vjlib7HwAAADrI3f+auMX+BwAAgGnk7n9t3GL/AwAAwDRy978ubmmy/y/99//vrP/X/+v/4+r/9f/6f/2//n+Z/l//v+X36//1/6wbrf/P3f/6uKXJ/gcAAIAOcve/IW6x/wEAAGAaufvfGLfY/wAAADCN3P1vilua7P9L3//7/r/+/yL7/yv1/0n/H3+u+n/9/0XQ/+v/d/r/Yzt0P7/19+v/9f+sG63/z91/Y9zSZP8DAABAB7n73xy32P8AAAAwjdz9b4lb7H8AAACYRu7+t8YtTfb///f/V+9m7v/z/fr/s4bo/33/v+j/489V/6//vwj6f/3/Tv9/bIfu57f+fv2//p91o/X/ufvfFrc02f8AAADQQe7+t8ct9j8AAABMI3f/O+IW+x8AAACmkbv/nXFLk/3v+//6f/3/8P3/jef+903/r//fEv2//n+J/l//v+X3j9P/xw+u0f8zntH6/9z974pbmux/AAAA6CB3/7vjFvsfAAAAppG7/0zcYv8DAADANM7ccpf73KP+qt/+1/9vvf+/503xAv3/vP2/7//H1f/r/89H/6//3+n/j+3Q/fzW3z9O/+/7/4xrtP7/Pbf9U6d3741bmux/AAAA6CB3//viFvsfAAAAppG7//1xi/0PAAAA08jd/4G4pcn+1/9vvf/3/X/9v/5f/z82/b/+f4n+X/+/5ffr//X/rBut/8/d/8G4pcn+BwAAgA5y938obrH/AQAAYBq5+z8ct9j/AAAAMI3c/R+JW5rsf/2//l//r/8/cf9/rf5/p/+/IP2//n+J/l//v+X36//1/6xb6f9PX+7+P3f/R+OWJvsfAAAAOsjd/7G4xf4HAACAaeTu/3jcYv8DAADANHL3fyJuuOsdD/ekS+vUBX4evbn+X/+v/9f/+/6//n+f9P/6/yX6f/3/lt+v/9f/s2607//n7v9k3OLf/wMAAMA0cvd/Km6x/wEAAGAaufs/HbfY/wAAADCN3P2fiVua7H/9v/5f/6//1//r//dJ/6//X6L/1/9v+f36f/0/60br/3P3fzZuabL/AQAAoIPc/Z+LW+x/AAAAmEbu/s/HLfY/AAAATCN3/xfilib7X/+v/9f/6/8P1f/ffaf/1/+fnP5f/7/T/x/bofv5rb9f/6//Z91o/X/u/i/GLU32PwAAAHSQu/9LcYv9DwAAANPI3f/luMX+BwAAgGnk7v9K3NJk/+v/9f/6f/2/7//r//dJ/6//X6L/1/9v+f36f/0/60br/3P3fzVuabL/AQAAoIPc/V+LW+x/AAAAmEbu/q/HLfY/AAAATCN3/zfilib7f+b+f+k/to3+/9Y76f/1//p//b/+f5n+X/+/0/8f26H7+a2/X/+v/2fdaP1/7v5vxi1N9j8AAAB0kLv/W3GL/Q8AAADTyN3/7bjF/gcAAIBp5O7/TtzSZP/P3P8v2Ub/7/v/+n/9/07/r/9fof/X/+/0/8d26H5+6+/X/+v/WXeg/v/U7gL9f+7+78YtTfY/AAAAdJC7/3txi/0PAAAA08jd//24xf4HAACAaeTu/0HcMs/+v/eZhb+p/9f/6//1//p//f8+6f/1/0v0//r/Lb9f/6//Z91o3//P3f/DuGWe/Q8AAADt5e7/Udxi/wMAAMA0cvf/OG6x/wEAAGAauft/Erc02f/6f/2//r9V/3/VTv+v/7/M9P/6/yX6f/3/lt+v/9f/s260/j93/0/jlib7HwAAADrI3f+zuMX+BwAAgGnk7v953GL/AwAAwDRy9/8ibmmy//X/+n/9f6v+3/f/9f+Xnf5f/79E/6//3/L79f/6f9aN1v/n7v9l3NJk/wMAAEAHuft/FbfY/wAAADCN3P2/jlvsfwAAAJhG7v7fxC1N9r/+X/+v/9f/6//1//uk/9f/L9H/6/+3/H79v/6fdaP1/7n7b4pbmux/AAAA6CB3/2/jFvsfAAAAppG7/3dxi/0PAAAA08jdf3Pc0mT/6//1/1P2/7fX/+v/9f+j0P8fp/8/4v+R6v/1/yd06H5+6+/X/+v/WTda/5+7//dxS5P9DwAAAB3k7v9D3GL/AwAAwDRy9/8xbrH/AQAAYBq5+/8UtzTZ//p//f/F9/+n6vc9bP/v+//6f/3/MPT/vv+/pHv/f/0NZ3+s/9/m+/X/+n/Wjdb/5+7/c9zSZP8DAABAB7n7/xK32P8AAAAwjdz9f41b7H8AAACYRu7+W+KWJvtf/6//n/L7//p//b/+fxj6f/3/ku79v+//b/v9+n/9P+tG6/9z9/8tbmmy/wEAAKCD3P1/j1vsfwAAAJhG7v5/xC32PwAAAEwjd/8/45Ym+1//r//X/+v/9f/6/33S/+v/l+j/9f9bfr/+X//PutH6/9z9/woAAP//LrA/zg==") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd4829bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bccdf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000200), &(0x7f00000003c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x900004, 0x0, 0x1, 0x0, &(0x7f0000000040)) rename(0x0, &(0x7f0000000780)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xfffd}}}]}, 0x38}}, 0x4000) 1m16.01017276s ago: executing program 3 (id=1917): r0 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fcntl$dupfd(r1, 0x406, r2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0), 0x0}}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f68"], 0xe4}}, 0x0) 1m14.393770378s ago: executing program 3 (id=1925): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000002c80)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x1004, &(0x7f0000002d00)={[{0x1000, 0x4e00, "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"}]}) 1m8.236631765s ago: executing program 6 (id=1934): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r0, &(0x7f0000000040)="0300ffff0000", 0x6}]) 1m8.199265588s ago: executing program 3 (id=1935): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000010600), &(0x7f0000000100)='./file2\x00', 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="002afdae3565781009f76e97b48ab97bfb17214266c0e5b703257a3d77ba65f617bee62a9d1612402e69cc86c8fce5989be545ce26a9c4f5f2165f08000000b40d94de59edbb0507bf01e357e13bef384234e823d8137beac1c0afb4464b4d16006b7691ea638989f6f567a2817567b9c1606c0a15f5a0dbce62f673cd22ef303bcddff402dacf8c1372a5e8ff5bc596a5375037cf99b4ee7eb6f41587c2904d5cc071c32bc429a286bddc094a"], 0x1, 0x10600, &(0x7f0000020cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='.\x00', 0x0, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0x8004587d, 0x0) ioctl$SNDRV_TIMER_IOCTL_CREATE(r0, 0xc02054a5, &(0x7f00000002c0)={0x7, 0xffffffffffffffff, 'id0\x00'}) 1m6.440370559s ago: executing program 3 (id=1937): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 57.724327925s ago: executing program 6 (id=1950): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000540)={0x0, 0x0, 0x0, &(0x7f00000002c0)=""/138, 0x0}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/74}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a0103"], 0x7c}}, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000940)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x20000) 56.462278389s ago: executing program 6 (id=1952): r0 = syz_open_procfs(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb904, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) fcntl$dupfd(r1, 0x406, r2) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = syz_open_dev$usbfs(0x0, 0x74, 0x101301) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r7, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) mq_notify(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x19, 0x0, @thr={&(0x7f00000002c0), 0x0}}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a03000000000000000000010000000900010073797a30000000000900020073797a300000000014000380080001400000000008000240000000005c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000300003802c0003801400010076657468305f746f5f6873"], 0xe4}}, 0x0) 55.194887795s ago: executing program 6 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$eJzs3VFrHFsdAPD/bHZr06Y3ueqDXvB6tZW0aHeTxrbBh1pB9Kmg1vcak00I2WRDdtM2oWiKH0AQUcEnffFF8AMIUvDFRxEK+qyoKKKtPvigncvuTtI03U227TabZn8/mMw5Z2b2f86GmZ0zc5gJYGC9FxHXI+JJmqYXImI0K89lU2y1psZ6jx/dm21MSaTpzX8mkWRl25+VZPPT2WYnI+JrX474ZvJ83NrG5tJMpVJey/Kl+vJqqbaxeXFxeWahvFBemZqavDJ9dfry9ERP2nkmIq598a8/+O7PvnTtV5+586dbfz//rUa1RrLlu9vxgvL7LWw1vdD8LnZvsPaSwY6ifLOFmeF2aww9V3L/NdcJAID2Guf4H4yIT0bEhRiNof1PZwEAAIA3UPr5kfhfEpG2d6JDOQAAAPAGyTXHwCa5YjYWYCRyuWKxNYb3w3EqV6nW6p+er66vzLXGyo5FITe/WClPZGOFx6KQNPKTzfTT/KU9+amIeDsivj863MwXZ6uVuX5f/AAAAIABcXpP//8/o63+PwAAAHDMjPW7AgAAAMBrp/8PAAAAx5/+PwAAABxrX7lxozGl2++/nru9sb5UvX1xrlxbKi6vzxZnq2urxYVqdaH5zL7lgz6vUq2ufjZW1u+W6uVavVTb2Ly1XF1fqd9afOYV2AAAAMAhevvjD/6QRMTW54abU8OJ7jbtcjXgqMrvpJJs3ma3/uNbrflfDqlSwKEY6ncFgL7J97sCQN8U+l0BoO+SA5Z3HLzz22z+id7WBwAA6L3xj3a+/5/bd8ut/RcDR56dGAaX+/8wuJr3/7sdyetkAY6VgjMAGHivfP//QGn6QhUCAAB6bqQ5JblidnlvJHK5YjHiTPO1AIVkfrFSnoiItyLi96OFDzTyk80tkwP7DAAAAAAAAAAAAAAAAAAAAAAAAABAS5omkQIAAADHWkTub8mvW8/yHx89N7L3+sCJ5L+jkb0i9M6Pb/7w7ky9vjbZKP/XTnn9R1n5pX5cwQAAAICB8EIv8N/up2/34wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACglx4/uje7PR1m3H98ISLG2sXPx8nm/GQUIuLUv5PI79ouiYihHsQfbvz5SLv4SaNaOyHbxR/uQfyt+/vGj7HsW2gX/3QP4sMge9A4/lxvt//l4r3mvP3+l494Jv+yOh//Yuf4N9Rh/z/TZYx3Hv6i1DH+/Yh38u2PP9vxkw7xz3YZ/xtf39zstCz9ScR429+f5JlYpfryaqm2sXlxcXlmobxQXpmamrwyfXX68vREaX6xUs7+to3xvY/98sl+7T/VIf7YAe0/12X7///w7qMPtZKFdvHPn20T/zc/zdZ4Pn4u++37VJZuLB/fTm+10ru9+/Pfvbtf++c6tP+g///5Ltt/4avf+XOXqwIAh6C2sbk0U6mU145totFLPwLVkDiCiW/39APTNE0b+9QrfE4SR+FraSb6fWQCAAB67elJf79rAgAAAAAAAAAAAAAAAAAAAIPrMB4ntjfm1k4q6cUjtAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeuL9AAAA//+GAdlV") 50.334675714s ago: executing program 34 (id=1937): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 39.712545402s ago: executing program 35 (id=1955): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) keyctl$link(0x8, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000a000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r4, &(0x7f0000000000), 0x4000000000001f2, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000740)={[{@bsdgroups}, {@nodiscard}, {@noblock_validity}, {@grpjquota}, {@grpjquota}, {@noquota}, {@auto_da_alloc}, {@noload}, {@nodiscard}]}, 0x64, 0x50a, &(0x7f0000000200)="$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") 13.208253922s ago: executing program 0 (id=2041): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x18) syz_emit_ethernet(0xfdef, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x4) syz_usb_connect$hid(0x3, 0x36, 0x0, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000280)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) 13.139886303s ago: executing program 1 (id=2042): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000d972a440b72040155ab7010203010902120001000000000904800000ff"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000003c0)={0x10, &(0x7f0000000000)={0x0, 0x5, 0x3, "994194"}, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000ac0)={0x44, &(0x7f0000000840)={0x40, 0x12}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 10.798462147s ago: executing program 1 (id=2045): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500a51cec5e2d137c85000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYBLOB="0100000000000000000044000000080003"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 9.517837901s ago: executing program 7 (id=2047): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000001c0)=0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x44000, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c636bb06813c676a7246c0fc5f7c8727b335d8bc183ac81f193616368652c", @ANYRESDEC, @ANYBLOB="2c6d43ab61b183bb4188707072616973652c736d61636b6673726f6f743d3a5c2bc92c736961636b66736465663d2f7379732f6b65726e656c2f64656275672f6269666465722f73746174650016e52c666f776e65723c003b9e624e8ef4a6dcebefe862526ee9cf9ced9edc67", @ANYRESDEC=r5, @ANYBLOB=',\x00']) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02135c001700000029bd7000fcdbdf25050005002b2000000a004e220000000500000000000000000000000000000000090000000000000027001900000000000a004e2000000200ff1ce300000000000000000000000001f400000002004e21ac1e000100000000000000000000000007001900000000000a004e240000001000000000020000000000ffff640101020000000002004e220a01010200000000000000000000000002000100000004d5085f1a0302000020"], 0xb8}}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x7, 0x2}) r7 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ppoll(&(0x7f0000000000)=[{r7, 0x419}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r8 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) r10 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x322c, 0x0, 0x0, 0x0) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r6, 0x20, &(0x7f0000000940)={&(0x7f0000000880)=""/22, 0x16, 0x0, &(0x7f00000008c0)=""/82, 0x52}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x26, &(0x7f0000000740)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000ff92ff03ff000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000c7000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5002034f4ff01000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0xa, &(0x7f0000000640)=""/10, 0x40f00, 0x79, '\x00', r9, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xb, 0x6, 0xffff}, 0x10, r13, r4, 0x3, &(0x7f00000009c0)=[r10, r10, r10, r10, 0x1, r4, r11], &(0x7f0000000a00)=[{0x0, 0x2, 0x6, 0x3}, {0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x0, 0x8}], 0x10, 0x9, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r12) 8.752080383s ago: executing program 0 (id=2048): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000c80)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x32c4c60, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000580)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000180)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04000418"], 0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x40000004, 0x0, &(0x7f0000000240)={0x2, 0x31, 0x0, 0xfffe}, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000080)={0x4, "5839fe3411725d65ffaf182bf2e5e85a1e9e17220ca4bebbf9f0dbec38d272a8eecaefbf09f94beb52a52bbdbe6bc16b6a386018ca15714b43128923024236af"}) 8.524497872s ago: executing program 0 (id=2049): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbP/D7/ejP378UBCliMbGxBYKAgcvGE28mBjxoMemrQQpYGgPQoiUxODRkHg3Ho03Y7yqN+PJxKN48GBiSIjhAnhaM7sz7XY73e7Cdpe6n0+y7Xszb+a9N/Pe7Nt5uxNAzxpL/yQR/4qImxGxoxpdnWCs+u/enSsz9+9cmYmlcvnUn0kl3d00nsm3255FxksRpY+Suh1WLVy6fHZ6fn7uYhafXDz3/uTCpcsvnDk3fXru9Nz5qRMnjh45fPzY1IutV6ogv7Red/d+eGHfntfeufH6TH++fDj7X1uPdfW3VoyxBuuebW1Xj7x/14STtcfpakcLQ9PS9j+ShW/GjugraORfd7xUQCeUy+Xy0Pqrl8r1rq1ZAmxZSXS7BEB35G/06eff/NWhoccj4fbJ6uf6tN73sld1TX+UsjQDdZ9v22ksIt5e+uuz9BWN7kP8tkkFAAB6zncn85Fg/fivFLtr0v0nm0MZjYj/RsTOiPhfROyKiP9HVNI+FhGP12eQRJQb5L+rLr52/FO69TD120g6/nspm9taPf7LR38x2leJDdduNncoOybjMTD07pn5ucMN8vj+lZ8/KVreVzf+S19p/vlYMCvHrf66G3Sz04vTD1jdNW5fi9jbX1//pD89cflMQBIReyJibwv7Ha0Jn3n+i33LkYHV6Tauf0W5YEqv5fm4IuXPI56rnv+lWHX+V3JMGs9PTg7H/NyhybQVHCrM48efrr+xXv4b1v+b3+s3efX4t6cettrL0vO/rab9Rz5/u1L/0SQiWZ6vXWg9j+u/fjwTx4rXPWj7H0zeqoQHs2UfTC8uXjwcMfhLrF0+tbJtHs/Tp/UfP1jc/3dm26RH4omISBvxkxHxVETsz8p+ICKejoiDDer/w8vPvLfeuibb/6ZJ6z9beP1bdf5X5uubDOQbp0v6zh64eX+di0dz5/9oJTSeLSm+/iWrLhHNlvThjh4AAABsDaWofPe/NLEcLpUmJqr3gHbFttL8hYXF/RFxfrb6G4HRGCjld7qq94MHkvz+52hNfKoufiS7b/xp30glPjFzYX6225WHHre90ueTNf0/9Udft0sHbLo2zKMBW9RG/X/3jQ4VBOg47//Qu2r6/9I6SZZ8Uwb+mbz/Q+8q6v9X48vBVrcBtpayvgw9Tf+H3tUfby6HS10tCdBp3v+hJ7X6u/7WAuWh4lXDUfDEgOHNKcZIQV5dCaQjqzbucCAimks88iBZ5E9TWP8JD6XWdjgUa1f1RaOtkhae45AH0qOyYeLTu9ve+MvZd+Xb3Wy+WumnA02e7jYFunI5AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAaLu/AwAA//8zadUH") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) 8.277775629s ago: executing program 1 (id=2050): syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000540)='./file1\x00', 0x0, &(0x7f0000000000)={[{@min_batch_time={'min_batch_time', 0x3d, 0xa04d}}, {@errors_continue}]}, 0xdf, 0x52e, &(0x7f0000000e00)="$eJzs3c9vI1cdAPDvTOwl201JChxKpf4QXbRbwdqbhrYRh7YIxK0SqNyXKPFG0TrrVey0m6hCWfEHICEElThx4oLEjQsS6p+AkCrROwIEQrCFAwdg0IzH26w7TozqHyX5fKRnv3nz4/vexB6/+ZGZAM6tZyLi1YhYiIjnImK5LE/LFEf9lE/3/v23NvOUF7/+1ySSsiyiyD5wqZxtsf9WqXtweGuj3W7tlcPN3u6dZvfg8NrO7sZ2a7t1e21t9cX1l9ZfWL8+kXbm7Xr5a3/84fd++vWXf/XFN393489Xv5NX+qvl+EG7JqdYe/Fe8VrP18UDtYjYm2ywuVko21Ofd0UAABhL3kv9VER8ruj/L8dC0ZsrDHfpFmdfOwAAAGASsleW4l9JRAYAAACcWa9ExFIkaaO8FmAp0rTR6F/D+5l4JG13ur0v3Ozs397Kx0WsRD29udNuXS+vqV2JepIPrxb5D4afHxpei4jHIuIHyxeL4cZmp70174MfAAAAcE5cGtr//8dyf/8fAAAAOGNW5l0BAAAAYOpG7f8nM64HAAAAMD3O/wMAAMCZ9o3XXstTNnj+9dYbB/u3Om9c22p1bzV29zcbm529O43tTme7uGff7knLqkdEu9O586WI/bvNXqvba3YPDm/sdvZv927seH4gAAAAzMtjT7/zXhIRR1++WKTchfxlYcQMrhWAMyMda6r+diH+MN26ALM16md+DBcmWQ9g9mrzrgAwP0fzrgAwbw/d6qOiU3D84p2Hjhn8enp1AgAAJuvKZ6vP/9fK6/mBs2u88//AWfQRzv8D/+ec/4fzq/4/9QDuTbEmwLyc9qiPkTfvqDr/X3llcJaduiwAAGCqlor0dNoozwUuRZo2GhGPFv/qX09u7rRb1yPikxHx2+X6J/Lh1WLOxOMBAQAAAAAAAAAAAAAAAAAAAAAAAGBMWZZEBgAAAJxpEemfkvL5X1eWLy8NHx+4kPxzOcpHer3549d/dHej19tbzcv/9qC893ZZ/vw8jmAAAADAeVQ7cexgP32wHw8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAk/T+/bc2B2mWcf/ylYhYqYpfi8XifTHqEfHI35OoHZsviYiFCcQ/uhcRj1fFT/JqxUpZi+H4aURcnE38J7Msq4x/aQLx4Tx7J9/+vFr1/UvjmeK9+vtfK9NH9dD278Ivjo1JH2z/FkZs/x4dM8YT7/68OTL+vYgnatXbn0H8ZET8Z6sWWLFSvv2tw8MPFfYXHtlPIq5U/v4kD8Vq9nbvNLsHh9d2dje2W9ut22trqy+uv7T+wvr15s2ddqt8rWzj95/85X+Giv6d9RXtjxHxV05p/+U8Uz9WmA2HKYO9e/f+p/vZ+tAiivhXn63+/D1+Qvz8M/H58ncgH39lkD/q54976me/eaqyYmX8rRHtP+3vf3XUQoc8983v/n7MSQGAGegeHN7aaLdbe1PPvJ1l2axijZ+JdNyJi+7iTNfYbDOD3t3UQix+XFo648zlD49amOZ6nkBmEke2AACAj5sPOv3zrgkAAAAAAAAAAAAAAAAAAACcX92DSKd9O7HhmEfzaSoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwIn+GwAA//8lHteP") setreuid(0xee01, 0xee00) utime(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x7, 0x5}) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x143042, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file7\x00', 0x105042, 0x1ff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 8.061170631s ago: executing program 7 (id=2052): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x54}}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 7.605874688s ago: executing program 1 (id=2053): socket$pptp(0x18, 0x1, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000002180)=ANY=[@ANYBLOB="9feb010018000000"], 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x8000000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) 7.447430103s ago: executing program 0 (id=2054): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() socket$inet6_tcp(0xa, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="000000001004000014001a80100002800c000180080016000600000008001b00"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x8000000001) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r5, &(0x7f0000000040)="0300ffff0000", 0x6}]) 7.221274712s ago: executing program 7 (id=2055): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mremap(&(0x7f00005ab000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000290000/0x4000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf0667000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) fallocate(r3, 0x20, 0x66, 0x4000000001) syz_clone(0x80002080, 0x0, 0x0, 0x0, 0x0, 0x0) 7.052506324s ago: executing program 4 (id=2056): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 5.346910926s ago: executing program 4 (id=2057): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000000)='syz0\x00') mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="170000000000000004000000ff00", @ANYRES16=r3], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) write$P9_RREMOVE(r5, &(0x7f00000002c0)={0x7, 0x7b, 0x2}, 0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$nl_route(0x10, 0x3, 0x0) write$uinput_user_dev(r0, &(0x7f00000005c0)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47b07c7d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000], [0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x2], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc], [0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000]}, 0x45c) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$UI_DEV_CREATE(0xffffffffffffffff, 0x5501) io_setup(0x7, 0x0) 5.344825029s ago: executing program 7 (id=2058): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) ioctl$IOCTL_VMCI_DATAGRAM_SEND(0xffffffffffffffff, 0x7ab, &(0x7f0000000040)={&(0x7f0000000780)={{@host, 0x6}, {@host, 0x7ff}, 0x10fe8, "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"}, 0x418, 0x4}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendto$inet(r1, &(0x7f00000016c0)="ab", 0x1, 0x18844, &(0x7f0000001440)={0x2, 0x4e22, @local}, 0x10) 3.62599126s ago: executing program 4 (id=2059): syz_emit_ethernet(0x66, &(0x7f0000000200)=ANY=[@ANYRES32], 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) r1 = fcntl$dupfd(r0, 0x0, r0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f0000000400), 0x3, 0x44d, &(0x7f0000000c80)="$eJzs3M1vG0UbAPBn7aRt2vRN3qp8NC0QKIiIj6RJS+mBCwgkDiAhwaEcQ5JWoW4DTZBoFUFBqBxRJe6IIxJ/ASe4IOCExBXuqFKFcmlBHIzW3k1sx07j1Kkh/v2kTWZ2x555dnfs2Z1sAuhZo+mPJGIwIn6NiKFqtr7AaPXXrZXlmT9XlmeSKJdf/yOplLu5sjyTF81fty/P9EUUPknicJN6Fy9dPjddKs1dzPITS+ffmVi8dPnp+fPTZ+fOzl2YOnXqxPHJZ09OPdORONO4bo58sHDk0MtvXnt15vS1t378Osnjb4ijQ0Y32vhYudzh6rprf0066etiQ2hLsdpNo7/S/4eiGGsHbyhe+rirjQO2VblcLt/bevOVMrCDJdHtFgDdkX/Rp9e/+bLxgKGjw4+uu/F89QIojftWtlS39EUhK9PfcH3bSaMRcfrKX1+kS2zPfQgAgDrfpuOfp5qN/wpRe1/of9kcynBE/D8iDkTEyYg4GBH3RFTK3hcR97dZf+MkyfrxT+H6lgLbpHT891w2t1U//stHfzFczHL7K/H3J2fmS3PHsn0yFv270/zkBnV89+Ivn7XaVjv+S5e0/nwsmLXjet/u+tfMTi9N30nMtW58FDHS1yz+ZHUmIImIQxExssU65p/46kirbbePv7nKLunAPFP5y4jHs7eLiLr4c8nG85MTe6I0d2wiPyvW++nnq6+1qn+r8XdKevz3Nj3/V+MfTmrnaxfbr+Pqb5+2vKbZ6vm/K3mjbt3700tLFycjdiWvVBtdu36qodzUWvk0/rGjzfv/gVjbE4cjIj2JH4iIByPioaztD0fEIxFxdIP4f3jh0bfrVowNthH/9krjn23r+K8ldkXjmuaJ4rnvv6mrdDjaiD89/icqqbFszWY+/zbTrq2dzQAAAPDfU4iIwUgK46vpQmF8vPo3/Adjb6G0sLj05JmF9y7MVp8RGI7+Qn6na6jmfuhkdlmf56ca8sez+8afFwcq+fGZhdJst4OHHrevRf9P/V7sduuAbed5Lehd+j/0Lv0fepf+D72rSf8fWL/q74ZHBoGdoNn3/4ddaAdw9zX0f9N+0ENc/0Pv0v+hd+n/0JMWB+L2D8lL7JjEu/lxv+M3jMK/IJy7kdizyX9zscMSXf5gAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6JB/AgAA///cJuff") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x32c4c60, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000580)='./file0\x00', 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) openat(r2, &(0x7f0000000180)='./bus\x00', 0x42, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000480)='./bus\x00', r3, &(0x7f00000004c0)='./file0\x00', 0x2) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="040e04000418"], 0x7) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000"}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {0x0, 0x1}, 0x40000004, 0x0, &(0x7f0000000240)={0x2, 0x31, 0x0, 0xfffe}, 0x8, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_SYNC_PTR(r5, 0xc0884123, &(0x7f0000000080)={0x4, "5839fe3411725d65ffaf182bf2e5e85a1e9e17220ca4bebbf9f0dbec38d272a8eecaefbf09f94beb52a52bbdbe6bc16b6a386018ca15714b43128923024236af"}) 3.003957124s ago: executing program 4 (id=2060): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffc4, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r3, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, 0x0) 2.496841718s ago: executing program 1 (id=2061): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x10, &(0x7f0000000240)=ANY=[@ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500a51cec5e2d137c85000005"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x5384b9927ce1a186, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00', @ANYBLOB="0100000000000000000044000000080003"], 0x4c}}, 0x4000804) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {0x0}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2.49252738s ago: executing program 0 (id=2062): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) r3 = mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r2, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0xc, 0x0, &(0x7f0000000700)=[@free_buffer={0x40086303, r3}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x44000, &(0x7f0000000c00)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r4, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB="2c636bb06813c676a7246c0fc5f7c8727b335d8bc183ac81f193616368652c", @ANYRESDEC=r5, @ANYBLOB="2c6d43ab61b183bb4188707072616973652c736d61636b6673726f6f743d3a5c2bc92c736961636b66736465663d2f7379732f6b65726e656c2f64656275672f6269666465722f73746174650016e52c666f776e65723c003b9e624e8ef4a6dcebefe862526ee9cf9ced9edc67", @ANYRESDEC, @ANYBLOB=',\x00']) sendmsg$key(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02135c001700000029bd7000fcdbdf25050005002b2000000a004e220000000500000000000000000000000000000000090000000000000027001900000000000a004e2000000200ff1ce300000000000000000000000001f400000002004e21ac1e000100000000000000000000000007001900000000000a004e240000001000000000020000000000ffff640101020000000002004e220a01010200000000000000000000000002000100000004d5085f1a0302000020"], 0xb8}}, 0x20000080) r6 = socket(0x10, 0x803, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000005c0)={0x4, 0x7, 0x2}) r7 = syz_open_dev$cec(&(0x7f0000000040), 0x0, 0x80200) ppoll(&(0x7f0000000000)=[{r7, 0x419}], 0x1, &(0x7f00000000c0), 0x0, 0x0) r8 = socket(0x200000100000011, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x40, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r9}, [@IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0xfffff001}}]}, 0x40}}, 0x0) r10 = dup3(r1, r0, 0x0) syz_io_uring_setup(0x322c, 0x0, 0x0, 0x0) r11 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000980)={r6, 0x20, &(0x7f0000000940)={&(0x7f0000000880)=""/22, 0x16, 0x0, &(0x7f00000008c0)=""/82, 0x52}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x12, 0x26, &(0x7f0000000740)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000080000008500000006000000ff92ff03ff000000b7080000000000007b8af8ff00000000b7080000080000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000085000000c7000000b7080000000000007b8af8ff00000000b7080000000000807b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a5002034f4ff01000000"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0xa, &(0x7f0000000640)=""/10, 0x40f00, 0x79, '\x00', r9, @fallback=0x8, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x4, 0xb, 0x6, 0xffff}, 0x10, r13, r4, 0x3, &(0x7f00000009c0)=[r10, r10, r10, r10, 0x1, r4, r11], &(0x7f0000000a00)=[{0x0, 0x2, 0x6, 0x3}, {0x5, 0x2, 0x3, 0x4}, {0x2, 0x2, 0x0, 0x8}], 0x10, 0x9, @void, @value}, 0x94) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r12) 2.072181666s ago: executing program 1 (id=2063): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000600)=""/108, 0x6c}, {&(0x7f0000000180)=""/256, 0x100}], 0x2}, 0x60}], 0x1, 0x10042, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000008280), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) syz_mount_image$gfs2(&(0x7f0000000240), &(0x7f0000001c00)='./file1\x00', 0x1000800, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x1, 0x125e2, &(0x7f0000001c40)="$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") openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x169142, 0x0) unlink(&(0x7f0000000080)='./file1\x00') creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 2.02881448s ago: executing program 7 (id=2064): lseek(0xffffffffffffffff, 0x10001, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000480), 0x3, 0x4cb, &(0x7f0000000c80)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000880)=""/166}, 0x20) 1.1123183s ago: executing program 4 (id=2065): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000096ca077900"/20, @ANYRES32=0x0, @ANYBLOB="0000000008290400240012800b000100697036746e6c0000140002800600120000000000060012"], 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000030500"/18, @ANYRES32=0x0, @ANYBLOB="000000000000000014001280090001007663616e000000000400028008000a"], 0x3c}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x7, 0x0, @void, @value}, 0x28) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00000018"], 0x50}}, 0x4000000) 925.621865ms ago: executing program 0 (id=2066): bpf$PROG_LOAD(0x5, &(0x7f0000001b40)={0x1c, 0x20000000000000bb, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x22, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000285000000170000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000009b00000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x27) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r0}, 0x10) socket(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0xc94284a3061bb7fe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r1}, 0x10) open(&(0x7f0000000080)='./file0\x00', 0x40c5, 0x130) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000001e80)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n'], 0x54}}, 0x8000) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 789.773227ms ago: executing program 4 (id=2067): openat(0xffffffffffffff9c, 0x0, 0x2040, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000004c0)=ANY=[@ANYBLOB="1809000000000000000000000001000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r3}, &(0x7f0000000540), &(0x7f0000000580)=r4}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r3, &(0x7f0000000780)}, 0x20) r5 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsmount(r5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) 0s ago: executing program 7 (id=2068): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x8, &(0x7f00000002c0)=0x0) io_submit(r1, 0x0, &(0x7f0000000000)) kernel console output (not intermixed with test programs): device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 473.392297][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 473.412680][ T1206] usb 2-1: config 0 descriptor?? [ 473.449773][T11028] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 474.126874][T11046] loop6: detected capacity change from 0 to 512 [ 474.258823][ T1206] usbhid 2-1:0.0: can't add hid device: -71 [ 474.277241][ T1206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 474.303750][ T1206] usb 2-1: USB disconnect, device number 39 [ 474.309802][T11046] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 474.544068][T11049] loop0: detected capacity change from 0 to 512 [ 474.558165][T11049] EXT4-fs: Ignoring removed bh option [ 474.745121][T11049] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 474.754501][T11049] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 474.890270][T11049] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 474.971321][T11049] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 474.971868][T11046] EXT4-fs (loop6): group descriptors corrupted! [ 475.005821][T11049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 475.730357][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.260439][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 476.266816][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 476.333405][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 476.412291][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 476.571520][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 476.595714][ T10] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 476.690572][ T10] usb 1-1: config 0 has no interface number 0 [ 476.758988][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 476.800367][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.826840][ T10] usb 1-1: Product: syz [ 476.850472][ T10] usb 1-1: Manufacturer: syz [ 476.870624][ T10] usb 1-1: SerialNumber: syz [ 476.888188][ T10] usb 1-1: config 0 descriptor?? [ 476.928169][ T10] smsc95xx v2.0.0 [ 477.688301][ T4572] Bluetooth: Error in BCSP hdr checksum [ 477.791513][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 477.817090][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 477.870010][ T10] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 477.890595][ T10] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32 [ 478.096007][T11085] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1497'. [ 478.150364][T11085] netlink: 'syz.4.1497': attribute type 18 has an invalid length. [ 478.169078][T11085] netlink: 'syz.4.1497': attribute type 18 has an invalid length. [ 478.199135][T11085] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1497'. [ 478.237916][T11089] loop1: detected capacity change from 0 to 512 [ 478.287084][T11089] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 479.490128][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 479.497276][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 479.553529][ T5834] usb 1-1: USB disconnect, device number 25 [ 479.561316][ T24] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 479.741869][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 480.320455][ T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 480.388148][ T24] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 480.448705][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.489336][ T24] usb 7-1: config 0 descriptor?? [ 480.536551][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.368426][T11109] loop4: detected capacity change from 0 to 65536 [ 481.481680][T11109] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 481.504486][ T24] usbhid 7-1:0.0: can't add hid device: -71 [ 481.524416][ T24] usbhid 7-1:0.0: probe with driver usbhid failed with error -71 [ 481.546969][ T24] usb 7-1: USB disconnect, device number 23 [ 482.418484][T11109] XFS (loop4): Ending clean mount [ 482.559587][T11148] loop3: detected capacity change from 0 to 512 [ 482.584614][ T5833] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 482.618494][T11148] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 482.697882][T11148] EXT4-fs (loop3): 1 truncate cleaned up [ 482.801962][T11148] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 484.322052][T11159] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 484.463985][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 484.500677][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 484.500914][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 484.960466][ T1206] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 485.177367][T11180] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1522'. [ 485.770386][ T1206] usb 5-1: Using ep0 maxpacket: 32 [ 485.781428][ T1206] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 485.789534][ T1206] usb 5-1: config 0 has no interface number 0 [ 485.823252][ T1206] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 485.839289][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.858761][ T1206] usb 5-1: Product: syz [ 485.893251][ T1206] usb 5-1: Manufacturer: syz [ 485.923318][ T1206] usb 5-1: SerialNumber: syz [ 485.972812][ T1206] usb 5-1: config 0 descriptor?? [ 486.032878][ T1206] smsc95xx v2.0.0 [ 487.252575][ T1206] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 487.376168][ T1206] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 487.648108][ T1206] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 487.705631][ T1206] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 487.908480][T11199] loop0: detected capacity change from 0 to 4096 [ 487.916504][T11199] ntfs3: Unknown parameter '' [ 489.654199][T11225] loop3: detected capacity change from 0 to 512 [ 489.667465][T11225] EXT4-fs: Ignoring removed bh option [ 490.174539][ T24] usb 5-1: USB disconnect, device number 21 [ 490.374967][ T5834] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 490.387365][T11225] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 490.396507][T11225] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 490.696611][T11225] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended [ 490.716798][T11225] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 490.734981][T11225] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 490.854086][ T5834] usb 1-1: Using ep0 maxpacket: 8 [ 491.086312][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 491.097317][ T5834] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 491.123041][ T5834] usb 1-1: config 179 has no interface number 0 [ 491.171944][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 491.526920][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 491.954976][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 492.024732][ T5834] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 492.077217][ T5834] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 492.132201][ T5834] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 492.208510][ T5834] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.268432][T11222] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 492.472678][T11250] loop7: detected capacity change from 0 to 4096 [ 492.481190][T11250] ntfs3: Unknown parameter '' [ 492.664344][ T10] usb 1-1: USB disconnect, device number 26 [ 492.664376][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 492.678990][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 494.251706][ T1206] usb 8-1: new high-speed USB device number 22 using dummy_hcd [ 494.482805][ T1206] usb 8-1: Using ep0 maxpacket: 32 [ 494.572061][ T1206] usb 8-1: config 0 has an invalid interface number: 67 but max is 0 [ 494.649727][ T1206] usb 8-1: config 0 has no interface number 0 [ 494.740115][ T1206] usb 8-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 494.840475][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.860089][T11279] binder: BINDER_SET_CONTEXT_MGR already set [ 494.915119][T11279] binder: 11278:11279 ioctl 4018620d 200000000040 returned -16 [ 494.941102][ T1206] usb 8-1: Product: syz [ 494.945315][ T1206] usb 8-1: Manufacturer: syz [ 494.949918][ T1206] usb 8-1: SerialNumber: syz [ 494.972102][T11280] binder: 11278:11280 ioctl c0185879 2000000005c0 returned -22 [ 495.052723][ T1206] usb 8-1: config 0 descriptor?? [ 495.112464][ T1206] smsc95xx v2.0.0 [ 495.360661][ T9] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 495.502820][ T1206] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 495.560779][ T1206] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 495.580485][ T9] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 495.610615][ T9] usb 7-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 495.639593][ T9] usb 7-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 495.677654][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.876624][ T1206] smsc95xx 8-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 496.151794][ T1206] smsc95xx 8-1:0.67: probe with driver smsc95xx failed with error -32 [ 496.252154][ T9] usb 7-1: config 0 descriptor?? [ 496.581111][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 496.584852][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 496.941844][ T5834] usb 8-1: USB disconnect, device number 22 [ 497.123045][T11298] loop7: detected capacity change from 0 to 4096 [ 497.130552][T11298] ntfs3: Unknown parameter '' [ 497.256544][T11296] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 497.284368][ T24] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 497.380208][T11302] loop3: detected capacity change from 0 to 4096 [ 497.412794][T11302] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 497.460584][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 497.475770][ T24] usb 5-1: config 179 has an invalid interface number: 65 but max is 0 [ 497.494450][ T24] usb 5-1: config 179 has no interface number 0 [ 497.504671][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 497.551417][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 497.563022][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 497.575588][ T24] usb 5-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 497.588886][ T24] usb 5-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 497.603023][ T1206] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 497.603745][ T24] usb 5-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 497.619929][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 497.641574][T11294] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 497.687732][T11302] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 497.851488][ T1206] usb 8-1: no configurations [ 497.857337][ T1206] usb 8-1: can't read configurations, error -22 [ 497.901093][ T5839] usb 5-1: USB disconnect, device number 22 [ 497.901098][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 497.901251][ C1] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 498.060519][ T1206] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 498.108860][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 498.129674][ T9] usb 7-1: USB disconnect, device number 24 [ 498.255551][ T1206] usb 8-1: no configurations [ 498.260278][ T1206] usb 8-1: can't read configurations, error -22 [ 498.289304][ T1206] usb usb8-port1: attempt power cycle [ 498.319975][T11324] binder: 11323:11324 ioctl c0185879 2000000005c0 returned -22 [ 498.670731][ T1206] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 498.740508][ T5839] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 498.873891][ T1206] usb 8-1: no configurations [ 498.940698][ T9] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 498.969890][ T1206] usb 8-1: can't read configurations, error -22 [ 499.120228][ T5839] usb 1-1: Using ep0 maxpacket: 16 [ 499.249398][ T5839] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.260706][ T9] usb 7-1: Using ep0 maxpacket: 32 [ 499.271574][ T5839] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 499.283808][ T5839] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 499.420802][ T1206] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 499.435304][ T9] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 499.450445][ T9] usb 7-1: config 0 has no interface number 0 [ 499.460615][ T5839] usb 1-1: config 0 descriptor?? [ 499.476388][ T1206] usb 8-1: no configurations [ 499.481176][ T1206] usb 8-1: can't read configurations, error -22 [ 499.487980][ T1206] usb usb8-port1: unable to enumerate USB device [ 499.508431][ T9] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 499.532151][ T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 499.540212][ T9] usb 7-1: Product: syz [ 499.579057][ T9] usb 7-1: Manufacturer: syz [ 499.596633][ T9] usb 7-1: SerialNumber: syz [ 499.611132][ T9] usb 7-1: config 0 descriptor?? [ 499.623840][ T9] smsc95xx v2.0.0 [ 499.639610][T11341] loop1: detected capacity change from 0 to 4096 [ 499.647095][T11341] ntfs3: Unknown parameter '' [ 499.736413][T11342] loop4: detected capacity change from 0 to 1024 [ 499.758045][T11342] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 499.780326][T11342] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 499.795486][T11342] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 499.807772][T11342] EXT4-fs (loop4): This should not happen!! Data will be lost [ 499.807772][T11342] [ 499.817462][T11342] EXT4-fs (loop4): Total free blocks count 0 [ 499.823516][T11342] EXT4-fs (loop4): Free/Dirty block details [ 499.829456][T11342] EXT4-fs (loop4): free_blocks=68451041280 [ 499.835301][T11342] EXT4-fs (loop4): dirty_blocks=32 [ 499.840474][T11342] EXT4-fs (loop4): Block reservation details [ 499.846471][T11342] EXT4-fs (loop4): i_reserved_data_blocks=2 [ 499.867065][T11343] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 499.953513][ T5839] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 499.967080][ T5839] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 499.975300][ T5839] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 499.985907][ T5839] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 499.993343][ T5839] mcp2221 0003:04D8:00DD.0005: unknown main item tag 0x0 [ 500.030600][ T5839] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 500.107365][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 500.140705][ C0] usb 1-1: input irq status -75 received [ 500.149003][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 500.428400][ T9] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 500.438515][ T5943] usb 1-1: USB disconnect, device number 27 [ 500.520540][ T9] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 500.602927][T11352] loop3: detected capacity change from 0 to 4096 [ 500.864313][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.872748][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.920797][T11352] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 501.350493][ T9] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 502.226157][T11352] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 502.290035][ T5839] usb 7-1: USB disconnect, device number 25 [ 502.398318][ T9] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 502.404298][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 502.448638][ T9] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 502.489644][ T9] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 502.519087][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.549685][ T9] usb 8-1: config 0 descriptor?? [ 503.387127][ T5943] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 503.670909][ T5943] usb 1-1: Using ep0 maxpacket: 8 [ 503.690361][ T5943] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 503.703382][ T5943] usb 1-1: config 179 has no interface number 0 [ 503.718321][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 503.753716][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 503.794673][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 504.016573][T11391] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.034390][ T5943] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 504.046117][ T5943] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 504.059940][ T5943] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 504.069029][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.092491][T11371] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 504.181002][T11396] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1596'. [ 504.190720][ T5834] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 504.488144][ T5834] usb 2-1: Using ep0 maxpacket: 32 [ 504.885456][ T24] usb 1-1: USB disconnect, device number 28 [ 504.885533][ C1] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 504.885582][ C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 505.125785][ T5834] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 505.136106][ T5834] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.150486][ T5834] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 505.160359][ T5834] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.185267][ T5834] usb 2-1: config 0 descriptor?? [ 505.980239][ T43] usb 8-1: USB disconnect, device number 27 [ 506.334452][ T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 506.500603][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 506.517371][ T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 506.535424][ T9] usb 4-1: config 0 has no interface number 0 [ 506.563391][ T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 506.589549][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.632813][ T9] usb 4-1: Product: syz [ 506.657538][ T9] usb 4-1: Manufacturer: syz [ 506.670563][ T9] usb 4-1: SerialNumber: syz [ 506.704237][ T9] usb 4-1: config 0 descriptor?? [ 506.730180][ T9] smsc95xx v2.0.0 [ 507.170796][ T43] usb 2-1: USB disconnect, device number 40 [ 507.414221][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 507.436438][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 507.668853][ T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 507.706700][ T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32 [ 507.729556][T11399] loop6: detected capacity change from 0 to 65536 [ 507.797731][T11399] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 507.853151][T11399] XFS (loop6): AIL initialisation failed: error -12 [ 507.983631][T11399] XFS (loop6): log mount failed [ 508.308790][T11450] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1613'. [ 509.031318][ T5834] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 509.173840][ T5839] usb 4-1: USB disconnect, device number 19 [ 509.241576][ T5834] usb 8-1: Using ep0 maxpacket: 16 [ 509.262097][ T5834] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 509.294240][ T5834] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 509.320485][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.351198][ T5834] usb 8-1: config 0 descriptor?? [ 509.409899][ T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 509.611045][ T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 509.641543][ T24] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 509.670380][ T24] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 509.741590][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 509.790784][ T24] usb 2-1: config 0 descriptor?? [ 509.813464][ T5834] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 509.850732][ T5834] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 509.862090][ T5834] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 509.879571][ T5834] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 509.888240][ T5834] mcp2221 0003:04D8:00DD.0006: unknown main item tag 0x0 [ 509.897593][ T5834] mcp2221 0003:04D8:00DD.0006: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 510.037250][ C1] usb 8-1: input irq status -75 received [ 510.140397][ T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 510.334919][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 510.508614][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 510.552911][ T1206] usb 8-1: USB disconnect, device number 28 [ 510.783546][ T9] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 510.839995][ T9] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 510.900427][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 510.986608][T11481] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1625'. [ 511.000007][ T9] usb 4-1: config 0 descriptor?? [ 511.007225][T11481] netlink: 'syz.4.1625': attribute type 18 has an invalid length. [ 511.034611][T11481] netlink: 'syz.4.1625': attribute type 18 has an invalid length. [ 511.052452][T11481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1625'. [ 511.338844][T11496] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1631'. [ 511.540515][ T24] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 511.898370][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 511.991568][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 511.999842][ T24] usb 5-1: config 0 has no interface number 0 [ 512.043435][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 512.058580][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 512.221360][ T24] usb 5-1: Product: syz [ 512.246429][ T24] usb 5-1: Manufacturer: syz [ 512.260683][ T24] usb 5-1: SerialNumber: syz [ 512.312598][ T24] usb 5-1: config 0 descriptor?? [ 512.341993][ T24] smsc95xx v2.0.0 [ 512.353051][ T5943] usb 2-1: USB disconnect, device number 41 [ 512.747368][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 512.773205][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 512.781539][ T9] usb 4-1: USB disconnect, device number 20 [ 512.999434][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 513.028722][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 513.904746][T11493] loop7: detected capacity change from 0 to 65536 [ 514.044856][T11493] XFS (loop7): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 514.169379][T11544] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1643'. [ 514.205302][T11493] XFS (loop7): Ending clean mount [ 514.236825][T11544] netlink: 'syz.1.1643': attribute type 18 has an invalid length. [ 514.247144][T11544] netlink: 'syz.1.1643': attribute type 18 has an invalid length. [ 514.255252][T11544] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1643'. [ 514.330527][ T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 514.399365][T11549] binder: 11548:11549 ioctl 4018620d 0 returned -22 [ 514.417346][T11549] binder: 11548:11549 ioctl c0185879 2000000005c0 returned -22 [ 514.438085][ T1206] usb 5-1: USB disconnect, device number 23 [ 514.520402][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 514.547998][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.582619][ T9] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 514.609236][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 514.698091][ T9] usb 4-1: config 0 descriptor?? [ 514.798865][T11553] loop4: detected capacity change from 0 to 512 [ 514.811355][T11553] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 514.842891][T11553] EXT4-fs (loop4): 1 truncate cleaned up [ 514.877132][T11553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.490559][T11566] loop6: detected capacity change from 0 to 512 [ 515.504972][T11566] EXT4-fs: Ignoring removed bh option [ 516.041054][ T9] mcp2221 0003:04D8:00DD.0007: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 516.066208][T11566] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 516.075329][T11566] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 516.103815][T11566] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 516.113706][T11566] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 516.123937][T11566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 516.245760][ T9] usb 4-1: USB disconnect, device number 21 [ 516.270800][ T6597] XFS (loop7): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 516.283565][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.301362][ T5904] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 516.483474][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 516.535636][ T6545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 516.545559][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 516.610450][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 516.694217][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 516.745527][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 516.788182][ T5904] usb 1-1: config 0 descriptor?? [ 516.797932][T11574] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1656'. [ 516.855240][ T5904] hub 1-1:0.0: bad descriptor, ignoring hub [ 516.892370][ T5904] hub 1-1:0.0: probe with driver hub failed with error -5 [ 516.947317][ T5904] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 517.610761][ T24] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 518.040415][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 518.047746][ T24] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 518.057454][ T24] usb 5-1: config 0 has no interface number 0 [ 518.110391][ T1206] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 518.111325][ T24] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 518.351232][ T1206] usb 4-1: Using ep0 maxpacket: 32 [ 518.459885][ T1206] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 518.606656][ T1206] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 518.655986][ T1206] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 518.691870][ T1206] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 518.701475][ T9] usb 1-1: USB disconnect, device number 29 [ 518.735099][ T1206] usb 4-1: config 0 descriptor?? [ 518.766621][ T1206] hub 4-1:0.0: bad descriptor, ignoring hub [ 518.792464][ T1206] hub 4-1:0.0: probe with driver hub failed with error -5 [ 518.810986][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 518.819017][ T24] usb 5-1: Product: syz [ 518.837331][ T24] usb 5-1: Manufacturer: syz [ 518.842011][ T24] usb 5-1: SerialNumber: syz [ 518.867265][ T24] usb 5-1: config 0 descriptor?? [ 518.896254][ T1206] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 518.896353][ T24] smsc95xx v2.0.0 [ 519.015474][T11606] loop1: detected capacity change from 0 to 4096 [ 519.080025][T11606] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 519.420461][T11616] loop0: detected capacity change from 0 to 512 [ 519.434949][T11616] EXT4-fs: Ignoring removed bh option [ 519.836948][ T1206] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 519.857170][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 519.889884][T11616] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 519.899451][T11616] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem [ 519.912894][T11606] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 519.970193][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 520.079311][T11616] EXT4-fs (loop0): warning: mounting unchecked fs, running e2fsck is recommended [ 520.089947][T11616] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 520.100020][T11616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 520.240638][ T1206] usb 7-1: Using ep0 maxpacket: 16 [ 520.268881][ T1206] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 520.478583][ T24] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 520.633562][ T24] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 520.642994][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.650950][ T1206] usb 7-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 520.752599][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.767164][ T1206] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 520.839465][ T1206] usb 7-1: config 0 descriptor?? [ 520.930910][ T5904] usb 4-1: USB disconnect, device number 22 [ 520.949379][T11625] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1674'. [ 521.344361][ T1206] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.6-1/input0 [ 522.266040][ T5904] usb 5-1: USB disconnect, device number 24 [ 522.304609][ T1206] usb 7-1: USB disconnect, device number 26 [ 522.515651][T11648] loop0: detected capacity change from 0 to 4096 [ 522.522964][T11648] ntfs3: Unknown parameter '' [ 523.774681][T11657] loop3: detected capacity change from 0 to 1024 [ 524.007418][T11663] loop6: detected capacity change from 0 to 512 [ 524.021333][T11663] EXT4-fs: Ignoring removed bh option [ 524.507920][T11663] EXT4-fs (loop6): feature flags set on rev 0 fs, running e2fsck is recommended [ 524.517068][T11663] EXT4-fs (loop6): mounting ext2 file system using the ext4 subsystem [ 524.554084][T11663] EXT4-fs (loop6): warning: mounting unchecked fs, running e2fsck is recommended [ 524.566162][T11663] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 524.586144][T11663] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.650433][T11661] loop1: detected capacity change from 0 to 4096 [ 524.748500][T11661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 524.885206][ T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 524.912414][ T6545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.039167][ T5943] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 525.100495][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 525.140777][ T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 525.173569][T11661] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 525.204581][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 525.253323][ T24] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 525.262674][T11678] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1689'. [ 525.262879][ T5943] usb 1-1: Using ep0 maxpacket: 32 [ 525.309336][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.525082][ T24] usb 4-1: Product: syz [ 525.529547][ T24] usb 4-1: Manufacturer: syz [ 525.535430][ T5943] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 525.548691][ T24] usb 4-1: SerialNumber: syz [ 525.554777][ T5943] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 525.564763][ T24] usb 4-1: config 0 descriptor?? [ 525.570959][ T5943] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.787432][ T24] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 526.082968][ T5943] usb 1-1: config 0 descriptor?? [ 526.373888][ T5943] hub 1-1:0.0: bad descriptor, ignoring hub [ 526.388908][ T5943] hub 1-1:0.0: probe with driver hub failed with error -5 [ 526.403452][ T5943] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 526.524930][T11691] loop7: detected capacity change from 0 to 2048 [ 526.745531][T11691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 526.809754][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 526.820495][ T5943] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 526.854625][T11691] netlink: 'syz.7.1695': attribute type 4 has an invalid length. [ 527.001389][ T5943] usb 5-1: Using ep0 maxpacket: 32 [ 527.047486][ T5943] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 527.073467][ T5943] usb 5-1: config 0 has no interface number 0 [ 527.094849][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.101639][ T5943] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 527.129948][ T5943] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 527.154442][ T5943] usb 5-1: Product: syz [ 527.384729][ T5943] usb 5-1: Manufacturer: syz [ 527.389391][ T5943] usb 5-1: SerialNumber: syz [ 527.398387][ T5943] usb 5-1: config 0 descriptor?? [ 527.410977][ T5943] smsc95xx v2.0.0 [ 527.471042][ T10] usb 8-1: new high-speed USB device number 29 using dummy_hcd [ 527.543994][ T24] usb 4-1: USB disconnect, device number 23 [ 527.569199][T11710] loop6: detected capacity change from 0 to 512 [ 527.592902][T11710] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 527.661473][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 527.683591][T11710] fuse: Bad value for 'fd' [ 527.693871][ T10] usb 8-1: config 179 has an invalid interface number: 65 but max is 0 [ 527.766975][ T10] usb 8-1: config 179 has no interface number 0 [ 527.817139][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 527.919545][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 527.931271][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 527.948308][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 527.990997][ T1206] usb 1-1: USB disconnect, device number 30 [ 528.156622][T11718] loop1: detected capacity change from 0 to 512 [ 528.171637][T11718] EXT4-fs: Ignoring removed bh option [ 528.207139][ T5943] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 528.245297][T11718] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 528.254537][T11718] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 528.364098][T11718] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended [ 528.377118][T11718] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=c002e01c, mo2=0006] [ 528.401325][T11718] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 528.609146][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 528.622868][ T10] usb 8-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 528.628044][ T6545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.644840][T11717] loop3: detected capacity change from 0 to 512 [ 528.671366][T11717] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 528.741574][T11717] EXT4-fs (loop3): group descriptors corrupted! [ 528.760641][ T10] usb 8-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 528.770677][ T5943] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32 [ 528.847914][ T10] usb 8-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 528.899074][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 528.964648][T11706] raw-gadget.3 gadget.7: fail, usb_ep_enable returned -22 [ 529.069252][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.645027][ T1206] usb 8-1: USB disconnect, device number 29 [ 529.645095][ C0] xpad 8-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 529.659335][ C0] xpad 8-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 530.598700][ T24] usb 5-1: USB disconnect, device number 25 [ 530.806466][T11749] loop4: detected capacity change from 0 to 4096 [ 530.881912][T11751] loop7: detected capacity change from 0 to 2048 [ 530.950045][T11749] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 531.059561][T11751] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 531.693614][ T6028] Bluetooth: Error in BCSP hdr checksum [ 531.934600][T11751] netlink: 'syz.7.1712': attribute type 4 has an invalid length. [ 531.957830][ T192] Bluetooth: Error in BCSP hdr checksum [ 531.993411][T11764] loop0: detected capacity change from 0 to 1024 [ 532.280263][ T5834] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 532.320489][T11770] loop1: detected capacity change from 0 to 512 [ 532.392829][T11770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 532.457739][T11770] fuse: Bad value for 'fd' [ 532.474088][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.496102][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.526666][ T5834] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 532.558685][ T5834] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 532.602115][ T24] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 532.622759][ T5834] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.677356][ T5834] usb 4-1: config 0 descriptor?? [ 532.734796][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 532.791076][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 532.791711][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 532.823843][ T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 532.879255][ T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 532.905820][T11774] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 532.942770][ T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.981072][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 533.028885][ T24] usb 1-1: Product: syz [ 533.040993][ T24] usb 1-1: Manufacturer: syz [ 533.056836][T11780] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1721'. [ 533.078037][ T24] usb 1-1: SerialNumber: syz [ 533.079442][T11779] loop1: detected capacity change from 0 to 512 [ 533.105838][T11780] netlink: 'syz.7.1721': attribute type 18 has an invalid length. [ 533.123411][T11779] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 533.125238][ T24] usb 1-1: config 0 descriptor?? [ 533.159138][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 533.166246][T11780] netlink: 'syz.7.1721': attribute type 18 has an invalid length. [ 533.171818][T11779] EXT4-fs (loop1): group descriptors corrupted! [ 533.182147][ T5834] pwc: recv_control_msg error -32 req 02 val 2700 [ 533.191442][T11780] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1721'. [ 533.205825][ T5834] pwc: recv_control_msg error -32 req 02 val 2c00 [ 533.215147][ T24] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 533.300637][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 533.445845][ T5834] pwc: recv_control_msg error -32 req 04 val 1000 [ 533.453500][ T5834] pwc: recv_control_msg error -32 req 04 val 1300 [ 533.473699][ T5834] pwc: recv_control_msg error -32 req 04 val 1400 [ 533.481992][ T5834] pwc: recv_control_msg error -71 req 02 val 2000 [ 533.501434][ T5834] pwc: recv_control_msg error -71 req 02 val 2100 [ 533.884749][ T5834] pwc: recv_control_msg error -71 req 04 val 1500 [ 533.900564][ T5834] pwc: recv_control_msg error -71 req 02 val 2500 [ 533.907418][ T5834] pwc: recv_control_msg error -71 req 02 val 2400 [ 533.920841][ T5834] pwc: recv_control_msg error -71 req 02 val 2600 [ 533.935950][T11792] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1723'. [ 533.940470][ T5834] pwc: recv_control_msg error -71 req 02 val 2900 [ 533.960778][ T5834] pwc: recv_control_msg error -71 req 02 val 2800 [ 533.966184][T11791] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1723'. [ 533.970466][ T5834] pwc: recv_control_msg error -71 req 04 val 1100 [ 533.997024][T11792] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1723'. [ 534.006471][ T5834] pwc: recv_control_msg error -71 req 04 val 1200 [ 534.022437][ T5834] pwc: Registered as video103. [ 534.031326][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input69 [ 534.193737][T11795] loop3: detected capacity change from 0 to 4096 [ 534.201210][T11795] ntfs3: Unknown parameter '' [ 534.237684][ T5834] usb 4-1: USB disconnect, device number 24 [ 534.843400][ T24] usb 1-1: USB disconnect, device number 31 [ 535.498826][T11811] loop0: detected capacity change from 0 to 4096 [ 535.641259][T11811] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 536.013672][T11811] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 536.062539][T11822] qrtr: Invalid version 0 [ 536.071741][T11824] loop6: detected capacity change from 0 to 512 [ 536.157108][T11824] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 536.552629][ T6545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.801215][T11830] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1735'. [ 536.825673][T11830] netlink: 'syz.6.1735': attribute type 18 has an invalid length. [ 536.859501][T11830] netlink: 'syz.6.1735': attribute type 18 has an invalid length. [ 536.888340][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1735'. [ 537.070933][ T10] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 537.169969][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1737'. [ 537.207419][T11834] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1737'. [ 537.244868][T11835] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1737'. [ 537.286503][ T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 537.331763][ T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 537.369897][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 537.409785][ T10] usb 2-1: config 0 descriptor?? [ 537.441861][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 537.598633][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.608020][T11837] loop6: detected capacity change from 0 to 512 [ 537.643354][T11837] EXT4-fs (loop6): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 537.705676][T11837] EXT4-fs (loop6): group descriptors corrupted! [ 537.798284][T11840] loop4: detected capacity change from 0 to 1024 [ 537.875274][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 537.902652][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 537.922502][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 537.939622][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 537.967605][ T10] pwc: recv_control_msg error -32 req 04 val 1300 [ 537.982418][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 538.081018][ T10] pwc: recv_control_msg error -71 req 02 val 2000 [ 538.149458][ T10] pwc: recv_control_msg error -71 req 02 val 2100 [ 538.211215][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 538.268008][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 538.304425][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 538.311471][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 538.350960][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 538.388159][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 538.421364][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 538.480854][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 538.490523][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 538.527901][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 538.544011][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 538.565902][ T10] pwc: Registered as video103. [ 538.591610][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 538.611388][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input70 [ 538.686795][ T9] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 538.708282][ T10] usb 2-1: USB disconnect, device number 42 [ 538.721396][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.760011][ T9] usb 5-1: Product: syz [ 538.782273][ T9] usb 5-1: Manufacturer: syz [ 538.806156][ T9] usb 5-1: SerialNumber: syz [ 538.872489][ T9] usb 5-1: config 0 descriptor?? [ 539.891755][ T9] em28xx 5-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 540.779080][T11872] qrtr: Invalid version 0 [ 540.899637][T11874] binder: BINDER_SET_CONTEXT_MGR already set [ 540.908406][T11874] binder: 11873:11874 ioctl 4018620d 200000000040 returned -16 [ 540.925998][T11874] binder: 11873:11874 ioctl c0185879 2000000005c0 returned -22 [ 541.134112][T11877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1750'. [ 541.167749][T11876] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1750'. [ 541.198939][T11877] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1750'. [ 541.609382][ T5834] usb 5-1: USB disconnect, device number 26 [ 541.808983][T11881] loop6: detected capacity change from 0 to 8192 [ 542.094899][ T24] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 542.431674][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 542.450398][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 543.032071][ T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 543.050504][ T24] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 543.059563][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 543.085611][T11895] loop4: detected capacity change from 0 to 512 [ 543.095637][ T24] usb 4-1: config 0 descriptor?? [ 543.129292][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 543.140517][T11895] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 543.208646][T11895] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 543.260563][T11897] loop0: detected capacity change from 0 to 512 [ 543.282411][T11897] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 543.299409][T11897] EXT4-fs (loop0): group descriptors corrupted! [ 543.378069][T11895] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 543.448442][T11895] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 543.490869][T11895] System zones: 0-2, 18-18, 34-34 [ 543.537232][T11895] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.1756: iget: bad i_size value: 360287970189639680 [ 543.620479][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 543.642410][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 543.645486][T11895] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.1756: couldn't read orphan inode 15 (err -117) [ 543.662762][ T24] pwc: recv_control_msg error -32 req 02 val 2c00 [ 543.671288][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 543.679950][T11895] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.696492][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 543.704167][ T24] pwc: recv_control_msg error -32 req 04 val 1400 [ 543.720866][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 543.745887][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 543.771965][T11895] EXT4-fs error (device loop4): ext4_lookup:1787: inode #15: comm syz.4.1756: iget: bad i_size value: 360287970189639680 [ 543.785692][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 543.810664][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 543.840446][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 543.868143][T11906] EXT4-fs error (device loop4): ext4_find_dest_de:2052: inode #2: block 3: comm syz.4.1756: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 543.878865][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 543.907284][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 543.921530][T11907] loop7: detected capacity change from 0 to 2048 [ 543.958552][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 543.967702][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 543.985101][T11907] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.002385][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 544.042620][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.065759][ T24] pwc: Registered as video103. [ 544.083019][T11912] loop1: detected capacity change from 0 to 2048 [ 544.088070][T11907] netlink: 'syz.7.1760': attribute type 4 has an invalid length. [ 544.286316][T11912] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 544.313994][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input72 [ 544.410436][ T24] usb 4-1: USB disconnect, device number 25 [ 544.992153][T11912] netlink: 'syz.1.1761': attribute type 4 has an invalid length. [ 545.228814][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.402381][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 545.441186][ T9] usb 1-1: new full-speed USB device number 32 using dummy_hcd [ 546.400356][ T9] usb 1-1: config 0 has an invalid interface number: 128 but max is 0 [ 546.408579][ T9] usb 1-1: config 0 has no interface number 0 [ 546.432796][ T9] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 546.445566][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.456085][ T9] usb 1-1: Product: syz [ 546.460923][ T9] usb 1-1: Manufacturer: syz [ 546.465838][ T9] usb 1-1: SerialNumber: syz [ 546.706279][ T9] usb 1-1: config 0 descriptor?? [ 546.724756][T11939] binder: BINDER_SET_CONTEXT_MGR already set [ 546.746865][T11939] binder: 11936:11939 ioctl 4018620d 200000000040 returned -16 [ 547.757540][T11951] binder: 11936:11951 ioctl c0185879 2000000005c0 returned -22 [ 548.333931][ T9] usb 1-1: Firmware version (0.0) predates our first public release. [ 548.343020][ T9] usb 1-1: Please update to version 0.2 or newer [ 548.469952][T11956] loop4: detected capacity change from 0 to 4096 [ 548.477582][T11956] ntfs3: Unknown parameter '' [ 548.846540][ T9] usb 1-1: USB disconnect, device number 32 [ 549.122009][T11964] loop3: detected capacity change from 0 to 512 [ 549.130078][T11964] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 549.156167][T11964] EXT4-fs (loop3): group descriptors corrupted! [ 549.760476][ T1206] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 550.429735][T11976] loop4: detected capacity change from 0 to 65536 [ 550.803744][ T5850] Bluetooth: hci3: command 0x1003 tx timeout [ 550.810464][ T5840] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 550.847259][ T1206] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 551.038669][ T1206] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 551.048084][ T1206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 551.069184][ T1206] usb 2-1: config 0 descriptor?? [ 551.148890][ T1206] pwc: Askey VC010 type 2 USB webcam detected. [ 551.185863][T11976] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 551.229141][T11976] XFS (loop4): Ending clean mount [ 551.299491][T11995] loop0: detected capacity change from 0 to 512 [ 551.360716][T11995] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 551.428283][T11995] EXT4-fs (loop0): group descriptors corrupted! [ 551.440585][T11976] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 551.451614][T11976] XFS (loop4): Unmount and run xfs_repair [ 551.457385][T11976] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 551.464928][T11976] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 551.473934][T11976] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 551.482936][T11976] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 551.493885][T11976] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 551.502820][T11976] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 551.513049][T11976] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 551.522008][T11976] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 551.530964][T11976] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 551.540163][T11976] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 551.559438][T11976] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 551.574160][T11976] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 551.582933][ T1206] pwc: recv_control_msg error -32 req 02 val 2b00 [ 551.632178][ T1206] pwc: recv_control_msg error -32 req 02 val 2700 [ 551.682933][ T1206] pwc: recv_control_msg error -32 req 02 val 2c00 [ 551.714757][ T1206] pwc: recv_control_msg error -32 req 04 val 1000 [ 551.745653][ T1206] pwc: recv_control_msg error -32 req 04 val 1300 [ 551.771819][ T1206] pwc: recv_control_msg error -32 req 04 val 1400 [ 551.790722][ T1206] pwc: recv_control_msg error -71 req 02 val 2000 [ 551.809773][ T1206] pwc: recv_control_msg error -71 req 02 val 2100 [ 551.827625][ T5833] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 552.830762][ T1206] pwc: recv_control_msg error -71 req 04 val 1500 [ 552.838935][ T1206] pwc: recv_control_msg error -71 req 02 val 2500 [ 552.847042][ T1206] pwc: recv_control_msg error -71 req 02 val 2400 [ 552.854070][ T1206] pwc: recv_control_msg error -71 req 02 val 2600 [ 552.861282][ T1206] pwc: recv_control_msg error -71 req 02 val 2900 [ 552.869401][ T1206] pwc: recv_control_msg error -71 req 02 val 2800 [ 552.876642][ T1206] pwc: recv_control_msg error -71 req 04 val 1100 [ 553.315237][ T1206] pwc: recv_control_msg error -71 req 04 val 1200 [ 553.345810][ T1206] pwc: Registered as video103. [ 553.368167][ T1206] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input76 [ 553.507972][ T1206] usb 2-1: USB disconnect, device number 43 [ 553.609896][T12016] loop6: detected capacity change from 0 to 512 [ 553.751684][T12016] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 553.777840][T12009] loop3: detected capacity change from 0 to 4096 [ 553.993362][T12024] loop0: detected capacity change from 0 to 2048 [ 554.092530][T12022] loop1: detected capacity change from 0 to 4096 [ 554.115355][T12024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.168626][T12032] loop7: detected capacity change from 0 to 512 [ 554.237052][T12034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 554.263044][ T1206] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 554.286327][T12024] netlink: 'syz.0.1793': attribute type 4 has an invalid length. [ 554.298660][T12032] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 554.354721][T12032] EXT4-fs (loop7): group descriptors corrupted! [ 554.450743][ T1206] usb 5-1: device descriptor read/64, error -71 [ 554.495919][ T6545] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.720854][ T1206] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 554.754628][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.920681][ T1206] usb 5-1: device descriptor read/64, error -71 [ 555.071157][ T1206] usb usb5-port1: attempt power cycle [ 555.156534][T12042] loop0: detected capacity change from 0 to 2048 [ 555.261072][T12042] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 555.682497][ T13] Bluetooth: Error in BCSP hdr checksum [ 555.890386][ T1206] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 555.899360][T12042] netlink: 'syz.0.1799': attribute type 4 has an invalid length. [ 555.932647][ T1206] usb 5-1: device descriptor read/8, error -71 [ 556.138446][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 556.180627][ T1206] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 556.240981][ T1206] usb 5-1: device descriptor read/8, error -71 [ 556.381070][ T1206] usb usb5-port1: unable to enumerate USB device [ 556.750766][ T24] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 556.758684][ T5834] usb 8-1: new high-speed USB device number 30 using dummy_hcd [ 556.987587][T12061] loop0: detected capacity change from 0 to 2048 [ 557.010615][ T24] usb 7-1: Using ep0 maxpacket: 32 [ 557.032826][ T5834] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 557.062739][ T24] usb 7-1: config 0 has an invalid interface number: 67 but max is 0 [ 557.096791][ T5834] usb 8-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 557.109143][ T24] usb 7-1: config 0 has no interface number 0 [ 557.136231][T12061] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 557.159154][ T5834] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 557.190735][ T24] usb 7-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 557.210427][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 557.218442][ T24] usb 7-1: Product: syz [ 557.225975][ T24] usb 7-1: Manufacturer: syz [ 557.230848][ T24] usb 7-1: SerialNumber: syz [ 557.236595][T12061] netlink: 'syz.0.1803': attribute type 4 has an invalid length. [ 557.254129][ T5834] usb 8-1: config 0 descriptor?? [ 557.273362][ T5834] pwc: Askey VC010 type 2 USB webcam detected. [ 557.289375][ T24] usb 7-1: config 0 descriptor?? [ 557.306778][ T24] smsc95xx v2.0.0 [ 557.404222][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.463189][T11983] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 558.265170][ T5834] pwc: recv_control_msg error -32 req 02 val 2b00 [ 558.495242][ T5834] pwc: recv_control_msg error -32 req 02 val 2700 [ 558.510511][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 558.530951][ T5834] pwc: recv_control_msg error -32 req 02 val 2c00 [ 558.709823][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 558.723223][ T5834] pwc: recv_control_msg error -32 req 04 val 1000 [ 558.732042][ T5834] pwc: recv_control_msg error -32 req 04 val 1300 [ 558.750825][ T5834] pwc: recv_control_msg error -32 req 04 val 1400 [ 558.757496][ T24] smsc95xx 7-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 558.781340][ T5834] pwc: recv_control_msg error -71 req 02 val 2000 [ 558.788203][ T24] smsc95xx 7-1:0.67: probe with driver smsc95xx failed with error -32 [ 558.800781][ T5834] pwc: recv_control_msg error -71 req 02 val 2100 [ 558.820284][ T5834] pwc: recv_control_msg error -71 req 04 val 1500 [ 559.080442][ T5834] pwc: recv_control_msg error -71 req 02 val 2500 [ 559.097926][ T5834] pwc: recv_control_msg error -71 req 02 val 2400 [ 560.075436][ T5834] pwc: recv_control_msg error -71 req 02 val 2600 [ 560.782083][ T5834] pwc: recv_control_msg error -71 req 02 val 2900 [ 560.800597][ T5834] pwc: recv_control_msg error -71 req 02 val 2800 [ 560.811486][ T5834] pwc: recv_control_msg error -71 req 04 val 1100 [ 560.830426][ T5834] pwc: recv_control_msg error -71 req 04 val 1200 [ 560.850712][ T5834] pwc: Registered as video103. [ 560.857711][ T5834] input: PWC snapshot button as /devices/platform/dummy_hcd.7/usb8/8-1/input/input79 [ 560.887373][ T5834] usb 8-1: USB disconnect, device number 30 [ 560.924864][T12098] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1815'. [ 560.933932][T12098] netlink: 'syz.7.1815': attribute type 18 has an invalid length. [ 560.941804][T12098] netlink: 'syz.7.1815': attribute type 18 has an invalid length. [ 560.950364][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1815'. [ 561.024763][T12101] loop1: detected capacity change from 0 to 512 [ 561.053808][T12101] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 561.110970][T12101] EXT4-fs (loop1): group descriptors corrupted! [ 561.176053][ T24] usb 7-1: USB disconnect, device number 27 [ 562.101372][T11983] Bluetooth: hci3: command 0x1003 tx timeout [ 562.112089][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 562.534293][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.540707][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.819822][ T24] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 562.878416][T12124] binder: BINDER_SET_CONTEXT_MGR already set [ 562.905471][T12124] binder: 12123:12124 ioctl 4018620d 200000000040 returned -16 [ 562.998557][T12130] binder: 12123:12130 ioctl c0185879 2000000005c0 returned -22 [ 563.132768][ T24] usb 7-1: device descriptor read/64, error -71 [ 564.207829][ T24] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 564.812847][ T24] usb 7-1: device descriptor read/64, error -71 [ 564.974889][ T24] usb usb7-port1: attempt power cycle [ 565.100458][ T9] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 565.278139][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 565.380721][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 565.388511][T11983] Bluetooth: hci3: command 0x1003 tx timeout [ 566.145616][T12159] loop7: detected capacity change from 0 to 512 [ 566.175330][T12159] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 566.217740][ T9] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 566.230416][T12159] EXT4-fs (loop7): group descriptors corrupted! [ 566.265562][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 566.315344][ T9] usb 2-1: config 0 descriptor?? [ 566.549307][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 566.990255][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 567.039037][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 567.048947][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 567.697150][T12175] loop0: detected capacity change from 0 to 512 [ 568.044978][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 568.058076][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 568.065950][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 568.073031][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 568.121239][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 568.138913][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 568.170235][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 568.219334][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 568.232466][T12175] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 568.307628][T12175] EXT4-fs (loop0): orphan cleanup on readonly fs [ 568.326301][T12175] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1839: bg 0: block 248: padding at end of block bitmap is not set [ 568.343992][T12175] Quota error (device loop0): write_blk: dquota write failed [ 568.352624][T12175] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 568.362956][T12175] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1839: Failed to acquire dquot type 1 [ 568.398286][T12175] EXT4-fs (loop0): 1 truncate cleaned up [ 568.434109][T12175] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 568.588809][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 568.958609][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 568.966122][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 568.981247][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 568.997702][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 569.008999][ T9] pwc: Registered as video103. [ 569.016521][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input83 [ 569.030756][ T9] usb 2-1: USB disconnect, device number 44 [ 569.550543][ T10] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 569.722128][ T10] usb 7-1: device descriptor read/64, error -71 [ 570.327477][ T9] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 571.180275][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 571.192706][ T10] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 571.360893][ T9] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 571.428493][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.436889][ T10] usb 7-1: device descriptor read/64, error -71 [ 572.313559][ T10] usb usb7-port1: attempt power cycle [ 572.344413][ T9] usb 2-1: Product: syz [ 572.401830][ T9] usb 2-1: Manufacturer: syz [ 572.602756][ T9] usb 2-1: SerialNumber: syz [ 572.870512][ T9] usb 2-1: can't set config #1, error -71 [ 572.888214][ T9] usb 2-1: USB disconnect, device number 45 [ 572.934770][T12216] loop1: detected capacity change from 0 to 512 [ 572.975773][T12216] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 573.006950][T12216] EXT4-fs (loop1): group descriptors corrupted! [ 573.194396][T11983] Bluetooth: hci3: command 0x1003 tx timeout [ 573.200433][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 573.548706][T12228] loop0: detected capacity change from 0 to 512 [ 573.576752][T12228] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 575.086712][T12228] EXT4-fs (loop0): orphan cleanup on readonly fs [ 576.010661][T12228] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1855: bg 0: block 248: padding at end of block bitmap is not set [ 576.041685][T12228] Quota error (device loop0): write_blk: dquota write failed [ 576.049773][T12228] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 576.060065][T12228] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1855: Failed to acquire dquot type 1 [ 576.216355][T12228] EXT4-fs (loop0): 1 truncate cleaned up [ 576.242188][T12228] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 577.142454][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 577.415020][T12244] loop6: detected capacity change from 0 to 4096 [ 578.334953][T12254] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 579.890520][ T1206] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 580.761146][ T1206] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 580.777889][ T1206] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.094092][ T1206] usb 4-1: Product: syz [ 581.120418][ T1206] usb 4-1: Manufacturer: syz [ 581.125046][ T1206] usb 4-1: SerialNumber: syz [ 581.210716][ T1206] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 581.272092][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 582.780445][T12290] loop1: detected capacity change from 0 to 512 [ 582.874957][T12291] loop0: detected capacity change from 0 to 512 [ 584.800375][T12291] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 585.160944][T11983] Bluetooth: hci3: command 0x1003 tx timeout [ 585.167424][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 585.198764][T12291] EXT4-fs (loop0): orphan cleanup on readonly fs [ 585.205793][T12290] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 585.220014][T12291] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1870: bg 0: block 248: padding at end of block bitmap is not set [ 585.236058][T12291] Quota error (device loop0): write_blk: dquota write failed [ 585.243815][T12291] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 585.254029][T12291] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1870: Failed to acquire dquot type 1 [ 585.284711][T12291] EXT4-fs (loop0): 1 truncate cleaned up [ 585.359847][T12290] EXT4-fs (loop1): group descriptors corrupted! [ 587.234490][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 588.663084][ T9] ath9k_htc: Failed to initialize the device [ 588.670717][ C0] sched: DL replenish lagged too much [ 589.946140][ T1206] usb 4-1: USB disconnect, device number 26 [ 589.970603][ T1206] usb 4-1: ath9k_htc: USB layer deinitialized [ 589.973131][T12291] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 590.580448][ T5846] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 591.352760][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 592.595800][T12321] loop1: detected capacity change from 0 to 512 [ 592.939048][T12321] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 592.985568][T12321] EXT4-fs (loop1): orphan cleanup on readonly fs [ 593.010850][T12321] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1881: bg 0: block 248: padding at end of block bitmap is not set [ 593.028108][T12321] Quota error (device loop1): write_blk: dquota write failed [ 593.036252][T12321] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota [ 593.046683][T12321] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.1881: Failed to acquire dquot type 1 [ 593.117164][T12321] EXT4-fs (loop1): 1 truncate cleaned up [ 593.555536][T12321] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 595.675124][T12339] loop0: detected capacity change from 0 to 512 [ 595.694686][T12339] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 595.762838][T12323] loop3: detected capacity change from 0 to 2048 [ 595.783236][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 595.794372][ T9] usb 8-1: new high-speed USB device number 31 using dummy_hcd [ 595.809230][T12339] EXT4-fs (loop0): orphan cleanup on readonly fs [ 595.827372][T12339] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1876: bg 0: block 248: padding at end of block bitmap is not set [ 595.885327][T12339] Quota error (device loop0): write_blk: dquota write failed [ 595.893727][T12339] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 595.904026][T12339] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1876: Failed to acquire dquot type 1 [ 595.922950][T12339] EXT4-fs (loop0): 1 truncate cleaned up [ 596.098909][T12339] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 596.646387][ T9] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 596.687904][ T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.760592][ T9] usb 8-1: Product: syz [ 596.789269][ T9] usb 8-1: Manufacturer: syz [ 596.820533][ T9] usb 8-1: SerialNumber: syz [ 596.896470][ T9] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 596.925251][ T5904] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 599.266348][ T5904] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 599.992917][ T5904] ath9k_htc: Failed to initialize the device [ 600.210189][ T9] usb 8-1: USB disconnect, device number 31 [ 600.230426][ T9] usb 8-1: ath9k_htc: USB layer deinitialized [ 600.247118][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 601.082612][T12361] loop3: detected capacity change from 0 to 512 [ 601.125351][T12361] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 601.166129][T12361] EXT4-fs (loop3): orphan cleanup on readonly fs [ 601.184846][T12361] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1891: bg 0: block 248: padding at end of block bitmap is not set [ 601.201797][T12361] Quota error (device loop3): write_blk: dquota write failed [ 601.209845][T12361] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 601.220254][T12361] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.1891: Failed to acquire dquot type 1 [ 601.249794][T12361] EXT4-fs (loop3): 1 truncate cleaned up [ 601.277552][T12361] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 605.510754][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 606.987264][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 607.521826][T12398] loop7: detected capacity change from 0 to 2048 [ 607.659005][T12398] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 608.562921][ T5904] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 608.701515][T12417] loop3: detected capacity change from 0 to 1024 [ 608.721344][T12419] loop4: detected capacity change from 0 to 512 [ 608.751824][ T5904] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 608.776340][ T5904] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 608.791338][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 608.804322][T12419] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 608.816794][ T5904] usb 1-1: Product: syz [ 608.823858][ T5904] usb 1-1: Manufacturer: syz [ 608.851432][T12419] EXT4-fs (loop4): group descriptors corrupted! [ 608.889424][ T5904] usb 1-1: SerialNumber: syz [ 608.907943][ T5904] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 608.942579][ T9] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 608.984321][T12417] sp0: Synchronizing with TNC [ 609.608871][T12417] [U] è [ 613.487785][ T9] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 613.525896][ T9] ath9k_htc: Failed to initialize the device [ 613.695167][ T5904] usb 1-1: USB disconnect, device number 33 [ 613.713709][ T5904] usb 1-1: ath9k_htc: USB layer deinitialized [ 614.765281][T12454] loop6: detected capacity change from 0 to 65536 [ 615.097398][T12454] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 615.360601][T12470] loop0: detected capacity change from 0 to 2048 [ 615.423456][T12454] XFS (loop6): Ending clean mount [ 615.844708][T12481] loop7: detected capacity change from 0 to 512 [ 616.000728][ T5904] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 616.085219][T12470] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 616.127991][T12481] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 616.316476][T12481] EXT4-fs (loop7): orphan cleanup on readonly fs [ 616.339971][T12481] EXT4-fs error (device loop7): ext4_validate_block_bitmap:441: comm syz.7.1926: bg 0: block 248: padding at end of block bitmap is not set [ 616.377362][T12481] Quota error (device loop7): write_blk: dquota write failed [ 616.385309][T12481] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota [ 616.395352][T12481] EXT4-fs error (device loop7): ext4_acquire_dquot:6933: comm syz.7.1926: Failed to acquire dquot type 1 [ 616.414046][T12481] EXT4-fs (loop7): 1 truncate cleaned up [ 616.417216][T12470] netlink: 'syz.0.1922': attribute type 4 has an invalid length. [ 616.457340][ T5904] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 616.584477][T12481] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 616.704873][T12473] loop1: detected capacity change from 0 to 512 [ 616.771221][T12484] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 617.119125][ T5904] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 617.170619][T12473] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 617.193758][ T5904] usb 4-1: Product: syz [ 617.210800][T12484] XFS (loop6): Unmount and run xfs_repair [ 617.216552][T12484] XFS (loop6): First 128 bytes of corrupted metadata buffer: [ 617.250793][ T5904] usb 4-1: Manufacturer: syz [ 617.285020][ T5904] usb 4-1: SerialNumber: syz [ 617.361027][T12484] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 617.413193][T12473] EXT4-fs (loop1): 1 truncate cleaned up [ 617.418959][T12484] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 617.448422][T12473] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 617.480681][T12484] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 617.560483][T12484] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 617.651126][ T5846] Bluetooth: hci1: unexpected event for opcode 0x1804 [ 617.672648][T12484] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 617.746707][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 617.782238][T12484] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 618.093372][ T5904] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 618.130430][ T1206] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 618.165627][T12484] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 618.197111][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.260446][T12484] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 618.291478][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 618.356602][T12484] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 618.460708][T12484] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 618.620638][T12498] loop7: detected capacity change from 0 to 1024 [ 618.628615][T12500] loop4: detected capacity change from 0 to 512 [ 620.694512][T12484] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 621.253150][T12500] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 621.332869][T12500] EXT4-fs (loop4): group descriptors corrupted! [ 621.454673][T12498] sp0: Synchronizing with TNC [ 621.660953][T12498] [U] è [ 621.703109][ T5846] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 621.717454][ T5846] Bluetooth: hci1: Injecting HCI hardware error event [ 621.726505][ T5846] Bluetooth: hci1: hardware error 0x00 [ 622.017172][ T1206] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 622.927008][T12508] loop3: detected capacity change from 0 to 131072 [ 622.955868][T12508] F2FS-fs (loop3): Wrong CP boundary, start(512) end(1536) blocks(0) [ 622.964055][T12508] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 622.990691][T12508] F2FS-fs (loop3): invalid crc value [ 623.126248][T12508] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 623.133444][T12508] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 623.626669][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.637018][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 626.046380][ T1206] ath9k_htc: Failed to initialize the device [ 627.991308][ T5904] usb 4-1: USB disconnect, device number 27 [ 628.026084][ T5904] usb 4-1: ath9k_htc: USB layer deinitialized [ 628.567847][ T6545] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 628.835222][T12524] loop4: detected capacity change from 0 to 512 [ 628.890788][T12524] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 628.950390][T12524] EXT4-fs (loop4): group descriptors corrupted! [ 629.121067][T12530] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1942'. [ 629.190627][T12531] loop7: detected capacity change from 0 to 4096 [ 629.264297][T12528] loop1: detected capacity change from 0 to 2048 [ 629.310163][T12528] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 630.135488][T12531] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 630.205816][T12528] netlink: 'syz.1.1941': attribute type 4 has an invalid length. [ 630.655484][T12530] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 630.664192][ T5846] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 630.680825][ T5904] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 630.711162][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.930419][ T5904] usb 1-1: Using ep0 maxpacket: 32 [ 630.958467][ T5904] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 631.026989][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 631.078876][ T5904] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 631.114919][ T5904] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 631.151547][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 631.171785][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 631.235358][ T5904] usb 1-1: config 0 descriptor?? [ 631.300591][T12541] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 631.342572][ T5904] hub 1-1:0.0: USB hub found [ 631.607194][T12550] loop4: detected capacity change from 0 to 65536 [ 631.763983][T12550] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 631.780684][ T5904] hub 1-1:0.0: config failed, can't read hub descriptor (err -22) [ 631.844684][ T5904] usbhid 1-1:0.0: can't add hid device: -71 [ 631.885277][ T5904] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 631.908484][T12550] XFS (loop4): Ending clean mount [ 632.981310][ T5904] usb 1-1: USB disconnect, device number 34 [ 633.021991][T12550] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 [ 633.032763][T12550] XFS (loop4): Unmount and run xfs_repair [ 633.038511][T12550] XFS (loop4): First 128 bytes of corrupted metadata buffer: [ 633.046296][T12550] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00 XAGF..........@. [ 633.055237][T12550] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01 ................ [ 633.064250][T12550] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04 ................ [ 633.073340][T12550] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00 ......?...?..... [ 633.082385][T12550] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3 .sH./.A..&.:g... [ 633.091346][T12550] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 ................ [ 633.100232][T12550] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 633.110407][T12550] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 633.119301][T12550] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74 [ 633.130967][ T1206] usb 8-1: new high-speed USB device number 32 using dummy_hcd [ 633.145585][T12550] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311). Shutting down filesystem. [ 633.160982][T12550] XFS (loop4): Please unmount the filesystem and rectify the problem(s) [ 633.319488][ T5833] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 633.388758][ T1206] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 633.421191][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 633.429249][ T1206] usb 8-1: Product: syz [ 633.450359][ T1206] usb 8-1: Manufacturer: syz [ 633.455024][ T1206] usb 8-1: SerialNumber: syz [ 633.544981][ T1206] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 633.610664][ T5904] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 634.127317][ T24] usb 8-1: USB disconnect, device number 32 [ 634.411340][ T5904] usb 8-1: ath9k_htc: Unable to allocate URBs [ 634.519021][T12583] loop3: detected capacity change from 0 to 512 [ 634.520670][T11983] Bluetooth: hci3: command 0x1003 tx timeout [ 634.525536][ T5846] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 634.531880][ T24] usb 8-1: ath9k_htc: USB layer deinitialized [ 634.598984][T12583] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 634.645120][T12583] EXT4-fs (loop3): group descriptors corrupted! [ 634.785264][T12585] loop0: detected capacity change from 0 to 1024 [ 634.978600][T12585] sp0: Synchronizing with TNC [ 635.000666][T12592] loop6: detected capacity change from 0 to 512 [ 635.009479][T12592] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 635.028765][T12592] EXT4-fs (loop6): orphan cleanup on readonly fs [ 635.037490][T12592] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.1955: bg 0: block 248: padding at end of block bitmap is not set [ 635.055995][T12592] Quota error (device loop6): write_blk: dquota write failed [ 635.063584][T12592] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 635.064393][T12585] [U] `èè [ 635.073644][T12592] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.1955: Failed to acquire dquot type 1 [ 635.097330][T12592] EXT4-fs (loop6): 1 truncate cleaned up [ 635.105428][T12591] loop7: detected capacity change from 0 to 2048 [ 635.114195][T12592] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 635.225258][T12591] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 635.383003][T12591] netlink: 'syz.7.1957': attribute type 4 has an invalid length. [ 636.022422][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 636.411620][T12611] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1960'. [ 637.023191][T12611] loop0: detected capacity change from 0 to 4096 [ 637.394878][T12611] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 639.544695][T12631] loop1: detected capacity change from 0 to 512 [ 639.590938][T12631] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 639.904654][T12631] EXT4-fs (loop1): 1 truncate cleaned up [ 640.035085][T12640] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 640.705044][T12631] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 640.769678][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.236115][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 641.590382][ T10] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 641.772265][ T10] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 641.830540][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 641.847907][T12658] loop7: detected capacity change from 0 to 2048 [ 641.876949][ T10] usb 1-1: Product: syz [ 641.930723][ T10] usb 1-1: Manufacturer: syz [ 641.940690][ T10] usb 1-1: SerialNumber: syz [ 641.975697][ T10] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 642.000732][ T5965] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 642.019979][T12658] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 642.021059][ T5904] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 642.190886][T12662] netlink: 'syz.7.1974': attribute type 4 has an invalid length. [ 642.229266][ T5965] usb 2-1: Using ep0 maxpacket: 16 [ 642.281975][ T5965] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 642.308297][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 642.361842][T11983] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 642.380558][T11983] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 642.391161][T11983] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 642.408864][ T5965] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 642.422298][T11983] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 642.432814][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.441651][T11983] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 642.448849][ T5965] usb 2-1: Product: syz [ 642.453803][ T5965] usb 2-1: Manufacturer: syz [ 642.459351][ T5965] usb 2-1: SerialNumber: syz [ 642.584690][ T5965] usb 2-1: config 0 descriptor?? [ 642.620507][ T5965] em28xx 2-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 644.581774][T11983] Bluetooth: hci3: command tx timeout [ 644.711530][T12656] Falling back ldisc for ttyprintk. [ 644.733363][ T24] usb 2-1: USB disconnect, device number 46 [ 645.739393][ T5904] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 646.664800][ T5846] Bluetooth: hci3: command tx timeout [ 647.167584][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 647.385889][ T5904] ath9k_htc: Failed to initialize the device [ 647.606176][ T10] usb 1-1: USB disconnect, device number 35 [ 647.635613][ T10] usb 1-1: ath9k_htc: USB layer deinitialized [ 648.738136][T12679] loop4: detected capacity change from 0 to 512 [ 648.744882][T11983] Bluetooth: hci3: command tx timeout [ 648.945426][T12679] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 648.998868][T12679] EXT4-fs (loop4): group descriptors corrupted! [ 650.820814][ T5846] Bluetooth: hci3: command tx timeout [ 651.194151][T12701] loop0: detected capacity change from 0 to 512 [ 651.316542][T11983] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 651.607898][T12701] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 652.007138][T12701] EXT4-fs (loop0): 1 truncate cleaned up [ 652.032220][T12701] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 652.440012][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 652.642219][T12719] loop1: detected capacity change from 0 to 256 [ 652.826223][T12664] chnl_net:caif_netlink_parms(): no params data found [ 654.163030][T11983] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 654.172599][T11983] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 654.182145][T11983] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 654.190492][T11983] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 654.581220][ T5965] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 655.230378][T11983] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 655.724096][T12726] loop0: detected capacity change from 0 to 512 [ 655.753169][T12726] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 655.794593][T12726] EXT4-fs (loop0): orphan cleanup on readonly fs [ 655.817256][T12726] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1989: bg 0: block 248: padding at end of block bitmap is not set [ 655.839048][T12726] Quota error (device loop0): write_blk: dquota write failed [ 655.847285][T12726] Quota error (device loop0): qtree_write_dquot: Error -117 occurred while creating quota [ 655.857654][T12726] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.1989: Failed to acquire dquot type 1 [ 655.904581][T12726] EXT4-fs (loop0): 1 truncate cleaned up [ 655.934371][T12726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 657.301375][T11983] Bluetooth: hci4: command tx timeout [ 657.558695][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 657.713662][T12746] loop7: detected capacity change from 0 to 512 [ 657.758893][T12746] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 658.031374][T12746] EXT4-fs (loop7): group descriptors corrupted! [ 659.066359][T12765] loop1: detected capacity change from 0 to 512 [ 659.304801][T12765] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 659.382164][ T5846] Bluetooth: hci4: command tx timeout [ 659.880735][T12765] EXT4-fs (loop1): 1 truncate cleaned up [ 659.905773][T12765] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.049027][T12772] loop7: detected capacity change from 0 to 2048 [ 660.118994][T12589] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 660.199877][T12772] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 660.336012][T12780] netlink: 'syz.7.2001': attribute type 4 has an invalid length. [ 660.400834][ T5904] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 660.592700][ T5904] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.610379][ T5904] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 660.630362][ T5904] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 660.649467][T12363] bond0 (unregistering): Released all slaves [ 660.660757][ T5904] usb 1-1: config 0 descriptor?? [ 660.677666][ T5904] pwc: Askey VC010 type 2 USB webcam detected. [ 660.846988][ T6597] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 661.063190][T12664] bridge0: port 1(bridge_slave_0) entered blocking state [ 661.070532][T12664] bridge0: port 1(bridge_slave_0) entered disabled state [ 661.080744][T12664] bridge_slave_0: entered allmulticast mode [ 661.090111][T12664] bridge_slave_0: entered promiscuous mode [ 661.099311][ T5904] pwc: recv_control_msg error -32 req 02 val 2b00 [ 661.112844][ T5904] pwc: recv_control_msg error -32 req 02 val 2700 [ 661.128430][ T5904] pwc: recv_control_msg error -32 req 02 val 2c00 [ 661.135868][ T5904] pwc: recv_control_msg error -32 req 04 val 1000 [ 661.154217][T12664] bridge0: port 2(bridge_slave_1) entered blocking state [ 661.162298][T12664] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.169607][T12664] bridge_slave_1: entered allmulticast mode [ 661.177705][T12664] bridge_slave_1: entered promiscuous mode [ 661.220449][T11983] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 661.221042][ T1206] usb 8-1: new high-speed USB device number 33 using dummy_hcd [ 661.314017][T12664] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 661.344386][ T5904] pwc: recv_control_msg error -32 req 04 val 1400 [ 661.356846][T12363] hsr_slave_0: left promiscuous mode [ 661.363128][ T5904] pwc: recv_control_msg error -32 req 02 val 2000 [ 661.379071][T12363] hsr_slave_1: left promiscuous mode [ 661.434293][ T1206] usb 8-1: Using ep0 maxpacket: 16 [ 661.459689][ T1206] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 661.461006][T11983] Bluetooth: hci4: command tx timeout [ 661.525697][ T1206] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 661.578258][ T1206] usb 8-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 661.590968][ T5904] pwc: recv_control_msg error -71 req 04 val 1500 [ 661.602817][ T1206] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.612343][ T5904] pwc: recv_control_msg error -71 req 02 val 2500 [ 661.623658][ T5904] pwc: recv_control_msg error -71 req 02 val 2400 [ 661.640902][ T1206] usb 8-1: Product: syz [ 661.645087][ T1206] usb 8-1: Manufacturer: syz [ 661.649692][ T1206] usb 8-1: SerialNumber: syz [ 661.659293][ T5904] pwc: recv_control_msg error -71 req 02 val 2600 [ 661.669187][ T5904] pwc: recv_control_msg error -71 req 02 val 2900 [ 661.689458][ T5904] pwc: recv_control_msg error -71 req 02 val 2800 [ 661.698809][ T5904] pwc: recv_control_msg error -71 req 04 val 1100 [ 661.707030][ T1206] usb 8-1: config 0 descriptor?? [ 661.722688][ T5904] pwc: recv_control_msg error -71 req 04 val 1200 [ 661.733330][ T1206] em28xx 8-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 661.778458][ T5904] pwc: Registered as video103. [ 661.804461][ T5904] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input90 [ 661.853393][ T5904] usb 1-1: USB disconnect, device number 36 [ 662.011735][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 662.380860][ T1206] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 662.610243][ T1206] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 662.650363][ T1206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.658412][ T1206] usb 2-1: Product: syz [ 662.684739][ T1206] usb 2-1: Manufacturer: syz [ 662.692878][ T1206] usb 2-1: SerialNumber: syz [ 662.714698][ T1206] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 662.748819][ T5904] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 663.084808][T12664] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 663.265784][T12788] sp0: Synchronizing with TNC [ 663.544777][T11983] Bluetooth: hci4: command tx timeout [ 663.654102][ T1206] usb 2-1: USB disconnect, device number 47 [ 663.675928][T12806] loop0: detected capacity change from 0 to 512 [ 663.727853][T12664] team0: Port device team_slave_0 added [ 663.740466][T12806] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 663.760841][T12806] EXT4-fs (loop0): group descriptors corrupted! [ 663.784443][T12664] team0: Port device team_slave_1 added [ 663.797603][ T5904] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive [ 663.805091][ T5904] ath9k_htc: Failed to initialize the device [ 663.825035][ T1206] usb 2-1: ath9k_htc: USB layer deinitialized [ 664.083383][T12808] loop4: detected capacity change from 0 to 4096 [ 664.408744][T12788] [U] è [ 664.417323][T12664] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 664.424659][T12664] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 664.800154][T12664] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 664.813013][T12664] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 664.819964][T12664] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 665.448751][T12664] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 666.205399][T12825] loop0: detected capacity change from 0 to 1024 [ 666.445507][T12825] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 666.512957][T12825] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters [ 666.528527][T12825] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 51 with max blocks 1 with error 28 [ 666.541014][T12825] EXT4-fs (loop0): This should not happen!! Data will be lost [ 666.541014][T12825] [ 666.550849][T12825] EXT4-fs (loop0): Total free blocks count 0 [ 666.556875][T12825] EXT4-fs (loop0): Free/Dirty block details [ 666.570643][T12825] EXT4-fs (loop0): free_blocks=68451041280 [ 666.576580][T12825] EXT4-fs (loop0): dirty_blocks=32 [ 666.581980][T12825] EXT4-fs (loop0): Block reservation details [ 666.588324][T12825] EXT4-fs (loop0): i_reserved_data_blocks=2 [ 666.606702][T12837] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 52 with error 28 [ 667.055392][ T24] usb 8-1: USB disconnect, device number 33 [ 667.220798][ T10] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 667.359472][T12664] hsr_slave_0: entered promiscuous mode [ 667.381640][T12664] hsr_slave_1: entered promiscuous mode [ 667.398661][T12720] chnl_net:caif_netlink_parms(): no params data found [ 667.426387][ T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 667.483326][ T10] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 668.164290][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.183940][ T10] usb 1-1: config 0 descriptor?? [ 668.220469][ T10] pwc: Askey VC010 type 2 USB webcam detected. [ 668.293496][T12363] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.611583][ T10] pwc: recv_control_msg error -32 req 02 val 2b00 [ 668.624757][ T10] pwc: recv_control_msg error -32 req 02 val 2700 [ 668.643942][ T10] pwc: recv_control_msg error -32 req 02 val 2c00 [ 668.663836][ T10] pwc: recv_control_msg error -32 req 04 val 1000 [ 668.740003][T12363] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 668.856878][T12872] loop1: detected capacity change from 0 to 4096 [ 668.884498][ T10] pwc: recv_control_msg error -32 req 04 val 1400 [ 668.904052][T12873] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 668.919888][ T10] pwc: recv_control_msg error -32 req 02 val 2000 [ 668.957414][ T24] usb 8-1: new high-speed USB device number 34 using dummy_hcd [ 668.983708][T12363] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.027739][T12720] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.048033][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.058813][T12720] bridge_slave_0: entered allmulticast mode [ 669.070045][T12720] bridge_slave_0: entered promiscuous mode [ 669.118924][T12363] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 669.135821][ T24] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 669.160235][ T10] pwc: recv_control_msg error -71 req 04 val 1500 [ 669.189529][ T10] pwc: recv_control_msg error -71 req 02 val 2500 [ 669.209391][ T10] pwc: recv_control_msg error -71 req 02 val 2400 [ 669.240124][ T10] pwc: recv_control_msg error -71 req 02 val 2600 [ 669.279589][ T10] pwc: recv_control_msg error -71 req 02 val 2900 [ 669.327270][ T10] pwc: recv_control_msg error -71 req 02 val 2800 [ 669.359379][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.365481][ T10] pwc: recv_control_msg error -71 req 04 val 1100 [ 669.368729][ T24] usb 8-1: Product: syz [ 669.378047][ T24] usb 8-1: Manufacturer: syz [ 669.382891][ T24] usb 8-1: SerialNumber: syz [ 669.390696][T12720] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.397833][T12720] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.413657][T12720] bridge_slave_1: entered allmulticast mode [ 669.424996][ T24] usb 8-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 669.430250][ T10] pwc: recv_control_msg error -71 req 04 val 1200 [ 669.437498][T12720] bridge_slave_1: entered promiscuous mode [ 669.460156][ T10] pwc: Registered as video103. [ 669.474697][ T5965] usb 8-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 669.484417][ T10] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input91 [ 669.548125][ T10] usb 1-1: USB disconnect, device number 37 [ 669.774639][T12720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 669.827655][T12720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 669.860639][ T5846] Bluetooth: hci6: command 0x1003 tx timeout [ 669.867557][T11983] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 669.911123][ T10] usb 8-1: USB disconnect, device number 34 [ 669.944557][T12882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2026'. [ 670.191101][T12882] loop0: detected capacity change from 0 to 4096 [ 670.292103][T12882] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 670.317536][T12720] team0: Port device team_slave_0 added [ 670.344635][T12664] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 670.436743][T12720] team0: Port device team_slave_1 added [ 670.560802][ T5904] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 670.562614][T12664] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 670.589192][ T5965] ath9k_htc 8-1:1.0: ath9k_htc: Target is unresponsive [ 670.614851][ T5965] ath9k_htc: Failed to initialize the device [ 670.654079][ T10] usb 8-1: ath9k_htc: USB layer deinitialized [ 670.682077][T12664] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 671.150365][ T5904] usb 5-1: Using ep0 maxpacket: 32 [ 671.183253][ T5904] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 671.187129][T12882] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 671.209676][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 671.224189][T12664] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 671.292701][ T5904] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 671.363688][ T5904] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 671.409155][ T5904] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.424231][T12720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 671.452356][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.483802][T12720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 671.499921][ T5904] usb 5-1: config 0 descriptor?? [ 671.510131][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 671.521443][T12892] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 671.532111][ T5904] hub 5-1:0.0: USB hub found [ 671.627106][T12720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 671.647428][T12720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 671.709671][T12720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 671.771878][ T5904] hub 5-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 672.808063][ T5904] usbhid 5-1:0.0: can't add hid device: -71 [ 672.814649][ T5904] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 672.871543][ T5904] usb 5-1: USB disconnect, device number 32 [ 672.887451][T12720] hsr_slave_0: entered promiscuous mode [ 672.918409][T12720] hsr_slave_1: entered promiscuous mode [ 672.939001][T12720] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 672.949391][T12720] Cannot create hsr debugfs directory [ 674.296693][T12363] bridge_slave_1: left allmulticast mode [ 674.312068][T12363] bridge_slave_1: left promiscuous mode [ 674.865338][T12363] bridge0: port 2(bridge_slave_1) entered disabled state [ 674.928118][T12363] bridge_slave_0: left allmulticast mode [ 674.959813][T12363] bridge_slave_0: left promiscuous mode [ 675.184458][T12363] bridge0: port 1(bridge_slave_0) entered disabled state [ 675.741637][ T13] Bluetooth: Error in BCSP hdr checksum [ 676.028497][ T1206] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 676.217773][ T1206] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 676.227149][ T1206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.235828][ T1206] usb 5-1: Product: syz [ 676.241868][ T1206] usb 5-1: Manufacturer: syz [ 676.246484][ T1206] usb 5-1: SerialNumber: syz [ 676.259313][ T1206] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 676.267963][T12363] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 676.276298][ T5904] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 676.297626][T12363] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 676.324236][T12363] bond0 (unregistering): Released all slaves [ 676.744374][ T10] usb 5-1: USB disconnect, device number 33 [ 676.930494][ T43] usb 2-1: new full-speed USB device number 48 using dummy_hcd [ 676.947513][T12363] hsr_slave_0: left promiscuous mode [ 676.966873][T12363] hsr_slave_1: left promiscuous mode [ 676.984402][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 677.000594][T12363] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 677.023638][T12363] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 677.041219][T12363] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 677.080943][T12363] veth1_macvtap: left promiscuous mode [ 677.086543][T12363] veth0_macvtap: left promiscuous mode [ 677.092770][T12363] veth1_vlan: left promiscuous mode [ 677.093947][ T43] usb 2-1: config 0 has an invalid interface number: 128 but max is 0 [ 677.098118][T12363] veth0_vlan: left promiscuous mode [ 677.124244][ T43] usb 2-1: config 0 has no interface number 0 [ 677.134370][ T43] usb 2-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 677.147874][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 677.156265][ T43] usb 2-1: Product: syz [ 677.164138][ T43] usb 2-1: Manufacturer: syz [ 677.175061][ T43] usb 2-1: SerialNumber: syz [ 677.202017][ T43] usb 2-1: config 0 descriptor?? [ 677.311477][ T5904] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive [ 677.342634][ T5904] ath9k_htc: Failed to initialize the device [ 677.363390][ T10] usb 5-1: ath9k_htc: USB layer deinitialized [ 677.544554][ T5846] Bluetooth: hci6: command 0x1003 tx timeout [ 677.554806][T11983] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 677.637668][ T43] usb 2-1: Firmware: major: 153, minor: 65, hardware type: UNKNOWN (148) [ 677.842648][ T43] usb 2-1: failed to fetch extended address, random address set [ 677.879051][ T43] usb 2-1: atusb_probe: initialization failed, error = -524 [ 677.899473][ T43] atusb 2-1:0.128: probe with driver atusb failed with error -524 [ 678.159813][ T43] usb 2-1: USB disconnect, device number 48 [ 680.292055][T12977] binder: BINDER_SET_CONTEXT_MGR already set [ 680.298746][T12977] binder: 12976:12977 ioctl 4018620d 200000000040 returned -16 [ 680.312357][T12977] binder: 12976:12977 ioctl c0306201 0 returned -14 [ 680.321136][T12977] binder: 12976:12977 ioctl c0185879 2000000005c0 returned -22 [ 680.413073][T12363] team0 (unregistering): Port device team_slave_1 removed [ 680.459072][T12363] team0 (unregistering): Port device team_slave_0 removed [ 681.014256][T12980] loop0: detected capacity change from 0 to 512 [ 681.046796][T12980] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 681.090098][T12980] EXT4-fs (loop0): 1 truncate cleaned up [ 681.115970][T12980] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 681.223218][ T5828] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 681.355947][T12984] loop0: detected capacity change from 0 to 512 [ 681.412378][T12984] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 681.458754][T12984] EXT4-fs (loop0): group descriptors corrupted! [ 681.597616][T12987] loop1: detected capacity change from 0 to 512 [ 681.637539][T12987] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 681.723287][T12987] EXT4-fs (loop1): mounting ext2 file system using the ext4 subsystem [ 681.817754][T12987] EXT4-fs (loop1): warning: checktime reached, running e2fsck is recommended [ 681.854165][T12987] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 681.863170][T12987] System zones: 0-2, 18-18, 34-34 [ 681.886583][T12987] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.2050: iget: bad i_size value: 360287970189639680 [ 681.922728][T12987] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.2050: couldn't read orphan inode 15 (err -117) [ 681.999515][T12987] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 682.144649][ T5827] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 682.158851][T12664] 8021q: adding VLAN 0 to HW filter on device bond0 [ 682.191724][T12720] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 682.234170][T12720] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 682.280940][T12720] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 682.348661][T12664] 8021q: adding VLAN 0 to HW filter on device team0 [ 682.408429][T12720] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 682.541058][T12664] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 682.585436][T12664] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 683.601641][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 683.608903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 683.686929][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 683.694180][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 684.828161][T12720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 684.926800][T12664] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 684.994997][T12720] 8021q: adding VLAN 0 to HW filter on device team0 [ 685.037748][ T4572] bridge0: port 1(bridge_slave_0) entered blocking state [ 685.044948][ T4572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 685.115929][ T4572] bridge0: port 2(bridge_slave_1) entered blocking state [ 685.123181][ T4572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 685.132975][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.139284][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.279592][T13042] loop4: detected capacity change from 0 to 512 [ 686.318560][T13042] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 686.403938][T13042] EXT4-fs (loop4): 1 truncate cleaned up [ 686.441430][T13042] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 686.558982][ T5840] Bluetooth: hci5: unexpected event for opcode 0x1804 [ 686.765560][T12720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.782567][ T5833] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 686.820691][ T5840] Bluetooth: hci6: command 0x1003 tx timeout [ 686.827193][T11983] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 686.900815][T11983] Bluetooth: hci7: command 0x1003 tx timeout [ 686.907354][ T5846] Bluetooth: hci7: Opcode 0x1003 failed: -110 [ 686.975614][T13059] loop4: detected capacity change from 0 to 512 [ 687.035369][T12664] veth0_vlan: entered promiscuous mode [ 687.083616][T12664] veth1_vlan: entered promiscuous mode [ 687.316679][T13061] binder: BINDER_SET_CONTEXT_MGR already set [ 687.323260][T13059] EXT4-fs (loop4): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 687.348453][T12664] veth0_macvtap: entered promiscuous mode [ 687.362210][T13061] binder: 13060:13061 ioctl 4018620d 200000000040 returned -16 [ 687.390549][T13059] EXT4-fs (loop4): group descriptors corrupted! [ 687.403937][T13066] binder: 13060:13066 ioctl c0306201 0 returned -14 [ 687.424428][T12664] veth1_macvtap: entered promiscuous mode [ 687.454242][T13061] binder: 13060:13061 ioctl c0185879 2000000005c0 returned -22 [ 687.683760][T12664] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 687.745519][T12664] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 688.298300][T12664] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.382734][T12664] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.396267][T12664] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.416346][T12664] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 688.683487][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2065'. [ 688.707862][T13075] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2065'. [ 688.829681][T13072] loop1: detected capacity change from 0 to 32768 [ 688.836493][T13078] loop7: detected capacity change from 0 to 512 [ 688.885990][T13072] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 688.895244][T13072] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 688.901026][T13078] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 0)! [ 688.927841][T13072] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 688.938903][ T10] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 688.955116][ T10] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 689.001276][T13078] EXT4-fs (loop7): group descriptors corrupted! [ 689.259642][ T5984] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.348350][ T5984] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.505416][ T10] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 550ms [ 689.568459][ T5984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 689.579343][ T10] gfs2: fsid=syz:syz.0: jid=0: Done [ 689.622882][T13072] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 689.698998][ T5984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 689.733452][T13072] gfs2: fsid=syz:syz.0: found 1 quota changes [ 689.854395][T13071] gfs2: fsid=syz:syz.0: fatal assertion failed [ 689.861510][T13071] ------------[ cut here ]------------ [ 689.867027][T13071] kernel BUG at fs/gfs2/quota.c:320! [ 689.872440][T13071] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 689.878954][T13071] CPU: 0 UID: 0 PID: 13071 Comm: syz.1.2063 Not tainted 6.16.0-rc1-syzkaller-00003-gf09079bd04a9 #0 PREEMPT(full) [ 689.891024][T13071] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 689.901084][T13071] RIP: 0010:do_qc+0x5c1/0x5e0 [ 689.905789][T13071] Code: 00 00 00 00 00 fc ff df 48 8b 0c 24 80 3c 01 00 74 0a 48 8b 7c 24 10 e8 bd ae 2d fe 48 8b 44 24 10 48 8b 38 e8 80 0d 34 fd 90 <0f> 0b e8 38 37 ca fd 48 8b 7c 24 10 e8 6e 0d 34 fd 90 0f 0b 66 66 [ 689.925443][T13071] RSP: 0018:ffffc90003887870 EFLAGS: 00010246 [ 689.931523][T13071] RAX: 000000000000002c RBX: 1ffff1100a5f660e RCX: 369f5df10c696900 [ 689.939501][T13071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 689.947481][T13071] RBP: ffffffffffffffff R08: 0000000000000003 R09: 0000000000000004 [ 689.955460][T13071] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff888052fb3000 [ 689.963612][T13071] R13: ffff888052fb3070 R14: ffff888052fb3090 R15: 0000000000000000 [ 689.971591][T13071] FS: 0000555556011500(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 689.980529][T13071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 689.987122][T13071] CR2: 0000001b2fe1cff8 CR3: 000000005cbf0000 CR4: 0000000000350ef0 [ 689.995105][T13071] Call Trace: [ 689.998398][T13071] [ 690.001338][T13071] gfs2_quota_change+0x394/0x800 [ 690.006304][T13071] gfs2_free_di+0x2db/0x3f0 [ 690.010831][T13071] gfs2_dinode_dealloc+0x30d/0x3e0 [ 690.015959][T13071] ? __pfx_gfs2_dinode_dealloc+0x10/0x10 [ 690.021608][T13071] ? gfs2_evict_inode+0xe0b/0x1000 [ 690.026747][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.032389][T13071] ? inode_go_held+0xf8/0x200 [ 690.037068][T13071] gfs2_evict_inode+0xe0b/0x1000 [ 690.042016][T13071] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 690.047401][T13071] ? evict+0x504/0x9c0 [ 690.051485][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.057122][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.062775][T13071] ? do_raw_spin_unlock+0x122/0x240 [ 690.067977][T13071] ? __pfx_gfs2_evict_inode+0x10/0x10 [ 690.073357][T13071] evict+0x504/0x9c0 [ 690.077273][T13071] ? __pfx_evict+0x10/0x10 [ 690.081695][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.087335][T13071] ? do_raw_spin_unlock+0x122/0x240 [ 690.092536][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.098169][T13071] ? _raw_spin_unlock+0x28/0x50 [ 690.103029][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.108666][T13071] ? iput+0x6d8/0x9d0 [ 690.112723][T13071] __dentry_kill+0x209/0x660 [ 690.117327][T13071] ? dput+0x37/0x2b0 [ 690.121224][T13071] dput+0x19f/0x2b0 [ 690.125035][T13071] __fput+0x68e/0xa70 [ 690.129032][T13071] task_work_run+0x1d4/0x260 [ 690.133629][T13071] ? __pfx_task_work_run+0x10/0x10 [ 690.138755][T13071] ? exit_to_user_mode_loop+0x40/0x110 [ 690.144233][T13071] exit_to_user_mode_loop+0xec/0x110 [ 690.149530][T13071] do_syscall_64+0x2bd/0x3b0 [ 690.154118][T13071] ? lockdep_hardirqs_on+0x9c/0x150 [ 690.159329][T13071] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.165397][T13071] ? srso_alias_return_thunk+0x5/0xfbef5 [ 690.171035][T13071] ? exc_page_fault+0x9f/0xf0 [ 690.175737][T13071] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.181633][T13071] RIP: 0033:0x7fc55178e929 [ 690.186048][T13071] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.205690][T13071] RSP: 002b:00007fffc6217f48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 690.214112][T13071] RAX: 0000000000000000 RBX: 00000000000a7feb RCX: 00007fc55178e929 [ 690.222083][T13071] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 690.230063][T13071] RBP: 00007fc5519b7ba0 R08: 0000000000000001 R09: 0000000bc621823f [ 690.238059][T13071] R10: 00007fc551600000 R11: 0000000000000246 R12: 00007fc5519b5fac [ 690.246034][T13071] R13: 00007fc5519b5fa0 R14: ffffffffffffffff R15: 00007fffc6218060 [ 690.254018][T13071] [ 690.257046][T13071] Modules linked in: [ 690.264444][T13071] ---[ end trace 0000000000000000 ]--- [ 690.269937][T13071] RIP: 0010:do_qc+0x5c1/0x5e0 [ 690.276013][T13071] Code: 00 00 00 00 00 fc ff df 48 8b 0c 24 80 3c 01 00 74 0a 48 8b 7c 24 10 e8 bd ae 2d fe 48 8b 44 24 10 48 8b 38 e8 80 0d 34 fd 90 <0f> 0b e8 38 37 ca fd 48 8b 7c 24 10 e8 6e 0d 34 fd 90 0f 0b 66 66 [ 690.295715][T13071] RSP: 0018:ffffc90003887870 EFLAGS: 00010246 [ 690.301832][T13071] RAX: 000000000000002c RBX: 1ffff1100a5f660e RCX: 369f5df10c696900 [ 690.309944][T13071] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 690.317964][T13071] RBP: ffffffffffffffff R08: 0000000000000003 R09: 0000000000000004 [ 690.325978][T13071] R10: dffffc0000000000 R11: fffffbfff1bfa9ec R12: ffff888052fb3000 [ 690.334303][T13071] R13: ffff888052fb3070 R14: ffff888052fb3090 R15: 0000000000000000 [ 690.342746][T13071] FS: 0000555556011500(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 690.352508][T13071] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 690.359090][T13071] CR2: 0000001b2fe1cff8 CR3: 000000005cbf0000 CR4: 0000000000350ef0 [ 690.367684][T13071] Kernel panic - not syncing: Fatal exception [ 690.373959][T13071] Kernel Offset: disabled [ 690.378280][T13071] Rebooting in 86400 seconds..