last executing test programs: 21m36.256523501s ago: executing program 1 (id=6132): r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r0) sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=ANY=[], 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0xbc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001480)=@newtfilter={0x5c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x5}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_EMATCHES={0x28, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xffff}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0x3}, {0x3dc4, 0xb, 0x1}}}]}}]}]}]}}]}, 0x5c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 21m36.240538243s ago: executing program 1 (id=6134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_opts(r4, 0x29, 0x3b, 0x0, &(0x7f0000000d00)) 21m35.343461364s ago: executing program 1 (id=6139): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) set_robust_list(&(0x7f00000002c0)={0x0, 0x1}, 0x18) 21m35.308125797s ago: executing program 1 (id=6141): bpf$MAP_CREATE(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet(0x2, 0x801, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r4, 0x0, 0xffffffffffffffb5, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r4, 0x1) 21m34.291321099s ago: executing program 1 (id=6145): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$TUNSETIFINDEX(0xffffffffffffffff, 0x400454da, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, 0x0, 0x8004) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) 21m34.189322429s ago: executing program 1 (id=6148): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1, 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, 0x0, 0x0) write$cgroup_pid(r5, &(0x7f0000000180), 0x12) 8.854328212s ago: executing program 0 (id=11047): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x200, 0x800a, 0x0, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$eJzs3E1PXNUbAPDnXqDNn/YvVfENW0VbW7QKQhU1MU3YuSC60IXbCVBs5EULJrYhBhIXbk3sB9C4tR/BaBNfNroy3arRhZoQU1g0sYsxd94Y6AztKPQa5vdL7vScO2d6zr1Pnzt3Tk9uAG2rP3tJIg5GxA8R0VOubm7QX/5j/erSRLYlUSy++mdSard2dWmi2rT6uQPZSxoxkEak7yfxYIN+F85feLMwMzN1rlIfWpx9a2jh/IWnzs4Wpqemp+aGTw2Pjj737PMjw9sNv+9gC8f60vfrv37S+fLcpxfX5q6dHunOxlv9fP1x7JT+6N98Lusc3+nOcnZPXTnpzHEgtKQjIrJwdZXyvyc6YiN4PfHNT7kODthVxcz+pm8vF4E9LIm8RwDko/pFn/3+rW4N7gP+Ku7WDQi5Wh0r/wBcq8ztrNfi3xlpufD28a++3PT7fif1R8Tr468cybbYpXkYAAAAgHb2xVhEPNlo/i+Ne+vaZeX7IuL+iHggIvoiSut6DkfEkYh4KCIerq4nasHW9lvmf5r/zyQ7YnUs4sW6tV3rdfGvONRRqf0/q0RXcubszNTTEXFHRAxE1/6svt0qrdk3Ct81e29j/u9yd3nP0kR1LrAyjj86t/wrmCwsFv7xAbPJ6kpEX2ej+Ce1lUBJRDwSEY/eyl/4dWlF3XTvpeu1XS98cPeVZs3r53+zLet/c/zZTcWPI040zP+VWptk+/WZQ6XrwVD1qnCjby+Oftasf/HPV5b/3Q3jX1u5eiipX6+70Hofl3t//rHZe9eLxeL28W98/d+XvFYa4L7KvncLi4vnhiP2JeM37h9pfcx7VfV8VM9XFv+Boxvx32iZxl2VUnZCj0bEsYh4rLJ2+UTpuz/i8Yh4IiJObtPn8vQvTe/j5H++svhPtpT/rRd+X/nwWLP+bx7/LP+fKQ1moLLH/d/N3WqA8h4nAAAAAAAAADsjLT0DL0kHa+U0HRwsP8OvN7rTmfmFxZNn5t+Zmyw/K+9QdKXVlV49detBh0vljfrIlvqpiLgzIj7q+F+pPjgxPzOZ98FDmzvQJP8zv3XkPTpg13leK7Qv+Q/tS/5D+5L/0L7kP7Qv+Q/tS/5D+6rk/3Le4wBuv63f/+9dGT997fPDl3IaDnAbuf+HtvRvnuunoKCwVwt5X5kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA/hv+DgAA///vYdKh") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000400)=@generic={0x18, "f7dca24ef6877bcbe6fbf228844019a87d38c5254a0be821a4d304652c61da979203574bc9c5d73e7cb2ef19fc056d14b1c7a18ef65f8aa00875ce9f1ac7321165adbec1c912d4adc9c3434756b62808a0245113590578fc960f65dc381a13dbdd8048e31ceb4afe4ba8af16934ccb1eaa8a84ab1053066668964181ca4c"}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 7.03233281s ago: executing program 0 (id=11052): mkdirat(0xffffffffffffffff, &(0x7f00000007c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) open$dir(0x0, 0x2f2281, 0x28) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xc40a, &(0x7f0000000300)={[{@noblock_validity}, {@dioread_nolock}, {@nobh}, {@minixdf}, {@nobh}, {@usrjquota, 0x2e}, {@grpquota}, {@nodiscard}, {@jqfmt_vfsv0}, {@noload}], [], 0x2c}, 0x84, 0x452, &(0x7f0000000480)="$eJzs20tvG1UUAOAz46bvklDKow/AUBARj6RJC3TBBgRSN0hIsCjLkKZVqdugJki0qmhAqCxRfwGwROIXsIINAlYgtrBHSBXqhsICDRp7nBrHDnbs1Gn9fdIk986Mfc/xzLXvzLUDGFrl/E8SsTMifomI0YgoNe9Qrv27cf3S7F/XL80mkWWv/5HkD4s/r1+are+aFP93FJXxNCL9KIn9LdpduHDxzEylMne+qE8unn1ncuHCxWdOn505NXdq7tz00aNHDk89/9z0s33Jc1ce67735w/sPfbm1Vdnj1996/sv83h3Ftsb86gZ67nNcpSXX5Nmj/f87BvLroZysmmAgdCVvK/nh2uk2v9HoxQ3D95ovPLhQIMD1lWWZdmWFWuXRwBLGXAHS2LQEQCDUf+gz69/68stHH4M3LUXaxdAed43iqW2ZVOkxT4jTde3/VSOiONLf3+aL9HyPgQAQH99nY9/nm41/kvjvob97irmhsYi4u6I2B0R90TEnoi4N6K67/0R8UCX7Zeb6ivHPz9tW1NiHcrHfy8Uc1v/Hf/VR38xVipqu6r5jyQnT1fmDhWvyXiMbMnrU6u08c3LP3/Sblvj+C9f8vbrY8Eijt83Nd2gOzGzONNLzo2ufVC9B3h5Zf7J8kxAEhF7I2LfGp5/a0ScfvKLA+22/3/+q+jDPFP2ecQTteO/FE351yWrz09Obo3K3KHJ+lmx0g8/XnmtXfs95d8H+fHf3vL8X85/LGmcr13ovo0rv37c9ppmref/5uSNanlzse69mcXF81MRm5Olleunbz62Xq/vn+c/frB1/98d8c9nxeP2R0R+Ej8YEQ9FxMNF7I9ExKMRcXCV/L976bG3157/+srzP9HV8e++UDrz7Vft2u/s+B+plsaLNZ28/3UaYC+vHQAAANwu0up34JN0YrmcphMTte/w74ntaWV+YfGpk/PvnjtR+678WIyk9Ttdow33Q6eKe8P1+nRT/XD1vnGWZdm2an1idr6yXnPqQGd2tOn/ud9Kg44OWHddzaO1+0UbcFvye00YXvo/DC/9H4aX/g/Dq1X/vxxxYwChALeYz38YXvo/DC/9H4aX/g9DqZff9a9W2H1svZ75TiuUNkYYXRci3RBhrK2QbowwaoUtEdHpzpfjVgU26HcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/vg3AAD//zLQ7Dk=") lchown(0x0, 0x0, 0x0) 6.621249468s ago: executing program 3 (id=11055): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknodat$loop(0xffffffffffffff9c, 0x0, 0x6004, 0x1) fdatasync(0xffffffffffffffff) r3 = socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000800"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000400)={'veth0_to_bond\x00', 0x9}) r6 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0xf, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2e, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, 0x0, 0xd4d9, 0xa2, &(0x7f0000000300)=""/162, 0x41000, 0x4e, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000600)={0x4, 0x7, 0xb874, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[r4, r4], 0x0, 0x10, 0x8, @void, @value}, 0x94) 5.7425625s ago: executing program 3 (id=11057): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x20040, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = syz_usb_connect$uac1(0x0, 0xa4, &(0x7f00000000c0)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) syz_usb_control_io$uac1(r1, &(0x7f0000000280)={0x14, 0x0, &(0x7f00000004c0)=ANY=[]}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) syz_usb_control_io$uac1(r1, &(0x7f0000000680)={0x14, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="00032a0000002a03"]}, 0x0) 5.642660488s ago: executing program 0 (id=11058): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.89323522s ago: executing program 4 (id=11063): memfd_create(&(0x7f0000000000)='\xff\x00l\x1e\xa00xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) lseek(0xffffffffffffffff, 0x13, 0x0) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000840)=""/198, 0xc6}], 0x7, &(0x7f0000001280)=[{&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/150, 0x96}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000001180)=""/246, 0xf6}, {&(0x7f0000000700)=""/59, 0x3b}], 0x5, 0x0) 3.597070138s ago: executing program 3 (id=11064): creat(&(0x7f0000000080)='./file0\x00', 0x20c) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000070000000300000048"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000500), &(0x7f00000006c0)}, 0x20) socket$nl_route(0x10, 0x3, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000001c0)={[{@usrquota}, {@grpjquota}, {@nodelalloc}]}, 0x1, 0x4bc, &(0x7f0000000a40)="$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") 3.46782958s ago: executing program 2 (id=11065): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x5c, 0x4, 0x30, @local, @mcast2, 0x80, 0x40, 0x0, 0x2c}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x1000, 0x699, 0x6, 0x200, r7, 0x80000000, '\x00', r8, r9, 0x2, 0x2, 0x2, 0x9, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r10}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) lstat(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r13}, 0x18) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r14, r11) 3.434812902s ago: executing program 3 (id=11066): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file1\x00', 0x101880a, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], 0x1, 0x550b, &(0x7f00000079c0)="$eJzs3M1rI2UYAPAn/dhv1yIevO3AIrSwiU0/Fr1V3cUP7FJWPXjSNElDdpNMadK09uTBo3jwPxEFTx79Gzx49iYeFG+Ckpmpbv0AoWlj298PJs+8b94887xhWXhmSgK4sOaSX34qxc24GhHTEXEjIjsvFUdmLQ/PRcStiJh64igV839MXIqIaxFxc5Q8z1kq3vrszvD26o9v/vz1t5dnrn/+1XeT2zUwac9HRHc7P9/r5jFt5fFRMV8btrPYXRkWMX+j+7gYp3nca25mGfZqh+tqWVxu5evT7d3+KG51avVRbLW3svntXn7B/rB1mCf7wKPaTjZuNDez2O6nWWwd5HXtH+T/tx30B3meRpHvwyx9DAaHMZ9v7jfz/Ww/zmK9Nyjm87xpo7k/isMiFpeLetppZHVsHueb/n97q93b3U+GzZ1+O+0lq5Xqi5Xq3XJ1J200B82Vcq3buLuSzLc6o2XlQbPWXWulaavTrNTT7kIy36rXy9VqMn+vudmu9ZJqtbJcWSyvLhRnd5LXHrybdBrJ/Ci+0u7tDtqdfrKV7iT5JxaSpcrySwvJ7Wry9vpGsvHw/v31jXfev/feg5fX33i1WPS3spL5pcWlpXJ1sbxUXbhA+/+4KHqM+4djKU26AICzR/8PTMLJ9f87DyNOvv8P/f9YnKn+9/z1/3svREx0/3As+n8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgAvr+9kvXs9O5vLx9WL+qWLqmWJcioipiPjtH0zHpSM5p4s8s/+yfvYvNXxTiizD6BqXi+NaRKwVx69Pn/S3AAAAAOfXlx/d+jTv1vOXuUkXxGnKb9pM3fhgTPlKETE798OYsk2NXp4dU7Ls3/dM7I8pW3YD68qYkuW33GbGle0/mT4SrjwRSnmYOtVyAACAU3G0EzjdLgQAAIDT9MmkC2AySnH4KPPwWXD2l/d/PhC8emQEAAAAnEGlSRcAAAAAnLis//f7fwAAAHC+5b//BwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAv7NzP7eJA1EcgJ8NXth/WrTa+7ayNyhjS9jjHiMKSBMUkANpIQ1QA7mlhAgiPA6BiEMkj20l+j7JmYxlfrxBcJgZaQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu3Vfrxe3V7+u2Obt9O3lGAwAAAFyyrdaL+p9Z6n9t7n9vbv1s+kVElBFxae4+ik9nmaMmp3p5/ub0+epVDXcRdcLhPSbN9SUi/jTX44+uPwUAAAD4uDbL1TzN1tOf2dAF0ae0aFN++5spr4iIavaQKa085P3KFFZ/v8fxP1NavYA1zRSWltzGudLepP65H1ftpidNkZry4suORWYbOwAA0KPRWdPvLAQAAIA+/Ru6AIZRxPNW5nErcJKaZnvv81kPAAAAeIeKoQsAAAAAOlfP/3s6/2/v/D8AAAAYRjr/DwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC5tq/Vis1zN2+bs9u3kGQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyxP+8oEAJhEAZ713cmc//DSoOmpiZVIHz8jcEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMX+vKRACARBFMwZ/zvp+x9WEvQMIkRAw6OKWjQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMXO/bzGUcUBAP/OzM7WtooxSg4RUfCgF5tua2tv4kEJHvwThJBua+zWH20QW4qYizfJuRfRo4igxFv/h55b6KXeethDBc/KzM5kp23A9dfMNvl84M377jDM+75ZCPnOewkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAtfFb0zgrDguTOK3O3bp/bb3obz/UF25s31kuWhEnbSb9eHih+SFZioij3SUDAADAwZDV9X1E3M13Vos+XSjr/7y+pqj5v31qElf1/Gd1yfpw/V/X/kX75ed7z+0OtDAZp7jpuY3R8PijqfT+rznOu6f/8ope+eTLdy9Z+YWk7249O87L55l8ffPm2/0yPNRGtgDAP3Gs7qug/n2o6AddJgbAgdFrFN51/Z8tdJsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQBvGW3G0jpOIWO5N48Lt+9fW9+pvbN9Zrtvp69e348vpPYtb5BFxbmM0PN7qbObb5StXL6yNRsNL7QcvRkRXo79ZTf/C+zNcHNHJ8xH8R0Fafdnzks/jEXT4QwkAgH0pr1pR19/Nd1aLc8lixB/fPVj/v9KIY8b6/94Hp281x2rW/4PWZjj/VjYvfrJy+crV1zYurp0fnh9+9PqJwRuDk2dOnTqzUr4rWfHGBAAAgH+nX7Vm/Z8uPrr+f6QRx4z1/6ffDL5ojpWp//c0XfTrOhMAAICD7ZmXfv8t2eN80u/H52ubm5cGk+Pu5xOTYwep/m2Hqtas/7PFrrMCAAAA2jDeSh5Y/z/biGPG9f8nv3/+x+Y9s4g4XK3/H1v/eHS2venMtTb+nLjrOQIAANCtw1Vrrv/n5f7/dHfLQxoRr748iat/AzhT/Z+989UPzbGa+/9PtjfFuZQuTZ5H2S9F9Ja6zggAAID97ImqFcX+r/nO6oc/HXmvb/8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQNv+DAAA///fxzxy") r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) read$char_usb(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0xc) getpid() bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="9feb010018000000000000008000000080000000060000000800000000000008050000000f000000040000040a0000000a00000004010000279e00000c0000000100000004000000010000000100"], &(0x7f0000000240)=""/88, 0x9e, 0x58, 0x0, 0xa, 0x0, @void, @value}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt(r0, 0x1, 0x10000000000009, &(0x7f00000003c0)="3fea27a5", 0x4) 3.35286705s ago: executing program 0 (id=11067): syz_emit_ethernet(0x5a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0xff, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) r4 = syz_open_procfs(r0, &(0x7f0000000040)='net/ptype\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001900)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) r5 = socket$key(0xf, 0x3, 0x2) ptrace$poke(0x5, r0, 0x0, 0x8c7) sendmsg$key(r5, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000000500e50000070000001ffeff0001000003f1dc7f7c6e8702000100000000f4ff3f00020000000005000500000000000a"], 0x80}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x10}}, 0x0) sendmmsg(r5, &(0x7f0000000180), 0x400008a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) readv(r4, &(0x7f00000009c0)=[{0x0}, {&(0x7f0000000400)=""/49, 0x31}, {&(0x7f0000001940)=""/4096, 0x1000}, {&(0x7f0000000600)}, {&(0x7f0000000940)=""/125, 0x7d}], 0x5) write$binfmt_script(r6, &(0x7f0000000780), 0xfea7) 3.234268611s ago: executing program 2 (id=11068): r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000200)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1}}) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r1, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='p\x00\x00\x00\x00\x00\x00\x00v'], 0x70}}], 0x1, 0x2000c044) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b40)={&(0x7f0000000600)='kfree\x00', r5}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) 3.042243289s ago: executing program 2 (id=11069): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r3}, &(0x7f0000000180), &(0x7f0000000200)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000100)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4002, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000e86000)="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", 0x110) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xc}, 0x1c) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000000)=0x1c1c, 0x4) 2.882281134s ago: executing program 4 (id=11070): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60600) 2.479975601s ago: executing program 0 (id=11071): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc70e, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000001200000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r1}, 0x10) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\b\x00'], 0x0, 0x0, 0x0, 0x0}, 0x0) 2.322137305s ago: executing program 3 (id=11072): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="05010000000000107d1e222e00000000000109022400010000000009040000020300020009210000000122020009058103"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb7030000080000002d010000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r1], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000080)={0x0, 0x0, 0x4, {0x4, 0x0, "78e4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000a40)={0x84, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.183505228s ago: executing program 2 (id=11073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60600) 1.859962898s ago: executing program 4 (id=11074): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x40000000000011a, 0x44000) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001840)={{r3}, &(0x7f00000017c0), &(0x7f0000001800)='%-5lx \x00'}, 0x20) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x202, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) read$FUSE(r5, &(0x7f0000006140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000000440)=ANY=[@ANYBLOB='fmask=00000000000000000000002,discard,errors=remount-ro,iocharset=cp874,allow_utime=00000000000000000004001,dmask=00000000000000000000010,errors=continue,uid=', @ANYRESHEX=r6, @ANYBLOB=',=', @ANYRESHEX=r7, @ANYBLOB=',namecase=1,\x00'], 0x5, 0x151d, &(0x7f0000000b40)="$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") syz_mount_image$ext4(&(0x7f0000000000)='ext3\x00', &(0x7f0000000040)='./file0\x00', 0x1c917, &(0x7f00000021c0), 0x0, 0x4d0, &(0x7f0000000a40)="$eJzs3U9vG2kZAPBnJnFp2pSkgkOpRKloUVJB7aShbcShgITgVAko9xISJ4rixFHstE1U0VR8ACQOFIkTJy5IfAAk1I+AkCrBHQHa1Wq33T3sYbdeeWxvm9RO0t3E7sa/nzTx+86fPM9jy2O/MyNPAH3rfERciIjntVrtUkSMNOenzWms3tlqrPfs6f3Z+pRErXbr3SQiacyrrzL+0v882dgkjkfEz38S8avk1biVjc2lmVKpuNbsF6rLq4XKxublxeWZheJCcWVqavLa9PXpq9MTB1LncETc+NH/f//bP//4xt+/c/c/t98e/3XSnB/xoo6D1ig9lz0XLYMRsXYYwXpkMKsQAIAvgtb3/G9GxKUYiYHs2xwAAABwlNS+PxwfJRE1AAAA4MhKs2tgkzTfvA5gONI0n29cw/vVOJGWypXqt+fL6ytzjWtlRyOXzi+WihPNa4VHI5fU+5NZ+0X/yo7+VEScjhiKiKyfny2X5np98AMAAAD6xMkd4/8PRhrjfwAAAOCIGe11AgAAAMChM/4HAACAo8/4HwAAAI60n968WZ9qrftfz93ZWF8q37k8V6ws5ZfXZ/ORrq3mF8rlhew3+5b3+n+lcnn1u7Gyfq9QLVaqhcrG5u3l8vpK9fbitltgAwAAAF10+huP/51ExNb3hrKp7livkwK6YnB7t/Zgt5X/d8jJAF010OsEgJ4Z7HUCQM/kep0A0HPJHss7Xrzzj4PPBQAAOBxjX2t//j/Z89jAVtqlFIFD4vgf9C/n/6F/Of8P/SsXA2EgD/3t8M//12qvlRAAAHDghrMpSfMR2XGA4UjTfD7iVHZbgFwyv1gqTkTElyPiXyO5L9X7k9mWyZ5jBgAAAAAAAAAAAAAAAAAAAAAAAACgoVZLogYAAAAcaRHpW0nz/l9jIxeHdx4fOJZ8OJI9RsTdP956NBDV6tpkff57n86v/uHWo3sz1eralV4cwQAAAAB2ao3Ts8fJXmcDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwFHz7On92dbUzbjv/DAiRl+Jn4sYjOPZGsfrnTjxfhKDL22XRMTAAcTfehgRZ9rVn9TTitFmFu3iD/U4/skDiA/97HF9//ODdu+/NM5nj+3ff9citvU/qw77vyx+a/830OH9f2qfMc4++WuhY/yHEWcH2+9/WvGTDvEv7DP+L3+xudlpWe1PEWNtP3+SbbEK1eXVQiVtzlkorkxNTV6bvj59dXqiML9YKjb/to3xu6//7flu9Z/oEH90j/ov7rP+j5/ce/qVRjPXLv74hfav/5kO8dPmZ9+3mu368rFWe6vRftm5v/zz3G71z3Wof6/Xf3yf9V/62W/+u89VAYAuqGxsLs2USsW1vm58rmej/rXojahC43UbD96MNA60MfT6W7UGW9sW9XKvBAAAHIZXx8AAAAAAAAAAAAAAAAAAAABAt3Xz1/VatnpTKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADArj4JAAD//1+JzIQ=") r8 = syz_open_procfs(0xffffffffffffffff, 0x0) read$FUSE(r8, 0x0, 0x0) 1.319679618s ago: executing program 2 (id=11075): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x10001, 0xd, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) unshare(0x60600) 985.470289ms ago: executing program 4 (id=11076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r2, 0xffffffffffffffff}, &(0x7f0000000b00), &(0x7f0000000300)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x200000000000008e, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xecf5}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) writev(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="180000005c83995f0000000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x3, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r5}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 454.696078ms ago: executing program 2 (id=11077): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000200)={[{@abort}, {@nolazytime}]}, 0x1, 0x7a1, &(0x7f0000000700)="$eJzs3c1rXFUbAPDnTjJNk/Z9kxde0LoKCBoonZgaWwUXFRciWCjo2naYTEObSaZkJqUJgbaI4EbQ4kLQTddV686tH1v9L1xIS7VpseJCIncy006TmXw0yUwhvx/c9pz7dc5zz/04k3uYCWDPGk7/yUQciohPkojB+vwkIrK1VG/EiZX1HiwtFtIpieXld/9IauvcX1osRNM2qQP1zLMR8eOHEYcza8utzC9M5Uul4mw9P1qdvjBamV84cm46P1mcLM4cGxsfP3r8lePHdi7WP39ZOHj707de/ObE3x88c/Pjn5I4EQfry5rj2CnDMVw/Jtn0ED7mzZ0urMuSbleAJ5Jemj0rV3kcisHoqaXa6O9kzQCA3XI5IpYBgD0m8fwHgD2m8XeA+0uLhcbU3b9IdNadNyJi/0r8jfebK0t66+/s9tfegw7cTx57M5JExNAOlD8cEV9+9/5X6RS79B4SoJUrVyPizNDw2vt/smbMwla9tIl1Vr9tdv+Dzvk+7f+82qr/l3nY/4kW/Z++xtixbVq9j7XXf+bWDhTTVtr/e71pbNuDpvjrhnrquf/U+nzZ5Oy5UjG9t/03IkYi25fmx9YpY+TeP/faLWvu/929dv5GWv7dnrjxaI3Mrd6+xzbp2VbAq9y5GvFcb6v4k4ftn7Tp/57aZBlvv/bRF+2WpfGncTemWvzXzt/YVlBbsHw94oWW7f9oRFvSanziZLY+PnG0djqMNk6KFr799fOBduU3t386peU3Pgt0Qtr+A+vHP5Q0j9esbL2Mn68P/tB2YWaj+Nec/zGRr+b3Je/V0vvq8y7lq9XZsYh9yTtr5x99tG0j31g/jX/k+dbX/3rnf/qZ8Mwm4++9/fvX7ZY9De0/saX233ri5oOptvesjeNP23+8lhqpz0nbf6O4NlvB7Rw7AAAAAAAAAAAAAAAAAAAAAAAAANisTEQcjCSTe5jOZHK5ld/w/n8MZErlSvXw2fLczETUfit7KLKZxlddDjZ9H+pY/fvwG/mjq/IvR8T/IuKzvv5aPlcolya6HTwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1B1o8/v/qd/6ul07AGDX7O92BQCAjvP8B4C9Z2vP//5dqwcA0Dk+/wPA3uP5DwB7j+c/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAu+zUyZPptPzX0mIhzU9cnJ+bKl88MlGsTOWm5wq5Qnn2Qm6yXJ4sFXOF8nTbHV1Z+a9ULl8Yj5m5S6PVYqU6WplfOD1dnpupnj43nZ8sni5mOxYZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGxeZX5hKl8qFWe3k0h3tBP7eeJET/Ocyxtu1dfFqkp07SSJ3SsiG0+0eU9EdPuwrHdRN/R37f4EAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8LT7NwAA//8djSIg") bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000000)=@newtaction={0x7c, 0x30, 0x1, 0x0, 0x0, {}, [{0x68, 0x1, [@m_bpf={0x2c, 0x2, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x38, 0x1, 0x0, 0x0, {{0xc}, {0xc, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) 113.185419ms ago: executing program 4 (id=11078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x1000410, &(0x7f0000000440)={[{@grpid}, {@grpquota}]}, 0x4, 0x4eb, &(0x7f0000000540)="$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") r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r3) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000340)={'syztnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x29, 0x6, 0x5c, 0x4, 0x30, @local, @mcast2, 0x80, 0x40, 0x0, 0x2c}}) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000d80)=@bloom_filter={0x1e, 0x1000, 0x699, 0x6, 0x200, r7, 0x80000000, '\x00', r8, r9, 0x2, 0x2, 0x2, 0x9, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000540)={{r10}, &(0x7f00000004c0), &(0x7f0000000500)='%-5lx \x00'}, 0x20) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000580)='kmem_cache_free\x00', r12}, 0x10) lstat(&(0x7f0000000400)='./file0\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26, 0x0, 0x0, @void, @value}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000004c0)={&(0x7f0000000180), 0x6e, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0xfffe}], 0x1}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, r13}, 0x18) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f00000006c0)) r14 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) dup2(r14, r11) 96.594321ms ago: executing program 0 (id=11079): socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x13, 0xb, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x3ffffffffffffda, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) write$P9_RVERSION(0xffffffffffffffff, 0x0, 0x15) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETA(r3, 0x5406, &(0x7f0000000200)={0xffff, 0x0, 0x200, 0x800a, 0x0, "5f7300fbffffff00"}) ioctl$TIOCL_GETMOUSEREPORTING(r3, 0x5412, &(0x7f00000006c0)=0x16) ioctl$TIOCL_PASTESEL(r3, 0x541c, &(0x7f0000000040)) r4 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./bus\x00', 0x800, &(0x7f0000000040)={[{@jqfmt_vfsv0}, {@test_dummy_encryption}]}, 0x1, 0x453, &(0x7f0000000a40)="$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") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) chdir(&(0x7f00000003c0)='./bus\x00') open(&(0x7f0000000080)='./bus\x00', 0xa942, 0x0) sendmsg(r4, &(0x7f0000000640)={&(0x7f0000000400)=@generic={0x18, "f7dca24ef6877bcbe6fbf228844019a87d38c5254a0be821a4d304652c61da979203574bc9c5d73e7cb2ef19fc056d14b1c7a18ef65f8aa00875ce9f1ac7321165adbec1c912d4adc9c3434756b62808a0245113590578fc960f65dc381a13dbdd8048e31ceb4afe4ba8af16934ccb1eaa8a84ab1053066668964181ca4c"}, 0x80, &(0x7f00000001c0)=[{0x0}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 52.804645ms ago: executing program 3 (id=11080): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={0x0, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000380), 0xffffffffffffffff) syz_mount_image$f2fs(&(0x7f0000000240), &(0x7f0000000000)='./bus\x00', 0x380801c, &(0x7f0000000540)=ANY=[@ANYBLOB="66617374626f6f742c71756f7461000000000000003b814e50a959736d65720f73ecea54b5e5be45aca9836c319f437199ff24212c651baef614d442ae89412ad3dcd0b7586d02fe296d6d65cacd4fc5002207ce994dda65c4b1d23a9bd5ba0f4ce5c2b5a5718c6aa918080002223d2753a5cac974110144cd0a1e368652324a41b31e1e73fa85bae63db763c51fc02936b3b32dccbdf8f68bd96a45a75427a5f789d267fd92f6a5540200b81d5b9fa9b40fe4d7fbd50a6afc3a989c6d60045663c500000000bc7f6b22df0191acf5912afdcc1c061835177068c40f757dd123d2680b1c544f1525aa8d00000000000000000000002e8b5c733d362417c17f527c0bfebec112d57fc69fabb9b31ef97b2100931ff60cdf666c25244218b1f1a6010000000100000020563b835d0e8e9a09070ef1691fcb2f37bda5d4e3d9d7a2d0ac82b45a53001057f321acc45d5e065a461de90100000077d200000000000040b78f0dd3836f5ab2f6a1a5b798bb7752f192c6b48e568973a59cd9c74bd9a14721856c5499cd8f93f8beaa9cf76718ce7244c84268030000000000000008886b313bd01a22d576e414011a4f0a897514329f86d4585fa0ea17068f8af349696da4a2b37828931cf6a369db22b556a8e24310ca52ec51bc23d8c73e6410eb41ca6748e0b57897cb55a2d513e6a00765ee3f58b471c54dd57f0af584afe4a21f92b515e34ac8c454a30dd54a580abcf2fa6fbb273ca0f751e684584320534667aea39ad7222c8ef531f514939177a47395e94c1723abb3fd44fd64fde4b45cc2f55f4ae05ff48648a4c998257856bcdcf2fa02010000001f54fb936570450e91c8d55a0016ff1ec9da9ccc1191c2116322020c66d907e4d9b23496ae19bac24dc23c43f514f1b4af19988bbe61ee29a368a999435d6872d01b79c7821e875859dfbf3c57e4f1fb0be46cb5f7a0fa13516c0926d19dd2d58633d97b4ca282e73ea142b01b4a742fa11c0927ba811dd60903d575e2449d775021b542db617086b3ed42e6e60fe043cff79b0c067c584bbf82657974c3736912b4ab22052b9467d0da116ccc1652d861a420f08baf67d3e9f6160100000001000000ae6335ad9896abd3cc00413638cb9bc62ab8054325d72e9144cfe0bc4060a7c8f4dce73b653177ecf8228e6e6fae02510000000000000000000000000000f43739fdd2d24e50e0233acfe1c863907079cbafe80d01f8a0000000000024589ec3f88e6e99bf1d4373f24d760da4d35e6658f54190e4ce3f5ae00b44b71e299d3f6c892d9abbafbc531d68a84b4688b282bf99dd29c2c037be31b0e7d320a941fb000000000000", @ANYRES32, @ANYRESOCT, @ANYRESDEC, @ANYRESHEX, @ANYRESHEX, @ANYRES64, @ANYRES16, @ANYRESOCT], 0x1, 0x5571, &(0x7f0000001a00)="$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") open(0x0, 0x14507e, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70200001400894fb7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x2d) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0, 0x0) openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000200), 0x35c, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) ioctl$BLKROSET(0xffffffffffffffff, 0x125d, &(0x7f0000000080)=0x3f) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)={0x0, 0x0, 0x1000000, 0x80}) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="c8010000", @ANYRES16=r3, @ANYBLOB="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"], 0x1c8}}, 0x0) 0s ago: executing program 4 (id=11081): r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) process_vm_writev(r0, &(0x7f0000000640)=[{&(0x7f0000000300)=""/207, 0xcf}, {&(0x7f0000000400)=""/66, 0x42}, {&(0x7f0000000480)=""/207, 0xcf}, {&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f00000005c0)=""/67, 0x43}, {&(0x7f0000000780)=""/152, 0x98}, {&(0x7f0000000840)=""/198, 0xc6}], 0x7, &(0x7f0000001280)=[{&(0x7f0000000940)=""/204, 0xcc}, {&(0x7f0000000a40)=""/150, 0x96}, {&(0x7f0000000b00)=""/121, 0x79}, {&(0x7f0000001180)=""/246, 0xf6}, {&(0x7f0000000700)=""/59, 0x3b}], 0x5, 0x0) kernel console output (not intermixed with test programs): ectors = 8 limit=40427 [ 2673.495078][ T5405] F2FS-fs (loop2): Issue discard(5637, 5637, 1) failed, ret: -5 [ 2673.606356][T12579] loop0: detected capacity change from 0 to 256 [ 2673.621783][T12579] exfat: Bad value for 'uid' [ 2673.699343][T12579] loop0: detected capacity change from 0 to 512 [ 2673.710877][T12579] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended [ 2674.012248][T12587] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2674.434149][ T4393] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 2674.884197][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2674.895056][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2674.904752][ T4393] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 2674.913826][ T4393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2674.932017][ T4393] usb 4-1: config 0 descriptor?? [ 2675.479883][T12611] loop0: detected capacity change from 0 to 256 [ 2675.504636][ T4393] usbhid 4-1:0.0: can't add hid device: -71 [ 2675.516705][ T4393] usbhid: probe of 4-1:0.0 failed with error -71 [ 2675.641077][ T4393] usb 4-1: USB disconnect, device number 46 [ 2675.778068][T12613] loop2: detected capacity change from 0 to 40427 [ 2675.784909][T12613] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2675.792565][T12613] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2675.801331][T12613] F2FS-fs (loop2): invalid crc value [ 2675.807772][T12613] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2675.832395][T12613] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2675.839442][T12613] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2675.887846][T12619] loop4: detected capacity change from 0 to 128 [ 2675.898869][T12619] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2675.907647][T12619] ext4 filesystem being mounted at /337/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2676.588799][T12625] syz.2.10775: attempt to access beyond end of device [ 2676.588799][T12625] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2677.145527][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2677.778250][T12642] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2677.806182][T12644] loop2: detected capacity change from 0 to 512 [ 2677.817129][T12644] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2677.825971][T12644] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038 (0x7fffffff) [ 2678.196740][T12653] loop0: detected capacity change from 0 to 512 [ 2678.205732][T12653] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2678.212266][T12653] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.10784: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2678.230740][T12653] EXT4-fs error (device loop0): ext4_quota_enable:6958: comm syz.0.10784: Bad quota inode: 4, type: 1 [ 2678.241894][T12653] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2678.256631][T12653] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2678.263300][T12653] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2678.679416][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2678.781073][T12664] loop3: detected capacity change from 0 to 256 [ 2678.994433][ T4393] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 2679.063680][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2679.080390][T12668] loop0: detected capacity change from 0 to 2048 [ 2679.095437][T12668] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2679.273386][T12673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10788'. [ 2679.282739][T12673] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10788'. [ 2679.434174][T11215] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 2679.464223][ T4393] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.474209][ T4393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2679.507439][T12675] loop3: detected capacity change from 0 to 128 [ 2679.515521][T12675] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2679.524012][T12675] ext4 filesystem being mounted at /311/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2679.589629][ T4393] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2679.598664][ T4393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2679.606514][ T4393] usb 3-1: SerialNumber: syz [ 2679.854667][ T4393] usb 3-1: 0:2 : does not exist [ 2679.859364][ T4393] usb 3-1: unit 5 not found! [ 2679.935199][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2679.944269][T11215] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2679.958535][T11215] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2679.967553][T11215] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 2680.054281][T11215] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2680.063223][T11215] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2680.127429][T12682] loop0: detected capacity change from 0 to 256 [ 2680.308430][T11215] usb 5-1: SerialNumber: syz [ 2680.362487][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2680.519981][T12687] veth0_to_bond: mtu less than device minimum [ 2680.654752][T11215] usb 5-1: 0:2 : does not exist [ 2680.981579][T12689] loop0: detected capacity change from 0 to 40427 [ 2680.988280][T12689] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2680.995880][T12689] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2681.004606][T12689] F2FS-fs (loop0): invalid crc value [ 2681.010919][T12689] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2681.033168][T12689] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2681.044443][T12689] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2681.051291][T12689] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2681.724567][T25454] usb 3-1: USB disconnect, device number 47 [ 2682.062746][T25454] usb 5-1: USB disconnect, device number 48 [ 2682.248587][T12711] loop3: detected capacity change from 0 to 512 [ 2682.255172][T12711] EXT4-fs: Ignoring removed nobh option [ 2682.260613][T12711] EXT4-fs: Ignoring removed nobh option [ 2682.267191][T12711] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2682.287433][T12711] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2682.295989][T12711] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10797: invalid indirect mapped block 2683928664 (level 1) [ 2682.310932][T12711] EXT4-fs (loop3): 1 truncate cleaned up [ 2682.317620][T12711] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2682.464162][T25454] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 2682.757620][T12717] loop2: detected capacity change from 0 to 256 [ 2682.896067][T25454] usb 5-1: device descriptor read/64, error -71 [ 2682.951036][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2683.121859][T12728] loop3: detected capacity change from 0 to 512 [ 2683.140619][T12728] EXT4-fs: Ignoring removed nobh option [ 2683.146161][T12728] EXT4-fs: Ignoring removed nobh option [ 2683.151849][T12728] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2683.176750][T12728] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2 [ 2683.184860][T12728] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.10800: invalid indirect mapped block 2683928664 (level 1) [ 2683.199111][T12728] EXT4-fs (loop3): 1 truncate cleaned up [ 2683.204673][T12728] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2683.343584][T12735] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2683.483076][T25454] usb 5-1: device descriptor read/64, error -71 [ 2683.697758][T12737] loop2: detected capacity change from 0 to 40427 [ 2683.704660][T12737] F2FS-fs (loop2): fault_injection options not supported [ 2683.712195][T12737] F2FS-fs (loop2): invalid crc value [ 2683.718336][T12737] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2683.742700][T12737] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2683.754473][T25454] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 2683.827873][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2684.711218][T12747] loop0: detected capacity change from 0 to 256 [ 2684.718338][ T5405] syz-executor: attempt to access beyond end of device [ 2684.718338][ T5405] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2684.718701][T12747] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2684.755286][T12747] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2684.844166][T25454] usb 5-1: device descriptor read/64, error -71 [ 2685.324408][T10606] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 2685.594172][T10606] usb 4-1: Using ep0 maxpacket: 16 [ 2685.744216][T10606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2685.755095][T10606] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2685.765217][T10606] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2685.778182][T10606] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2685.787205][T10606] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2685.795895][T10606] usb 4-1: config 0 descriptor?? [ 2685.821323][T12763] loop2: detected capacity change from 0 to 40427 [ 2685.828050][T12763] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2685.835793][T12763] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2685.844615][T12763] F2FS-fs (loop2): invalid crc value [ 2685.851180][T12763] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2685.875203][T12763] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2685.882064][T12763] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2685.994254][T24040] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 2686.099764][T12770] syz.2.10809: attempt to access beyond end of device [ 2686.099764][T12770] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2686.384208][T24040] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2686.394283][T24040] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2686.444876][T10606] koneplus 0003:1E7D:2E22.015F: unknown main item tag 0x0 [ 2686.452270][T10606] koneplus 0003:1E7D:2E22.015F: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 2686.484202][T24040] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2686.493079][T24040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2686.500926][T24040] usb 1-1: SerialNumber: syz [ 2686.627098][T12775] loop2: detected capacity change from 0 to 512 [ 2686.656765][T12775] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.10811: iget: bad extended attribute block 128 [ 2686.669564][T12775] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.10811: couldn't read orphan inode 16 (err -117) [ 2686.681515][T12775] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2686.690302][T12775] ext4 filesystem being mounted at /413/file1 supports timestamps until 2038 (0x7fffffff) [ 2686.703547][T12775] EXT4-fs error (device loop2): ext4_lookup:1855: inode #16: comm syz.2.10811: iget: bad extended attribute block 128 [ 2686.719527][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2686.764871][T24040] usb 1-1: 0:2 : does not exist [ 2686.897015][ T60] usb 4-1: USB disconnect, device number 47 [ 2687.065562][T12785] loop4: detected capacity change from 0 to 128 [ 2687.073566][T12785] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2687.082082][T12785] ext4 filesystem being mounted at /344/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2687.215170][T24040] usb 1-1: USB disconnect, device number 59 [ 2687.444574][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2687.782829][T12797] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2687.963376][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2687.982695][T12801] overlayfs: statfs failed on './file0' [ 2688.214153][T24040] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 2688.221218][T12803] loop4: detected capacity change from 0 to 40427 [ 2688.245072][T12803] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2688.252830][T12803] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2688.262192][T12803] F2FS-fs (loop4): invalid crc value [ 2688.268754][T12803] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2688.304631][T12803] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2688.311536][T12803] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2688.763074][T12809] syz.4.10818: attempt to access beyond end of device [ 2688.763074][T12809] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2688.895788][T24040] usb 1-1: Using ep0 maxpacket: 16 [ 2688.906476][T12812] loop3: detected capacity change from 0 to 512 [ 2688.920554][T12812] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2688.927675][T12812] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.10819: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2688.940920][T12815] loop2: detected capacity change from 0 to 512 [ 2688.946421][T12812] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.10819: Bad quota inode: 4, type: 1 [ 2688.963067][T12812] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2688.963231][T12815] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2688.980713][T12812] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 2688.992372][T12812] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2689.045134][T12815] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2689.057930][T12815] ext4 filesystem being mounted at /416/file0 supports timestamps until 2038 (0x7fffffff) [ 2689.063891][T24040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2689.078574][T24040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2689.087742][T12815] EXT4-fs (loop2): unmounting filesystem. [ 2689.088320][T24040] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2689.106753][T24040] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2689.115694][T24040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2689.124512][T24040] usb 1-1: config 0 descriptor?? [ 2689.141472][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2689.434926][T12821] loop2: detected capacity change from 0 to 40427 [ 2689.536746][T12821] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2689.548645][T12821] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2689.558224][T12821] F2FS-fs (loop2): invalid crc value [ 2689.564948][T12821] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2689.589709][T12821] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2689.596611][T12821] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2689.729842][T24040] koneplus 0003:1E7D:2E22.0160: unknown main item tag 0x0 [ 2689.741555][T24040] koneplus 0003:1E7D:2E22.0160: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 2689.800905][T12832] syz.2.10823: attempt to access beyond end of device [ 2689.800905][T12832] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2690.012234][T12835] loop3: detected capacity change from 0 to 512 [ 2690.025584][T12835] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2690.034585][T12835] ext4 filesystem being mounted at /321/file0 supports timestamps until 2038 (0x7fffffff) [ 2690.168837][ T60] usb 1-1: USB disconnect, device number 60 [ 2690.404234][T24040] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 2690.674198][T10606] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 2690.706656][T12845] loop0: detected capacity change from 0 to 128 [ 2690.714864][T12845] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2690.723321][T12845] ext4 filesystem being mounted at /296/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2690.794204][T24040] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2690.804270][T24040] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2691.310568][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2691.334438][T10606] usb 3-1: Using ep0 maxpacket: 16 [ 2691.341659][T24040] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2691.401814][T24040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2691.442154][T24040] usb 5-1: SerialNumber: syz [ 2691.474198][T10606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2691.485157][T10606] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2691.494857][T10606] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2691.507545][T10606] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2691.516614][T10606] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2691.526176][T10606] usb 3-1: config 0 descriptor?? [ 2691.570663][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2691.698112][T24040] usb 5-1: 0:2 : does not exist [ 2692.024857][T10606] koneplus 0003:1E7D:2E22.0161: unknown main item tag 0x0 [ 2692.032295][T10606] koneplus 0003:1E7D:2E22.0161: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.2-1/input0 [ 2692.145438][T24040] usb 5-1: USB disconnect, device number 51 [ 2692.494503][T24040] usb 3-1: USB disconnect, device number 48 [ 2692.616751][T12864] loop0: detected capacity change from 0 to 512 [ 2692.624960][T12864] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2692.631331][T12864] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.10831: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2692.650293][T12864] EXT4-fs error (device loop0): ext4_quota_enable:6958: comm syz.0.10831: Bad quota inode: 4, type: 1 [ 2692.661398][T12864] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2692.677025][T12864] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2692.683568][T12864] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2693.826096][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2693.845918][T12879] loop0: detected capacity change from 0 to 512 [ 2693.855933][T12879] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2693.875719][T12879] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2693.884674][T12879] ext4 filesystem being mounted at /299/file0 supports timestamps until 2038 (0x7fffffff) [ 2693.895402][T12879] EXT4-fs (loop0): unmounting filesystem. [ 2694.038150][T12888] loop4: detected capacity change from 0 to 256 [ 2694.472793][T12891] loop0: detected capacity change from 0 to 512 [ 2694.485686][T12891] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.10838: iget: bad extended attribute block 128 [ 2694.498439][T12891] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10838: couldn't read orphan inode 16 (err -117) [ 2694.510509][T12891] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2694.519372][T12891] ext4 filesystem being mounted at /300/file1 supports timestamps until 2038 (0x7fffffff) [ 2694.533067][T12891] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz.0.10838: iget: bad extended attribute block 128 [ 2694.548913][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2694.624711][T12899] loop3: detected capacity change from 0 to 256 [ 2694.631248][T12899] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2694.643489][T12899] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2695.353861][T12910] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2695.618365][T12905] loop2: detected capacity change from 0 to 40427 [ 2695.638845][T12914] loop0: detected capacity change from 0 to 512 [ 2695.650541][T12905] F2FS-fs (loop2): fault_injection options not supported [ 2695.663151][T12905] F2FS-fs (loop2): invalid crc value [ 2695.670949][T12905] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2695.672645][T12914] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2695.688582][T12914] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.10845: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2695.719705][T12914] EXT4-fs error (device loop0): ext4_quota_enable:6958: comm syz.0.10845: Bad quota inode: 4, type: 1 [ 2695.730596][T12905] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2695.740829][T12914] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2695.774197][T12914] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2695.781843][T12914] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2696.008199][T12928] loop4: detected capacity change from 0 to 256 [ 2696.034697][T12928] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2696.053275][T12928] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2696.510793][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2696.678749][T12934] loop0: detected capacity change from 0 to 40427 [ 2696.685653][T12934] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2696.693279][T12934] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2696.701856][T12934] F2FS-fs (loop0): invalid crc value [ 2696.708297][T12934] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2696.782043][T12934] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2696.791239][T12934] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2697.206667][T12946] syz.0.10849: attempt to access beyond end of device [ 2697.206667][T12946] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2697.505261][T12950] overlayfs: missing 'lowerdir' [ 2697.534313][T12950] overlayfs: statfs failed on './file0' [ 2697.617633][T12955] loop4: detected capacity change from 0 to 2048 [ 2697.840869][T12955] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2697.966296][T12964] veth0_to_bond: mtu less than device minimum [ 2698.494860][T12969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10855'. [ 2698.504140][T12969] netlink: 32 bytes leftover after parsing attributes in process `syz.4.10855'. [ 2698.616159][T12973] loop3: detected capacity change from 0 to 512 [ 2698.635656][T12973] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2698.642074][T12973] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.10858: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2698.706766][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2698.724450][T12973] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.10858: Bad quota inode: 4, type: 1 [ 2698.766750][T12973] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2698.844236][T12973] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 2698.850833][T12973] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2698.988305][T12972] loop0: detected capacity change from 0 to 40427 [ 2699.005260][T12972] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2699.012808][T12972] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2699.067215][T12972] F2FS-fs (loop0): invalid crc value [ 2699.123646][T12972] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2699.209504][T12972] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2699.216557][T12972] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2699.463743][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2699.523662][T12989] syz.0.10857: attempt to access beyond end of device [ 2699.523662][T12989] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2699.544746][ T7894] device bridge_slave_1 left promiscuous mode [ 2699.550691][ T7894] bridge0: port 2(bridge_slave_1) entered disabled state [ 2699.557963][ T7894] device bridge_slave_0 left promiscuous mode [ 2699.563903][ T7894] bridge0: port 1(bridge_slave_0) entered disabled state [ 2699.571844][ T7894] device veth1_macvtap left promiscuous mode [ 2699.577712][ T7894] device veth0_vlan left promiscuous mode [ 2699.670067][ T7563] syz-executor: attempt to access beyond end of device [ 2699.670067][ T7563] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 2699.683984][ T7563] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 2701.026243][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2701.054125][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 2701.071545][T13000] device bridge_slave_0 entered promiscuous mode [ 2701.084802][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.094274][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 2701.101544][T13000] device bridge_slave_1 entered promiscuous mode [ 2701.144155][T24040] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 2701.144797][T12993] loop0: detected capacity change from 0 to 40427 [ 2701.164245][T12993] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2701.171915][T12993] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2701.188197][T12993] F2FS-fs (loop0): invalid crc value [ 2701.209547][T12993] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2701.215262][T12994] loop2: detected capacity change from 0 to 40427 [ 2701.244603][T12994] F2FS-fs (loop2): fault_injection options not supported [ 2701.248703][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 2701.258348][T13000] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2701.265437][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 2701.272205][T13000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2701.279780][T12993] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2701.286771][T12993] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2701.286810][T12994] F2FS-fs (loop2): invalid crc value [ 2701.315797][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 2701.318134][T12994] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2701.324032][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 2701.348165][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 2701.364708][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 2701.379347][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 2701.384178][T24040] usb 5-1: Using ep0 maxpacket: 16 [ 2701.387646][T11215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 2701.399419][T12994] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2701.416386][T25454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 2701.434283][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 2701.473861][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 2701.481499][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 2701.496362][T13000] device veth0_vlan entered promiscuous mode [ 2701.507813][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 2701.515842][T24040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2701.528155][T13000] device veth1_macvtap entered promiscuous mode [ 2701.534504][T24040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2701.554811][T24040] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2701.684442][T24040] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2701.762441][T13014] syz.0.10860: attempt to access beyond end of device [ 2701.762441][T13014] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2701.777689][T24040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2701.814381][ T5405] syz-executor: attempt to access beyond end of device [ 2701.814381][ T5405] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2701.832142][T24040] usb 5-1: config 0 descriptor?? [ 2701.871707][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 2701.886033][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 2701.995919][ T7563] syz-executor: attempt to access beyond end of device [ 2701.995919][ T7563] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 2702.009901][ T7563] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 2702.081060][T13025] veth0_to_bond: mtu less than device minimum [ 2702.347837][T24040] koneplus 0003:1E7D:2E22.0162: unknown main item tag 0x0 [ 2702.360737][T24040] koneplus 0003:1E7D:2E22.0162: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.4-1/input0 [ 2702.771176][T24040] usb 5-1: USB disconnect, device number 52 [ 2702.845514][T13037] loop2: detected capacity change from 0 to 256 [ 2702.851970][T13037] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2702.864541][T13037] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2703.325307][T13041] loop0: detected capacity change from 0 to 40427 [ 2703.332190][T13041] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2703.340181][T13041] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2703.349089][T13041] F2FS-fs (loop0): invalid crc value [ 2703.358965][T13041] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2703.362577][T13046] loop4: detected capacity change from 0 to 512 [ 2703.378614][T13046] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2703.385145][T13046] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.10872: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2703.397638][T13041] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2703.405089][T13046] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.10872: Bad quota inode: 4, type: 1 [ 2703.410373][T13041] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2703.421514][T13046] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2703.443476][T13046] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2703.450124][T13046] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2703.642692][T13054] syz.0.10871: attempt to access beyond end of device [ 2703.642692][T13054] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2703.844149][T24040] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 2703.921569][T13057] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10874'. [ 2704.095345][ T7563] syz-executor: attempt to access beyond end of device [ 2704.095345][ T7563] loop0: rw=2051, sector=45096, nr_sectors = 8 limit=40427 [ 2704.109299][ T7563] F2FS-fs (loop0): Issue discard(5637, 5637, 1) failed, ret: -5 [ 2704.216346][T24040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2704.216647][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2704.223815][T24040] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2704.223846][T24040] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2704.258579][T24040] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2704.389797][T24040] usb 4-1: config 0 descriptor?? [ 2704.431047][T13061] loop4: detected capacity change from 0 to 40427 [ 2704.437778][T13061] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2704.445406][T13061] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2704.453879][T13061] F2FS-fs (loop4): invalid crc value [ 2704.460405][T13061] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2704.485185][T13061] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2704.492095][T13061] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2704.895074][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.903237][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.911277][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.919477][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.927566][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.935645][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.943590][T24040] logitech-djreceiver 0003:046D:C70E.0163: unknown main item tag 0x0 [ 2704.966344][T13074] loop2: detected capacity change from 0 to 512 [ 2704.989300][T13074] EXT4-fs: Ignoring removed nobh option [ 2704.994844][T13074] EXT4-fs: Ignoring removed nobh option [ 2705.002706][T13074] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2705.020092][T13074] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 2705.028337][T13074] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.10877: invalid indirect mapped block 2683928664 (level 1) [ 2705.042836][T13074] EXT4-fs (loop2): 1 truncate cleaned up [ 2705.048583][T13074] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2705.103039][T11215] usb 4-1: USB disconnect, device number 48 [ 2705.411110][T13084] veth0_to_bond: mtu less than device minimum [ 2705.909759][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2705.972836][T13091] loop2: detected capacity change from 0 to 512 [ 2706.042749][T13091] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2706.057723][T13091] ext4 filesystem being mounted at /431/file0 supports timestamps until 2038 (0x7fffffff) [ 2706.121962][T13097] loop4: detected capacity change from 0 to 512 [ 2706.205434][T13097] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.10883: iget: bad extended attribute block 128 [ 2706.224432][T13097] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.10883: couldn't read orphan inode 16 (err -117) [ 2706.237487][T13097] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2706.246931][T13097] ext4 filesystem being mounted at /360/file1 supports timestamps until 2038 (0x7fffffff) [ 2706.272567][T13097] EXT4-fs error (device loop4): ext4_lookup:1855: inode #16: comm syz.4.10883: iget: bad extended attribute block 128 [ 2706.297535][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2706.574224][T11215] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 2706.922984][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2706.936256][T13110] loop2: detected capacity change from 0 to 256 [ 2706.942740][T13110] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2706.954919][T13110] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2707.012082][T13112] loop4: detected capacity change from 0 to 512 [ 2707.018606][T13112] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2707.027290][T11215] usb 1-1: Using ep0 maxpacket: 16 [ 2707.035559][T13112] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2707.044473][T13112] ext4 filesystem being mounted at /362/file0 supports timestamps until 2038 (0x7fffffff) [ 2707.055097][T13112] EXT4-fs (loop4): unmounting filesystem. [ 2707.154187][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2707.172105][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2707.192232][T11215] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2707.215804][T11215] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2707.233401][T11215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2707.250764][T11215] usb 1-1: config 0 descriptor?? [ 2707.389084][T13121] loop4: detected capacity change from 0 to 256 [ 2707.577521][T13124] loop3: detected capacity change from 0 to 512 [ 2707.595439][T13124] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2707.604296][T13124] ext4 filesystem being mounted at /337/file0 supports timestamps until 2038 (0x7fffffff) [ 2707.900591][T11215] koneplus 0003:1E7D:2E22.0164: unknown main item tag 0x0 [ 2707.908265][T11215] koneplus 0003:1E7D:2E22.0164: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 2708.224210][T24040] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 2708.228726][T11215] usb 1-1: USB disconnect, device number 61 [ 2708.433582][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2708.594186][T24040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2708.605616][T24040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2708.615478][T24040] usb 3-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2708.624399][T24040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2708.634824][T24040] usb 3-1: config 0 descriptor?? [ 2709.132488][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.140552][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.148968][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.156912][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.164956][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.172937][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.180991][T24040] logitech-djreceiver 0003:046D:C70E.0165: unknown main item tag 0x0 [ 2709.317016][T11215] usb 3-1: USB disconnect, device number 49 [ 2710.143700][T13162] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2710.350469][T13166] loop0: detected capacity change from 0 to 2048 [ 2710.354170][T24040] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 2710.394977][T13166] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2710.521952][T13164] loop3: detected capacity change from 0 to 40427 [ 2710.551047][T13164] F2FS-fs (loop3): fault_injection options not supported [ 2710.597379][T13170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10900'. [ 2710.606636][T13170] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10900'. [ 2710.634970][T13164] F2FS-fs (loop3): invalid crc value [ 2710.645997][T13164] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2710.664314][T24040] usb 3-1: Using ep0 maxpacket: 16 [ 2710.754252][T13164] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2710.848045][T24040] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2710.858071][T24040] usb 3-1: config 0 has no interfaces? [ 2710.863376][T24040] usb 3-1: New USB device found, idVendor=045e, idProduct=05da, bcdDevice= 0.00 [ 2710.872262][T24040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2710.881110][T24040] usb 3-1: config 0 descriptor?? [ 2711.185869][ T7028] syz-executor: attempt to access beyond end of device [ 2711.185869][ T7028] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2711.215011][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2711.224229][T25454] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 2711.434429][T13185] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2711.604139][T25454] usb 5-1: Using ep0 maxpacket: 16 [ 2711.764185][T25454] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2711.774260][T25454] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 2711.783028][T25454] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2711.792021][T25454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2711.800232][T25454] usb 5-1: config 0 descriptor?? [ 2712.105939][T13189] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2712.114579][T13189] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2712.123558][T13189] overlayfs: statfs failed on './file0' [ 2712.499692][T13197] veth0_to_bond: mtu less than device minimum [ 2712.924013][T24040] usb 3-1: USB disconnect, device number 50 [ 2713.294150][ T60] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 2713.687868][T13212] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2713.714446][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2713.725743][ T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2713.737804][ T60] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2713.755528][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2713.772623][ T60] usb 4-1: config 0 descriptor?? [ 2713.860978][T25454] usb 5-1: USB disconnect, device number 53 [ 2714.119786][T13217] loop4: detected capacity change from 0 to 512 [ 2714.127596][T13217] EXT4-fs: Ignoring removed nobh option [ 2714.133017][T13217] EXT4-fs: Ignoring removed nobh option [ 2714.138864][T13217] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2714.152941][T13217] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 2714.161067][T13217] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10912: invalid indirect mapped block 2683928664 (level 1) [ 2714.175227][T13217] EXT4-fs (loop4): 1 truncate cleaned up [ 2714.180665][T13217] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2714.210220][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2714.315050][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.323036][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.330954][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.339033][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.347016][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.354972][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.362966][ T60] logitech-djreceiver 0003:046D:C70E.0166: unknown main item tag 0x0 [ 2714.416805][T13225] loop4: detected capacity change from 0 to 512 [ 2714.423290][T13227] loop0: detected capacity change from 0 to 512 [ 2714.432779][T13225] EXT4-fs: Ignoring removed nobh option [ 2714.441528][T13225] EXT4-fs: Ignoring removed nobh option [ 2714.448127][T13225] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2714.462963][T13227] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.10914: iget: bad extended attribute block 128 [ 2714.477563][T13225] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 2714.484211][T13227] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10914: couldn't read orphan inode 16 (err -117) [ 2714.497603][T13225] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz.4.10913: invalid indirect mapped block 2683928664 (level 1) [ 2714.497751][T13227] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2714.515410][T13225] EXT4-fs (loop4): 1 truncate cleaned up [ 2714.523197][T25454] usb 4-1: USB disconnect, device number 49 [ 2714.525935][T13225] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2714.536093][T13227] ext4 filesystem being mounted at /322/file1 supports timestamps until 2038 (0x7fffffff) [ 2714.569796][T13227] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz.0.10914: iget: bad extended attribute block 128 [ 2714.585814][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2714.672091][T13234] loop2: detected capacity change from 0 to 128 [ 2714.679960][T13234] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2714.688511][T13234] ext4 filesystem being mounted at /437/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2714.769204][T13237] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2715.244908][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2715.405275][T13242] loop3: detected capacity change from 0 to 40427 [ 2715.428174][T13246] veth0_to_bond: mtu less than device minimum [ 2715.665823][T13242] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2715.673558][T13242] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2715.682272][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2715.689138][T13242] F2FS-fs (loop3): invalid crc value [ 2715.698809][T13242] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2715.722860][T13242] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2715.729818][T13242] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2715.939631][T13256] syz.3.10917: attempt to access beyond end of device [ 2715.939631][T13256] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2716.054758][ T60] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 2716.249742][T13264] overlayfs: missing 'lowerdir' [ 2716.255836][T13264] overlayfs: statfs failed on './file0' [ 2716.472853][T13270] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2716.534404][ T60] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2716.562635][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2716.605675][ T60] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2716.640193][ T60] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2716.658014][T13271] loop0: detected capacity change from 0 to 512 [ 2716.673914][T13271] EXT4-fs: Ignoring removed nobh option [ 2716.685445][ T60] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2716.685510][T13271] EXT4-fs: Ignoring removed nobh option [ 2716.694450][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2716.715184][ T60] usb 3-1: config 0 descriptor?? [ 2716.726011][T13271] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2716.760675][T13271] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 2716.785886][T13271] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.10923: invalid indirect mapped block 2683928664 (level 1) [ 2716.803336][T13271] EXT4-fs (loop0): 1 truncate cleaned up [ 2716.809017][T13271] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2717.072618][T13275] loop4: detected capacity change from 0 to 512 [ 2717.080592][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2717.093675][T13275] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.10925: iget: bad extended attribute block 128 [ 2717.108204][T13275] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.10925: couldn't read orphan inode 16 (err -117) [ 2717.120601][T13275] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2717.161421][T13275] ext4 filesystem being mounted at /372/file1 supports timestamps until 2038 (0x7fffffff) [ 2717.180253][T13275] EXT4-fs error (device loop4): ext4_lookup:1855: inode #16: comm syz.4.10925: iget: bad extended attribute block 128 [ 2717.193032][ T60] nintendo 0003:057E:2009.0167: unknown main item tag 0x0 [ 2717.201793][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2717.207979][ T60] nintendo 0003:057E:2009.0167: unknown main item tag 0x0 [ 2717.215463][ T60] nintendo 0003:057E:2009.0167: unknown main item tag 0x1 [ 2717.222467][ T60] nintendo 0003:057E:2009.0167: unknown main item tag 0x0 [ 2717.229399][ T60] nintendo 0003:057E:2009.0167: unknown main item tag 0x0 [ 2717.253374][ T60] nintendo 0003:057E:2009.0167: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 2717.282429][T13279] loop0: detected capacity change from 0 to 40427 [ 2717.294587][T13279] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 2717.306307][T13279] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 2717.315091][T13279] F2FS-fs (loop0): invalid crc value [ 2717.321350][T13279] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2717.344160][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.357101][ T60] nintendo 0003:057E:2009.0167: using factory cal for left stick [ 2717.364753][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.372541][ T60] nintendo 0003:057E:2009.0167: using factory cal for right stick [ 2717.381227][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.389120][ T60] nintendo 0003:057E:2009.0167: Failed to read left stick cal, using defaults; e=-38 [ 2717.398726][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.398897][T13279] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 2717.406366][ T60] nintendo 0003:057E:2009.0167: Failed to read right stick cal, using defaults; e=-38 [ 2717.406401][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.430588][T13279] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2717.434121][T25454] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 2717.449727][ T60] nintendo 0003:057E:2009.0167: using factory cal for IMU [ 2717.473576][T13284] loop4: detected capacity change from 0 to 40427 [ 2717.497427][T13284] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2717.505310][ T60] nintendo 0003:057E:2009.0167: failed reading SPI flash; ret=-38 [ 2717.512937][ T60] nintendo 0003:057E:2009.0167: Failed to read IMU cal, using defaults; ret=-38 [ 2717.519815][T13284] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2717.522098][ T60] nintendo 0003:057E:2009.0167: Unable to read IMU calibration data [ 2717.531080][T13284] F2FS-fs (loop4): invalid crc value [ 2717.537834][ T60] nintendo 0003:057E:2009.0167: Failed to set report mode; ret=-38 [ 2717.544031][T13284] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2717.550729][ T60] nintendo 0003:057E:2009.0167: Failed to initialize controller; ret=-38 [ 2717.580289][T13284] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2717.589328][ T60] nintendo 0003:057E:2009.0167: probe - fail = -38 [ 2717.592662][T13284] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2717.595857][ T60] nintendo: probe of 0003:057E:2009.0167 failed with error -38 [ 2717.602972][T13284] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2717.613171][ T60] usb 3-1: USB disconnect, device number 51 [ 2717.699146][T13294] syz.0.10926: attempt to access beyond end of device [ 2717.699146][T13294] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2718.014266][T25454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2718.029522][T25454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2718.039230][T25454] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2718.048133][T25454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2718.059655][T25454] usb 4-1: config 0 descriptor?? [ 2718.111859][T13301] loop0: detected capacity change from 0 to 128 [ 2718.127639][T13301] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2718.139574][T13301] ext4 filesystem being mounted at /327/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2718.635233][T13311] loop4: detected capacity change from 0 to 256 [ 2718.644535][T13311] exfat: Bad value for 'uid' [ 2718.653855][T13311] loop4: detected capacity change from 0 to 512 [ 2718.664944][T13311] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2718.665460][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.684922][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.692859][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.701013][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.709168][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.717205][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.733644][T25454] logitech-djreceiver 0003:046D:C70E.0168: unknown main item tag 0x0 [ 2718.868041][T25454] usb 4-1: USB disconnect, device number 50 [ 2718.977652][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2719.502577][T13324] loop4: detected capacity change from 0 to 512 [ 2719.509129][T13324] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2719.553605][T13324] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2719.570631][T13324] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038 (0x7fffffff) [ 2719.594290][T13324] EXT4-fs (loop4): unmounting filesystem. [ 2719.683571][T13322] loop3: detected capacity change from 0 to 40427 [ 2719.690503][T13322] F2FS-fs (loop3): fault_injection options not supported [ 2719.698214][T13322] F2FS-fs (loop3): invalid crc value [ 2719.713205][T13322] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2719.750531][T13322] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2719.855182][T13333] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2720.577824][T13339] loop0: detected capacity change from 0 to 512 [ 2720.594506][ T7028] syz-executor: attempt to access beyond end of device [ 2720.594506][ T7028] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2720.642390][T13339] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.10938: iget: bad extended attribute block 128 [ 2720.662113][T13339] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10938: couldn't read orphan inode 16 (err -117) [ 2720.674342][T13339] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2720.683233][T13339] ext4 filesystem being mounted at /329/file1 supports timestamps until 2038 (0x7fffffff) [ 2720.714434][T13339] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz.0.10938: iget: bad extended attribute block 128 [ 2720.748328][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2720.934370][ T60] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 2721.187481][T13347] loop3: detected capacity change from 0 to 40427 [ 2721.214677][T13345] loop2: detected capacity change from 0 to 40427 [ 2721.223803][T13345] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2721.229677][T13347] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2721.231743][T13345] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2721.239076][T13347] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2721.247804][T13345] F2FS-fs (loop2): invalid crc value [ 2721.255963][T13347] F2FS-fs (loop3): invalid crc value [ 2721.261226][T13345] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2721.272617][T13347] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2721.294253][ T60] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2721.308256][ T60] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2721.317519][T13347] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2721.317766][T13345] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2721.324664][T13347] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2721.331305][T13345] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2721.464213][ T60] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2721.473104][ T60] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2721.481385][ T60] usb 5-1: SerialNumber: syz [ 2721.810152][T13360] syz.3.10939: attempt to access beyond end of device [ 2721.810152][T13360] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2721.828166][T13362] syz.2.10941: attempt to access beyond end of device [ 2721.828166][T13362] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2722.174039][T13367] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2722.208659][ T60] usb 5-1: 0:2 : does not exist [ 2722.345067][T13369] loop3: detected capacity change from 0 to 128 [ 2722.358566][T13369] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2722.367011][T13369] ext4 filesystem being mounted at /350/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2722.406232][T13372] loop2: detected capacity change from 0 to 256 [ 2722.412760][T13372] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2722.424845][T13372] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2722.485428][ T60] usb 5-1: USB disconnect, device number 54 [ 2722.495133][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2723.202309][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2723.538928][T13391] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2723.627717][T11215] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 2723.635117][T25454] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 2723.823840][T13395] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2724.084218][T11215] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2724.094933][T25454] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2724.105487][T25454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2724.116164][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2724.126821][T25454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2724.136425][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2724.145926][T11215] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2724.158699][T25454] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2724.171446][T11215] usb 4-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2724.180293][T25454] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2724.189139][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2724.196950][T25454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2724.216240][T11215] usb 4-1: config 0 descriptor?? [ 2724.221155][T25454] usb 5-1: config 0 descriptor?? [ 2724.706138][T11215] nintendo 0003:057E:2009.016A: unknown main item tag 0x0 [ 2724.713137][T25454] nintendo 0003:057E:2009.0169: unknown main item tag 0x0 [ 2724.720080][T25454] nintendo 0003:057E:2009.0169: unknown main item tag 0x0 [ 2724.727015][T11215] nintendo 0003:057E:2009.016A: unknown main item tag 0x0 [ 2724.733934][T25454] nintendo 0003:057E:2009.0169: unknown main item tag 0x1 [ 2724.740916][T11215] nintendo 0003:057E:2009.016A: unknown main item tag 0x1 [ 2724.747833][T25454] nintendo 0003:057E:2009.0169: unknown main item tag 0x0 [ 2724.754790][T11215] nintendo 0003:057E:2009.016A: unknown main item tag 0x0 [ 2724.761709][T11215] nintendo 0003:057E:2009.016A: unknown main item tag 0x0 [ 2724.768683][T25454] nintendo 0003:057E:2009.0169: unknown main item tag 0x0 [ 2724.776210][T25454] nintendo 0003:057E:2009.0169: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 2724.787880][T11215] nintendo 0003:057E:2009.016A: hidraw1: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.3-1/input0 [ 2724.854196][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2724.861881][T25454] nintendo 0003:057E:2009.0169: using factory cal for left stick [ 2724.869457][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2724.877077][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2724.884689][T11215] nintendo 0003:057E:2009.016A: using factory cal for left stick [ 2724.892219][T25454] nintendo 0003:057E:2009.0169: using factory cal for right stick [ 2724.899897][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2724.907574][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2724.915175][T11215] nintendo 0003:057E:2009.016A: using factory cal for right stick [ 2724.922771][T25454] nintendo 0003:057E:2009.0169: Failed to read left stick cal, using defaults; e=-38 [ 2724.932107][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2724.939726][T11215] nintendo 0003:057E:2009.016A: Failed to read left stick cal, using defaults; e=-38 [ 2724.949025][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2724.956631][T25454] nintendo 0003:057E:2009.0169: Failed to read right stick cal, using defaults; e=-38 [ 2724.966031][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2724.973624][T11215] nintendo 0003:057E:2009.016A: Failed to read right stick cal, using defaults; e=-38 [ 2724.983051][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2724.990647][T25454] nintendo 0003:057E:2009.0169: using factory cal for IMU [ 2724.997627][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2725.005372][T25454] nintendo 0003:057E:2009.0169: failed reading SPI flash; ret=-38 [ 2725.012998][T11215] nintendo 0003:057E:2009.016A: using factory cal for IMU [ 2725.019964][T25454] nintendo 0003:057E:2009.0169: Failed to read IMU cal, using defaults; ret=-38 [ 2725.028816][T11215] nintendo 0003:057E:2009.016A: failed reading SPI flash; ret=-38 [ 2725.036456][T25454] nintendo 0003:057E:2009.0169: Unable to read IMU calibration data [ 2725.044365][T11215] nintendo 0003:057E:2009.016A: Failed to read IMU cal, using defaults; ret=-38 [ 2725.053210][T25454] nintendo 0003:057E:2009.0169: Failed to set report mode; ret=-38 [ 2725.060964][T11215] nintendo 0003:057E:2009.016A: Unable to read IMU calibration data [ 2725.068745][T25454] nintendo 0003:057E:2009.0169: Failed to initialize controller; ret=-38 [ 2725.077483][T11215] nintendo 0003:057E:2009.016A: Failed to set report mode; ret=-38 [ 2725.085349][T11215] nintendo 0003:057E:2009.016A: Failed to initialize controller; ret=-38 [ 2725.093962][T25454] nintendo 0003:057E:2009.0169: probe - fail = -38 [ 2725.100418][T25454] nintendo: probe of 0003:057E:2009.0169 failed with error -38 [ 2725.108073][T11215] nintendo 0003:057E:2009.016A: probe - fail = -38 [ 2725.116455][T11215] nintendo: probe of 0003:057E:2009.016A failed with error -38 [ 2725.124296][T25454] usb 5-1: USB disconnect, device number 55 [ 2725.134431][T11215] usb 4-1: USB disconnect, device number 51 [ 2725.512173][ T28] audit: type=1107 audit(1727993642.788:6790): pid=13415 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2725.620651][T13419] loop0: detected capacity change from 0 to 128 [ 2725.628937][T13419] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2725.637415][T13419] ext4 filesystem being mounted at /335/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2725.900215][T13423] netlink: 220 bytes leftover after parsing attributes in process `syz.3.10955'. [ 2726.532537][T13429] loop3: detected capacity change from 0 to 256 [ 2726.551966][T13429] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2726.565127][T13429] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2726.646385][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2726.724011][T13434] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2726.902342][ T28] audit: type=1400 audit(1727993644.178:6791): avc: denied { create } for pid=13435 comm="syz.0.10961" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 2727.036941][T13442] loop4: detected capacity change from 0 to 256 [ 2727.043282][T13442] exfat: Bad value for 'uid' [ 2727.107902][T13442] loop4: detected capacity change from 0 to 512 [ 2727.140462][T13442] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2727.214122][T24040] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 2727.516591][T13444] loop2: detected capacity change from 0 to 40427 [ 2727.523267][T13444] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2727.530980][T13444] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2727.539964][T13444] F2FS-fs (loop2): invalid crc value [ 2727.546374][T13444] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2727.585473][T13444] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2727.592474][T13444] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2727.643272][T24040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2727.654040][T24040] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2727.664428][T24040] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2727.673330][T24040] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2727.701983][T24040] usb 1-1: config 0 descriptor?? [ 2727.888252][T13458] syz.2.10963: attempt to access beyond end of device [ 2727.888252][T13458] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2727.903215][ T4393] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 2728.264337][ T4393] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2728.275030][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2728.286022][ T4393] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2728.296089][ T4393] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2728.311280][ T4393] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2728.322140][ T4393] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2728.330783][ T4393] usb 5-1: config 0 descriptor?? [ 2728.350302][T13460] loop2: detected capacity change from 0 to 512 [ 2728.365446][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.371728][T13460] EXT4-fs error (device loop2): ext4_orphan_get:1396: inode #16: comm syz.2.10966: iget: bad extended attribute block 128 [ 2728.373665][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.394985][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.402890][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.411129][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.418840][T13460] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz.2.10966: couldn't read orphan inode 16 (err -117) [ 2728.422885][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.432496][T13460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2728.447527][T13460] ext4 filesystem being mounted at /449/file1 supports timestamps until 2038 (0x7fffffff) [ 2728.448912][T24040] logitech-djreceiver 0003:046D:C70E.016B: unknown main item tag 0x0 [ 2728.470998][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2728.501914][ T28] audit: type=1107 audit(1727993645.778:6792): pid=13465 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='' [ 2728.578568][T25454] usb 1-1: USB disconnect, device number 62 [ 2728.618557][T13464] loop3: detected capacity change from 0 to 40427 [ 2728.641274][T13464] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2728.648973][T13464] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2728.661124][T13464] F2FS-fs (loop3): invalid crc value [ 2728.686253][T13469] netlink: 220 bytes leftover after parsing attributes in process `syz.2.10968'. [ 2728.749554][T13464] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2728.803986][T13464] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2728.810889][T13464] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2728.861994][ T4393] nintendo 0003:057E:2009.016C: unknown main item tag 0x0 [ 2728.869326][ T4393] nintendo 0003:057E:2009.016C: unknown main item tag 0x0 [ 2728.876446][ T4393] nintendo 0003:057E:2009.016C: unknown main item tag 0x1 [ 2728.883417][ T4393] nintendo 0003:057E:2009.016C: unknown main item tag 0x0 [ 2728.890509][ T4393] nintendo 0003:057E:2009.016C: unknown main item tag 0x0 [ 2728.897976][ T4393] nintendo 0003:057E:2009.016C: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 2728.974421][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2728.982312][ T4393] nintendo 0003:057E:2009.016C: using factory cal for left stick [ 2729.054687][T13476] syz.3.10967: attempt to access beyond end of device [ 2729.054687][T13476] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2729.082980][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2729.125192][ T4393] nintendo 0003:057E:2009.016C: using factory cal for right stick [ 2729.132851][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2729.140505][ T4393] nintendo 0003:057E:2009.016C: Failed to read left stick cal, using defaults; e=-38 [ 2729.149897][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2729.157510][ T4393] nintendo 0003:057E:2009.016C: Failed to read right stick cal, using defaults; e=-38 [ 2729.166891][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2729.174526][ T4393] nintendo 0003:057E:2009.016C: using factory cal for IMU [ 2729.181454][ T4393] nintendo 0003:057E:2009.016C: failed reading SPI flash; ret=-38 [ 2729.189099][ T4393] nintendo 0003:057E:2009.016C: Failed to read IMU cal, using defaults; ret=-38 [ 2729.198018][ T4393] nintendo 0003:057E:2009.016C: Unable to read IMU calibration data [ 2729.205816][ T4393] nintendo 0003:057E:2009.016C: Failed to set report mode; ret=-38 [ 2729.213487][ T4393] nintendo 0003:057E:2009.016C: Failed to initialize controller; ret=-38 [ 2729.220883][T13478] loop0: detected capacity change from 0 to 512 [ 2729.222466][ T4393] nintendo 0003:057E:2009.016C: probe - fail = -38 [ 2729.235334][ T4393] nintendo: probe of 0003:057E:2009.016C failed with error -38 [ 2729.246071][T13478] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.10969: iget: bad extended attribute block 128 [ 2729.252180][ T4393] usb 5-1: USB disconnect, device number 56 [ 2729.259141][T13478] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10969: couldn't read orphan inode 16 (err -117) [ 2729.276934][T13478] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2729.286014][T13478] ext4 filesystem being mounted at /338/file1 supports timestamps until 2038 (0x7fffffff) [ 2729.307864][T13478] EXT4-fs error (device loop0): ext4_lookup:1855: inode #16: comm syz.0.10969: iget: bad extended attribute block 128 [ 2729.326166][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2729.387957][T13484] loop0: detected capacity change from 0 to 128 [ 2729.404866][T13484] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2729.413357][T13484] ext4 filesystem being mounted at /339/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2729.571806][T13482] loop2: detected capacity change from 0 to 40427 [ 2729.578662][T13482] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 2729.586281][T13482] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 2729.595303][T13482] F2FS-fs (loop2): invalid crc value [ 2729.793033][T13482] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2729.845160][T13482] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 2729.852118][T13482] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2729.958946][T13495] loop4: detected capacity change from 0 to 40427 [ 2729.965234][T25454] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 2729.972770][T13495] F2FS-fs (loop4): fault_injection options not supported [ 2729.982462][T13495] F2FS-fs (loop4): invalid crc value [ 2729.993737][T13495] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2730.095056][T13495] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2730.269768][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2731.035302][T13508] loop2: detected capacity change from 0 to 256 [ 2731.041693][T13508] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2731.053903][T13508] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2731.146824][ T6701] syz-executor: attempt to access beyond end of device [ 2731.146824][ T6701] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2731.204227][T25454] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2731.215617][T25454] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2731.314212][T25454] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2731.333362][T25454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2731.343779][T25454] usb 4-1: SerialNumber: syz [ 2731.446056][T13517] loop0: detected capacity change from 0 to 512 [ 2731.528031][T13518] loop4: detected capacity change from 0 to 256 [ 2731.535885][T13518] exfat: Bad value for 'uid' [ 2731.588080][T13518] loop4: detected capacity change from 0 to 512 [ 2731.597851][T13518] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2731.687176][T13517] EXT4-fs error (device loop0): ext4_orphan_get:1396: inode #16: comm syz.0.10977: iget: bad extended attribute block 128 [ 2731.702324][T13517] EXT4-fs error (device loop0): ext4_orphan_get:1401: comm syz.0.10977: couldn't read orphan inode 16 (err -117) [ 2731.714335][T13517] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2731.723147][T13517] ext4 filesystem being mounted at /341/file1 supports timestamps until 2038 (0x7fffffff) [ 2731.735996][T25454] usb 4-1: 0:2 : does not exist [ 2731.741700][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2731.988179][T25454] usb 4-1: USB disconnect, device number 52 [ 2732.005071][T13528] loop2: detected capacity change from 0 to 256 [ 2732.011527][T13528] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2732.023752][T13528] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2732.473678][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2732.534229][T11215] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 2732.806740][T13537] loop3: detected capacity change from 0 to 40427 [ 2732.828335][T13537] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2732.836176][T13537] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2732.859396][T13537] F2FS-fs (loop3): invalid crc value [ 2732.897272][T13537] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2732.914191][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2732.924890][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2732.934667][T11215] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2732.943503][T11215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2732.948085][T13537] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2732.955035][T11215] usb 1-1: config 0 descriptor?? [ 2732.958319][T13537] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2733.024233][T13544] loop2: detected capacity change from 0 to 512 [ 2733.041349][T13544] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2733.047844][T13544] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.10983: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2733.066477][T13544] EXT4-fs error (device loop2): ext4_quota_enable:6958: comm syz.2.10983: Bad quota inode: 4, type: 1 [ 2733.077469][T13544] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2733.092048][T13544] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 2733.098736][T13544] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2733.624679][T13545] syz.3.10982: attempt to access beyond end of device [ 2733.624679][T13545] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2733.898584][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2733.905008][T13551] loop4: detected capacity change from 0 to 512 [ 2733.925373][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2733.931294][T13551] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2733.941644][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2733.966341][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2733.967062][T13551] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2733.974638][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2733.983199][T13551] ext4 filesystem being mounted at /386/file0 supports timestamps until 2038 (0x7fffffff) [ 2733.991711][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2734.001607][T13551] EXT4-fs (loop4): unmounting filesystem. [ 2734.009109][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2734.022651][T11215] logitech-djreceiver 0003:046D:C70E.016D: unknown main item tag 0x0 [ 2734.081856][T13561] loop4: detected capacity change from 0 to 512 [ 2734.105679][T13561] EXT4-fs error (device loop4): ext4_orphan_get:1396: inode #16: comm syz.4.10988: iget: bad extended attribute block 128 [ 2734.119082][T13561] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz.4.10988: couldn't read orphan inode 16 (err -117) [ 2734.141106][T11215] usb 1-1: USB disconnect, device number 63 [ 2734.151955][T13561] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2734.163757][T13561] ext4 filesystem being mounted at /387/file1 supports timestamps until 2038 (0x7fffffff) [ 2734.183251][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2734.504338][T24040] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 2734.736018][T13573] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2734.874198][T24040] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2734.884895][T24040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2734.895746][T24040] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2734.905237][T24040] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2734.920518][T24040] usb 3-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2734.930378][T24040] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.001385][T24040] usb 3-1: config 0 descriptor?? [ 2735.129047][T13580] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2735.394151][T11215] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 2735.485433][T24040] nintendo 0003:057E:2009.016E: unknown main item tag 0x0 [ 2735.492384][T24040] nintendo 0003:057E:2009.016E: unknown main item tag 0x0 [ 2735.499396][T24040] nintendo 0003:057E:2009.016E: unknown main item tag 0x1 [ 2735.506308][T24040] nintendo 0003:057E:2009.016E: unknown main item tag 0x0 [ 2735.513338][T24040] nintendo 0003:057E:2009.016E: unknown main item tag 0x0 [ 2735.520933][T24040] nintendo 0003:057E:2009.016E: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.2-1/input0 [ 2735.604159][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.612123][T24040] nintendo 0003:057E:2009.016E: using factory cal for left stick [ 2735.620973][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.629565][T24040] nintendo 0003:057E:2009.016E: using factory cal for right stick [ 2735.637937][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.646388][T24040] nintendo 0003:057E:2009.016E: Failed to read left stick cal, using defaults; e=-38 [ 2735.654167][T11215] usb 4-1: Using ep0 maxpacket: 16 [ 2735.655873][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.669235][T24040] nintendo 0003:057E:2009.016E: Failed to read right stick cal, using defaults; e=-38 [ 2735.678960][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.686642][T24040] nintendo 0003:057E:2009.016E: using factory cal for IMU [ 2735.693686][T24040] nintendo 0003:057E:2009.016E: failed reading SPI flash; ret=-38 [ 2735.701275][T24040] nintendo 0003:057E:2009.016E: Failed to read IMU cal, using defaults; ret=-38 [ 2735.710150][T24040] nintendo 0003:057E:2009.016E: Unable to read IMU calibration data [ 2735.717968][T24040] nintendo 0003:057E:2009.016E: Failed to set report mode; ret=-38 [ 2735.725652][T24040] nintendo 0003:057E:2009.016E: Failed to initialize controller; ret=-38 [ 2735.734692][T24040] nintendo 0003:057E:2009.016E: probe - fail = -38 [ 2735.741019][T24040] nintendo: probe of 0003:057E:2009.016E failed with error -38 [ 2735.749627][T24040] usb 3-1: USB disconnect, device number 52 [ 2735.774259][T11215] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2735.784260][T11215] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2735.807736][T13587] loop0: detected capacity change from 0 to 512 [ 2735.813862][T11215] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2735.822847][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2735.831444][T11215] usb 4-1: config 0 descriptor?? [ 2735.836854][T13587] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2735.843188][T13587] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.10994: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2735.861901][T13587] EXT4-fs error (device loop0): ext4_quota_enable:6958: comm syz.0.10994: Bad quota inode: 4, type: 1 [ 2735.872905][T13587] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2735.887422][T13587] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2735.887821][T11215] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 2735.893948][T13587] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2736.386135][T13596] loop4: detected capacity change from 0 to 40427 [ 2736.392854][T13596] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2736.400452][T13596] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2736.409019][T13596] F2FS-fs (loop4): invalid crc value [ 2736.415447][T13596] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2736.439643][T13596] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2736.446528][T13596] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2736.751081][T13605] syz.4.10996: attempt to access beyond end of device [ 2736.751081][T13605] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2736.862980][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2737.594138][T24040] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 2737.947561][T13622] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2738.005450][T24040] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 2738.040532][T24040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2738.043218][T11215] usb 4-1: USB disconnect, device number 53 [ 2738.076562][T24040] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2738.086370][T24040] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 2738.099638][T24040] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00 [ 2738.108711][T24040] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2738.117819][T24040] usb 5-1: config 0 descriptor?? [ 2738.119271][T13626] loop2: detected capacity change from 0 to 128 [ 2738.131042][T13626] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2738.139504][T13626] ext4 filesystem being mounted at /459/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2738.634148][T11215] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 2738.647038][T24040] nintendo 0003:057E:2009.016F: unknown main item tag 0x0 [ 2738.654012][T24040] nintendo 0003:057E:2009.016F: unknown main item tag 0x0 [ 2738.661111][T24040] nintendo 0003:057E:2009.016F: unknown main item tag 0x1 [ 2738.668521][T24040] nintendo 0003:057E:2009.016F: unknown main item tag 0x0 [ 2738.684130][T24040] nintendo 0003:057E:2009.016F: unknown main item tag 0x0 [ 2738.704226][T24040] nintendo 0003:057E:2009.016F: hidraw0: USB HID v80.00 Device [HID 057e:2009] on usb-dummy_hcd.4-1/input0 [ 2738.756374][T13633] loop0: detected capacity change from 0 to 40427 [ 2738.763235][T13633] F2FS-fs (loop0): fault_injection options not supported [ 2738.771022][T13633] F2FS-fs (loop0): invalid crc value [ 2738.777148][T13633] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2738.784183][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.791797][T24040] nintendo 0003:057E:2009.016F: using factory cal for left stick [ 2738.799445][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.807017][T24040] nintendo 0003:057E:2009.016F: using factory cal for right stick [ 2738.813742][T13633] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2738.814683][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.814701][T24040] nintendo 0003:057E:2009.016F: Failed to read left stick cal, using defaults; e=-38 [ 2738.814729][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.846560][T24040] nintendo 0003:057E:2009.016F: Failed to read right stick cal, using defaults; e=-38 [ 2738.855956][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.863519][T24040] nintendo 0003:057E:2009.016F: using factory cal for IMU [ 2738.901578][T24040] nintendo 0003:057E:2009.016F: failed reading SPI flash; ret=-38 [ 2738.909326][T24040] nintendo 0003:057E:2009.016F: Failed to read IMU cal, using defaults; ret=-38 [ 2738.918320][T24040] nintendo 0003:057E:2009.016F: Unable to read IMU calibration data [ 2738.926313][T24040] nintendo 0003:057E:2009.016F: Failed to set report mode; ret=-38 [ 2738.934017][T24040] nintendo 0003:057E:2009.016F: Failed to initialize controller; ret=-38 [ 2738.942859][T24040] nintendo 0003:057E:2009.016F: probe - fail = -38 [ 2738.949227][T24040] nintendo: probe of 0003:057E:2009.016F failed with error -38 [ 2738.967172][T24040] usb 5-1: USB disconnect, device number 57 [ 2739.012751][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2739.176017][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2739.186802][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2739.196304][T11215] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2739.205144][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2739.213424][T11215] usb 4-1: config 0 descriptor?? [ 2739.482859][ T60] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 2739.506695][ T7563] syz-executor: attempt to access beyond end of device [ 2739.506695][ T7563] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2739.517674][T13644] loop4: detected capacity change from 0 to 512 [ 2739.531344][T13644] EXT4-fs (loop4): orphan cleanup on readonly fs [ 2739.537954][T13644] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #4: comm syz.4.11006: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2739.556753][T13644] EXT4-fs error (device loop4): ext4_quota_enable:6958: comm syz.4.11006: Bad quota inode: 4, type: 1 [ 2739.567929][T13644] EXT4-fs warning (device loop4): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2739.582671][T13644] EXT4-fs (loop4): Cannot turn on quotas: error -117 [ 2739.589328][T13644] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2739.694896][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.703105][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.812586][T13651] loop0: detected capacity change from 0 to 512 [ 2739.844239][ T60] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2739.858353][T13651] EXT4-fs: Ignoring removed nobh option [ 2739.863869][ T60] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2739.874467][T13651] EXT4-fs: Ignoring removed nobh option [ 2739.879513][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.889597][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.892340][T13651] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2739.897584][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.913266][T13651] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 2739.916560][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.924983][T13651] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.11005: invalid indirect mapped block 2683928664 (level 1) [ 2739.932246][T11215] logitech-djreceiver 0003:046D:C70E.0170: unknown main item tag 0x0 [ 2739.946498][T13651] EXT4-fs (loop0): 1 truncate cleaned up [ 2739.959561][T13651] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2739.963857][T11215] usb 4-1: USB disconnect, device number 54 [ 2739.968320][ T60] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2739.984131][ T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2739.991938][ T60] usb 3-1: SerialNumber: syz [ 2740.294650][ T60] usb 3-1: 0:2 : does not exist [ 2740.365174][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2740.382518][T13655] loop4: detected capacity change from 0 to 2048 [ 2740.395332][T13655] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 2740.486559][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2740.976212][ T60] usb 3-1: USB disconnect, device number 53 [ 2741.056622][T13665] loop3: detected capacity change from 0 to 256 [ 2741.279748][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2741.574993][T13674] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2741.648352][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2741.755607][T13676] loop2: detected capacity change from 0 to 128 [ 2741.763424][T13676] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2741.772005][T13676] ext4 filesystem being mounted at /461/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2741.804262][T25454] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 2741.812046][T11215] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 2742.197911][T25454] usb 5-1: Using ep0 maxpacket: 16 [ 2742.327683][T13683] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2742.474191][T11215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2742.484171][T25454] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2742.493994][T11215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2742.502733][T25454] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2742.515426][T25454] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2742.524219][T25454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2742.532762][T25454] usb 5-1: config 0 descriptor?? [ 2742.584786][T25454] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 2742.604172][T11215] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2742.613163][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2742.621166][T11215] usb 4-1: SerialNumber: syz [ 2742.622504][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2742.924691][T11215] usb 4-1: 0:2 : does not exist [ 2743.020792][T13690] loop0: detected capacity change from 0 to 512 [ 2743.028735][T13690] EXT4-fs (loop0): orphan cleanup on readonly fs [ 2743.035289][T13690] EXT4-fs error (device loop0): ext4_ext_check_inode:520: inode #4: comm syz.0.11016: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2743.054059][T13690] EXT4-fs error (device loop0): ext4_quota_enable:6958: comm syz.0.11016: Bad quota inode: 4, type: 1 [ 2743.065155][T13690] EXT4-fs warning (device loop0): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2743.079642][T13690] EXT4-fs (loop0): Cannot turn on quotas: error -117 [ 2743.086078][T13690] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2743.155492][T11215] usb 4-1: USB disconnect, device number 55 [ 2743.679307][T13700] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2743.869910][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2743.891283][T13706] loop0: detected capacity change from 0 to 256 [ 2743.897905][T13706] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2743.910044][T13706] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2744.057685][T11215] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 2744.371524][T13710] loop2: detected capacity change from 0 to 2048 [ 2744.385456][T13710] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2744.419036][T25454] usb 5-1: USB disconnect, device number 58 [ 2744.443197][T13716] loop4: detected capacity change from 0 to 512 [ 2744.449774][T13716] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2744.465875][T13716] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2744.474671][T13716] ext4 filesystem being mounted at /396/file0 supports timestamps until 2038 (0x7fffffff) [ 2744.484945][T13716] EXT4-fs (loop4): unmounting filesystem. [ 2744.658603][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2744.669377][T11215] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2744.678908][T11215] usb 4-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2744.687744][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2744.696245][T11215] usb 4-1: config 0 descriptor?? [ 2744.905224][T13726] loop0: detected capacity change from 0 to 128 [ 2744.933449][T13726] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2744.943194][T13726] ext4 filesystem being mounted at /355/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2745.303087][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2745.315357][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.323802][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.332152][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.340118][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.347973][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.355879][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.363745][T11215] logitech-djreceiver 0003:046D:C70E.0171: unknown main item tag 0x0 [ 2745.515576][T11215] usb 4-1: USB disconnect, device number 56 [ 2745.584188][ T4393] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 2745.737459][T13734] loop4: detected capacity change from 0 to 40427 [ 2745.744482][T13734] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 2745.752073][T13734] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 2745.761871][T13734] F2FS-fs (loop4): invalid crc value [ 2745.771501][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2745.776120][T13734] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2745.824395][T13734] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 2745.831374][T13734] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2746.164550][T13744] syz.4.11026: attempt to access beyond end of device [ 2746.164550][T13744] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2746.214416][ T4393] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2746.269073][ T4393] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2746.375919][T13746] loop3: detected capacity change from 0 to 512 [ 2746.387120][T13746] EXT4-fs (loop3): orphan cleanup on readonly fs [ 2746.393488][T13746] EXT4-fs error (device loop3): ext4_ext_check_inode:520: inode #4: comm syz.3.11028: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2746.411946][T13746] EXT4-fs error (device loop3): ext4_quota_enable:6958: comm syz.3.11028: Bad quota inode: 4, type: 1 [ 2746.412051][ T4393] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2746.423097][T13746] EXT4-fs warning (device loop3): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2746.431895][ T4393] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2746.446472][T13746] EXT4-fs (loop3): Cannot turn on quotas: error -117 [ 2746.454244][ T4393] usb 3-1: SerialNumber: syz [ 2746.460595][T13746] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2746.764103][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 2746.847144][ T4393] usb 3-1: 0:2 : does not exist [ 2746.867648][T13753] loop0: detected capacity change from 0 to 512 [ 2746.887137][T13753] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2746.906200][T13753] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2746.915172][T13753] ext4 filesystem being mounted at /357/file0 supports timestamps until 2038 (0x7fffffff) [ 2746.939077][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2746.952746][ T4393] usb 3-1: USB disconnect, device number 54 [ 2746.975669][T13760] overlayfs: statfs failed on './file0' [ 2746.981885][T13760] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2746.990622][T13760] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2747.156353][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2747.222854][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2747.274376][ T60] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 2747.410347][T13770] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2747.554158][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 2747.674242][ T60] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2747.684221][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 2747.697071][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2747.705874][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2747.714464][ T60] usb 1-1: config 0 descriptor?? [ 2747.760898][ T60] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 2748.103211][T13778] loop3: detected capacity change from 0 to 2048 [ 2748.125545][T13778] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2748.190857][T13782] loop2: detected capacity change from 0 to 256 [ 2748.197362][T13782] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2748.209841][T13782] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2749.672414][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2749.838513][T13798] loop3: detected capacity change from 0 to 512 [ 2749.846479][T13798] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2749.865428][T13798] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2749.874321][T13798] ext4 filesystem being mounted at /368/file0 supports timestamps until 2038 (0x7fffffff) [ 2749.885052][T13798] EXT4-fs (loop3): unmounting filesystem. [ 2749.925772][T13802] overlayfs: statfs failed on './file0' [ 2749.931995][T13802] overlayfs: missing 'lowerdir' [ 2749.976490][T13806] loop3: detected capacity change from 0 to 256 [ 2749.983054][T13806] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 2750.000056][T13808] loop2: detected capacity change from 0 to 512 [ 2750.006770][T13806] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 2750.081799][ T60] usb 1-1: USB disconnect, device number 64 [ 2750.105942][T13808] EXT4-fs (loop2): orphan cleanup on readonly fs [ 2750.114268][T13808] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #4: comm syz.2.11042: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 2750.142907][T13808] EXT4-fs error (device loop2): ext4_quota_enable:6958: comm syz.2.11042: Bad quota inode: 4, type: 1 [ 2750.324980][T13808] EXT4-fs warning (device loop2): ext4_enable_quotas:6999: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 2750.392366][T13808] EXT4-fs (loop2): Cannot turn on quotas: error -117 [ 2750.404124][T13808] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2750.444337][T13805] loop4: detected capacity change from 0 to 40427 [ 2750.477115][T13805] F2FS-fs (loop4): fault_injection options not supported [ 2750.484976][T13805] F2FS-fs (loop4): invalid crc value [ 2750.491314][T13805] F2FS-fs (loop4): Found nat_bits in checkpoint [ 2750.647230][T13812] loop0: detected capacity change from 0 to 40427 [ 2750.711230][T13812] F2FS-fs (loop0): fault_injection options not supported [ 2750.725585][T13805] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 2750.734886][T13812] F2FS-fs (loop0): invalid crc value [ 2750.762724][T13812] F2FS-fs (loop0): Found nat_bits in checkpoint [ 2750.803140][T13812] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 2750.861584][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2751.913095][ T6701] syz-executor: attempt to access beyond end of device [ 2751.913095][ T6701] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2751.927604][ T7563] syz-executor: attempt to access beyond end of device [ 2751.927604][ T7563] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2752.094982][T13835] loop4: detected capacity change from 0 to 512 [ 2752.224677][T13835] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2752.236740][T13835] ext4 filesystem being mounted at /404/file0 supports timestamps until 2038 (0x7fffffff) [ 2752.278332][ T28] audit: type=1326 audit(1727993669.558:6793): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.301772][ T28] audit: type=1326 audit(1727993669.558:6794): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.325132][ T28] audit: type=1326 audit(1727993669.558:6795): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.348562][ T28] audit: type=1326 audit(1727993669.558:6796): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.397844][T13843] loop0: detected capacity change from 0 to 512 [ 2752.423438][ T28] audit: type=1326 audit(1727993669.558:6797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.454904][T13843] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2752.503475][ T28] audit: type=1326 audit(1727993669.558:6798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.507452][T13843] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.11047: casefold flag without casefold feature [ 2752.530319][ T28] audit: type=1326 audit(1727993669.558:6799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.563469][T13843] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 2752.573263][T13843] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2752.584290][ T28] audit: type=1326 audit(1727993669.558:6800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.607768][ T28] audit: type=1326 audit(1727993669.558:6801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.631166][ T28] audit: type=1326 audit(1727993669.558:6802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13834 comm="syz.4.11046" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fccb897dff9 code=0x7ffc0000 [ 2752.795505][T13846] loop3: detected capacity change from 0 to 2048 [ 2752.815818][T13846] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 2752.927690][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2753.729580][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2753.765721][ T7028] EXT4-fs (loop3): unmounting filesystem. [ 2753.918096][T13862] loop4: detected capacity change from 0 to 256 [ 2754.152219][T13867] overlayfs: statfs failed on './file0' [ 2754.163417][T13867] overlayfs: missing 'lowerdir' [ 2754.290380][T13873] loop4: detected capacity change from 0 to 512 [ 2754.355073][T13875] veth0_to_bond: mtu less than device minimum [ 2754.432397][T13876] loop0: detected capacity change from 0 to 512 [ 2754.521487][T13873] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2754.533409][T13876] EXT4-fs: Ignoring removed nobh option [ 2754.539304][T13876] EXT4-fs: Ignoring removed nobh option [ 2754.544188][T13873] ext4 filesystem being mounted at /406/file0 supports timestamps until 2038 (0x7fffffff) [ 2754.556802][T13876] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 2754.598593][T13865] loop2: detected capacity change from 0 to 40427 [ 2754.622038][T13865] F2FS-fs (loop2): fault_injection options not supported [ 2754.636814][T13865] F2FS-fs (loop2): invalid crc value [ 2754.660451][T13876] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -2 [ 2754.668973][T13876] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.11052: invalid indirect mapped block 2683928664 (level 1) [ 2754.683578][T13876] EXT4-fs (loop0): 1 truncate cleaned up [ 2754.689295][T13876] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 2754.698208][T13865] F2FS-fs (loop2): Found nat_bits in checkpoint [ 2754.918744][T13865] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 2755.134581][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2755.157194][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2755.334123][T11215] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 2755.414114][ T60] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 2755.554434][ T5405] syz-executor: attempt to access beyond end of device [ 2755.554434][ T5405] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 2755.674136][ T60] usb 1-1: Using ep0 maxpacket: 16 [ 2755.724156][T11215] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2755.734117][T11215] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2755.794167][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2755.805771][ T60] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2755.817064][ T60] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2755.824180][T11215] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2755.830012][ T60] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2755.848555][ T60] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2755.848654][T11215] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 2755.857399][ T60] usb 1-1: config 0 descriptor?? [ 2755.874098][T11215] usb 4-1: SerialNumber: syz [ 2756.201346][T13904] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 2756.334870][ T60] koneplus 0003:1E7D:2E22.0172: unknown main item tag 0x0 [ 2756.342265][ T60] koneplus 0003:1E7D:2E22.0172: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.0-1/input0 [ 2756.354657][T11215] usb 4-1: 0:2 : does not exist [ 2756.473237][T13906] loop2: detected capacity change from 0 to 2048 [ 2756.485575][T13906] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2756.791572][T11215] usb 4-1: USB disconnect, device number 57 [ 2756.814448][ T60] usb 1-1: USB disconnect, device number 65 [ 2757.086525][ T1560] udevd[1560]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2757.233306][T13918] loop3: detected capacity change from 0 to 512 [ 2757.239904][T13918] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 2757.255501][T13918] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 2757.264350][T13918] ext4 filesystem being mounted at /375/file0 supports timestamps until 2038 (0x7fffffff) [ 2757.274751][T13918] EXT4-fs (loop3): unmounting filesystem. [ 2757.328121][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2757.347086][T13922] loop2: detected capacity change from 0 to 512 [ 2757.375645][T13922] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 2757.384831][T13922] ext4 filesystem being mounted at /474/file0 supports timestamps until 2038 (0x7fffffff) [ 2757.406158][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 2757.406172][ T28] audit: type=1326 audit(1727993674.688:6815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.450408][ T28] audit: type=1326 audit(1727993674.718:6816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.475617][T13928] loop0: detected capacity change from 0 to 128 [ 2757.486161][ T28] audit: type=1326 audit(1727993674.718:6817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.513669][T13928] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2757.529483][T13928] ext4 filesystem being mounted at /364/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038 (0x7fffffff) [ 2757.534859][T13924] loop3: detected capacity change from 0 to 40427 [ 2757.561245][ T28] audit: type=1326 audit(1727993674.718:6818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.574456][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2757.590584][ T28] audit: type=1326 audit(1727993674.718:6819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.619643][ T28] audit: type=1326 audit(1727993674.718:6820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.643536][ T28] audit: type=1326 audit(1727993674.718:6821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.652409][T13924] F2FS-fs (loop3): fault_injection options not supported [ 2757.667392][ T28] audit: type=1326 audit(1727993674.718:6822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.697588][ T28] audit: type=1326 audit(1727993674.718:6823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.700960][T13924] F2FS-fs (loop3): invalid crc value [ 2757.732872][ T28] audit: type=1326 audit(1727993674.718:6824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13921 comm="syz.2.11065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6ef737dff9 code=0x7ffc0000 [ 2757.993290][T13924] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2758.033399][T13924] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2758.318444][ T7563] EXT4-fs (loop0): unmounting filesystem. [ 2758.624146][T11215] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 2758.794211][ T4393] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 2759.054183][ T4393] usb 4-1: Using ep0 maxpacket: 16 [ 2759.096183][T13959] loop4: detected capacity change from 0 to 256 [ 2759.104059][T13959] exfat: Bad value for 'uid' [ 2759.178688][T13959] loop4: detected capacity change from 0 to 512 [ 2759.188971][T13959] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 2759.203603][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2759.214575][ T4393] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2759.225990][ T4393] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2759.238776][ T4393] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00 [ 2759.244171][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2759.247959][ T4393] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.258489][T11215] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2759.266951][ T4393] usb 4-1: config 0 descriptor?? [ 2759.277161][T11215] usb 1-1: New USB device found, idVendor=046d, idProduct=c70e, bcdDevice= 0.00 [ 2759.289384][T11215] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2759.297912][T11215] usb 1-1: config 0 descriptor?? [ 2759.766019][ T4393] koneplus 0003:1E7D:2E22.0173: unknown main item tag 0x0 [ 2759.773639][ T4393] koneplus 0003:1E7D:2E22.0173: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0 [ 2759.802619][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.810867][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.819138][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.827080][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.834970][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.842850][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.851011][T11215] logitech-djreceiver 0003:046D:C70E.0174: unknown main item tag 0x0 [ 2759.998739][T11215] usb 1-1: USB disconnect, device number 66 [ 2760.183571][T17341] usb 4-1: USB disconnect, device number 58 [ 2760.350340][T13970] loop2: detected capacity change from 0 to 2048 [ 2760.365617][T13970] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 2760.689810][T13977] loop4: detected capacity change from 0 to 512 [ 2760.705767][T13977] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 2760.714619][T13977] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038 (0x7fffffff) [ 2760.795289][ T6701] EXT4-fs (loop4): unmounting filesystem. [ 2760.881789][T13986] loop0: detected capacity change from 0 to 512 [ 2760.903892][T13986] EXT4-fs (loop0): Test dummy encryption mode enabled [ 2761.058457][T13986] EXT4-fs error (device loop0): __ext4_fill_super:5386: inode #2: comm syz.0.11079: casefold flag without casefold feature [ 2761.071348][T13986] EXT4-fs (loop0): warning: mounting fs with errors, running e2fsck is recommended [ 2761.081533][T13986] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 2761.177031][T13983] loop3: detected capacity change from 0 to 40427 SYZFAIL: repeatedly failed to execute the program proc=1 req=6201 state=1 status=9 (errno 11: Resource temporarily unavailable) [ 2761.230557][ T5405] EXT4-fs (loop2): unmounting filesystem. [ 2761.236380][T13983] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 2761.253392][T13983] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 2761.266145][T13983] F2FS-fs (loop3): invalid crc value [ 2761.283320][T13983] F2FS-fs (loop3): Found nat_bits in checkpoint [ 2761.324248][T13983] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 2761.337761][T13983] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 2761.350319][T13983] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 2761.496280][T13986] EXT4-fs (loop0): unmounting filesystem. [ 2761.774540][ T7315] device bridge_slave_1 left promiscuous mode [ 2761.780457][ T7315] bridge0: port 2(bridge_slave_1) entered disabled state [ 2761.787804][ T7315] device bridge_slave_0 left promiscuous mode [ 2761.793721][ T7315] bridge0: port 1(bridge_slave_0) entered disabled state [ 2761.801392][ T7315] device veth1_macvtap left promiscuous mode [ 2761.807275][ T7315] device veth0_vlan left promiscuous mode