last executing test programs: 10m19.959126524s ago: executing program 1 (id=799): r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r0, &(0x7f0000000000)={0x2, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) 10m19.675996538s ago: executing program 3 (id=801): r0 = getpid() move_pages(r0, 0x0, 0x0, 0x0, 0x0, 0x2) 10m19.668858449s ago: executing program 0 (id=802): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_L3PROTO={0x6}]}, 0x24}}, 0x0) 10m19.470469451s ago: executing program 1 (id=803): setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x10, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x101, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) getresuid(&(0x7f0000000440), &(0x7f0000000580), &(0x7f00000005c0)) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x5, 0x2, 0x8, 0x0, 0x1, 0xfffffffd}, 0x50) close(0x3) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), 0x0, 0x75, r4}, 0x38) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x12, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r5}, 0x18) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x156eccba77a09d1}}, [@NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x38, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc8}}, 0x0) 10m19.281772154s ago: executing program 3 (id=805): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b0000000000000002000100098000", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) 10m19.270082394s ago: executing program 0 (id=806): r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8917, &(0x7f0000000000)={'pimreg1\x00', @random="0200ff7fffff"}) 10m19.252852495s ago: executing program 2 (id=807): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x11, 0x13, &(0x7f0000000000)=@framed={{}, [@printk={@li, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x2d}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x65}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000007c0)={r0}, 0xc) 10m18.312691248s ago: executing program 2 (id=808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'ip6gre0\x00'}]}, 0x48}}, 0x0) 10m18.111769951s ago: executing program 2 (id=809): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) pivot_root(0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10m15.339276682s ago: executing program 3 (id=810): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000000000020001000980000001004000", @ANYRESDEC, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r4, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r5 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r6 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = socket(0x2, 0x3, 0xff) bind$inet(r7, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r7, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r7, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) 10m15.073661846s ago: executing program 2 (id=811): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="1453b8ded6a0cf2ba62664000000010000001500000010000400060000"], 0x60380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 10m14.859827949s ago: executing program 0 (id=812): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sysinfo(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x410000, 0x14, "3e030000008c000000000000abe70000000020"}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x1769af5b, 0x7fffffff, 0x4, 0x400, 0x1, "78eeb23cff936887ff42fb4b402645c0628426"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) 10m12.815259779s ago: executing program 1 (id=813): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sysinfo(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x410000, 0x14, "3e030000008c000000000000abe70000000020"}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}], 0x1) openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r4, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) 10m12.812957179s ago: executing program 2 (id=814): r0 = syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x2042) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) sysinfo(0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r1, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x410000, 0x14, "3e030000008c000000000000abe70000000020"}) mlock(&(0x7f0000ffc000/0x2000)=nil, 0x2000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000240), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000100)) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$TCSETS(r4, 0x5402, &(0x7f0000000180)={0x1769af5b, 0x7fffffff, 0x4, 0x400, 0x1, "78eeb23cff936887ff42fb4b402645c0628426"}) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r5 = userfaultfd(0x801) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r5, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x2, 0x2}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_percpu\x00', 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0) writev(r0, 0x0, 0x0) read$msr(r0, 0x0, 0x0) 10m10.763543429s ago: executing program 3 (id=815): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @cmp={{0x8}, @val={0x30, 0x2, 0x0, 0x1, [@NFTA_CMP_DATA={0x1c, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "9eb432e8a87f8418b5926b796865ce4a72"}]}, @NFTA_CMP_SREG={0x8, 0x1, 0x1, 0x0, 0x12}, @NFTA_CMP_OP={0x8, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xdc}}, 0x0) 10m10.01203611s ago: executing program 0 (id=816): r0 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0x101, 0x300, 0x0, 0x101}}) 10m9.683330955s ago: executing program 1 (id=817): r0 = add_key$keyring(&(0x7f0000000080), &(0x7f00000000c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000280)="bf6c24a2b017c1bac0e567cb9769056905427c70243baa0cdb4e91fd73", 0x1d, r0) 10m9.30865204s ago: executing program 0 (id=818): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[], 0x60380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 10m9.139293323s ago: executing program 3 (id=819): socket$kcm(0x10, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x0, 0x0, &(0x7f0000000000)='GPL\x00'}, 0x94) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) request_key(&(0x7f00000010c0)='dns_resolver\x00', &(0x7f0000001100)={'syz', 0x2}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r4, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r5 = io_uring_setup(0xfc6, &(0x7f0000000180)) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000b00)="86cf8445f4ba1d9f20174688f169e58c", 0x10) listen(r6, 0x0) accept4(r6, 0x0, 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x24fe, &(0x7f0000000300)={0x0, 0xf36e, 0x10100}, &(0x7f0000000100), &(0x7f0000000140)) pivot_root(0x0, 0x0) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<'], 0x38}}, 0x80) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 10m9.112434163s ago: executing program 1 (id=820): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) socket$inet(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20020008008f}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000002c0)=0x4) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r4}, 0x10) open_by_handle_at(r4, &(0x7f0000000340)=ANY=[], 0x60380) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x2, 0x8}}, 0x20) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(0xffffffffffffffff, 0xc1004111, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000001c0), 0x680, 0x0) ioctl$TIOCSSOFTCAR(r5, 0x5453, 0x0) ioctl$TIOCMGET(r5, 0x5415, 0x0) symlink(0x0, &(0x7f00000000c0)='./file1\x00') listen(r0, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x3c, r8, 0x211, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) 10m2.176067545s ago: executing program 2 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x15, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x63}, @generic={0xce, 0x0, 0x7, 0x9, 0x4b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x5, 0xc, 0x900}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e45", 0x9f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b767864", 0x1d}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31, 0x2c, 0x2f]}}}}]}) 9m54.450707328s ago: executing program 0 (id=822): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 9m53.273707175s ago: executing program 1 (id=823): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r0, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) 9m45.459783639s ago: executing program 3 (id=824): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 9m28.560112337s ago: executing program 32 (id=821): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x2, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x1f, 0x15, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_val={0x18, 0x4, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x63}, @generic={0xce, 0x0, 0x7, 0x9, 0x4b}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000900)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x42, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0x5, 0xc, 0x900}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$keyring(&(0x7f00000021c0), 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_PKEY_SIGN(0x1b, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$unix(0xffffffffffffffff, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(0xffffffffffffffff, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) writev(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000340)='9', 0x1}], 0x1) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58", '\x00', '#\x00'}, 0x28) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="6e37cff5b582e082d58cb23de3c19dc4971d9b59ddb52ae25a3ca48e8d5284721b4b722d1fd011fc3144e4ceb18b32b5b819d56f4aa3fe1aaf904aa07b7b748ab54c9b47531624c0ca3cc3e9246587e7cea8af062e15c1c27d8e9d9328114f2bda697decbedc50cc278f543faa13098717d9f379121225b179faeebe79be6a82dea4403a3bc7990b1cfee9e5a1aaf11b32facecc76bc0ad86f4fa184dd6e45", 0x9f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b767864", 0x1d}], 0x2}, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) mount$tmpfs(0x0, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x1000040, &(0x7f0000000100)={[{@mpol={'mpol', 0x3d, {'prefer', '=static', @val={0x3a, [0x31, 0x2c, 0x2f]}}}}]}) 7m58.88325395s ago: executing program 33 (id=822): r0 = openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x20) 5m36.08671882s ago: executing program 34 (id=823): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x47) cachestat(r0, &(0x7f0000000040)={0x1, 0x8}, 0x0, 0x20) 5m31.970356791s ago: executing program 35 (id=824): syz_mount_image$hfsplus(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x80000c, &(0x7f0000000d80)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303030342c6e6c733d61736369692c73657373696f6e3d3078666666666666666666666666666637662c747970653d883b7f382c63726561746f723dd4a620e92c6e6f6465636f6d706f73652c747970653d5dbcce902c756d61736b3d30303030303030303030303030303030303030303030312c63726561746f723d40f194712c626172726965720063726561746f723d65fe04c22c6e6f6465636f6d706f73652c6465636f6d706f73652c63726561746f723d8a7222832c7569643d", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES32, @ANYRESHEX, @ANYBLOB="a520ad23321534a883fa116848e7295e8693132df1638d943e7dacc03c8d2d9fca2aeb72f72ed82af2ceb592a5eea7e56631ff9ac0d92bcc5e6859b316fd2ac8694577d071f3f31f92dfdbdd695e5edca5b90abb53107e708b90150fc9eee8418e9511b8a4ce6f69a31472378258a55e8aa64d4a9859bfb3d6d3e49cf0a4c8b0044d37812dd15af758d8177ad1d630193b27881a8a06b8221dbceefe3fbf199b81bc31338d35cf4cb9f7f28e7abc55afd41f3a8b4a1e3fc4cd2dece6d1659ab1fc8511c18f9bd3c80004efbd7cfda12866316c01cc4a69ca09f85189380f835231d8ae5332237152dc3ed45d7f88", @ANYRES64, @ANYRESDEC], 0x1, 0x703, &(0x7f0000001f80)="$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") listxattr(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 4m12.532403984s ago: executing program 5 (id=1086): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000100)='./bus\x00', 0x3800844, &(0x7f0000000340)=ANY=[@ANYBLOB='nfs,nonumtail=0,uni_xlate=0,iocharset=cp950,utf8=0,uni_xlate=0,shortname=lower,codepage=866,umask=00000000000000000100002,shortname=win95,shortname=lower,uni_xlate=0,\x00aS'], 0x3, 0x366, &(0x7f0000000840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) 4m11.233292402s ago: executing program 5 (id=1091): syz_mount_image$jfs(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000640)=ANY=[@ANYRES16=0x0, @ANYRESDEC, @ANYRES32, @ANYRESOCT, @ANYBLOB="013ced044bdd1d80c6a59bca5c1f9d57c0bf983de420f461a7414616093c243234af9243259143a1df24ac0219d7c378a66c310c8b4a0a5be52831340548247ed220c3c9fbc83337fa0b63b0a54e73ff5f9b6625b0faa1fb755e1af638d96ec92d0802aa01c49d12703c6452c7b0edad1ecfdc926cf6ee88d55c25512d52b43a773f9cd35d70e03d69b2af2ead1c39ef1c55"], 0xfa, 0x621b, &(0x7f0000012cc0)="$eJzs3c1vHGcdB/DfvvolNLV6qEqEkJuWl1KaxEkJgQJtD3Dg0gPKFSVy3SoiBZQElFYWceULB078BSAkjghxRBz6B/TAlRsnTkSykUA9MWi8zxPPbna7No531p7PR3JmfvPMeJ/xd2dfsjP7BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ3//eD9ZaEXHj52nBSsRnohPRjlgq69WIWFpdyet3I+K52GuOZyOitxBRbr/3z9MRr0bEx2cjdnY318vFlw/Yj+/+8W+/++GZt/76h97F//zpXue1Sevdv/+rf//5wdH2GQAAAJqmKIqild7mn0vv79t1dwoAmIn8/F8kefmpr3/9j7f+Mk/9UavVarV6BnVVMd6DahERW9VtytcMPo4HgBNmKz6puwvUSP6N1o2IM3V3Aphrrbo7wLHY2d1cb6V8W9Xng9VBez4XZCj/rdaj6zsmTacZPcdkVvev7ejEMxP6szSjPsyTnH97NP8bg/Z+Wu+485+VSfn3B5c+NU7OvzOa/4jTk397bP5NlfPvHir/jvwBAAAAAGCO5f//X6n589+Fo+/KgXza57+rM+oDAAAAAAAAADxpRx3/7xHj/wEAAMDcKt+rl35zdn/ZpO9iK5dfb0U8NbI+0DAfDSbLdfcDAAAAAAAAAAAAAJqkOziH93orohcRTy0vF0VR/lSN1od11O1PuqbvPzRZ3Q/yAAAw8PHZkWv5WxGLEXE92nvf9ddbXl4uisWl5WK5WFrIr2f7C4vFUuV9bZ6Wyxb6B3hB3O0X5S9brGxXNe398rT20d9X3la/6BygY09IL/01JzTXFDYAJINnox3PSKdMUTw96cUHDHH8n0IrsVL3/Yr5V/fdFAAAADh+RVEUrTTM37k0vl+77k4BADORn/9HPxc4UB0xvr19yPXVarVarVbPpK4qxntQLSJiq7pN+ZrBcPwAcMJsxSd1d4Eayb/RuhHxXN2dAOZaq+4OcCx2djfXWynfVvX5YHXQns8FGcp/q7W3Xd5+3HSa0XNMZnX/2o5OPDOhP8/OqA/zJOffHs3/xqC9n9Y77vxnZVL+/b1L5pon598ZzX/E6cm/PTb/psr5dw+Vf0f+AAAAAAAwx/L//6/4/DfvMgAAAAAAAACcODu7m+v5utf8+f/nxqzn+s/TKeffOmz+S2le/idazr89kv+XR9brVOYfvrl//P9rd3P99/f++dk8PWj+C3mmle5ZrXSPaKVbanXT9Ch797jtXqdf3lKv1e500zk/Re+duBW3YyMuDa3bTn+P/fa1ofayp72h9stD7d3H2q8MtffS9w4US7n9QqzHT+J2vL3XXrYtTNn/xSntxZT2nH/H438j5fy7lZ8y/+XU3hqZlh5+2H7suK9Ox93OG7c+/8tLx787U21H59G+VZX7d76G/uz9Tc7042d3N+5cuH/z3r07a5EmQ0svR5o8YTn/3t7Pwv7j/wuD9vy4Xz1eH37YP3T+82I7uhPzf6EyX+7vSzPuWx1y/v30k/N/O7WPP/5Pcv6Tj/+Xa+gPAAAAAAAAAAAAAAAAfJqiKPYuEX0jIq6m63/qujYTAJit/PxfJHm5Wq1Wq9Xq01dXFeO9Xi0i4qPqNuVrhl+M+2UAwDz7b0T8ve5OUBv5N1j+vr9y+mLdnQFm6u77H/zo5u3bG3fu1t0TAAAAAAAAAOD/lcf/XK2M//xiRKyMrDc0/uubsXrU8T+7eebRAKNPeKDvCbbb/U67Mtz487E3PveFSeN/n4/Hx//OY+J2qvsxQW9Ke39K+8KU9sWxS/fTGnuhR0XO//nKeOdl/udGhl9vwvivo2PeN0HO/3zl/lzm/6WR9ar5F7+du/y3DrridrSH8r94772fXrz7/gev3Hrv5rsb7278+Mra2qUrV69eu3bt4ju3bm9cGvx7PL2eAzn/PPa180CbJeefM5d/s+T8v5Bq+TdLzv+LqZZ/s+T88+s9+TdLzj+/95F/s+T8X0q1/Jsl5/+VVMu/WXZ2NxfK/F9OtfybJR//X021/Jsl5/9KquXfLDn/C6mWf7Pk/C+m+gD5+3r4UyTnnz/hcvw3S85/LdXyb5ac/+VUy79Zcv5XUi3/Zsn5v5pq+TdLzv9rqZZ/s+T8r6Za/s2S8/96quXfLDn/a6mWf7Pk/L+Ravk3S87/m6mWf7Pk/F9LtfybJef/rVTLv1ly/t9OtfybJef/nVTLv1ly/q+nWv7Nsv/9/2bMmDGTZ+p+ZAIAAAAAAAAAAAAARs3idOK69xEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACA/7EDBwIAAAAAQP6vjVBVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVWFHTgQAAAAAADyf22EqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqqKuzda4xcZ3kH8DN7sdcOIQZCcFIDa8cY4yzZ9SW+0LqYQLgEKAUSCr1gu961s+BbvHZJ0kg2DZRIOCqqqJp+aAsoaiNVFVbFB1qlNB+qXj6R9gP9UlFVQmpUmSigIrUVzVYz531fz8zOzoy94/XZc34/KXl2Z86Z886Z95ydZ9f/OQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAs43vnvlSLcuy+n+N/63LslfVv14zvq5x2ztu9AgBAACApfq/xv9fviXdcKCPlZqW+fs3ffdb8/Pz89knh39v9Kvz8+mO8SwbXZ1ljfuiS//+qVrzMsET2VhtqOn7oR6bH+5x/0iP+0d73L+qx/2re9w/1uP+BTtggTX572MaD7a58eW6fJdmt2ajjfs2d1jridrqoaH4u5yGWmOd+dGj2Wx2PJvJplqWz5etNZZ/bmN9W+/P4raGmra1oT5DfvT4kTiGWtjHm1u2deUxox++Kxv/8Y8eP/InZy/f3qn23A0tj5ePc+um+ji/EG7Jx1rLVqd9Esc51DTODR1ek+GWcdYa69W/bh/ny32Oc/jKMJdV+2s+lg01vn6hsZ9Gmn+tl/bThnDbf9+ZZdmFK8NuX2bBtrKhbG3LLUNXXp+xfEbWH6M+lV6bjVzVPN3Yxzyt1+nNrfO0/ZiIr//GsN7IImNofpl++PlVC173q52nUf1ZL3astM/BQR8rRZmDcV680HjST3acg5vD8398y+JzsOPc6TAH0/NumoObes3BoVXDjTGnF6HWWOfKHNzesvxwY0u1Rn1xS/c5OHn2xOnJuUcfe/vsicPHZo7NnNy5ffvUzt279+7dO3l09vjMVP7/a9zbxbc2G0rHwKaw7+Ix8Na2ZZun6vzXB3ccjnU5Dte1LTvo43Ck/cnVlueAXDin82PjgfpOH7s4lC1yjDVen21LPw7T8246DkeajsOOP1M6HIcjfRyH9WVOb+vvPctI03+dxnC9fhasa5qD7e9H2ufgoN+PFGUOjoV58a/bFv9ZsCGM98mJq30/MrxgDqanG8499VvS+/2xvY3SaV7eUb/jplXZubmZM3c/cvjs2TPbs1CWxeua5kr7fF3b9JyyBfN16Krn64HZNz15R4fb14V9Nfb2+v/GFn2t6svsurv7a9X46dZ5f7bcuiMLZcCWe392+mle35+pl+yyP+vLfGFy6e/FU1/adP4dXeT8G/v+V/LtpYd6Ynh0JD9+h9PeGW05H7e+VCONc1etse2XJ/s7H4+G/5b7fHxrl/Px+rZlB30+Hm1/cvF8XOv1246laX89x8I8OT7V/XxcX2b9jqudkyNdz8d3hloL+/9toVNIfVHT3Fls3qZtjYyMhuc1ErfQOk93tiw/Gnqz+rae3XFt83TrnfljDadnd8VyzdPxtmUHPU/T+WqxeVrr9du3a9P+eo6FeXHrzu7ztL7M87uWfu5cE79sOneu6jUHR4dX1cc8miZhfr6fXxPn4N3ZkexUdjybbty7qjGfao1tTdzT3xxcFf5b7nPl+i5zcGvbsoOeg+nn2GJzrzay8MkPQPvrORbmxdP3dJ+D9WXes2ew7123hlvSMk3vXdt/v7bY77zuaNtN1/N3XvVx/u2e7r+brS9zfO/V9pnd99Nd4ZabOuyn9uN3sWNqOlue/bQ+jPPy3sX3U3089WW+uq/P+XQgy7LzD9/b+H1v+PvKX5z73rda/u7S6W865x++96Wbj/7d1YwfgJXvlbyszX/WNf1lqp+//wMAAAArQuz7h0JN9P8AAABQGrHvj/8qPNH/AwAAQGnEvn8k1KQi/f/691yefeV8lpL580G8P+2G+/PlYsZ1Knw/Pn9F/fZ7n5n5yV+d72/bQ1mW/fT+3+y4/Pr747hy42Gcl+5rvX3hiuf72v6hB68s15xf/1p4/Ph8+p0GnSK4U1mWPXfLU43tjH/qYqM+f/+hRv3YhSefqC/z8r78+7j+i6/Ll//DEP49cPRwy/ovhv3wg1CnPth5f8T1vnnxbRv2fOLK9uJ6tU2vbjztpz+dP278nJyvPJEvH/fzYuP/6y8/+8368o+8pfP4zw91Hv+z4XGfue/ybH3G/c8b8+WbX4P693G9L4bxx+09E9a/+xvf6Tj+S1/Klz/93ny5Q6HG7W8N329+7+XZ5v31SO1wy/PK3pcvF7c/9b3fadwfHy8+fvv4xw5ebNkf7fPj+X/OH2eybfl4e9xO9Jdt268/TvP8jNt/9rcPteznXtu/9LEX31h/3Pbt39W23HDb+u2f2PRHX3yq4/bieA78+emW53Pgo+E4Dtt/+tNhPob7//fSUy3bjQ59tPX8E5f/2rrzLc8nev+P8+1feuexRv2P8Z/8wU2vuvnVF95c33dZ9sLH88frtf1jf3yqZfxfv21b4/WI98eMfvv2FxO3f+ZzEydPzZ2bnW7aq43PzvlQPp7VY2vW1sd7Szi3tn9/8NTZh2bOjE+NT2XZeHk/Qu+afSPUl/Jy4WrX3/ZgeD3v+P3n1m75py/H2//lgfz2ix/Mf269NSz3lXD7uvz1m68tcftPb7ytcXzXns+/b8mxD8CGzf+5t68Fw/Nvf18Q5/vp1z/U2A/1+xo/N+JxvcTxf386f5xvh/06Hz6ZedNtV7bXvHz8bISLH8+P9yXvv3Cai6/rn4bX+8M/yB8/jis+3++H9zHfWd96vovz49vnh9ofv/EpHhfC+SS7kN8fl4r7++LLt3UcXvwckuzC7Y3vfzc9zu1X9TQXM/fo3OTx2ZPnHpk8OzN3dnLu0ccOnjh17uTZg43P8jz4mV7rXzk/rW2cn6Zndu/KptZkWXYqm1qGE9b1GX/9q/7Gf/rBI9N7prZMzxw9fO7o2QdPz5w5dmRu7sjM9NyWw0ePznyu1/qz0/u379i3c8+OiWOz0/v37tu3c9/E7MlT9WHkg+ph99RnJ06eOdhYZW7/rn3b77ln19TEiVPTM/v3TE1NnOu1fuNn00R97d+YODNz/PDZ2RMzE3Ozj83s375v9+4dPT8N8MTpo3Pjk2fOnZw8NzdzZjJ/LuNnGzfXf/b1Wp9ymvu3/P1su1r+QXzZR+7anT6fte6Zzy/6UPkibR8gejl8Fs0/vub03n6+j33/aKhJRfp/AAAAqILY968KNdH/AwAAQGnEvn91qIn+HwAAAEoj9v1joSYV6f/l/+X/+8v/5/cPMv/fKT+fyf8XKv9/+uE8V7rS8/8xPy//Xw03OP+/5O3L/8v/ly//339+fqWPX/5f/p+Fipb/j33/miyrZP8PAAAAVRD7/rWhJvp/AAAAKI3Y998UaqL/BwAAgNKIff+rQk0q0v/L//eV/9/RK3BV/vz/4K//L/8v/78s+f/44sj/V8ZV5+8/8UDLt/L/gfy//L/8v/y//D9LNrroPTcq/x/7/ptDTSrS/wMAAEAVxL7/1aEm+n8AAAAojdj33xJqov8HAACA0oh9/7pQk4r0//L/rv8v/y//X+r8/1Kv/980GPn/lcH1/7uT/+/hmvP/Y/L/KzH/PzrY8Rc7/99z+PL/XBdFu/5/7PtfE2pSkf4fAAAAqiD2/a8NNdH/AwAAQGnEvv91oSb6fwAAACiN2PffGmpSkf5/Kfn/mLmW/5f/l//Pyf/nSpX/73r9//wr+f9ikf/vTv6/B9f/r1b+f8DjL3b+f9DX/x+9r319+X86KVr+P/b9rw81qUj/DwAAAFUQ+/7bQk30/wAAAFAase9/Q6iJ/h8AAABKI/b960NNKtL/u/6//L/8v/y//H/n7ffO/+fk/4tF/r87+f8e5P/l/+X/+8v/d3jzK/9PJ0XL/8e+//ZQk4r0/wAAAFAFse+/I9RE/w8AAAClEfv+nwk10f8DAABAacS+f0OoSUX6f/l/+X/5/2rl/+9aJf8v/19u8v/dyf/3IP8v/y//3+f1/xe6mvz/6l4PRmkULf8f+/43hppUpP8HAACAKoh9/5tCTfT/AAAAUBqx739zqIn+HwAAAEoj9v3joSYV6f/l/8uV//+zv3n6zZn8v/x/j+2XNP8fp4H8f8XJ/3cn/9+D/L/8/wrN/3/gu3ldKfl/qqNo+f/Y928MNalI/w8AAABVEPv+TaEm+n8AAAAojdj33xlqov8HAACA0oh9/+ZQk4r0//L/5cr/R/L/8v/dtl/S/H8i/19t8v8dNB2k8v89yP/L/6/Q/H82sOv/x3e/8v8MRtHy/7Hvf0uoSZfGb7CfxAMAAABcb7Hv3xJqUpG//wMAAEAVxL7/raEm+n8AAAAojdj3bw01qUj/L/8v/y//L/8v/995+/L/K9PKyv+vXnBL0a7/v0r+X/5f/r9i+X/X/2ewipb/j33/20JNKtL/AwAAQBXEvn9bqIn+HwAAAEoj/su7/N+96v8BAACgjGLfPxFqUpH+X/5f/r9K+f+a/L/8v/x/6a2s/P9CRcv/u/6//L/8v/y//D9LUbT8f+z73x5qUpH+HwAAAKog9v13h5ro/wEAAKA0Yt8/GWqi/wcAAIDSiH3/VKhJRfp/+X/5/yrl/13/X/5f/r/85P+7k//vQf6/VPn/LJP/rw9e/p8bqWj5/9j3bw81qUj/DwAAAFUQ+/4doSb6fwAAACiN2PfvDDXR/wMAAEBpxL5/V6hJRfp/+X/5f/l/+X/5/87bl/9fmeT/u5P/70H+f3ny/53eOK2k8S+ikPl/1//nBita/j/2/feEmlSk/wcAAIAqiH3/7lAT/T8AAACURuz794SahP7/Ov3zJAAAAGAZxb5/b6hJRf7+L/9fkvz/b/1Dy7bl/+X/u21/MPn/NfL/ocr/F0tJ8//th8U1k//vQf7/uuXns6GBDPGGjV/+X/6fa1O0/H/s+/eFmlSk/wcAAIAqiH3/O0JN9P8AAABQGrHv/9lQE/0/AAAAlEbs+38u1KQi/b/8f0ny/23k/+X/u23f9f/l/8uspPn/gSlV/n9I/n8l5f/7yc+v9PHL/8v/s9D1z//Hr/rL/8e+f3+oSUX6fwAAAKiC2Pf/fKiJ/h8AAABKI/b97ww10f8DAABAacS+/0CoSUX6/2vI/zfulP9vJf/fOn75/87zo1r5/3dm7YqY/69PHvn/cilw/n+0n+3L/7v+v/z/soy//UfNQMYv/y//z0JFu/5/7PvfFWpSkf4fAAAAqiD2/feGmuj/AQAAoDRi3//uUBP9PwAAAJRG7PvfE2pSkf7f9f/l/+X/5f9d/7/z9uX/V6YC5//7Iv8v/y//v3LHL/8v/89CRcv/x77/vlCTivT/AAAAUAWx739vqIn+HwAAAEoj9v3vCzXR/wMAAEBpxL7//aEmFen/5f/l/+X/5f/l/ztvX/5/ZZL/707+vwf5f/l/+X/5fwaqaPn/2Pd/INSkIv0/AAAAVEHs++8PNdH/AwAAQGnEvv+DoSb6fwAAACiN2Pd/KNSkIv2//L/8v/y//L/8f+fty/+vTPL/3cn/9yD/L/8v/y//z0AVLf8f+/4Ph5pUpP8HAACAKoh9/y+Emuj/AQAAoDRi3/+RUBP9PwAAAJRG7Pt/MdSkIv2//L/8f7Hy//Pnm9eT/5f/zwaV/6+vJP9fCfL/3cn/99Ah/79a/l/+X/5f/p9rVrT8f+z7PxpqUpH+HwAAAKog9v0fCzXR/wMAAEBpxL7/46Em+n8AAAAojdj3PxBqUpH+X/6/kvn/9JSLl/93/f9+8v8jt8j/Z67/L/+/CPn/7uT/e3D9f/l/+X/5fwaqaPn/2Pc/GGpSkf4fAAAAqiD2/Z8INdH/AwAAQGnEvv+XQk30/wAAAFAase//ZKhJRfp/+f9K5v8LfP3/suX/R1rmR5Wu/z/W9HqmeSn/L/+/DOT/u5P/70H+X/6/yPn/MJvXLLK+/D9FVLT8f+z7PxVqUpH+HwAAAKog9v2/HGqi/wcAAIDSiH3/r4Sa6P8BAACgNGLf/6uhJhXp/0uY/7+Qyf/L/xcm/986P6qU/3f9/4Xk/5eH/H938v89yP/L/xc5/9+D/D9FVLT8f+z7fy3UZNHG76X/6uNpAgAAAAUS+/5Ph5pU5O//AAAAUAWx7z8YaqL/BwAAgNKIff+hUJOK9P8lzP8v8fr/8Yqq8v/y/4PO/w/J/8v/y/8vg8Hl/99wc5bJ/8v/y//L/8v/y/+zFEXL/8e+/3CoSUX6fwAAAKiC2Pf/eqiJ/h8AAABKI/b9R0JN9P8AAABQeCMpEdxd7PunQ00q0v/fwPz/aDHz/2W7/n8tPPb1z///VP7f9f8D+f/O5P+Xh+v/dyf/34P8v/y//L/8PwNVtPx/7PtnQk0q0v8DAABAiaVfB8e+/2ioif4fAAAASiP2/cdCTfT/AAAAUBqx738o1KQi/b/r/5c9/+/6/8XM/4+0LC//n5P/l/8fBPn/7uT/e5D/l/+X/5f/Z6CKlv+Pff9sqElF+n8AAACogtj3fybURP8PAAAApRH7/s+Gmuj/AQAAoDRi33881KQi/b/8v/x/1fP/tSy74Pr/8v+dti//vzLJ/3cn/9+D/L/8v/y//D//z959NNl1VX0cPjZWGsFHYOwRQxiZj8CUGVWMTTQ5yCJnMDkHkzE5Y4JNzjlnk3M0JhiqRFlaa0nd9/a5LfVR33P2fp7JwirLfWU3fuv/qn7sSc2t/8/df3Xc0sn+BwAAgB7k7r9f3GL/AwAAQDNy998/brH/AQAAoBm5+x8Qt3Sy//X/+v/e+/9hK+//7/zz9f9n6f/1/1NY6e+vWP/n7RWF79n/3+3u19xH/6//1/+P0v/r//X/7Da3/j93/wPjlk72PwAAAPQgd/+D4hb7HwAAAJqRu//BcYv9DwAAAM3I3X9N3NLJ/tf/6//1/4vo/y/Lv8Yl7/9v1v/r/5fN+//j9P8b6P/1//p//T+Tmlv/n7v/IXFLJ/sfAAAAepC7/6Fxi/0PAAAAzcjd/7C4xf4HAACAZuTuf3jc0sn+1//r//X/i+j/b7vx5FHv/+/69ej/9f/r6P/H6f830P/r//X/+n8mNbf+P3f/I+KWTvY/AAAA9CB3/yPjFvsfAAAAmpG7/1Fxi/0PAAAAzcjd/+i4pZP9r//X/+v/J+z/Tw3DcMn6/0H/v+vXo//X/69z/XDu3wn6/1X6/w029P/DoP8fs+9+fv0vbzmffw/6f/0/q+bW/+fuf0zccs9hOHqxv0gAAABgVnL3PzZu6eT3/wEAAKAHuftPxi32PwAAADQjd/+1cUsn+1//r//X/y/l/X/9v/5f/78f3v8fd/D+/8q7XH3ffvt/7/+P8/7/1P3/Hd8Z+n+WbW79f+7+U3FLJ/sfAAAAepC7/3Fxi/0PAAAAzcjd//i4xf4HAACAZuTuf0Lc0sn+1/+31v/facfPO6//P1O76P/1/xfT/x+pv5L+X/8/f/r/cd7/3+DMv+ZO1B/q//X/3v/X/3Mwc+v/c/c/MW7pZP8DAABAD3L3Pylusf8BAACgGbn7nxy32P8AAADQjNz9T4lbOtn/+v/W+v+dP8/7//r/dV/f+//6/5ZdXH9/Zf3PXOj/Q9f9fwPv/1/kd822+/mD2vbn1//r/1k1t/4/d/9T45ZO9j8AAAD0IHf/0+IW+x8AAACakbv/6XGL/Q8AAADNyN3/jLilk/2v/9f/L6P/z6+g/9f/X/r+P+n/l8n7/+P0/xu00v9fpG3380v//Pp//T+r5tb/5+5/ZtzSyf4HAACAHuTuf1bcYv8DAABAM3L3Pztusf8BAACgGbn7nxO3dLL/9f/6/2X0/97/1/97/1//vz/6/3H6/w30//p//b/+n0nNrf/P3X9d3NLJ/gcAAIAe5O5/btxi/wMAAEAzcvc/L265kP1/ZOpPBQAAAEwpd//z45ZOfv9f/6//1//r//X/67++/n+Z9P/j9P8bdN7/D9fq//X/+n+mNaP+/7yfdXx4QdzSyf4HAACAHuTuf2HcYv8DAABAM3L3vyhusf8BAACgGbn7Xxy3dLL/2+v/jy21/z+T87XV/58YhkH/P3Ta/584759nfV/q//X/h0D/P07/v0Hn/f+2+/mlf379v/6fVTPq/8/8ce7+l8Qtnex/AAAA6EHu/pfGLfY/AAAANCN3/8viFvsfAAAAmpG7/+VxSyf7v73+3/v/w2z6f+//7/7+6Kn/9/7/Kv3/4dD/j9P/b6D/1//r//X/TGpu/X/u/lfETUePXPQvEQAAAJiZ3P2vjFs6+f1/AAAA6EHu/lfFLfY/AAAALNR1Kz+Su//VcUsn+1//P23/f/S8H9P/6/93f3/o//X/+v9Lb1N/v+lvmf4/6P/1//p//b/+nwnMrf/P3f+auKWT/Q8AAAA9yN1/fdxi/wMAAEAzcve/Nm6x/wEAAKAZuftfF7d0sv/1/97/1//r/zf1/+eeQ9X/6//nz/v/4/T/G+j/9f/b7f+PnfuP+n/acAH9/+nTp09e8v4/d//r45ZO9j8AAAD0IHf/G+IW+x8AAACakbv/jXGL/Q8AAADNyN3/prilk/2v/++0/89v9WX1/9cOg/7f+//6f/3/OP3/OP3/Bvp//b/3//X/TGpu7//n7n9z3NLJ/gcAAIAe5O5/S9xi/wMAAEAzcvffELfY/wAAANCM3P1vjVs62f/6/077f+//6//1/4fd/98+6P8PxSL6/xN7f/259/+n9P/6/xHd9f/3useOP9T/6/9ZNbf+P3f/2+KWTvY/AAAA9CB3/9vjFvsfAAAAmpG7/x1xi/0PAAAAzcjd/8646YpO9r/+X/+v/9f/6//Xf/1Dfv//6DAM+v8JLKL/HzH3/n+a9/93/7f8HP2//n/Jn1//r/9n1dz6/9z974pbOtn/AAAA0IPc/e+Om47Z/wAAANCM3P3viVvsfwAAAGhG7v73xi2d7H/9v/5f/6//b77/P7WI/t/7/xPR/4+bR/+/N/2//n/Jn1//r/9n/7bV/+fuf1/c0sn+BwAAgB7k7n9/3GL/AwAAQDNy938gbrH/AQAAoBm5+z8Yt3Sy//X/+v8L6f/zc+r/2+r/j82u/z++46/Xyfv/+v+J6P/H6f830P/r//X/1+n/mdLc3v/P3f+huKWT/Q8AAAA9yN1/Y9z6f93a/wAAANCM3P0fjlvsfwAAAGhG7v6PxC2d7H/9v/7f+//6/+bf/9f/d0X/P07/v4H+X/+v//f+P5OaW/+fu/+jcUsn+x8AAAB6kLv/Y3GL/Q8AAADNyN1/U9xi/wMAAEAzcvffHLd0sv/1//p//b/+X/9/9p+h/r8N+v9xh9P/n9D/6/+rn78s/lug/9f/b/r5tGlu/X/u/o/HLZ3sfwAAAOhB7v5PxC32PwAAADQjd/8n4xb7HwAAABbpijU/lrv/U3FLJ/tf/6//1//r//X/67++/n+ZttL/5zeF/t/7/6Gf/v+uO/5oae//7/6/X/p//T/Tm1v/n7v/03FLJ/sfAAAAepC7/zNxi/0PAAAAzcjd/9m4xf4HAACAZuTu/1zc0sn+1//r//X/+n/9//qvr/9fJu//j9P/b6D/3+r7+Uv//Pp//T+r5tb/5+7/fNzSyf4HAACAHuTu/0LcYv8DAABAM3L3fzFusf8BAACgGWd2f8ZlHe5//b/+X/+v/9f/r//6+v9l0v+P0/9voP/X/+v/9f9Mam79/5fO/Kzjw5fjlk72PwAAAPQgd/9X4hb7HwAAAJqRu/+rcYv9DwAAAM3I3f+1uKWT/b///v/0oP/fm/5/5+efvv8/ffr0Sf2//n/nr+dc/3+L/p+i/x+n/99A/6//1//r/5nU3Pr/3P1fj1s62f8AAADQg9z934hb7H8AAABoRu7+b8Yt9j8AAAA0I3f/t+KWTva/9/9n0P8f1/97/1//P3j/f7X/v/zsv5T1/xdG/z9O/79Bi/3/8f3/8rfdzx/Utj+//l//z6q59f+5+78dt3Sy/wEAAKAHufu/E7fY/wAAANCM3P3fjVvsfwAAAGhG7v7vxS2d7H/9/+H1/3f8vevl/f8Tw/rPr//X/+v/vf9/qen/x+n/N2ix/78A2+7nl/759f/6f1bNrf/P3f/9uGXn8DtyYb9KAAAAYE5y9/8gbunk9/8BAACgB7n7fxi32P8AAADQjNz9P4pbOtn/+v8ZvP/fYP/v/f/13x/6/1n3/5fr/9ug/x+n/99A/6//1/9P1P/nd7P+v3dz6/9z9/84bulk/wMAAEAPcvf/JG6x/wEAAKAZuft/GrfY/wAAANCM3P23xC3n7f91bXcr9P/6f/2//l//v/7r6/+XSf8/br/9/7HhYP1/0v/r//X/vfb/3v/nrLn1/7n7fxa3+P1/AAAAWJwje/x47v6fxy32PwAAADQjd/8v4hb7HwAAAJqRu/+Xccutl2/rIx0q/b/+X/+v/9f/r//6+v9l0v+Pm+X7/zfcVP9R/99E/3+V/r+N/n8Y9P8c3Nz6/9z9v4pb/P4/AAAANCN3/6/jFvsfAAAAmpG7/zdxi/0PAAAAzcjd/9u4pZP9r//X/x+w/z+TZur/z9L/n6X/X0//fzj0/+Nm2f+fR//fRP/v/f9G+n/v/zOFufX/uft/F7d0sv8BAACgB7n7fx+32P8AAADQjNz9f4hb7H8AAABoRu7+P8Ytnez/rfX/8bda/7/4/t/7//p//b/+f1b0/+P0/xvo//X/+n/9P5OaW/+fu/9PcUsn+x8AAAB6kLv/z3GL/Q8AAADNyN3/l7jF/gcAAIBm5O7/a9zSyf73/r/+X/+v/9f/r//6+v9l0v+P0/+vV/+g9P/6f/2//p9Jza3/z93/t7ilk/0PAAAAPcjd//e4xf4HAACAZuTuvzVusf8BAACgGbn7/xG3dLL/9f/6f/2//l//v/7r6/+XSf8/bpv9/73vvPnLev9/6/1/fgT9v/5f/88k5tb/5+6/LW7pZP8DAABAD3L3/zNusf8BAACgGbn7/xW32P8AAADQjNz9/45bOtn/G/r/Y/Un6v9H6f93fn79//rvj4b7/x2Bq/5/Pf3/4dD/j1vO+//x8/X/O3j/f96fX/+v/2fV3Pr/3P3/iVs62f8AAADQg9z9t8ct9j8AAAA0I3f/f+MW+x8AAACakbv/f3FLJ/vf+/9L6v+v0v/r/+fa/++g/19P/3849P/jltP/e/9/Hf3/vD+//l//z6q59f+5+/8fAAD//xdwQx0=") syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000000)) quotactl$Q_QUOTAON(0xffffffff80000200, &(0x7f0000000000)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f00000003c0)='./file1\x00') 4m9.608570196s ago: executing program 5 (id=1096): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000b00)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x4018, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x20, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x7, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x6}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@main=@item_012={0x1, 0x0, 0xa, 'R'}, @global=@item_012={0x2, 0x1, 0x2, '+\x00'}]}}, 0x0}, 0x0) 4m5.398077378s ago: executing program 5 (id=1106): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) 4m4.930569125s ago: executing program 5 (id=1107): syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f00000000c0)={[{@filestreams}, {@usrquota}, {@noalign}, {@pquota}, {@inode32}, {@discard}, {@prjquota}, {@usrquota}, {@gquota}, {@nolargeio}]}, 0x1, 0x975c, &(0x7f000001c600)="$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") mkdir(&(0x7f0000000000)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') 4m2.594027539s ago: executing program 5 (id=1113): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x5, 0xebb, &(0x7f0000001e40)="$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") r0 = open(&(0x7f0000002240)='.\x00', 0x0, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0186e87, 0x0) 4m1.382201797s ago: executing program 36 (id=1113): syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000f00)='./file0\x00', 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00'], 0x5, 0xebb, &(0x7f0000001e40)="$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") r0 = open(&(0x7f0000002240)='.\x00', 0x0, 0xa0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0xc0186e87, 0x0) 6.106706781s ago: executing program 4 (id=2046): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000004480)=ANY=[@ANYBLOB="12010000cf8bed20d90f25004029000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000040)=ANY=[@ANYBLOB="2072dc"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000002580)={&(0x7f0000000180)=[{0xd0, 0x1801, 0x0, 0x0}, {0x99, 0x0, 0x0, 0x0}, {0x6, 0x2000, 0x0, 0x0}], 0x3}) 4.517888794s ago: executing program 7 (id=2057): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x8, 0xc, 0x1}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, 0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x37) 4.346042827s ago: executing program 7 (id=2058): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x8e, 0x88, 0x5, 0x20, 0x8086, 0x9500, 0xb6d8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0x15, 0xcc, 0x1c}}]}}]}}, 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000280)={&(0x7f0000000600)=[{0x1e, 0x211, 0x0, 0x0}, {0x8, 0x4020, 0x0, 0x0}], 0x2}) 4.345431027s ago: executing program 4 (id=2066): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x81, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0xfde) 3.558223098s ago: executing program 8 (id=2067): r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x1}, 0x18) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000000)=0x3, 0x4) 3.385392771s ago: executing program 4 (id=2068): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000280)={@remote}, 0x14) close(r0) 3.268888142s ago: executing program 8 (id=2069): syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000ec0)=ANY=[@ANYBLOB="00a35c7e063cca3ab58fd5d9a7bfe106be476ce9efc135d4f2f0f43d6f2f2e1305399ee39c715c457435f1c869a84979067f3d4ce9ead757deb2db6deecd57581d9ffb151ba9ba363e44fb352a2c2c85cf58dc05ace99df1cdebae4db886e0e26e6808ec9ea72edafb8550baec0edff453c441fdfea2f23b9be954975b9e43248416008175da8da2ab5f77b693ebe51ca911544824877af8895e74f821900600"/170], 0x1, 0x12d, &(0x7f0000000200)="$eJzs2r9Kw1AUBvCjCEIfwamQgHXIf62DuyA4+QSG9t704o23JIK0U/EFFIfrI7i6iW4+QmafQN/AKZI2sTZ316Hfb7kfOZeTZDnTcTKVBjx3iPZm92cfm5lKu/3ocMADHtPCCRF1q1CU5YNLhvOfelHOXOOC9VqfvUSfvnAhWWj2AAAAAAAAAAAAAAAAAAAAAABYE9ZnHTojrR65kCz4Vc0n04tYSpblzROb6h0d4lodVfejlX69LyJ7vr8j9PFNVfdX6nbTaXek1Ub7fd5VOvbyydQRaZywhF2GYdT3933/IPTmvbx2R/uu/iYqyuexuU9kPy33id59c5+IOotja0fo2+t29+X/IyAgIDShPT9ouB1Zb9X8cAdKDv9wfhgTDeCffAcAAP//NHw5bA==") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) 3.162204624s ago: executing program 4 (id=2070): r0 = syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000007794608cd0c39007b90000000010902120001fc0000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x401) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000140)={0x0, 0x31, 0x7, &(0x7f0000000040)={0x11, "652519cab69bf9c9c3ee7e172bfe2548bca2a1406d186ff7ef4dd45197f36d6972"}}) 3.106953785s ago: executing program 8 (id=2071): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000000000020001000980000001004000", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) 2.605338502s ago: executing program 8 (id=2072): syz_mount_image$iso9660(&(0x7f00000001c0), &(0x7f0000000000)='./file0\x00', 0x204419, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES16, @ANYRESHEX], 0x1, 0x550, &(0x7f0000000380)="$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") r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x80, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x4f8}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x4}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) 1.906813352s ago: executing program 6 (id=2075): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000600)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="1546010000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r1, @ANYBLOB="8b4fb5350ba1671e51b88a9ac8c06815d7ae9f3bfaaf41e32716e5010000000000000028fef8cc3418f3b23911979d75ef8764b1f6456e13614637b1d16bf34e582705a5114ef77f1ba5116d2e9ad57f8ee2d7dccbb60100008000840df7038eb0c6a6d900000066a9e9539550721b52c6ea7e5b0eda64b767520df3e5436499db090a61b88eabe0d541fb5b53501b775f20c87e9fe9ee48a0337bf4e04c9dd6d96d6ea550b89ea91aa22d5d2ea44ef3060814f8334a9fc52315898b8a4b4d7c684dabde27e14656cf1b9e2af0b0942ec5306ddc7efb46e49154941bfa65b18ca4f7459800000000000000"], 0x44}}, 0x0) 1.856256673s ago: executing program 7 (id=2076): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2d, &(0x7f0000000980)={@multicast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0xb, 0x0, @opaque="490617"}}}}}, 0x0) recvmmsg(r0, &(0x7f00000039c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000001940)=""/4096, 0x1000}], 0x1}, 0x7061ab3a}], 0x1, 0x120, 0x0) 1.746092255s ago: executing program 6 (id=2077): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x60303, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x300000b, 0xc3072, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 1.672593966s ago: executing program 6 (id=2078): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x300001a, &(0x7f0000000500)=ANY=[], 0xf8, 0x2c2, &(0x7f0000000540)="$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") r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x1) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000040)=0x1) 1.567790347s ago: executing program 6 (id=2079): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = syz_open_procfs(0x0, &(0x7f0000000040)='smaps_rollup\x00') mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x7, 0x2) pread64(r0, &(0x7f0000000080)=""/196, 0xc4, 0x3) 1.281117542s ago: executing program 4 (id=2080): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000240)={0x0, 0x5}, 0x8) 997.865166ms ago: executing program 6 (id=2081): bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="0b00000000000000020001000980000001004000", @ANYRESDEC, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file2\x00', 0x404, &(0x7f0000000380)={[{@barrier}, {@nogrpid}, {@noload}, {@debug}, {@nobarrier}, {@barrier_val={'barrier', 0x3d, 0x37}}]}, 0x1, 0x42f, &(0x7f0000000d80)="$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") r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0x1, 0x8000c61) statx(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x0, 0xd1b511a5396722a5, &(0x7f0000000400)) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0xaf01, 0x0) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket(0x2, 0x3, 0xff) bind$inet(r5, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r5, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) sendmmsg$unix(r5, &(0x7f0000005440)=[{{0x0, 0x0, &(0x7f0000000540), 0x0, &(0x7f00000009c0)=[@cred={{0x1c}}], 0x20, 0x940}}], 0x1, 0x0) 939.250977ms ago: executing program 7 (id=2082): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 844.249218ms ago: executing program 7 (id=2083): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000004480)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) fallocate(r0, 0x0, 0x7351, 0x8001) ioctl$FITRIM(r0, 0x40406f06, &(0x7f00000000c0)={0x86, 0x7e4000, 0x20}) 659.45888ms ago: executing program 6 (id=2084): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x40015b13, 0x0) 522.150933ms ago: executing program 8 (id=2085): r0 = socket(0x840000000002, 0x3, 0x9) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4e5, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, 0x0, 0x28) 108.306739ms ago: executing program 8 (id=2086): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x6, 0xfffa}, 0x1a, [0x6, 0x9, 0xfffffff3, 0x9, 0x7f, 0x7, 0x10001, 0x7f, 0x6, 0x4d, 0x10000, 0x7, 0x3, 0x40000003, 0xffff2d37, 0x1dd2, 0x6, 0x7, 0x2, 0x80000001, 0x7, 0x9, 0xffff, 0x3c5b, 0x1, 0x24, 0x3, 0xfffffffe, 0x1f461e2c, 0x2, 0xfffffffa, 0x3, 0x3, 0x3, 0x7fff, 0x4c74, 0xf, 0x8001, 0x4, 0xa, 0x0, 0x80071, 0x5, 0xfffff000, 0x103, 0x0, 0x5, 0x3c, 0x4, 0x1, 0x1000, 0x3, 0x5, 0x4, 0x8, 0x0, 0x80, 0x2, 0x5, 0xa, 0x8, 0x7, 0x1, 0xfffffffe], [0x10000007, 0xfffd, 0xfff, 0x8000, 0xc, 0xfffffff5, 0x129432e6, 0x3, 0x6, 0x0, 0x2bf, 0x8, 0x9, 0xffff7ffe, 0x3, 0x4002, 0x101, 0x5, 0x2f, 0xe, 0xfff, 0x78, 0x10000ea3, 0xa, 0xe, 0x0, 0x8000, 0xb, 0x400, 0x101, 0x0, 0xfffffffd, 0xff, 0x1005, 0x7ff, 0x5f31, 0xc, 0x6000000, 0x6, 0x2, 0xc, 0x4, 0x9, 0x8, 0x9, 0x6, 0x5, 0x0, 0x1, 0x0, 0xffff, 0x2000002, 0x7f, 0xb, 0xfff, 0x1000, 0x4, 0x143, 0x7, 0xb, 0x9, 0x48c93690, 0x2, 0x3], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfe, 0x5, 0x8d2, 0x9, 0x5, 0xfffffff7, 0x0, 0x5, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x20005, 0x8, 0x6, 0x2, 0x10000009, 0x3ea, 0xb, 0x5, 0x6, 0x2, 0xf, 0x88, 0x0, 0x5, 0x5, 0x3b, 0x3, 0x5, 0x80, 0x3, 0xfffffffe, 0x202, 0x0, 0x10a2, 0x7, 0x53cf697b, 0x1, 0x6, 0x54fe12d2, 0xbf, 0x200, 0x0, 0x400002, 0x3, 0x4, 0x5, 0xf23, 0x0, 0x6, 0xfffffffb, 0x120000, 0x3, 0x6, 0x9, 0x4, 0x3], [0x9, 0x7e06, 0x3, 0xb, 0x5, 0x938, 0x6, 0x3, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x5, 0x5, 0x0, 0x101, 0x10003, 0x2006, 0x7fff, 0x8ffff, 0x6, 0x2, 0x5, 0x1, 0x2, 0x14a, 0x60a7, 0x6, 0x6, 0x400007, 0x2, 0x5, 0x735, 0x8, 0x3, 0x50fd, 0x10001, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x2, 0x80000007, 0x6, 0x1, 0x10000, 0xfffffffe, 0x8, 0x2b94, 0xa1f, 0x8, 0x9, 0x8, 0x6c1b, 0x2d513b50, 0x4, 0x5, 0x4b1c, 0x1, 0xa, 0xffff7441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x822b01) write$char_usb(r0, &(0x7f0000000040)="e2", 0x918) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000980)=0x1) 108.109099ms ago: executing program 4 (id=2087): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009ac0b620110f211066865578060109029c000100000400090400bf900b64ea00090587033b"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000) syz_usb_disconnect(r0) write$char_usb(r1, &(0x7f0000001300)='7', 0x1) 0s ago: executing program 7 (id=2088): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) kernel console output (not intermixed with test programs): "/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78e929 code=0x7ffc0000 [ 1089.801181][ T9879] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1089.820722][ T27] audit: type=1326 audit(2000000041.820:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0adc78e929 code=0x7ffc0000 [ 1089.883238][ T27] audit: type=1326 audit(2000000041.820:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f0adc78e929 code=0x7ffc0000 [ 1089.909745][T11509] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1089.936594][ T27] audit: type=1326 audit(2000000041.830:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0adc72ab19 code=0x7ffc0000 [ 1089.959277][ T27] audit: type=1326 audit(2000000041.830:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0adc72ab19 code=0x7ffc0000 [ 1089.981916][ T27] audit: type=1326 audit(2000000041.830:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0adc72ab19 code=0x7ffc0000 [ 1090.004763][ T27] audit: type=1326 audit(2000000041.830:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.4.1623" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f0adc72ab19 code=0x7ffc0000 [ 1090.064212][ T9879] usb 7-1: Using ep0 maxpacket: 16 [ 1090.071361][ T9879] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1090.081802][ T9879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1090.113217][ T9879] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1090.153059][ T9879] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1090.162745][ T9879] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1090.204844][ T9879] usb 7-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1090.229941][ T9879] usb 7-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1090.243054][ T9879] usb 7-1: Manufacturer: syz [ 1090.274176][ T9879] usb 7-1: config 0 descriptor?? [ 1091.423255][ T9879] rc_core: IR keymap rc-hauppauge not found [ 1091.440148][ T9879] Registered IR keymap rc-empty [ 1091.461477][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.529090][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.584721][ T9879] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0 [ 1091.639630][ T9879] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/rc/rc0/input13 [ 1091.691698][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.771859][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.824796][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.873653][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.935100][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1091.993252][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1092.043253][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1092.096076][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1092.143871][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1092.193157][ T9879] mceusb 7-1:0.0: Error: mce write submit urb error = -90 [ 1092.245328][ T9879] mceusb 7-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1092.268553][ T9879] mceusb 7-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1092.317980][ T9879] usb 7-1: USB disconnect, device number 18 [ 1092.557931][T13517] loop8: detected capacity change from 0 to 2048 [ 1092.605584][T13517] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.799465][T13522] syz_tun: entered promiscuous mode [ 1092.893828][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1092.948921][T13529] loop4: detected capacity change from 0 to 256 [ 1092.965158][T13529] FAT-fs (loop4): Directory bread(block 1285) failed [ 1092.989905][T13529] FAT-fs (loop4): FAT read failed (blocknr 1281) [ 1093.003817][ T42] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1093.029828][T13531] loop6: detected capacity change from 0 to 512 [ 1093.049892][T13531] EXT4-fs: Ignoring removed mblk_io_submit option [ 1093.092168][T13531] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2244: inode #15: comm syz.6.1633: corrupted in-inode xattr: overlapping e_value [ 1093.125348][T13531] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.1633: couldn't read orphan inode 15 (err -117) [ 1093.144773][T13531] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.172652][T13531] EXT4-fs error (device loop6): ext4_add_entry:2486: inode #2: comm syz.6.1633: Directory hole found for htree leaf block 0 [ 1093.279590][T13525] loop8: detected capacity change from 0 to 32768 [ 1093.288737][T13525] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1630 (13525) [ 1093.314024][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1093.332234][T13525] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1093.343547][T13525] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1093.352279][T13525] BTRFS info (device loop8): setting nodatacow, compression disabled [ 1093.374414][T13525] BTRFS info (device loop8): max_inline at 0 [ 1093.380453][T13525] BTRFS info (device loop8): turning off barriers [ 1093.391825][T13525] BTRFS info (device loop8): force zlib compression, level 3 [ 1093.404533][T13525] BTRFS info (device loop8): doing ref verification [ 1093.411167][T13525] BTRFS info (device loop8): force clearing of disk cache [ 1093.427792][T13525] BTRFS info (device loop8): enabling ssd optimizations [ 1093.445377][T13525] BTRFS info (device loop8): max_inline at 4096 [ 1093.451658][T13525] BTRFS info (device loop8): using free space tree [ 1093.521304][T13547] netlink: 'syz.4.1636': attribute type 11 has an invalid length. [ 1093.584331][T13525] BTRFS info (device loop8): auto enabling async discard [ 1093.613828][T13525] BTRFS info (device loop8): rebuilding free space tree [ 1093.666066][T13560] loop4: detected capacity change from 0 to 256 [ 1093.915145][T13527] loop7: detected capacity change from 0 to 40427 [ 1093.928886][T13527] F2FS-fs (loop7): Invalid Fs Meta Ino: node(3) meta(0) root(3) [ 1093.953594][T13527] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock [ 1093.979471][T13527] F2FS-fs (loop7): heap/no_heap options were deprecated [ 1093.988817][T11509] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1094.006411][T13527] F2FS-fs (loop7): invalid crc value [ 1094.019466][T13527] F2FS-fs (loop7): Found nat_bits in checkpoint [ 1094.080340][T13527] F2FS-fs (loop7): Start checkpoint disabled! [ 1094.108994][T13527] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0 [ 1094.131326][T13527] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 1094.367768][T13572] loop8: detected capacity change from 0 to 256 [ 1094.411937][T13572] exFAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1094.433824][T13572] exFAT-fs (loop8): Medium has reported failures. Some data may be lost. [ 1094.468481][T13572] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1094.520007][T10814] kworker/u4:14: attempt to access beyond end of device [ 1094.520007][T10814] loop7: rw=2049, sector=40960, nr_sectors = 24 limit=40427 [ 1094.555674][T10814] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1094.570447][T10814] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1094.580462][T10814] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 1094.641084][T13574] loop4: detected capacity change from 0 to 4096 [ 1094.685967][T13574] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1094.771666][T13574] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1644: corrupted inode contents [ 1094.842961][T13574] EXT4-fs error (device loop4): ext4_dirty_inode:6106: inode #15: comm syz.4.1644: mark_inode_dirty error [ 1094.872512][T13578] loop6: detected capacity change from 0 to 4096 [ 1094.885469][T13574] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1644: corrupted inode contents [ 1094.902634][T13578] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1094.922700][T13574] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1644: mark_inode_dirty error [ 1094.978350][T13574] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1644: corrupted inode contents [ 1094.993658][T13578] ntfs3: loop6: Mark volume as dirty due to NTFS errors [ 1095.010315][T13574] EXT4-fs error (device loop4): __ext4_ext_dirty:202: inode #15: comm syz.4.1644: mark_inode_dirty error [ 1095.024725][T13574] EXT4-fs error (device loop4): ext4_do_update_inode:5230: inode #15: comm syz.4.1644: corrupted inode contents [ 1095.051509][ T27] kauditd_printk_skb: 1444 callbacks suppressed [ 1095.051524][ T27] audit: type=1800 audit(2000000047.320:1505): pid=13578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1646" name="file0" dev="loop6" ino=0 res=0 errno=0 [ 1095.061375][T13577] loop8: detected capacity change from 0 to 32768 [ 1095.094709][T13574] EXT4-fs error (device loop4): ext4_truncate:4288: inode #15: comm syz.4.1644: mark_inode_dirty error [ 1095.115259][T13574] EXT4-fs error (device loop4) in ext4_setattr:5645: Corrupt filesystem [ 1095.157284][T13577] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1095.209081][T13574] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1095.320169][T13577] XFS (loop8): Ending clean mount [ 1095.340635][T13577] XFS (loop8): Quotacheck needed: Please wait. [ 1095.986639][T13577] XFS (loop8): Quotacheck: Done. [ 1096.104974][T11509] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1096.194542][ T5879] usb 5-1: new low-speed USB device number 18 using dummy_hcd [ 1096.405608][ T5879] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 1096.433344][ T5879] usb 5-1: config 0 has no interface number 0 [ 1096.443206][ T5879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1096.467129][ T5879] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 1096.512239][ T5879] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1096.532266][ T5879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1096.566858][ T5879] usb 5-1: config 0 descriptor?? [ 1096.581515][T13597] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1096.600678][ T5879] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 1097.052518][ T787] usb 5-1: USB disconnect, device number 18 [ 1097.394673][T13603] loop7: detected capacity change from 0 to 32768 [ 1097.409086][T13603] (syz.7.1651,13603,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1097.449788][T13603] (syz.7.1651,13603,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1097.494619][T13603] JBD2: Ignoring recovery information on journal [ 1097.544230][T13610] loop6: detected capacity change from 0 to 164 [ 1097.551431][T13603] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1097.556668][T13613] loop8: detected capacity change from 0 to 256 [ 1097.895586][ T50] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 1098.500973][T13620] loop8: detected capacity change from 0 to 32768 [ 1098.508888][ T9891] ocfs2: Unmounting device (7,7) on (node local) [ 1098.558238][T13620] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1098.621011][T13620] XFS (loop8): Ending clean mount [ 1098.630515][T13620] XFS (loop8): Quotacheck needed: Please wait. [ 1098.730601][T13620] XFS (loop8): Quotacheck: Done. [ 1099.554634][T11509] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 1099.761366][T13632] loop4: detected capacity change from 0 to 40427 [ 1099.796007][T13632] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1099.806543][T13632] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1099.822103][T13632] F2FS-fs (loop4): invalid crc_offset: 33558524 [ 1099.848335][T13632] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1099.942648][T13642] loop6: detected capacity change from 0 to 32768 [ 1099.972267][T13642] (syz.6.1663,13642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1099.993735][T13632] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1099.996107][T13642] (syz.6.1663,13642,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1100.011029][T13632] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1100.054369][T13642] JBD2: Ignoring recovery information on journal [ 1100.120528][T13642] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1100.183802][T13632] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 1100.208969][T13632] F2FS-fs (loop4): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix. [ 1100.480440][ T50] Bluetooth: Unknown LE signaling command 0x90 [ 1100.487960][ T50] Bluetooth: Wrong link type (-22) [ 1100.523558][ T9890] ocfs2: Unmounting device (7,6) on (node local) [ 1100.732912][T13677] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1675'. [ 1101.428143][T13683] syzkaller0: tun_chr_ioctl cmd 2148553947 [ 1101.679642][T13690] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1678'. [ 1101.967748][T13673] loop8: detected capacity change from 0 to 40427 [ 1102.006597][T13673] F2FS-fs (loop8): Invalid log_blocksize (268), supports only 12 [ 1102.035180][T13673] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1102.117355][T13673] F2FS-fs (loop8): invalid crc value [ 1102.170889][ T5879] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 1102.200468][T13673] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1102.357927][ T23] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1102.443813][ T5879] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1102.494665][ T5879] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1102.558693][T13673] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0 [ 1102.586994][ T5879] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1102.604504][T13673] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1102.613813][ T23] usb 7-1: Using ep0 maxpacket: 8 [ 1102.665392][ T23] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1102.721501][ T5879] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1102.769395][ T23] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 1102.810786][ T5879] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1102.828765][ T23] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1102.877896][ T5879] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1102.886581][ T23] usb 7-1: config 0 descriptor?? [ 1102.917128][ T5879] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1102.928138][ T5879] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1102.939762][ T5879] usb 5-1: Product: syz [ 1102.950079][ T5879] usb 5-1: Manufacturer: syz [ 1102.955890][ T5879] usb 5-1: SerialNumber: syz [ 1102.970558][ T5879] usb 5-1: config 0 descriptor?? [ 1102.985367][T13699] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1102.995379][ T5879] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1103.008071][ T5879] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1103.125813][ T23] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior1 [ 1103.363972][T13723] tipc: Enabling of bearer rejected, failed to enable media [ 1103.430202][ T23] usb 5-1: USB disconnect, device number 19 [ 1103.449348][ T23] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1104.350074][T13737] bond0: entered promiscuous mode [ 1104.356667][T13737] bond_slave_0: entered promiscuous mode [ 1104.362616][T13737] bond_slave_1: entered promiscuous mode [ 1104.371977][T13737] batadv_slave_0: entered promiscuous mode [ 1104.389160][T13737] hsr1: entered promiscuous mode [ 1104.598266][T13747] loop8: detected capacity change from 0 to 64 [ 1104.609541][T13747] hfs: unable to locate alternate MDB [ 1104.618919][T13747] hfs: continuing without an alternate MDB [ 1104.661866][T13750] loop7: detected capacity change from 0 to 8 [ 1104.718299][T13750] SQUASHFS error: xz decompression failed, data probably corrupt [ 1104.739536][T13750] SQUASHFS error: Failed to read block 0x108: -5 [ 1104.752592][T13750] SQUASHFS error: Unable to read metadata cache entry [106] [ 1104.772938][T13750] SQUASHFS error: Unable to read inode 0x0 [ 1105.927755][ T23] usb 7-1: USB disconnect, device number 19 [ 1106.255558][T13782] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1712'. [ 1106.273629][T13782] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1712'. [ 1106.285519][T13782] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1712'. [ 1106.296703][T13782] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1712'. [ 1106.483500][ T9] usb 8-1: new high-speed USB device number 18 using dummy_hcd [ 1108.135041][T13809] vlan2: entered allmulticast mode [ 1108.140201][T13809] veth1: entered allmulticast mode [ 1108.185550][ T9] usb 8-1: config 0 has an invalid interface number: 255 but max is 0 [ 1108.198178][ T9] usb 8-1: config 0 has no interface number 0 [ 1108.213721][ T9] usb 8-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1108.244335][ T9] usb 8-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1108.262819][ T9] usb 8-1: config 0 interface 255 has no altsetting 0 [ 1108.270114][ T9] usb 8-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1108.279373][ T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1108.289768][ T9] usb 8-1: config 0 descriptor?? [ 1108.298481][ T9] ums-realtek 8-1:0.255: USB Mass Storage device detected [ 1108.431116][T13822] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1727'. [ 1108.505589][ T9] usb 8-1: USB disconnect, device number 18 [ 1108.908873][T13830] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1730'. [ 1108.918420][T13830] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1730'. [ 1108.930735][T13830] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1730'. [ 1108.944323][T13830] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1730'. [ 1109.141636][T13839] mac80211_hwsim hwsim10 wlan0: entered promiscuous mode [ 1109.152490][T13839] macsec2: entered promiscuous mode [ 1109.161288][T13839] macsec2: entered allmulticast mode [ 1109.174511][T13839] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 1109.292317][T13845] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1737'. [ 1109.373637][ T9] usb 9-1: new full-speed USB device number 10 using dummy_hcd [ 1109.571081][ T9] usb 9-1: config index 0 descriptor too short (expected 156, got 27) [ 1109.600028][ T9] usb 9-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1109.619289][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 10 [ 1109.642002][ T9] usb 9-1: config 0 interface 0 altsetting 191 endpoint 0x87 has invalid maxpacket 255, setting to 64 [ 1109.666233][ T9] usb 9-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1109.690268][ T9] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1109.711724][ T9] usb 9-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1109.721484][ T9] usb 9-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1109.730276][ T9] usb 9-1: Product: syz [ 1109.744237][ T9] usb 9-1: Manufacturer: syz [ 1109.749017][ T9] usb 9-1: SerialNumber: syz [ 1109.765913][ T9] usb 9-1: config 0 descriptor?? [ 1109.771658][T13836] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22 [ 1109.790677][ T9] ldusb 9-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1109.801788][ T9] ldusb 9-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1110.655458][ T23] usb 9-1: USB disconnect, device number 10 [ 1110.759210][ T23] ldusb 9-1:0.0: LD USB Device #0 now disconnected [ 1111.468551][T13891] mac80211_hwsim hwsim15 wlan0: entered promiscuous mode [ 1111.478123][T13891] macsec2: entered promiscuous mode [ 1111.491016][T13891] macsec2: entered allmulticast mode [ 1111.497191][T13891] mac80211_hwsim hwsim15 wlan0: entered allmulticast mode [ 1113.078897][T13909] __nla_validate_parse: 5 callbacks suppressed [ 1113.078911][T13909] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1763'. [ 1113.396855][T13920] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1769'. [ 1113.460318][T13920] nbd: socks must be embedded in a SOCK_ITEM attr [ 1114.402259][T13913] loop4: detected capacity change from 0 to 40427 [ 1114.430605][T13913] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x7ffff [ 1114.444294][T13913] F2FS-fs (loop4): Image doesn't support compression [ 1114.451676][T13913] F2FS-fs (loop4): Image doesn't support compression [ 1114.463715][T13913] F2FS-fs (loop4): invalid crc value [ 1114.561536][T13913] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1114.659982][T13913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1115.490079][ T9896] syz-executor: attempt to access beyond end of device [ 1115.490079][ T9896] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1115.535536][ T9896] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1115.978371][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.314059][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.673598][ T786] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1116.885396][ T786] usb 7-1: config 0 has an invalid interface number: 255 but max is 0 [ 1116.901393][ T786] usb 7-1: config 0 has no interface number 0 [ 1116.914452][ T786] usb 7-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1116.938210][ T786] usb 7-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1116.962093][ T786] usb 7-1: config 0 interface 255 has no altsetting 0 [ 1116.969263][ T786] usb 7-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1116.983916][ T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1116.995372][ T786] usb 7-1: config 0 descriptor?? [ 1117.002825][ T786] ums-realtek 7-1:0.255: USB Mass Storage device detected [ 1117.607727][ T787] usb 7-1: USB disconnect, device number 20 [ 1118.575420][T13978] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1786'. [ 1118.615032][T13978] nbd: socks must be embedded in a SOCK_ITEM attr [ 1118.717166][T13983] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1788'. [ 1119.821217][T13991] loop6: detected capacity change from 0 to 40427 [ 1119.829994][T13991] F2FS-fs (loop6): build fault injection attr: rate: 690, type: 0x7ffff [ 1119.838467][T13991] F2FS-fs (loop6): Image doesn't support compression [ 1119.845364][T13991] F2FS-fs (loop6): Image doesn't support compression [ 1119.855653][T13991] F2FS-fs (loop6): invalid crc value [ 1119.886696][T13991] F2FS-fs (loop6): Found nat_bits in checkpoint [ 1119.965769][ T50] Bluetooth: hci2: ACL packet for unknown connection handle 200 [ 1119.985865][T13991] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 1120.108489][ T9890] syz-executor: attempt to access beyond end of device [ 1120.108489][ T9890] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1120.108600][ T9890] F2FS-fs (loop6): Stopped filesystem due to reason: 3 [ 1120.905964][ T787] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 1121.089686][ T787] usb 5-1: config 0 has an invalid interface number: 255 but max is 0 [ 1121.089712][ T787] usb 5-1: config 0 has no interface number 0 [ 1121.089738][ T787] usb 5-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30 [ 1121.089770][ T787] usb 5-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 1121.089793][ T787] usb 5-1: config 0 interface 255 has no altsetting 0 [ 1121.089830][ T787] usb 5-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b [ 1121.089852][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.092191][ T787] usb 5-1: config 0 descriptor?? [ 1121.122683][ T787] ums-realtek 5-1:0.255: USB Mass Storage device detected [ 1121.356218][ T787] usb 5-1: USB disconnect, device number 20 [ 1121.356437][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1800'. [ 1121.399779][T14025] nbd: socks must be embedded in a SOCK_ITEM attr [ 1122.282606][T14039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1808'. [ 1122.536269][T14028] loop6: detected capacity change from 0 to 32768 [ 1122.592946][T14028] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.700674][T14037] loop8: detected capacity change from 0 to 40427 [ 1122.704903][T14028] XFS (loop6): Ending clean mount [ 1122.707722][ T787] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1122.729815][T14037] F2FS-fs (loop8): build fault injection attr: rate: 690, type: 0x7ffff [ 1122.753750][T14028] XFS (loop6): Quotacheck needed: Please wait. [ 1122.756373][T14037] F2FS-fs (loop8): Image doesn't support compression [ 1122.771028][T14037] F2FS-fs (loop8): Image doesn't support compression [ 1122.783662][T14037] F2FS-fs (loop8): invalid crc value [ 1122.807776][T14028] XFS (loop6): Quotacheck: Done. [ 1122.808773][T14037] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1122.872460][T14037] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1122.881098][ T9890] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 1122.905444][ T787] usb 5-1: config 0 has an invalid interface number: 239 but max is 0 [ 1122.914388][ T787] usb 5-1: config 0 has no interface number 0 [ 1122.920538][ T787] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1122.932052][ T787] usb 5-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 1122.947097][ T787] usb 5-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1122.956677][ T787] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.957120][T11509] syz-executor: attempt to access beyond end of device [ 1122.957120][T11509] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1122.972895][ T787] usb 5-1: Product: syz [ 1122.980150][T11509] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1123.003810][ T787] usb 5-1: Manufacturer: syz [ 1123.013950][ T787] usb 5-1: SerialNumber: syz [ 1123.022502][ T787] usb 5-1: config 0 descriptor?? [ 1123.029126][T14041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.036981][T14041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.262452][T14041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.270343][T14041] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1123.284215][T14060] loop8: detected capacity change from 0 to 256 [ 1123.291372][T14060] exfat: Deprecated parameter 'namecase' [ 1123.317574][T14060] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d) [ 1123.361370][T14062] loop7: detected capacity change from 0 to 512 [ 1123.369285][T14062] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1123.379887][T14062] EXT4-fs (loop7): Cannot turn on journaled quota: type 0: error -2 [ 1123.388885][T14062] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 1123.402050][T14062] EXT4-fs (loop7): 1 truncate cleaned up [ 1123.412856][T14062] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.457670][T14066] loop8: detected capacity change from 0 to 1024 [ 1123.466304][T14066] EXT4-fs: Ignoring removed oldalloc option [ 1123.472302][T14066] EXT4-fs: Ignoring removed orlov option [ 1123.479324][T14066] EXT4-fs (loop8): stripe (2) is not aligned with cluster size (16), stripe is disabled [ 1123.492970][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.528193][T14066] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1123.569862][T14066] EXT4-fs: Ignoring removed orlov option [ 1123.578545][T14066] EXT4-fs (loop8): can't enable nombcache during remount [ 1123.612954][T11509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1123.721818][ T787] asix 5-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1123.732861][T14072] loop8: detected capacity change from 0 to 64 [ 1123.739184][ T787] asix: probe of 5-1:0.239 failed with error -71 [ 1123.747473][ T787] usb 5-1: USB disconnect, device number 21 [ 1123.912209][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1123.958587][T14083] loop8: detected capacity change from 0 to 256 [ 1124.014489][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1124.291666][T14085] loop8: detected capacity change from 0 to 4096 [ 1124.401701][T14085] ntfs3: loop8: Mark volume as dirty due to NTFS errors [ 1124.419766][T14082] loop7: detected capacity change from 0 to 32768 [ 1124.429046][T14082] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 scanned by syz.7.1830 (14082) [ 1124.447361][T14082] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1124.458191][T14082] BTRFS info (device loop7): using sha256 (sha256-avx2) checksum algorithm [ 1124.477124][T14082] BTRFS info (device loop7): enabling disk space caching [ 1124.487331][T14082] BTRFS info (device loop7): enabling auto defrag [ 1124.502693][T14082] BTRFS info (device loop7): doing ref verification [ 1124.512601][T14082] BTRFS info (device loop7): use no compression [ 1124.523556][T14082] BTRFS info (device loop7): force clearing of disk cache [ 1124.523677][T14087] tipc: Started in network mode [ 1124.534782][T14082] BTRFS info (device loop7): setting nodatacow, compression disabled [ 1124.552791][T14087] tipc: Node identity 5f00000000000000faffffffffffffff, cluster identity 4711 [ 1124.572341][T11509] ntfs3: loop8: ino=9, ntfs_sync_fs failed, -22. [ 1124.573048][T14082] BTRFS info (device loop7): turning on sync discard [ 1124.601367][T14082] BTRFS warning (device loop7): the 'inode_cache' option is deprecated and has no effect since 5.11 [ 1124.608986][T14089] loop4: detected capacity change from 0 to 1024 [ 1124.615365][T14082] BTRFS info (device loop7): disk space caching is enabled [ 1124.652002][T14089] EXT4-fs (loop4): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.687167][T14098] loop8: detected capacity change from 0 to 8 [ 1124.721989][T14098] SQUASHFS error: Unable to read inode 0xe3 [ 1124.764117][T14108] loop6: detected capacity change from 0 to 1024 [ 1124.770931][ T9896] EXT4-fs (loop4): unmounting filesystem 00000000-0500-0000-0000-000000000000. [ 1124.778172][T14082] BTRFS info (device loop7): enabling ssd optimizations [ 1124.818604][T14108] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1124.831432][T14108] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1124.873641][T14082] BTRFS info (device loop7: state M): doing ref verification [ 1124.889047][T14082] BTRFS info (device loop7: state M): use no compression [ 1124.896509][T14082] BTRFS info (device loop7: state M): force clearing of disk cache [ 1124.904567][T14082] BTRFS error (device loop7: state M): unrecognized mount option 'nodhdr_len not found' [ 1124.960703][ T9891] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 1124.978337][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1125.132527][T14121] loop6: detected capacity change from 0 to 128 [ 1125.163915][ T787] usb 9-1: new full-speed USB device number 11 using dummy_hcd [ 1125.340855][T14123] loop6: detected capacity change from 0 to 128 [ 1125.355013][ T787] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1125.387776][ T787] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1125.389234][T14123] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1125.423971][T14125] loop7: detected capacity change from 0 to 1024 [ 1125.434668][ T787] usb 9-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1125.440854][ T12] hfsplus: b-tree write err: -5, ino 4 [ 1125.451627][T14123] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1125.452683][ T787] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1125.469961][ T787] usb 9-1: Product: syz [ 1125.475133][ T787] usb 9-1: Manufacturer: syz [ 1125.479748][ T787] usb 9-1: SerialNumber: syz [ 1125.583500][T14129] loop4: detected capacity change from 0 to 128 [ 1125.598134][T14129] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1125.610912][T14129] ext4 filesystem being mounted at /259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1125.710928][ T787] usb 9-1: 0:2 : does not exist [ 1125.719311][T14129] EXT4-fs error (device loop4): htree_dirblock_to_tree:1112: inode #2: block 4: comm syz.4.1835: bad entry in directory: rec_len is smaller than minimal - offset=1012, inode=128, rec_len=9, size=1024 fake=0 [ 1125.752787][ T787] usb 9-1: 5:0: failed to get current value for ch 0 (-22) [ 1125.771467][T14129] EXT4-fs (loop4): Remounting filesystem read-only [ 1125.788051][ T787] usb 9-1: USB disconnect, device number 11 [ 1125.832134][ T9896] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1125.833641][ T8] usb 7-1: new low-speed USB device number 21 using dummy_hcd [ 1125.942792][T14133] loop7: detected capacity change from 0 to 32768 [ 1125.950772][T14133] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop7 scanned by syz.7.1836 (14133) [ 1125.966267][T14133] BTRFS info (device loop7): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1125.977112][T14133] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm [ 1125.986851][T14133] BTRFS info (device loop7): using free space tree [ 1126.010936][T14133] BTRFS info (device loop7): enabling ssd optimizations [ 1126.018972][T14133] BTRFS info (device loop7): auto enabling async discard [ 1126.045938][ T8] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 1126.058112][ T8] usb 7-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1126.078343][ T8] usb 7-1: config 0 interface 0 has no altsetting 0 [ 1126.087579][ T8] usb 7-1: New USB device found, idVendor=04d9, idProduct=a067, bcdDevice= 0.00 [ 1126.088221][ T9891] BTRFS info (device loop7): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1126.100810][ T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.167719][ T8] usb 7-1: config 0 descriptor?? [ 1126.399972][T14152] tipc: Invalid UDP bearer configuration [ 1126.400022][T14152] tipc: Enabling of bearer rejected, failed to enable media [ 1126.414321][ T786] usb 5-1: new full-speed USB device number 22 using dummy_hcd [ 1126.592248][ T8] holtek_mouse 0003:04D9:A067.001D: bogus close delimiter [ 1126.601386][ T8] holtek_mouse 0003:04D9:A067.001D: item 0 2 2 10 parsing failed [ 1126.610128][ T786] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 1126.610417][ T8] holtek_mouse 0003:04D9:A067.001D: hid parse failed: -22 [ 1126.628437][ T786] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1126.628734][ T8] holtek_mouse: probe of 0003:04D9:A067.001D failed with error -22 [ 1126.648200][ T786] usb 5-1: config 0 descriptor?? [ 1126.656362][ T786] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 1126.793344][ T28] usb 9-1: new high-speed USB device number 12 using dummy_hcd [ 1126.813265][ T5879] usb 8-1: new high-speed USB device number 19 using dummy_hcd [ 1126.842010][ T8] usb 7-1: USB disconnect, device number 21 [ 1127.003366][ T28] usb 9-1: Using ep0 maxpacket: 16 [ 1127.010532][ T28] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.021931][ T28] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1127.031737][ T5879] usb 8-1: Using ep0 maxpacket: 16 [ 1127.037109][ T28] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1127.050909][ T28] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1127.060307][ T28] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.069180][ T5879] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1127.082855][ T28] usb 9-1: config 0 descriptor?? [ 1127.088880][ T5879] usb 8-1: New USB device found, idVendor=05ac, idProduct=027c, bcdDevice= 0.00 [ 1127.098544][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1127.112571][ T5879] usb 8-1: config 0 descriptor?? [ 1127.273065][ T786] gp8psk: usb in 138 operation failed. [ 1127.278593][ T786] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 1127.291418][ T786] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 1127.302863][ T786] usb 5-1: USB disconnect, device number 22 [ 1127.465902][T14160] loop6: detected capacity change from 0 to 4096 [ 1127.474045][T14160] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512). [ 1127.510802][T14160] ntfs3: loop6: Failed to initialize $Extend/$Reparse. [ 1127.525033][ T28] microsoft 0003:045E:07DA.001E: unknown main item tag 0x2 [ 1127.543466][ T28] microsoft 0003:045E:07DA.001E: item fetching failed at offset 30/34 [ 1127.552103][ T28] microsoft 0003:045E:07DA.001E: parse failed [ 1127.563272][ T5879] apple 0003:05AC:027C.001F: hidraw0: USB HID v0.05 Device [HID 05ac:027c] on usb-dummy_hcd.7-1/input0 [ 1127.582757][ T28] microsoft: probe of 0003:045E:07DA.001E failed with error -22 [ 1127.761945][ T28] usb 9-1: USB disconnect, device number 12 [ 1127.781277][ T5879] usb 8-1: USB disconnect, device number 19 [ 1127.910790][T14171] loop6: detected capacity change from 0 to 256 [ 1127.932329][T14173] loop4: detected capacity change from 0 to 8 [ 1127.936999][T14171] FAT-fs (loop6): Directory bread(block 64) failed [ 1127.945567][T14171] FAT-fs (loop6): Directory bread(block 65) failed [ 1127.952197][T14171] FAT-fs (loop6): Directory bread(block 66) failed [ 1127.959301][T14171] FAT-fs (loop6): Directory bread(block 67) failed [ 1127.970726][T14171] FAT-fs (loop6): Directory bread(block 68) failed [ 1127.977946][T14171] FAT-fs (loop6): Directory bread(block 69) failed [ 1127.985008][T14171] FAT-fs (loop6): Directory bread(block 70) failed [ 1127.991800][T14171] FAT-fs (loop6): Directory bread(block 71) failed [ 1127.999739][T14171] FAT-fs (loop6): Directory bread(block 72) failed [ 1128.010804][T14171] FAT-fs (loop6): Directory bread(block 73) failed [ 1128.048023][T14175] loop4: detected capacity change from 0 to 1024 [ 1128.091164][T14171] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 1128.136320][ T3541] hfsplus: b-tree write err: -5, ino 4 [ 1128.380268][T14183] loop6: detected capacity change from 0 to 2048 [ 1128.390862][T14183] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1128.408825][T14183] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1128.706395][T14189] loop6: detected capacity change from 0 to 2048 [ 1128.734485][T14189] EXT4-fs: Ignoring removed mblk_io_submit option [ 1128.761356][T14180] loop4: detected capacity change from 0 to 32768 [ 1128.772784][T14189] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1128.825416][T14189] EXT4-fs error (device loop6): ext4_validate_block_bitmap:439: comm syz.6.1854: bg 0: block 234: padding at end of block bitmap is not set [ 1128.845100][T14180] XFS (loop4): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1128.880176][T14189] EXT4-fs (loop6): Remounting filesystem read-only [ 1128.905086][T14185] loop8: detected capacity change from 0 to 32768 [ 1128.926834][T14185] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by syz.8.1853 (14185) [ 1128.961069][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.972419][T14185] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1129.008881][T14180] XFS (loop4): Ending clean mount [ 1129.016278][T14185] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 1129.066429][T14185] BTRFS info (device loop8): metadata ratio 2 [ 1129.089640][T14185] BTRFS info (device loop8): allowing degraded mounts [ 1129.110379][T14185] BTRFS info (device loop8): force zlib compression, level 3 [ 1129.130635][T14185] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 1129.154934][T14185] BTRFS info (device loop8): use zstd compression, level 3 [ 1129.163660][T14185] BTRFS info (device loop8): force clearing of disk cache [ 1129.171863][T14185] BTRFS info (device loop8): max_inline at 0 [ 1129.176328][ T9896] XFS (loop4): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 1129.193501][T14185] BTRFS info (device loop8): using free space tree [ 1129.195807][T14187] loop7: detected capacity change from 0 to 32768 [ 1129.291480][T14187] XFS (loop7): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1129.386897][T14187] XFS (loop7): Ending clean mount [ 1129.387357][T14185] BTRFS info (device loop8): enabling ssd optimizations [ 1129.445249][T14185] BTRFS info (device loop8): rebuilding free space tree [ 1129.483911][T14227] loop4: detected capacity change from 0 to 256 [ 1129.519106][ T9891] XFS (loop7): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1129.551546][T14227] FAT-fs (loop4): Directory bread(block 64) failed [ 1129.559070][T14227] FAT-fs (loop4): Directory bread(block 65) failed [ 1129.573674][T14227] FAT-fs (loop4): Directory bread(block 66) failed [ 1129.604987][T14227] FAT-fs (loop4): Directory bread(block 67) failed [ 1129.612361][T11509] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1129.619288][T14227] FAT-fs (loop4): Directory bread(block 68) failed [ 1129.643101][T14227] FAT-fs (loop4): Directory bread(block 69) failed [ 1129.671940][T14227] FAT-fs (loop4): Directory bread(block 70) failed [ 1129.703467][T14227] FAT-fs (loop4): Directory bread(block 71) failed [ 1129.710135][T14227] FAT-fs (loop4): Directory bread(block 72) failed [ 1129.763051][T14227] FAT-fs (loop4): Directory bread(block 73) failed [ 1130.028923][T14231] loop7: detected capacity change from 0 to 512 [ 1130.107389][T14234] loop8: detected capacity change from 0 to 256 [ 1130.125043][T14231] EXT4-fs (loop7): revision level too high, forcing read-only mode [ 1130.129853][T14234] FAT-fs (loop8): Directory bread(block 64) failed [ 1130.140189][T14234] FAT-fs (loop8): Directory bread(block 65) failed [ 1130.143109][T14231] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002] [ 1130.147265][T14234] FAT-fs (loop8): Directory bread(block 66) failed [ 1130.163710][T14234] FAT-fs (loop8): Directory bread(block 67) failed [ 1130.170318][T14234] FAT-fs (loop8): Directory bread(block 68) failed [ 1130.183343][T14234] FAT-fs (loop8): Directory bread(block 69) failed [ 1130.187213][T14231] System zones: 0-1, 15-15, 18-18, 34-34 [ 1130.199817][T14234] FAT-fs (loop8): Directory bread(block 70) failed [ 1130.211651][T14234] FAT-fs (loop8): Directory bread(block 71) failed [ 1130.219126][T14234] FAT-fs (loop8): Directory bread(block 72) failed [ 1130.226228][T14234] FAT-fs (loop8): Directory bread(block 73) failed [ 1130.238000][T14231] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1130.253169][T14231] Quota error (device loop7): v2_read_header: Failed header read: expected=8 got=0 [ 1130.292187][T14231] EXT4-fs warning (device loop7): ext4_enable_quotas:7173: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix. [ 1130.337048][T14231] EXT4-fs (loop7): Cannot turn on quotas: error -22 [ 1130.353547][T14231] EXT4-fs error (device loop7): ext4_validate_block_bitmap:439: comm syz.7.1857: bg 0: block 40: padding at end of block bitmap is not set [ 1130.412166][T14231] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6642: Corrupt filesystem [ 1130.454234][T14231] EXT4-fs (loop7): 1 truncate cleaned up [ 1130.461594][T14231] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1130.481747][T14229] loop6: detected capacity change from 0 to 32768 [ 1130.507416][T14229] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop6 scanned by syz.6.1866 (14229) [ 1130.528507][T14229] BTRFS info (device loop6): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1130.538805][T14229] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm [ 1130.549732][T14229] BTRFS info (device loop6): using free space tree [ 1130.586861][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.593459][T14229] BTRFS info (device loop6): enabling ssd optimizations [ 1130.603981][T14229] BTRFS info (device loop6): auto enabling async discard [ 1130.659722][T14258] loop7: detected capacity change from 0 to 512 [ 1130.672427][T14258] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.1860: iget: bad i_size value: 38620345925642 [ 1130.686774][T14258] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.1860: couldn't read orphan inode 15 (err -117) [ 1130.700798][T14258] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1130.713700][ T8] usb 9-1: new high-speed USB device number 13 using dummy_hcd [ 1130.721672][ T9890] BTRFS info (device loop6): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1130.831295][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1130.906444][ T8] usb 9-1: Using ep0 maxpacket: 16 [ 1130.918242][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1130.931927][ T8] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1130.962110][ T8] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1131.510006][ T8] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1131.519799][ T8] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1131.530831][ T8] usb 9-1: config 0 descriptor?? [ 1131.637801][T14270] loop6: detected capacity change from 0 to 256 [ 1131.797224][T14272] loop7: detected capacity change from 0 to 128 [ 1131.825275][T14272] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1131.843744][T14274] loop6: detected capacity change from 0 to 1024 [ 1131.845018][T14272] System zones: 1-3, 19-19, 35-36 [ 1131.851132][T14274] EXT4-fs: Ignoring removed nobh option [ 1131.861940][T14274] EXT4-fs: Ignoring removed bh option [ 1131.868421][T14274] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1131.869768][T14272] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1131.900153][T14272] ext4 filesystem being mounted at /281/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1131.946676][T14274] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1131.981357][T14274] EXT4-fs warning (device loop6): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 1132.020755][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1132.024851][ T8] hid_map_usage: 4377 callbacks suppressed [ 1132.024863][ T8] HID 045e:07da: Invalid code 65791 type 1 [ 1132.047191][ T9891] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1132.049354][ T8] HID 045e:07da: Invalid code 768 type 1 [ 1132.085206][ T8] HID 045e:07da: Invalid code 769 type 1 [ 1132.090888][ T8] HID 045e:07da: Invalid code 770 type 1 [ 1132.106651][ T8] HID 045e:07da: Invalid code 771 type 1 [ 1132.112326][ T8] HID 045e:07da: Invalid code 772 type 1 [ 1132.118748][ T787] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 1132.148594][ T8] HID 045e:07da: Invalid code 773 type 1 [ 1132.158869][T14283] loop7: detected capacity change from 0 to 2048 [ 1132.160949][ T8] HID 045e:07da: Invalid code 774 type 1 [ 1132.172290][T14283] UDF-fs: error (device loop7): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1132.173745][ T8] HID 045e:07da: Invalid code 775 type 1 [ 1132.189229][ T8] HID 045e:07da: Invalid code 776 type 1 [ 1132.193999][T14283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1132.491274][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1132.705497][ T8] input: HID 045e:07da as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/0003:045E:07DA.0020/input/input14 [ 1132.725530][ T787] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1132.736895][ T787] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1132.750814][ T787] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1132.760652][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1132.772300][ T787] usb 5-1: config 0 descriptor?? [ 1132.812716][ T8] microsoft 0003:045E:07DA.0020: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0 [ 1132.842530][ T8] usb 9-1: USB disconnect, device number 13 [ 1133.236681][ T787] plantronics 0003:047F:FFFF.0021: invalid report_size 2068630588 [ 1133.264306][ T787] plantronics 0003:047F:FFFF.0021: item 0 4 1 7 parsing failed [ 1133.272582][ T787] plantronics 0003:047F:FFFF.0021: parse failed [ 1133.297330][ T787] plantronics: probe of 0003:047F:FFFF.0021 failed with error -22 [ 1133.978382][ T787] usb 5-1: USB disconnect, device number 23 [ 1134.304891][T14313] loop6: detected capacity change from 0 to 1024 [ 1134.998425][T14319] loop4: detected capacity change from 0 to 1024 [ 1135.034336][T14319] EXT4-fs: Ignoring removed nobh option [ 1135.044638][T14319] EXT4-fs: Ignoring removed bh option [ 1135.051095][T14319] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1135.695304][T14319] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.731784][T14319] EXT4-fs warning (device loop4): ext4_resize_begin:74: won't resize using backup superblock at 1 [ 1135.810977][T14312] loop8: detected capacity change from 0 to 32768 [ 1135.822049][ T9896] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1135.827742][T14312] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.1881 (14312) [ 1136.490910][T14312] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1136.554511][T14312] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1136.564726][T14312] BTRFS info (device loop8): using free space tree [ 1136.569501][T14331] loop6: detected capacity change from 0 to 128 [ 1136.596514][T14331] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a80ec018, mo2=0002] [ 1136.618975][T14331] System zones: 1-3, 19-19, 35-36 [ 1136.636486][T14331] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback. [ 1136.647391][T14312] BTRFS info (device loop8): enabling ssd optimizations [ 1136.663120][T14312] BTRFS info (device loop8): auto enabling async discard [ 1136.692023][T14331] ext4 filesystem being mounted at /262/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.712742][T14337] loop4: detected capacity change from 0 to 4096 [ 1136.772876][T14337] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1136.820461][ T9890] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1136.898878][T11509] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1137.133865][ T9896] ntfs3: loop4: ino=9, ntfs_sync_fs failed, -22. [ 1137.921918][T14365] loop8: detected capacity change from 0 to 2048 [ 1137.975089][T14365] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 1138.023054][ T27] audit: type=1326 audit(2000000090.290:1506): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.7.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95458e929 code=0x7ffc0000 [ 1138.069543][T14365] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1138.093788][ T27] audit: type=1326 audit(2000000090.290:1507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.7.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95458e929 code=0x7ffc0000 [ 1138.157873][ T27] audit: type=1326 audit(2000000090.330:1508): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.7.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=138 compat=0 ip=0x7fd95458e929 code=0x7ffc0000 [ 1138.178901][T14356] loop6: detected capacity change from 0 to 32768 [ 1138.211507][ T27] audit: type=1326 audit(2000000090.330:1509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14366 comm="syz.7.1893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd95458e929 code=0x7ffc0000 [ 1138.279724][T14370] loop7: detected capacity change from 0 to 512 [ 1138.314193][T14356] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1138.340431][T14372] loop8: detected capacity change from 0 to 4096 [ 1138.351796][T14372] ntfs3: loop8: Different NTFS sector size (4096) and media sector size (512). [ 1138.377480][T14370] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1138.399340][T14370] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002] [ 1138.407737][T14370] System zones: 0-2, 18-18, 34-34 [ 1138.419820][T14370] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1138.427809][T14372] ntfs3: loop8: Failed to initialize $Extend/$Reparse. [ 1138.470976][ T9890] ocfs2: Unmounting device (7,6) on (node local) [ 1138.499627][T14370] ext4 filesystem being mounted at /293/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1138.642017][T14361] loop4: detected capacity change from 0 to 40427 [ 1138.652012][T14361] F2FS-fs (loop4): build fault injection attr: rate: 771, type: 0x7ffff [ 1138.663674][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1138.705632][T14361] F2FS-fs (loop4): invalid crc value [ 1138.727045][T14361] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1139.843154][T14361] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1139.938310][T14391] loop8: detected capacity change from 0 to 128 [ 1139.938600][T14393] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1903'. [ 1139.980921][T14391] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1139.999585][ T27] audit: type=1800 audit(2000000092.270:1510): pid=14361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1889" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 1140.057398][T14391] FAT-fs (loop8): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 1140.067758][ T9896] syz-executor: attempt to access beyond end of device [ 1140.067758][ T9896] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1140.103645][ T9896] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1140.615158][T14395] loop6: detected capacity change from 0 to 32768 [ 1140.664413][T14395] ERROR: (device loop6): dbAllocAG: allocation request is larger than the allocation group size [ 1140.664413][T14395] [ 1140.688756][T14395] ERROR: (device loop6): remounting filesystem as read-only [ 1140.689746][T14410] netlink: 'syz.8.1909': attribute type 1 has an invalid length. [ 1140.713525][T14395] ERROR: (device loop6): dbDiscardAG: -EIO [ 1140.713525][T14395] [ 1141.423360][ T9879] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 1141.623848][ T9879] usb 5-1: Using ep0 maxpacket: 16 [ 1141.631691][ T9879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1141.679555][ T9879] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1141.689675][ T9879] usb 5-1: New USB device found, idVendor=05ac, idProduct=024b, bcdDevice= 0.00 [ 1141.713621][ T9879] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1141.744444][ T9879] usb 5-1: config 0 descriptor?? [ 1141.846904][T14420] loop6: detected capacity change from 0 to 32768 [ 1141.876088][T14420] [ 1141.876088][T14420] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1141.876088][T14420] [ 1141.909616][T14420] ERROR: (device loop6): diWrite: ixpxd invalid [ 1141.909616][T14420] [ 1141.920159][T14420] ERROR: (device loop6): txCommit: [ 1141.920159][T14420] [ 1141.992704][ T9890] [ 1141.992704][ T9890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1141.992704][ T9890] [ 1142.011016][ T9890] [ 1142.011016][ T9890] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 1142.011016][ T9890] [ 1142.162242][ T9879] apple 0003:05AC:024B.0022: unknown main item tag 0x6 [ 1142.173381][ T9879] apple 0003:05AC:024B.0022: ignoring exceeding usage max [ 1142.191896][ T9879] apple 0003:05AC:024B.0022: invalid report_size 18680 [ 1142.209221][ T9879] apple 0003:05AC:024B.0022: item 0 2 1 7 parsing failed [ 1142.224021][ T9879] apple 0003:05AC:024B.0022: parse failed [ 1142.243216][ T9879] apple: probe of 0003:05AC:024B.0022 failed with error -22 [ 1142.310844][T14422] loop8: detected capacity change from 0 to 40427 [ 1142.319118][T14422] F2FS-fs (loop8): build fault injection attr: rate: 771, type: 0x7ffff [ 1142.329296][T14422] F2FS-fs (loop8): invalid crc value [ 1142.334937][ T787] usb 8-1: new full-speed USB device number 20 using dummy_hcd [ 1142.348599][T14422] F2FS-fs (loop8): Found nat_bits in checkpoint [ 1142.407920][ T9] usb 5-1: USB disconnect, device number 24 [ 1142.421298][T14422] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5 [ 1142.457459][ T27] audit: type=1800 audit(2000000094.730:1511): pid=14422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1913" name="file1" dev="loop8" ino=10 res=0 errno=0 [ 1142.478071][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.508785][T11509] syz-executor: attempt to access beyond end of device [ 1142.508785][T11509] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1142.523670][ T8] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 1142.532873][ T787] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1142.549266][ T787] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1142.553065][T11509] F2FS-fs (loop8): Stopped filesystem due to reason: 3 [ 1142.562318][ T787] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1142.576201][ T787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.584706][ T787] usb 8-1: Product: syz [ 1142.588963][ T787] usb 8-1: Manufacturer: syz [ 1142.594372][ T787] usb 8-1: SerialNumber: syz [ 1142.723906][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1142.736870][ T8] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1142.755208][ T8] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1142.776694][ T8] usb 7-1: string descriptor 0 read error: -22 [ 1142.793463][ T8] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1142.802537][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1142.824606][ T787] usb 8-1: 0:2 : does not exist [ 1142.838117][ T8] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1142.857850][ T787] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1142.879655][ T8] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1142.891668][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1142.903876][ T8] usb 7-1: media controller created [ 1142.918885][ T787] usb 8-1: USB disconnect, device number 20 [ 1142.940515][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1143.233727][ T9879] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 1143.527832][ T9879] usb 9-1: Using ep0 maxpacket: 8 [ 1144.001577][ T9879] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1144.024452][ T9879] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1144.048027][ T9879] usb 9-1: string descriptor 0 read error: -22 [ 1144.056728][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 1144.058910][T14428] usb 7-1: dvb_usb_au6610: wlen=0, aborting [ 1144.070068][ T9879] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1144.079516][ T9879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.112401][ T9879] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1144.121038][ T8] usb 7-1: USB disconnect, device number 22 [ 1144.128404][ T9879] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1144.139237][ T9879] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1144.146856][ T9879] usb 9-1: media controller created [ 1144.164690][ T9879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1145.053615][ T5177] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 1145.123429][ T787] usb 8-1: new high-speed USB device number 21 using dummy_hcd [ 1145.233560][ T5177] usb 5-1: Using ep0 maxpacket: 16 [ 1145.241521][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.252881][ T5177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.263622][ T5177] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1145.263762][ T9879] zl10353_read_register: readreg error (reg=127, ret==0) [ 1145.276598][ T5177] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 1145.292906][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.304762][ T5177] usb 5-1: config 0 descriptor?? [ 1145.323557][ T787] usb 8-1: Using ep0 maxpacket: 16 [ 1145.330829][ T787] usb 8-1: config 0 has an invalid interface number: 8 but max is 0 [ 1145.346021][ T787] usb 8-1: config 0 has no interface number 0 [ 1145.361545][ T787] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1145.377251][ T9879] usb 9-1: USB disconnect, device number 14 [ 1145.380889][ T787] usb 8-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1145.403956][ T787] usb 8-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1145.427416][ T787] usb 8-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1145.439889][ T787] usb 8-1: Product: syz [ 1145.444739][ T9] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 1145.452688][ T787] usb 8-1: SerialNumber: syz [ 1145.468230][ T787] usb 8-1: config 0 descriptor?? [ 1145.477693][ T787] cm109 8-1:0.8: invalid payload size 0, expected 4 [ 1145.487033][ T787] input: CM109 USB driver as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.8/input/input15 [ 1145.634151][ T9] usb 7-1: Using ep0 maxpacket: 16 [ 1145.641248][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1145.652848][ T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1145.663661][ T9] usb 7-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 1145.672729][ T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1145.693741][ T9] usb 7-1: config 0 descriptor?? [ 1145.726024][ C0] cm109_urb_ctl_callback: 1301 callbacks suppressed [ 1145.726040][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.742409][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.752085][ T5177] hid_map_usage: 4377 callbacks suppressed [ 1145.752095][ T5177] HID 045e:07da: Invalid code 65791 type 1 [ 1145.758640][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.764958][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.779393][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.786918][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.794504][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.801601][ T787] usb 8-1: USB disconnect, device number 21 [ 1145.807573][ C0] cm109 8-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1145.807592][ C0] cm109 8-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1145.830941][ T5177] HID 045e:07da: Invalid code 768 type 1 [ 1145.837509][ T787] cm109 8-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1145.848784][ T5177] HID 045e:07da: Invalid code 769 type 1 [ 1145.857039][ T5177] HID 045e:07da: Invalid code 770 type 1 [ 1145.862708][ T5177] HID 045e:07da: Invalid code 771 type 1 [ 1145.869769][ T5177] HID 045e:07da: Invalid code 772 type 1 [ 1145.876370][ T5177] HID 045e:07da: Invalid code 773 type 1 [ 1145.882011][ T5177] HID 045e:07da: Invalid code 774 type 1 [ 1145.887744][ T5177] HID 045e:07da: Invalid code 775 type 1 [ 1145.893575][ T5177] HID 045e:07da: Invalid code 776 type 1 [ 1145.912529][ T5177] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0023/input/input16 [ 1146.008202][ T5177] microsoft 0003:045E:07DA.0023: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 1146.032367][ T5177] usb 5-1: USB disconnect, device number 25 [ 1146.117526][ T9] corsair 0003:1B1C:1B02.0024: invalid report_count 26673 [ 1146.132138][ T9] corsair 0003:1B1C:1B02.0024: item 0 2 1 9 parsing failed [ 1146.151425][ T9] corsair 0003:1B1C:1B02.0024: parse failed [ 1146.161265][ T9] corsair: probe of 0003:1B1C:1B02.0024 failed with error -22 [ 1146.298053][T14467] loop8: detected capacity change from 0 to 32768 [ 1146.306532][T14467] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop8 scanned by syz.8.1931 (14467) [ 1146.322655][T14467] BTRFS info (device loop8): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1146.341954][T14467] BTRFS info (device loop8): using blake2b (blake2b-256-generic) checksum algorithm [ 1146.344893][ T9879] usb 7-1: USB disconnect, device number 23 [ 1146.351824][T14467] BTRFS info (device loop8): using free space tree [ 1146.395600][T14467] BTRFS info (device loop8): enabling ssd optimizations [ 1146.402570][T14467] BTRFS info (device loop8): auto enabling async discard [ 1146.462291][T11509] BTRFS info (device loop8): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6 [ 1146.518689][T14484] loop7: detected capacity change from 0 to 4096 [ 1146.584074][T14484] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1146.737172][T14484] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 1146.748016][T14488] loop8: detected capacity change from 0 to 64 [ 1146.814302][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1146.831026][T14488] Trying to free block not in datazone [ 1146.855208][T14491] loop4: detected capacity change from 0 to 1024 [ 1146.866487][T14490] Trying to free block not in datazone [ 1146.947494][T14493] loop7: detected capacity change from 0 to 256 [ 1146.986651][T14493] FAT-fs (loop7): Directory bread(block 64) failed [ 1146.993820][T14493] FAT-fs (loop7): Directory bread(block 65) failed [ 1147.006033][T14493] FAT-fs (loop7): Directory bread(block 66) failed [ 1147.022775][T14493] FAT-fs (loop7): Directory bread(block 67) failed [ 1147.033751][T14493] FAT-fs (loop7): Directory bread(block 68) failed [ 1147.042276][T14493] FAT-fs (loop7): Directory bread(block 69) failed [ 1147.052078][T14493] FAT-fs (loop7): Directory bread(block 70) failed [ 1147.060185][ T1135] hfsplus: b-tree write err: -5, ino 4 [ 1147.062384][T14493] FAT-fs (loop7): Directory bread(block 71) failed [ 1147.080696][T14493] FAT-fs (loop7): Directory bread(block 72) failed [ 1147.088253][T14493] FAT-fs (loop7): Directory bread(block 73) failed [ 1147.682868][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1938'. [ 1147.940647][T14515] loop6: detected capacity change from 0 to 1024 [ 1147.948837][T14515] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1147.960777][T14515] EXT4-fs (loop6): revision level too high, forcing read-only mode [ 1147.969643][T14515] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1147.980285][T14515] EXT4-fs error (device loop6): __ext4_get_inode_loc:4483: comm syz.6.1943: Invalid inode table block 0 in block_group 0 [ 1148.003467][T14515] EXT4-fs (loop6): Remounting filesystem read-only [ 1148.016802][T14515] Quota error (device loop6): write_blk: dquota write failed [ 1148.026987][T14515] Quota error (device loop6): qtree_write_dquot: Error -117 occurred while creating quota [ 1148.038154][T14515] EXT4-fs (loop6): 1 truncate cleaned up [ 1148.083747][ T9] usb 9-1: new high-speed USB device number 15 using dummy_hcd [ 1148.095349][T14515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1148.108339][ T8] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 1148.165409][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1148.244615][T14521] loop6: detected capacity change from 0 to 64 [ 1148.266598][ T9] usb 9-1: Using ep0 maxpacket: 8 [ 1148.293826][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1148.313545][ T9] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1148.328685][T14522] tmpfs: Bad value for 'mpol' [ 1148.345574][ T8] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 1148.360415][ T8] usb 5-1: config 0 has no interface number 0 [ 1148.368177][ T9] usb 9-1: config 4 interface 0 has no altsetting 0 [ 1148.452677][ T9] usb 9-1: string descriptor 0 read error: -22 [ 1148.484116][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 1148.563049][ T9] usb 9-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1148.634256][ T8] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 1148.674382][ T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1148.777154][ T8] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 1148.801381][ T9] usb 9-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1148.820768][ T8] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 1148.833950][ T9] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1148.850716][ T8] usb 5-1: Product: syz [ 1148.855604][ T8] usb 5-1: SerialNumber: syz [ 1148.861706][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1148.866687][T14524] loop6: detected capacity change from 0 to 256 [ 1148.882406][T14524] exfat: Deprecated parameter 'utf8' [ 1148.907304][T14524] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x0b800a9a, utbl_chksum : 0xe619d30d) [ 1148.978572][ T8] usb 5-1: config 0 descriptor?? [ 1148.984243][ T9] usb 9-1: media controller created [ 1148.997893][ T8] cm109 5-1:0.8: invalid payload size 0, expected 4 [ 1149.008593][ T8] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input17 [ 1149.040911][T14508] usb 9-1: dvb_usb_au6610: wlen=0, aborting [ 1149.051249][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1149.081989][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 1149.232132][ T9] usb 9-1: USB disconnect, device number 15 [ 1149.686550][ C0] cm109 5-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 1149.687610][ T23] usb 5-1: USB disconnect, device number 26 [ 1149.693519][ C0] cm109 5-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 1149.738552][ T23] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 1149.954775][T14533] loop6: detected capacity change from 0 to 64 [ 1149.968064][T14533] Trying to free block not in datazone [ 1149.982833][T14533] Trying to free block not in datazone [ 1150.162126][T14538] loop6: detected capacity change from 0 to 1024 [ 1150.186957][T14538] hfsplus: bad catalog entry type [ 1150.204857][ T1135] hfsplus: b-tree write err: -5, ino 4 [ 1150.913246][ T23] usb 8-1: new full-speed USB device number 22 using dummy_hcd [ 1150.993566][ T9879] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 1151.104957][ T23] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1151.115654][ T23] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1151.127342][ T23] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1151.136746][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.174025][ T23] usb 8-1: Product: syz [ 1151.178414][ T23] usb 8-1: Manufacturer: syz [ 1151.183405][ T23] usb 8-1: SerialNumber: syz [ 1151.205513][ T9879] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1151.214081][ T9879] usb 7-1: config 0 has no interface number 0 [ 1151.220224][ T9879] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1151.240265][ T9879] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1151.256615][ T9879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1151.267631][ T9879] usb 7-1: Product: syz [ 1151.271840][ T9879] usb 7-1: Manufacturer: syz [ 1151.277218][ T9879] usb 7-1: SerialNumber: syz [ 1151.320850][ T9879] usb 7-1: config 0 descriptor?? [ 1151.471876][ T9879] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1151.520353][ T23] usb 8-1: 0:2 : does not exist [ 1151.537072][ T23] usb 8-1: 5:0: failed to get current value for ch 0 (-22) [ 1151.573636][ T786] usb 9-1: new full-speed USB device number 16 using dummy_hcd [ 1151.775117][ T786] usb 9-1: config 0 has an invalid interface number: 239 but max is 0 [ 1151.847755][ T23] usb 8-1: USB disconnect, device number 22 [ 1151.892616][ T786] usb 9-1: config 0 has no interface number 0 [ 1152.010953][ T786] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 1152.153328][ T786] usb 9-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 511, setting to 64 [ 1152.204369][ T28] usb 7-1: USB disconnect, device number 24 [ 1152.223580][ T786] usb 9-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1152.232864][ T786] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1152.252034][ T28] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1152.289555][ T786] usb 9-1: Product: syz [ 1152.303102][ T786] usb 9-1: Manufacturer: syz [ 1152.313409][ T786] usb 9-1: SerialNumber: syz [ 1152.330701][ T786] usb 9-1: config 0 descriptor?? [ 1152.349546][T14549] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1152.369288][T14549] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1152.554095][T14556] tmpfs: Bad value for 'mpol' [ 1152.953399][T14549] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1153.077770][T14549] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 1153.282299][T14562] loop7: detected capacity change from 0 to 1024 [ 1153.346097][T10814] hfsplus: b-tree write err: -5, ino 4 [ 1153.412427][T14565] loop7: detected capacity change from 0 to 1024 [ 1153.473531][ T8] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 1153.482954][ T3541] hfsplus: b-tree write err: -5, ino 4 [ 1153.509515][ T786] asix 9-1:0.239 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1153.523867][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 1153.533758][ T786] asix: probe of 9-1:0.239 failed with error -71 [ 1153.543592][ T786] usb 9-1: USB disconnect, device number 16 [ 1153.580153][T14567] loop7: detected capacity change from 0 to 1024 [ 1153.611558][T14567] hfsplus: bad catalog entry type [ 1153.655480][ T8] usb 7-1: Using ep0 maxpacket: 8 [ 1153.664057][T10814] hfsplus: b-tree write err: -5, ino 4 [ 1153.675798][ T8] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1153.716673][ T8] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1153.732673][ T9] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 1153.751908][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.761750][ T9] usb 5-1: Product: syz [ 1153.766968][ T8] usb 7-1: string descriptor 0 read error: -22 [ 1153.773947][ T8] usb 7-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1153.783192][ T9] usb 5-1: Manufacturer: syz [ 1153.787804][ T9] usb 5-1: SerialNumber: syz [ 1153.793048][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1153.810419][ T9] usb 5-1: config 0 descriptor?? [ 1153.839670][ T8] usb 7-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1154.326460][ T9] ch341 5-1:0.0: ch341-uart converter detected [ 1154.337553][ T8] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1154.352344][ T8] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1154.360492][ T8] usb 7-1: media controller created [ 1154.395951][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1154.693756][ T5177] usb 9-1: new high-speed USB device number 17 using dummy_hcd [ 1154.874977][ T5177] usb 9-1: Using ep0 maxpacket: 32 [ 1154.882374][ T5177] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1154.890703][ T5177] usb 9-1: config 0 has no interface number 0 [ 1154.899658][ T5177] usb 9-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1154.909225][ T5177] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1154.917591][ T5177] usb 9-1: Product: syz [ 1154.921769][ T5177] usb 9-1: Manufacturer: syz [ 1154.926858][ T5177] usb 9-1: SerialNumber: syz [ 1154.933474][ T786] usb 8-1: new high-speed USB device number 23 using dummy_hcd [ 1154.934756][ T5177] usb 9-1: config 0 descriptor?? [ 1154.944872][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1154.952320][ T9] usb 5-1: failed to send control message: -71 [ 1154.965035][ T9] ch341-uart: probe of ttyUSB0 failed with error -71 [ 1154.974759][ T5177] usb 9-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1154.987843][ T9] usb 5-1: USB disconnect, device number 27 [ 1154.994492][ T5177] usb 9-1: selecting invalid altsetting 1 [ 1155.000246][ T5177] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1155.008796][ T9] ch341 5-1:0.0: device disconnected [ 1155.019564][ T5177] usb 9-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1155.030654][ T5177] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1155.039480][ T5177] usb 9-1: media controller created [ 1155.041166][T10814] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1155.078963][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.153097][ T786] usb 8-1: Using ep0 maxpacket: 8 [ 1155.168406][ T786] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1155.182568][ T786] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1155.190868][ T786] usb 8-1: Product: syz [ 1155.195477][ T786] usb 8-1: Manufacturer: syz [ 1155.200084][ T786] usb 8-1: SerialNumber: syz [ 1155.210088][ T786] usb 8-1: config 0 descriptor?? [ 1155.218312][ T786] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1155.226805][ T786] usb 8-1: setting power ON [ 1155.231324][ T786] dvb-usb: bulk message failed: -22 (2/0) [ 1155.240965][ T786] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1155.252752][ T786] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1155.261635][ T786] usb 8-1: media controller created [ 1155.282116][ T786] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1155.304500][ T786] usb 8-1: selecting invalid altsetting 6 [ 1155.320485][ T786] usb 8-1: digital interface selection failed (-22) [ 1155.327233][ T786] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1155.344106][ T786] usb 8-1: setting power OFF [ 1155.351716][ T786] dvb-usb: bulk message failed: -22 (2/0) [ 1155.357569][ T786] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1155.366983][ T786] (NULL device *): no alternate interface [ 1155.391817][ T786] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1155.414579][ T8] zl10353_read_register: readreg error (reg=127, ret==0) [ 1155.421846][T14574] usb 7-1: dvb_usb_au6610: wlen=3, aborting [ 1155.441675][ T5177] usb 9-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1155.456815][ T5177] zl10353_read_register: readreg error (reg=127, ret==-71) [ 1155.475248][ T5177] usb 9-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1155.517054][ T786] usb 8-1: USB disconnect, device number 23 [ 1155.526055][ T8] usb 7-1: USB disconnect, device number 25 [ 1155.578865][ T5177] usb 9-1: USB disconnect, device number 17 [ 1156.158381][T14585] netlink: 48 bytes leftover after parsing attributes in process `syz.8.1968'. [ 1156.240608][T14588] loop4: detected capacity change from 0 to 1024 [ 1156.362578][ T2975] hfsplus: b-tree write err: -5, ino 4 [ 1156.413199][ T5177] usb 8-1: new high-speed USB device number 24 using dummy_hcd [ 1156.470257][T14590] tmpfs: Bad value for 'mpol' [ 1156.610566][ T5177] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1156.668933][ T5177] usb 8-1: config 0 has no interface number 0 [ 1156.766665][ T5177] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1156.917482][ T5177] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1156.971568][ T5177] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1156.984806][ T787] usb 5-1: new full-speed USB device number 28 using dummy_hcd [ 1157.018122][ T5177] usb 8-1: Product: syz [ 1157.022323][ T5177] usb 8-1: Manufacturer: syz [ 1157.051532][ T5177] usb 8-1: SerialNumber: syz [ 1157.102228][ T5177] usb 8-1: config 0 descriptor?? [ 1157.129804][ T5177] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 1157.221411][ T787] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1157.235893][ T787] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1157.246154][ T787] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8 [ 1157.255567][ T787] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1157.266536][ T787] usb 5-1: config 0 descriptor?? [ 1157.275118][ T787] dvb-usb: found a 'Artec T1 USB2.0' in warm state. [ 1157.281775][ T787] dvb-usb: bulk message failed: -22 (3/0) [ 1157.291146][ T787] dvb-usb: will use the device's hardware PID filter (table count: 16). [ 1157.302377][ T787] dvbdev: DVB: registering new adapter (Artec T1 USB2.0) [ 1157.310069][ T787] usb 5-1: media controller created [ 1157.317973][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1157.342457][ T787] dvb-usb: bulk message failed: -22 (6/0) [ 1157.353821][ T787] dvb-usb: no frontend was attached by 'Artec T1 USB2.0' [ 1157.374778][ T787] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input18 [ 1157.389113][ T5177] usb 8-1: USB disconnect, device number 24 [ 1157.398286][ T787] dvb-usb: schedule remote query interval to 150 msecs. [ 1157.405863][ T5177] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 1157.412809][ T787] dvb-usb: Artec T1 USB2.0 successfully initialized and connected. [ 1157.504119][ T5879] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1157.518842][T14592] dibusb: i2c wr: len=108 is too big! [ 1157.518842][T14592] [ 1157.528108][ T787] usb 5-1: USB disconnect, device number 28 [ 1157.544918][ T787] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected. [ 1157.663293][ T786] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 1157.698390][ T5879] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 1157.708688][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.716938][ T5879] usb 9-1: Product: syz [ 1157.721150][ T5879] usb 9-1: Manufacturer: syz [ 1157.725789][ T5879] usb 9-1: SerialNumber: syz [ 1157.731811][ T5879] usb 9-1: config 0 descriptor?? [ 1157.865797][ T786] usb 7-1: config 0 has an invalid interface number: 106 but max is 0 [ 1157.874242][ T786] usb 7-1: config 0 has no interface number 0 [ 1157.880358][ T786] usb 7-1: config 0 interface 106 has no altsetting 0 [ 1157.889103][ T786] usb 7-1: New USB device found, idVendor=413c, idProduct=8217, bcdDevice=b2.59 [ 1157.898482][ T786] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1157.906600][ T786] usb 7-1: Product: syz [ 1157.911818][ T786] usb 7-1: Manufacturer: syz [ 1157.916529][ T786] usb 7-1: SerialNumber: syz [ 1157.928377][ T786] usb 7-1: config 0 descriptor?? [ 1158.147771][ T786] usb 7-1: USB disconnect, device number 26 [ 1158.160501][ T5879] usb 9-1: Firmware: major: 0, minor: 0, hardware type: ATUSB (0) [ 1158.168552][ T5879] usb 9-1: Firmware version (0.0) predates our first public release. [ 1158.177274][ T5879] usb 9-1: Please update to version 0.2 or newer [ 1158.233622][ T787] usb 8-1: new high-speed USB device number 25 using dummy_hcd [ 1158.363717][ T5177] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 1158.398492][ T5879] usb 9-1: USB disconnect, device number 18 [ 1158.413410][ T787] usb 8-1: Using ep0 maxpacket: 32 [ 1158.422639][ T787] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1158.430815][ T787] usb 8-1: config 0 has no interface number 0 [ 1158.439032][ T787] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1158.448203][ T787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.468056][ T787] usb 8-1: Product: syz [ 1158.472252][ T787] usb 8-1: Manufacturer: syz [ 1158.482789][ T787] usb 8-1: SerialNumber: syz [ 1158.491271][ T787] usb 8-1: config 0 descriptor?? [ 1158.500932][ T787] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1158.528378][ T787] usb 8-1: selecting invalid altsetting 1 [ 1158.536471][ T787] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1158.547727][ T787] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1158.558794][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1158.568037][ T5177] usb 5-1: Using ep0 maxpacket: 8 [ 1158.573463][ T787] usb 8-1: media controller created [ 1158.580695][ T5177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1158.597202][ T5177] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1158.607319][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1158.619329][ T5177] usb 5-1: string descriptor 0 read error: -22 [ 1158.633583][ T5177] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1158.642637][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.660301][ T5177] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1158.669783][ T5177] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1158.680598][ T5177] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1158.688419][ T5177] usb 5-1: media controller created [ 1158.726072][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.033475][ T5879] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 1159.223100][ T5879] usb 7-1: Using ep0 maxpacket: 8 [ 1159.241018][ T5879] usb 7-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 1159.250411][ T5879] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1159.258710][ T5879] usb 7-1: Product: syz [ 1159.262945][ T5879] usb 7-1: Manufacturer: syz [ 1159.267675][ T5879] usb 7-1: SerialNumber: syz [ 1159.277178][ T5879] usb 7-1: config 0 descriptor?? [ 1159.285274][ T5879] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 1159.293710][ T5879] usb 7-1: setting power ON [ 1159.298320][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 1159.306918][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1159.317203][ T5879] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 1159.326639][ T5879] usb 7-1: media controller created [ 1159.350069][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1159.368126][ T5879] usb 7-1: selecting invalid altsetting 6 [ 1159.374286][ T5879] usb 7-1: digital interface selection failed (-22) [ 1159.380891][ T5879] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 1159.390142][ T5879] usb 7-1: setting power OFF [ 1159.394944][ T5879] dvb-usb: bulk message failed: -22 (2/0) [ 1159.400835][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 1159.410521][ T5879] (NULL device *): no alternate interface [ 1159.440537][ T5879] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 1159.733838][ T787] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1159.741197][ T787] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1159.774102][T14603] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-32 [ 1159.804459][T14605] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 1159.811567][T14609] usb 8-1: dvb_usb_ce6230: I2C read not implemented [ 1159.819691][ T5177] zl10353_read_register: readreg error (reg=127, ret==0) [ 1159.832556][ T5879] usb 7-1: USB disconnect, device number 27 [ 1159.837345][ T787] usb 8-1: USB disconnect, device number 25 [ 1159.869856][ T5177] usb 5-1: USB disconnect, device number 29 [ 1160.828241][T14623] tmpfs: Bad value for 'mpol' [ 1161.523546][ T5177] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 1161.692258][T14628] loop6: detected capacity change from 0 to 512 [ 1161.706690][T14628] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1161.745642][T14628] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1161.754217][T14628] System zones: 1-12 [ 1161.760322][T14628] EXT4-fs (loop6): 1 truncate cleaned up [ 1161.767471][T14628] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1161.833751][ T5879] usb 8-1: new high-speed USB device number 26 using dummy_hcd [ 1162.046425][ T5879] usb 8-1: Using ep0 maxpacket: 32 [ 1162.065008][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.066878][ T5879] usb 8-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1162.076953][ T5177] usb 5-1: Using ep0 maxpacket: 8 [ 1162.101838][ T5879] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1162.123607][ T5177] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1162.139920][ T5177] usb 5-1: config 4 interface 0 has no altsetting 0 [ 1162.158595][ T5177] usb 5-1: string descriptor 0 read error: -22 [ 1162.171717][ T5177] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 1162.175093][ T5879] usb 8-1: config 0 descriptor?? [ 1162.181349][ T5177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.207779][ T5177] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 1162.219538][ T5177] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1162.234729][ T5177] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 1162.241908][ T5177] usb 5-1: media controller created [ 1162.265939][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.277285][T14638] loop8: detected capacity change from 0 to 2048 [ 1162.317549][T14638] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1162.330037][T14638] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1162.351625][ T27] audit: type=1800 audit(2000000114.620:1512): pid=14638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.1989" name="file0" dev="loop8" ino=13 res=0 errno=0 [ 1162.388407][T14638] fs-verity (loop8, inode 13): Error -22 reading file data [ 1162.398046][T14638] fs-verity (loop8, inode 13): Error -22 building Merkle tree [ 1162.441762][ T5879] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1162.450403][T11509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1162.462310][ T5879] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1162.463615][ T787] usb 7-1: new low-speed USB device number 28 using dummy_hcd [ 1162.472519][ T5879] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1162.487504][ T5879] usb 8-1: media controller created [ 1162.536988][ T5879] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1162.665872][ T787] usb 7-1: config index 0 descriptor too short (expected 1307, got 27) [ 1162.674602][ T787] usb 7-1: config 0 has an invalid interface number: 0 but max is -1 [ 1162.682698][ T787] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 1162.692677][ T787] usb 7-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 1162.704531][ T787] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 1162.715747][ T787] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 1162.740602][ T787] usb 7-1: string descriptor 0 read error: -22 [ 1162.747569][ T787] usb 7-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 1162.758528][ T787] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1162.770965][ T787] usb 7-1: config 0 descriptor?? [ 1162.777262][T14636] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 1162.786394][ T787] hub 7-1:0.0: bad descriptor, ignoring hub [ 1162.792359][ T787] hub: probe of 7-1:0.0 failed with error -5 [ 1162.801614][ T787] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input19 [ 1162.827977][ C1] usb_acecad 7-1:0.0: can't resubmit intr, dummy_hcd.6-1/input0, status -1 [ 1162.833551][ T9] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1163.033781][ T9] usb 9-1: Using ep0 maxpacket: 16 [ 1163.044951][ T9] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1163.069826][T10074] usb 7-1: USB disconnect, device number 28 [ 1163.079817][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1163.096396][ T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1163.109822][ T9] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1163.121946][ T9] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1163.138167][ T9] usb 9-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 1163.148089][ T9] usb 9-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 1163.158048][ T9] usb 9-1: Manufacturer: syz [ 1163.166537][ T9] usb 9-1: config 0 descriptor?? [ 1163.334150][ T5177] zl10353_read_register: readreg error (reg=127, ret==0) [ 1163.343682][T14613] usb 5-1: dvb_usb_au6610: wlen=0, aborting [ 1163.359886][ T5879] az6027: usb out operation failed. (-71) [ 1163.366413][ T5879] az6027: usb out operation failed. (-71) [ 1163.373151][ T5879] stb0899_attach: Driver disabled by Kconfig [ 1163.385839][ T5879] az6027: no front-end attached [ 1163.385839][ T5879] [ 1163.400043][ T5879] az6027: usb out operation failed. (-71) [ 1163.404603][ T5177] usb 5-1: USB disconnect, device number 30 [ 1163.416569][ T5879] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1163.440822][ T5879] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.7/usb8/8-1/input/input21 [ 1163.458429][ T5879] dvb-usb: schedule remote query interval to 400 msecs. [ 1163.473060][ T5879] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1163.490644][ T5879] usb 8-1: USB disconnect, device number 26 [ 1163.493566][ T9] rc_core: IR keymap rc-hauppauge not found [ 1163.514214][ T9] Registered IR keymap rc-empty [ 1163.523580][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.551633][ T5879] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1163.553906][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.591542][T14642] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1163.604913][T14642] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1163.615054][ T9] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0 [ 1163.629739][ T9] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input20 [ 1163.659683][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.698441][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.733685][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.764654][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.793682][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.823713][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.857722][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.893788][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.923433][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.960805][ T9] mceusb 9-1:0.0: Error: mce write submit urb error = -90 [ 1163.994724][ T9] mceusb 9-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 1164.013545][ T9] mceusb 9-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 1164.029326][ T5177] usb 7-1: new full-speed USB device number 29 using dummy_hcd [ 1164.044894][ T9] usb 9-1: USB disconnect, device number 19 [ 1164.333761][T14655] tmpfs: Bad value for 'mpol' [ 1165.045427][ T5177] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1165.063604][ T5177] usb 7-1: config 0 has no interface number 0 [ 1165.073630][ T5177] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 1165.174054][ T5177] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1165.213604][ T5177] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1165.238103][ T5177] usb 7-1: Product: syz [ 1165.250581][ T5177] usb 7-1: Manufacturer: syz [ 1165.269597][ T5177] usb 7-1: SerialNumber: syz [ 1165.295394][ T5177] usb 7-1: config 0 descriptor?? [ 1165.403897][T14671] loop7: detected capacity change from 0 to 512 [ 1165.414407][T14671] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1165.436330][T14671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1165.445276][T14671] System zones: 1-12 [ 1165.451184][T14671] EXT4-fs (loop7): 1 truncate cleaned up [ 1165.458460][T14671] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1165.917493][ T5177] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.214/input/input22 [ 1166.137803][ T5177] usb 7-1: USB disconnect, device number 29 [ 1166.412828][T14686] tmpfs: Bad value for 'mpol' [ 1167.159964][T14691] loop6: detected capacity change from 0 to 256 [ 1167.180133][T14691] exfat: Deprecated parameter 'utf8' [ 1167.405322][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1167.518843][T14702] netlink: 'syz.8.2013': attribute type 12 has an invalid length. [ 1167.726873][T14702] netlink: 'syz.8.2013': attribute type 29 has an invalid length. [ 1168.052148][T14702] netlink: 'syz.8.2013': attribute type 2 has an invalid length. [ 1168.060534][T14702] netlink: 'syz.8.2013': attribute type 2 has an invalid length. [ 1168.068571][T14702] netlink: 'syz.8.2013': attribute type 1 has an invalid length. [ 1168.076700][T14702] netlink: 'syz.8.2013': attribute type 37 has an invalid length. [ 1168.085208][T14702] netlink: 'syz.8.2013': attribute type 2 has an invalid length. [ 1168.096047][T14702] bridge0: port 1(bridge_slave_0) entered disabled state [ 1169.213372][T14721] syz.8.2019[14721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.213526][T14721] syz.8.2019[14721] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1169.429913][ T27] audit: type=1326 audit(2000000121.630:1513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27bc3858e7 code=0x7ffc0000 [ 1169.576753][ T27] audit: type=1326 audit(2000000121.690:1514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27bc32ab19 code=0x7ffc0000 [ 1169.709962][ T27] audit: type=1326 audit(2000000121.690:1515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27bc3858e7 code=0x7ffc0000 [ 1169.741697][T14734] loop6: detected capacity change from 0 to 512 [ 1169.801819][T14734] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1169.840584][ T27] audit: type=1326 audit(2000000121.690:1516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27bc32ab19 code=0x7ffc0000 [ 1169.895211][T14734] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1169.908795][T14734] System zones: 1-12 [ 1169.912084][ T27] audit: type=1326 audit(2000000121.690:1517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27bc3858e7 code=0x7ffc0000 [ 1169.936213][ T27] audit: type=1326 audit(2000000121.690:1518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27bc32ab19 code=0x7ffc0000 [ 1169.962099][ T27] audit: type=1326 audit(2000000121.690:1519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27bc3858e7 code=0x7ffc0000 [ 1169.971198][T14734] EXT4-fs (loop6): 1 truncate cleaned up [ 1170.011404][T14734] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1170.013637][ T27] audit: type=1326 audit(2000000121.690:1520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27bc32ab19 code=0x7ffc0000 [ 1170.071828][ T27] audit: type=1326 audit(2000000121.690:1521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f27bc3858e7 code=0x7ffc0000 [ 1170.105104][ T27] audit: type=1326 audit(2000000121.690:1522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14726 comm="syz.8.2022" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f27bc32ab19 code=0x7ffc0000 [ 1170.300241][T14749] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2029'. [ 1170.414903][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1170.843102][ T23] usb 8-1: new high-speed USB device number 27 using dummy_hcd [ 1170.943642][ T5879] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1170.951361][ T28] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 1171.023169][ T23] usb 8-1: Using ep0 maxpacket: 32 [ 1171.030650][ T23] usb 8-1: config index 0 descriptor too short (expected 29220, got 36) [ 1171.040053][ T23] usb 8-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 1171.049428][ T23] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 1171.058458][ T23] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1171.068536][ T23] usb 8-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1171.078218][ T23] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1171.091262][ T786] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 1171.099191][ T23] usb 8-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1171.108379][ T23] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.119855][ T23] usb 8-1: config 0 descriptor?? [ 1171.143139][ T5879] usb 9-1: Using ep0 maxpacket: 16 [ 1171.148490][ T28] usb 5-1: Using ep0 maxpacket: 32 [ 1171.155925][ T28] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1171.165723][ T5879] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1171.176545][ T28] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1171.188530][ T5879] usb 9-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1171.199067][ T28] usb 5-1: config 0 descriptor?? [ 1171.204351][ T5879] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1171.212356][ T5879] usb 9-1: Product: syz [ 1171.216820][ T5879] usb 9-1: Manufacturer: syz [ 1171.225037][ T5879] usb 9-1: SerialNumber: syz [ 1171.231398][ T5879] usb 9-1: config 0 descriptor?? [ 1171.242487][ T5879] usb 9-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1171.313556][ T786] usb 7-1: Using ep0 maxpacket: 16 [ 1171.321009][ T786] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 1171.337344][ T786] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 1171.347696][ T786] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 1171.362764][ T786] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1171.371932][ T786] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1171.380286][ T786] usb 7-1: SerialNumber: syz [ 1171.388398][ T23] usblp 8-1:0.0: usblp0: USB Bidirectional printer dev 27 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 1171.401687][T14763] raw-gadget.3 gadget.6: fail, usb_ep_enable returned -22 [ 1171.439697][ T28] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1171.454807][ T28] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1171.465357][ T28] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1171.472565][ T28] usb 5-1: media controller created [ 1171.500108][ T28] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1171.502773][ T1091] usb 9-1: Failed to submit usb control message: -71 [ 1171.517106][ T5177] usb 9-1: USB disconnect, device number 20 [ 1171.525097][ T1091] usb 9-1: unable to send the bmi data to the device: -71 [ 1171.534652][ T1091] usb 9-1: unable to get target info from device [ 1171.541018][ T1091] usb 9-1: could not get target info (-71) [ 1171.547313][ T1091] usb 9-1: could not probe fw (-71) [ 1171.634659][ T23] usb 8-1: USB disconnect, device number 27 [ 1171.648720][ T786] cdc_ether: probe of 7-1:1.0 failed with error -22 [ 1171.658248][ T23] usblp0: removed [ 1171.665562][ T28] az6027: usb out operation failed. (-71) [ 1171.675400][ T786] usb 7-1: USB disconnect, device number 30 [ 1171.684467][ T28] az6027: usb out operation failed. (-71) [ 1171.691565][ T28] stb0899_attach: Driver disabled by Kconfig [ 1171.699653][ T28] az6027: no front-end attached [ 1171.699653][ T28] [ 1171.708760][ T28] az6027: usb out operation failed. (-71) [ 1171.714579][ T28] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1171.727758][ T28] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input23 [ 1171.741738][ T28] dvb-usb: schedule remote query interval to 400 msecs. [ 1171.748886][ T28] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1171.760578][ T28] usb 5-1: USB disconnect, device number 31 [ 1171.792540][ T28] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1172.289271][T14777] lo speed is unknown, defaulting to 1000 [ 1172.468536][T14787] loop4: detected capacity change from 0 to 8 [ 1172.559172][T14790] loop7: detected capacity change from 0 to 512 [ 1172.567126][T14790] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1172.589321][T14790] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1172.597905][T14790] System zones: 1-12 [ 1172.605273][T14790] EXT4-fs (loop7): 1 truncate cleaned up [ 1172.612189][T14790] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1172.625273][ T28] kernel write not supported for file /796/attr/prev (pid: 28 comm: kworker/1:1) [ 1173.043808][ T5177] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1173.223599][T10074] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1173.243633][ T5177] usb 5-1: Using ep0 maxpacket: 32 [ 1173.252059][ T5177] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 1173.263890][ T5177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.278886][ T5177] usb 5-1: config 0 descriptor?? [ 1173.443332][T10074] usb 9-1: Using ep0 maxpacket: 32 [ 1173.451089][T10074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1173.483707][T10074] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1173.514519][T10074] usb 9-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1173.525205][ T5177] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 1173.542325][ T5177] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1173.552198][T10074] usb 9-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1173.573784][T10074] usb 9-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 1173.585152][ T5177] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 1173.592328][ T5177] usb 5-1: media controller created [ 1173.598156][T10074] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1173.616206][T10074] usb 9-1: config 0 descriptor?? [ 1173.640169][ T5177] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1173.729064][T14797] az6027: more than 2 i2c messages at a time is not handled yet. TODO. [ 1173.743758][ T5177] az6027: usb out operation failed. (-71) [ 1173.749853][ T5177] az6027: usb out operation failed. (-71) [ 1173.756272][ T5177] stb0899_attach: Driver disabled by Kconfig [ 1173.757341][ T9891] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.762258][ T5177] az6027: no front-end attached [ 1173.762258][ T5177] [ 1173.762614][ T5177] az6027: usb out operation failed. (-71) [ 1173.811002][ T5177] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 1173.820433][ T5177] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input24 [ 1173.864705][ T5177] dvb-usb: schedule remote query interval to 400 msecs. [ 1173.873688][ T5177] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 1173.896467][ T5177] usb 5-1: USB disconnect, device number 32 [ 1173.906746][ T9] usb 9-1: USB disconnect, device number 21 [ 1173.999248][T14812] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2053'. [ 1174.206649][T14816] bridge0: port 2(bridge_slave_1) entered disabled state [ 1174.235623][ T5177] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 1174.723957][ T787] usb 8-1: new high-speed USB device number 28 using dummy_hcd [ 1174.748797][T14830] loop8: detected capacity change from 0 to 512 [ 1174.756816][T14830] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1174.768604][T14830] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1174.776688][T14830] System zones: 1-12 [ 1174.781739][T14830] EXT4-fs (loop8): 1 truncate cleaned up [ 1174.788255][T14830] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1174.887148][T11509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1174.903264][ T787] usb 8-1: Using ep0 maxpacket: 32 [ 1174.928749][ T787] usb 8-1: config 0 has an invalid interface number: 1 but max is 0 [ 1174.963671][ T787] usb 8-1: config 0 has no interface number 0 [ 1174.975565][ T787] usb 8-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 1174.993700][ T787] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1175.003498][ T787] usb 8-1: Product: syz [ 1175.007738][ T787] usb 8-1: Manufacturer: syz [ 1175.016864][ T787] usb 8-1: SerialNumber: syz [ 1175.024300][ T787] usb 8-1: config 0 descriptor?? [ 1175.032136][ T787] usb 8-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 1175.041716][ T787] usb 8-1: selecting invalid altsetting 1 [ 1175.048555][ T787] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 1175.059303][ T787] usb 8-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1175.070776][ T787] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 1175.081027][ T787] usb 8-1: media controller created [ 1175.117719][ T787] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1175.597402][T14852] loop8: detected capacity change from 0 to 22 [ 1175.612891][T14852] MTD: Attempt to mount non-MTD device "/dev/loop8" [ 1175.627974][T14852] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 1175.771862][T14845] loop6: detected capacity change from 0 to 32768 [ 1175.785593][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 1175.807389][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1175.834576][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 1175.872610][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 1175.939512][T14845] JBD2: Ignoring recovery information on journal [ 1175.999560][T14856] loop8: detected capacity change from 0 to 512 [ 1176.009960][T14845] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode. [ 1176.019614][T14856] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1176.034986][T14856] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1176.042346][ T1135] (kworker/u4:7,1135,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xa9c51222, computed 0xb6cc4dbf. Applying ECC. [ 1176.043476][T14856] System zones: 1-12 [ 1176.074540][T14856] EXT4-fs (loop8): 1 truncate cleaned up [ 1176.081608][T14856] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1176.133949][ T9] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1176.204484][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xc2d589a7, computed 0xa7538fce. Applying ECC. [ 1176.208640][T11509] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1176.229253][ T787] usb 8-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 1176.246214][ T787] zl10353_read_register: readreg error (reg=127, ret==-110) [ 1176.263604][ T787] usb 8-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 1176.285649][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0x2e880d5e. Applying ECC. [ 1176.308253][T14845] (syz.6.2065,14845,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x960d5e93 [ 1176.327904][T14845] (syz.6.2065,14845,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5 [ 1176.337633][T14845] (syz.6.2065,14845,1):ocfs2_quota_read:201 ERROR: status = -5 [ 1176.343654][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 1176.351957][ T787] usb 8-1: USB disconnect, device number 28 [ 1176.354013][T14845] __quota_error: 58 callbacks suppressed [ 1176.354028][T14845] Quota error (device loop6): find_block_dqentry: Can't read quota tree block 6 [ 1176.358671][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 1176.395154][T14864] loop8: detected capacity change from 0 to 164 [ 1176.413467][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1176.413472][T14845] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0 [ 1176.413499][T14845] (syz.6.2065,14845,1):ocfs2_acquire_dquot:878 ERROR: status = -5 [ 1176.449048][ T9] pvrusb2: Hardware description: Terratec Grabster AV400 [ 1176.459756][ T9] pvrusb2: ********** [ 1176.464433][ T9] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 1176.477307][ T9] pvrusb2: Important functionality might not be entirely working. [ 1176.485787][ T9] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 1176.498218][ T9] pvrusb2: ********** [ 1176.510723][T14845] (syz.6.2065,14845,1):ocfs2_mknod:314 ERROR: status = -5 [ 1176.519284][T14845] (syz.6.2065,14845,1):ocfs2_mknod:502 ERROR: status = -5 [ 1176.530739][T14845] (syz.6.2065,14845,1):ocfs2_create:676 ERROR: status = -5 [ 1176.588767][ T9890] ocfs2: Unmounting device (7,6) on (node local) [ 1176.673716][ T2317] pvrusb2: Invalid write control endpoint [ 1176.735602][ T2317] pvrusb2: Invalid write control endpoint [ 1176.741724][ T2317] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 1176.743729][ T5177] usb 9-1: new high-speed USB device number 22 using dummy_hcd [ 1176.755700][ T2317] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 1176.768323][ T2317] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 1176.781256][ T2317] pvrusb2: Device being rendered inoperable [ 1176.800902][ T2317] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 1176.811998][ T2317] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 1176.829890][ T2317] pvrusb2: Attached sub-driver cx25840 [ 1176.836970][ T2317] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 1176.847262][ T2317] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 1176.915675][T14854] pvrusb2: Attempted to execute control transfer when device not ok [ 1176.934336][T10074] usb 5-1: USB disconnect, device number 33 [ 1176.964003][ T5177] usb 9-1: Using ep0 maxpacket: 16 [ 1176.971373][ T5177] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1176.980086][ T5177] usb 9-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 1176.997415][ T5177] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1177.011265][ T5177] usb 9-1: config 0 descriptor?? [ 1177.157112][T14878] loop6: detected capacity change from 0 to 256 [ 1177.192038][T14878] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF [ 1177.201516][T14878] FAT-fs (loop6): Filesystem has been set read-only [ 1177.420811][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.427696][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.449359][ T5177] hid (null): unknown global tag 0xd [ 1177.455455][ T5177] hid (null): unknown global tag 0xa7 [ 1177.461734][ T5177] hid (null): global environment stack underflow [ 1177.470041][ T5177] hid (null): unknown global tag 0xc [ 1177.476157][ T5177] hid (null): invalid report_count -1607100 [ 1177.665749][ T786] usb 9-1: USB disconnect, device number 22 [ 1177.971595][T14886] loop6: detected capacity change from 0 to 512 [ 1177.982494][T14886] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1177.996719][T14886] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 1178.005071][T14886] System zones: 1-12 [ 1178.009504][T14886] EXT4-fs (loop6): 1 truncate cleaned up [ 1178.016980][T14886] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1178.147008][ T9890] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1178.483542][ T5177] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1178.592091][T14892] loop7: detected capacity change from 0 to 32768 [ 1178.638865][T14892] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 1178.699489][ T5177] usb 7-1: Using ep0 maxpacket: 8 [ 1178.733956][ T5177] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1178.763563][ T5177] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1178.793689][ T5177] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1178.823872][ T5177] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1178.838143][ T9891] [ 1178.839777][ T5177] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1178.840472][ T9891] ====================================================== [ 1178.840479][ T9891] WARNING: possible circular locking dependency detected [ 1178.849955][ T5177] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1178.856465][ T9891] 6.6.95-syzkaller #0 Not tainted [ 1178.856474][ T9891] ------------------------------------------------------ [ 1178.856480][ T9891] syz-executor/9891 is trying to acquire lock: [ 1178.856488][ T9891] ffff88805c00d118 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}, at: __ocfs2_flush_truncate_log+0x351/0x10b0 [ 1178.856540][ T9891] [ 1178.856540][ T9891] but task is already holding lock: [ 1178.856544][ T9891] ffff888079deb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 1178.856590][ T9891] [ 1178.856590][ T9891] which lock already depends on the new lock. [ 1178.856590][ T9891] [ 1178.856595][ T9891] [ 1178.856595][ T9891] the existing dependency chain (in reverse order) is: [ 1178.856601][ T9891] [ 1178.856601][ T9891] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}: [ 1178.856634][ T9891] down_write+0x97/0x1f0 [ 1178.856648][ T9891] __ocfs2_move_extents_range+0x1a65/0x3360 [ 1178.856670][ T9891] ocfs2_move_extents+0x379/0x940 [ 1178.856690][ T9891] ocfs2_ioctl_move_extents+0x4e1/0x6c0 [ 1178.856711][ T9891] ocfs2_ioctl+0x195/0x750 [ 1178.856725][ T9891] __se_sys_ioctl+0xfd/0x170 [ 1178.856744][ T9891] do_syscall_64+0x55/0xb0 [ 1178.856762][ T9891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.856778][ T9891] [ 1178.856778][ T9891] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{3:3}: [ 1178.856806][ T9891] __lock_acquire+0x2ddb/0x7c80 [ 1178.856822][ T9891] lock_acquire+0x197/0x410 [ 1178.856836][ T9891] down_write+0x97/0x1f0 [ 1178.856848][ T9891] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 1178.856867][ T9891] ocfs2_flush_truncate_log+0x4f/0x60 [ 1178.856885][ T9891] ocfs2_sync_fs+0x117/0x310 [ 1178.856902][ T9891] sync_filesystem+0x1c2/0x220 [ 1178.856916][ T9891] generic_shutdown_super+0x6f/0x2b0 [ 1178.856932][ T9891] kill_block_super+0x44/0x90 [ 1178.856947][ T9891] deactivate_locked_super+0x97/0x100 [ 1178.856962][ T9891] cleanup_mnt+0x429/0x4c0 [ 1178.856978][ T9891] task_work_run+0x1ce/0x250 [ 1178.856996][ T9891] exit_to_user_mode_loop+0xe6/0x110 [ 1178.857014][ T9891] exit_to_user_mode_prepare+0xb1/0x140 [ 1178.857032][ T9891] syscall_exit_to_user_mode+0x1a/0x50 [ 1178.857047][ T9891] do_syscall_64+0x61/0xb0 [ 1178.857063][ T9891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1178.857076][ T9891] [ 1178.857076][ T9891] other info that might help us debug this: [ 1178.857076][ T9891] [ 1178.857080][ T9891] Possible unsafe locking scenario: [ 1178.857080][ T9891] [ 1178.857083][ T9891] CPU0 CPU1 [ 1178.857088][ T9891] ---- ---- [ 1178.857091][ T9891] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1179.072208][ T5177] usb 7-1: GET_CAPABILITIES returned 0 [ 1179.072245][ T5177] usbtmc 7-1:16.0: can't read capabilities [ 1179.077996][ T9891] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1179.078018][ T9891] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5); [ 1179.078034][ T9891] lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6); [ 1179.078051][ T9891] [ 1179.078051][ T9891] *** DEADLOCK *** [ 1179.078051][ T9891] [ 1179.078055][ T9891] 2 locks held by syz-executor/9891: [ 1179.078064][ T9891] #0: ffff88805d26c0e0 (&type->s_umount_key#120){++++}-{3:3}, at: deactivate_super+0xa4/0xe0 [ 1179.078117][ T9891] #1: ffff888079deb498 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{3:3}, at: ocfs2_flush_truncate_log+0x47/0x60 [ 1179.078166][ T9891] [ 1179.078166][ T9891] stack backtrace: [ 1179.078184][ T9891] CPU: 1 PID: 9891 Comm: syz-executor Not tainted 6.6.95-syzkaller #0 [ 1179.078199][ T9891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 1179.078211][ T9891] Call Trace: [ 1179.078218][ T9891] [ 1179.078228][ T9891] dump_stack_lvl+0x16c/0x230 [ 1179.078252][ T9891] ? load_image+0x3b0/0x3b0 [ 1179.078269][ T9891] ? show_regs_print_info+0x20/0x20 [ 1179.078292][ T9891] ? print_circular_bug+0x12b/0x1a0 [ 1179.078313][ T9891] check_noncircular+0x2bd/0x3c0 [ 1179.078334][ T9891] ? print_deadlock_bug+0x5d0/0x5d0 [ 1179.078351][ T9891] ? lockdep_lock+0xe0/0x220 [ 1179.078370][ T9891] ? _find_first_zero_bit+0xd3/0x100 [ 1179.078395][ T9891] __lock_acquire+0x2ddb/0x7c80 [ 1179.078420][ T9891] ? ocfs2_get_system_file_inode+0x1e3/0x7b0 [ 1179.078440][ T9891] ? __lock_acquire+0x7c80/0x7c80 [ 1179.294744][ T5177] usb 7-1: USB disconnect, device number 31 [ 1179.297395][ T9891] ? verify_lock_unused+0x140/0x140 [ 1179.308514][ T9891] ? __mutex_unlock_slowpath+0x1a2/0x6a0 [ 1179.314163][ T9891] ? do_raw_spin_lock+0x121/0x2c0 [ 1179.319174][ T9891] ? mutex_unlock+0x10/0x10 [ 1179.323679][ T9891] lock_acquire+0x197/0x410 [ 1179.328192][ T9891] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 1179.334178][ T9891] ? ocfs2_get_system_file_inode+0x1f1/0x7b0 [ 1179.340176][ T9891] ? __might_sleep+0xe0/0xe0 [ 1179.344765][ T9891] ? read_lock_is_recursive+0x20/0x20 [ 1179.350134][ T9891] ? ocfs2_fast_symlink_read_folio+0x530/0x530 [ 1179.356280][ T9891] ? __wake_up+0x11f/0x190 [ 1179.360677][ T9891] down_write+0x97/0x1f0 [ 1179.364907][ T9891] ? __ocfs2_flush_truncate_log+0x351/0x10b0 [ 1179.370975][ T9891] ? down_read_killable+0x340/0x340 [ 1179.376152][ T9891] ? _raw_write_unlock+0x28/0x40 [ 1179.381064][ T9891] ? jbd2_journal_unlock_updates+0x84/0xe0 [ 1179.386855][ T9891] __ocfs2_flush_truncate_log+0x351/0x10b0 [ 1179.392674][ T9891] ? ocfs2_truncate_log_needs_flush+0x2e0/0x2e0 [ 1179.398906][ T9891] ? read_lock_is_recursive+0x20/0x20 [ 1179.404287][ T9891] ? down_write+0x162/0x1f0 [ 1179.408784][ T9891] ? down_read_killable+0x340/0x340 [ 1179.413964][ T9891] ? __rwlock_init+0x150/0x150 [ 1179.418799][ T9891] ocfs2_flush_truncate_log+0x4f/0x60 [ 1179.424162][ T9891] ocfs2_sync_fs+0x117/0x310 [ 1179.428753][ T9891] ? ocfs2_put_super+0x1c0/0x1c0 [ 1179.433677][ T9891] ? writeback_inodes_sb_nr+0x30/0x30 [ 1179.439048][ T9891] ? get_nr_dirty_inodes+0x1d4/0x220 [ 1179.444337][ T9891] sync_filesystem+0x1c2/0x220 [ 1179.449096][ T9891] generic_shutdown_super+0x6f/0x2b0 [ 1179.454365][ T9891] kill_block_super+0x44/0x90 [ 1179.459020][ T9891] deactivate_locked_super+0x97/0x100 [ 1179.464381][ T9891] cleanup_mnt+0x429/0x4c0 [ 1179.468796][ T9891] task_work_run+0x1ce/0x250 [ 1179.473384][ T9891] ? task_work_cancel+0x240/0x240 [ 1179.478403][ T9891] ? exit_to_user_mode_loop+0x3b/0x110 [ 1179.483853][ T9891] exit_to_user_mode_loop+0xe6/0x110 [ 1179.489135][ T9891] exit_to_user_mode_prepare+0xb1/0x140 [ 1179.494667][ T9891] syscall_exit_to_user_mode+0x1a/0x50 [ 1179.500111][ T9891] do_syscall_64+0x61/0xb0 [ 1179.504520][ T9891] ? clear_bhb_loop+0x40/0x90 [ 1179.509200][ T9891] ? clear_bhb_loop+0x40/0x90 [ 1179.513871][ T9891] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1179.519761][ T9891] RIP: 0033:0x7fd95458fc57 [ 1179.524175][ T9891] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 1179.543786][ T9891] RSP: 002b:00007ffd491ee178 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 1179.552195][ T9891] RAX: 0000000000000000 RBX: 00007fd954610925 RCX: 00007fd95458fc57 [ 1179.560148][ T9891] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd491ee230 [ 1179.568098][ T9891] RBP: 00007ffd491ee230 R08: 0000000000000000 R09: 0000000000000000 [ 1179.576051][ T9891] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd491ef2c0 [ 1179.584009][ T9891] R13: 00007fd954610925 R14: 000000000011fc6f R15: 00007ffd491ef300 [ 1179.591976][ T9891] [ 1179.616077][ T9891] ocfs2: Unmounting device (7,7) on (node local) [ 1179.743313][T14773] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 1179.943427][T14773] usb 5-1: Using ep0 maxpacket: 32 [ 1179.950096][T14773] usb 5-1: config index 0 descriptor too short (expected 156, got 27) [ 1179.958450][T14773] usb 5-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1179.969408][T14773] usb 5-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1179.980557][T14773] usb 5-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1179.997441][T14773] usb 5-1: config 0 interface 0 has no altsetting 0 [ 1180.005961][T14773] usb 5-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1180.015025][T14773] usb 5-1: New USB device strings: Mfr=85, Product=120, SerialNumber=6 [ 1180.023287][T14773] usb 5-1: Product: syz [ 1180.027888][T14773] usb 5-1: Manufacturer: syz [ 1180.032472][T14773] usb 5-1: SerialNumber: syz [ 1180.038238][T14773] usb 5-1: config 0 descriptor?? [ 1180.044488][T14773] ldusb 5-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1180.055534][T14773] ldusb 5-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1180.250065][ T9] usb 5-1: USB disconnect, device number 34 [ 1180.257025][ T9] ldusb 5-1:0.0: LD USB Device #0 now disconnected [ 1185.864270][ T1135] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1185.965932][ T3541] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)