last executing test programs: 1m2.951058016s ago: executing program 1 (id=1338): prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0xfff) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r2, 0x4b71, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x602, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r3, 0x0) recvmmsg(r3, &(0x7f0000000080), 0x72a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x840, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2000c850, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002ccd5a1eeebdb865a4889606b68bc05c2c9794da5c037e771f0c8097f1807a77e7fe38b089126a023ddd0b55b4313637e8474f4f1f011b6b9df0cdc47b"], 0x1, 0x1cf, &(0x7f00000002c0)="$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") 1m0.376878767s ago: executing program 1 (id=1343): r0 = socket$inet6(0xa, 0x1, 0x6) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x1, 0x0, @private1}, 0x1c) 58.711160473s ago: executing program 1 (id=1346): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x1, 0x2, 0x5, 0x0, 0x0, {0x7, 0x0, 0x3}, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x10) 58.631393981s ago: executing program 1 (id=1348): syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x4004, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file1\x00', 0x1008000, &(0x7f0000000040)=ANY=[], 0x1, 0x5e7, &(0x7f0000000680)="$eJzs3cFvHFcdB/DvbBxnHaTUcZM2oEpYRaoQFsl6LZGUC1AKslCFKnHgbBEnsbJJK3uL3B4gIA4Vp/4JRcj/AOJYpBxoDxzg1LNRj0jcfdtqZmfX62TrJrab3TSfjzT73ps38/b3fjM7mVkr2gDPrNWlzNxPkdWlN7bL9u7OSmd3Z+XOoJ7kTJJG0kxSlKv/nuSz5F76S7456BgpH/LpR82bn3zw8fv9VjlWs5jpb18ctt+jGcYy34+1Kk9qvPaxxzs4w4Uki8eLD05Gb+C/Y7uP+bkEAKZZkZwat34+OVvfsJfPAf274v499lPt3qQDAAAAgCfgub3sZTvnJh0HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPE3q3/8v6qUxqC+mGPz+/2y9LnX9qXZ/0gEAAAAAAAAAwAn49l72sp1zg3avqP7m/3LVuFC9fiPvZCvr2czlbGct3XSzmeUk8yMDzW6vdbuby4+wZ3vsnu0nM18AAAAAAAAA+Jr6Y1b3//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADToEhO9YtquTCoz6cxk6SZZLbc7l7yn0H9aXZ/0gEAAADAE/DcXvaynXODdq+onvlfqJ77m3knd9PNRrrpZD3Xq+8C+k/9jd2dlc7uzsqdcnl43J/8/7HCqEZM/7uH8e98qdpiLjeyUa25nN/krXRyPY1qz9KlQTzj4/pDGVPxo9ojRna9LsuZ/6Iup8N8lZHTw4y06tjKbJw/PBOPeXQefKflNIbf/Fz4CnJ+ti7L+bw+1Tlvj5x9LxyeiWTh13++eqtz9/atG1tL0zOlI3owEysjmXjxmcpEq8rExWF7NT/Pr7KUxbyZzWzkt1lLN+tZzOtVba0+n8vX+cMz9eMDrTe/LJLZ+rj0r6KPF9PL1b7nspFf5q1cr45oK1dzNe38IK+mdeAIXxwb9+97dfder9dL4/E+9d/5bl05neRndTkdyryeH8nr6DV3vuobXbOfpYWTvzbOfKuulGfPa1N3bTz/wL8Sg0w8f3gm/lKdOFudu7c3b629/Yjv90pdlhn46TATM/Xa3qkTmdSRlOfLwjCWg2dH2ff82L7lqu/CsK/xUN/FYd+XfVJn63u4h0dqV30vju3r73dppG/c/RYAU+/s987Ozv1v7t9zH879ae7W3BvN185cO/PSbE7/8/QPZ1qnXmm8VPwtH+Z3+8//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0W29+97ttU5nffPIlcEvER13HBUVlempTPrKBHzVrnTvvH1l6933vr9xZ+3m+s31u6+2rl1bXl6+2rpyY6OzXr9OOkoA4CTt3/RPOhIAAAAAAAAAAAAAAOCLPIn/TjzpOQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF9vq0uZuZ8iy63LrbK9u7PSKZdBfX/LZpKirPwjyWfJvfSXzI8MV3zR+3z6UfPmJx98/P7+WM1q+3+1T2IWB2JpPBDTccdrj4z31yMNVwwzs5hkoS5h4j4PAAD//6LKBsA=") r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, 0x0, 0x0) write$FUSE_INIT(r1, 0x0, 0x0) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) getdents64(r2, 0x0, 0x0) rmdir(&(0x7f0000000100)='./file0\x00') 57.367072108s ago: executing program 1 (id=1357): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000340)={[{@noblock_validity}, {@dioread_nolock}, {@noinit_itable}, {@acl}, {@jqfmt_vfsv0}, {@usrjquota, 0x2e}], [], 0x2c}, 0xc4, 0x452, &(0x7f0000000480)="$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") r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000400)='ns\x00') readlinkat(r2, &(0x7f0000000100)='./mnt\x00', &(0x7f0000000440)=""/163, 0xa3) 54.668745407s ago: executing program 1 (id=1371): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000004c, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae0088c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d", @ANYBLOB="2c616c6c6f775f753d30303030303030a552303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86ead00000000436cdb4047ce2f9fd77a67cf5b8ce94c9f9c55240d215f0cd19cbc29c929d50ee5aad4d9d5ff5709e589ccaf2f461164eb96418b01fc94850a03f75beb688e0efea28d60a7d8a7ba6f0a4eaf2caebdf1fc88d4cac84742fc33dedd39c639b1bb0f"], 0xfe, 0x1518, &(0x7f0000000d80)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBIklySMghSZIkySkhSZIkJIackoYk5DhpchhCcpjGpHE+H3JOmmxNkyQhOSXru9j2tvvau/b/2/vb/tee+3dd65p1v897r/d+5n6vedfzzDXzXc9RdZvXq9WUiMS/BP78JUEIESOEGCaEuE4IEQghKsZWjL14PI+ChH/tRdi/18MpV7sCdjVx/3M27n/Oxv3P2bj/ORv3P2fj/uds3P+cjfvPWE62bXaR63nk3MH3/3My/vz/L5JddvJXG8re2Ot/kML9z9m4/zkb9z9n4/7nbNz/nI37/9+v5u8c4/7nbNx/xnKyv94LPu+9/19wP5rHf3Zc7fcfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Yy/Qgsh/jK/2nUxxhhjjDHGGGPs38fnvtoVMMYYY4wxxhhj7P8/EFIooUUgconcIkbkEXnFNSKfuFbkF9eJiLhexIobRAFxoygoConCooiIE0VFMWEECitIhKK4KCGi4iZRUtws4kUpUVqUEU6UFeXELaK8uFVUELeJiuJ2UUncISqLKqKqqCbuFNXFXaKGqClqibtFbVFH1BX1xD2ivrhXNBD3iYbiftFIPCAaiwdFE/GQaCoeFs3EI6K5eFS0EI+JlqKVaC3aiLb/T/kvib7iZdFP9BcJYoAYKF4Rg8RgMUQMFcPEq2K4eE2MEK+LRDFSjBJviNHiTTFGvCXGinFivHhbTBATxSQxWUwRU0WSeEdME++KZPGemC5miJlilkgRs8Uc8b6YK+aJ+eIDsUB8KBaKRWKxWCJSxUciTSwV6eJjsUx8IjLEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxKdiu9ghdopdYrfYI/aKz8Q+8bnYL74QmeLL/2H+6f8rvxcIECBBggYNuSAXxEAM5IW8kA/yQX7IDxGIQCzEQgEoAAWhIBSGwhAHcVAMigECAgFBcSgOUYhCSSgJ8RAPpaE0OHBQDspBebgVKkAFqAgVoRJUgspQBapANagG1aE61IAaUAtqQW2oDXWhLtwD98C90AAaQENoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraE1tIW20A7aQXtoDx2hI3SCTtAZOkMXUJff392gO3SHHtADekJP6AW9oTe8BC/By/Ay9IfacgAMhIEwCAbBEBgKQ+FVGA6vwWvwOiTCSBgFb8Ab8CaMgVMwFsbBeBgP1eVEmASTgeRUSIIkmAbTIBmSYTrMgBkwC1JgNsyBOTAX5sE8+AAWwIfwISyCRbAEUiEV0mAppEM6LIPTkAHLYQWshFWwGlbBWlgHa2EDbIQNsBk2w1bYCp/Cp7ADdsAu2AV7YA98Bp/B5/A5JEImZMIBOAAH4SBkQRZkQzYcgkNwGA7DETgCR+EoHIPjcAKOw0k4CafgNJyBM3AOzsF5eCHum2Z7Sq1PFPIiLbXMJXPJGBkj88q8Mp/MJ/PL/DIiIzJWxsoCsoAsKAvKwrKwjJNxspgsJlGiJBnK4rK4jMqoLClLyngZL0vL0tJJJ8vJcrK8LC8ryAqyorxdVpJ3yMqyiuzgqslqsrrs6GrImrKWrCVryzqyrqwn68n6sr5sIBvIhrKhbCQbycbyQdlEDoAh8LC82JnmciS0kKOgpWwlW8s28k14XLaTY6C97CA7yiflOBgLnWU710U+I7vKSdBNPicnw/Oyh5wKPeWLspfsLfvIl2Rf2d71k/3ldBggB8pZMEgOlkPkUDkX6siLHasrX5eJcqQcJd+QS+BNOUa+JcfKcXK8fFtOkBPlJDlZTpFTZZJ8R06T78pk+Z6cLmfImXKWTJGz5Rz5vpwr58n58gO5QH4oF8pFcrFcIlPlRzJNLpXp8mO5TH4iM+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVuldvkp3K73CF3yl1yt9wj98rP5D75udwvv5CZ8kt5QP5JHpRfySz5tcyW38hD8lt5WH4nj8jv5VH5gzwmj8sT8kd5Uv4kT8nT8ow8K8/Jn+V5+Yu8IL0UCpRUSmkVqFwqt4pReVRedY3Kp65V+dV1KqKuV7HqBlVA3agKqkKqsCqi4lRRVUwZhcoqUqEqrkqoqLpJlVQ3q3hVSpVWZZRTZVU5dYsqr25VFdRtqqK6XVVSd6jKqoqqqqqpO1V1dZeqoWqqWupuVVvVUXVVPXWPqq/uVQ3Ufaqhul81Ug+oxupB1UQ9pJqqh1Uz9Yhqrh5VLdRjqqVqpVqrNqqtely1U0+o9qqD6qieVJ3UU6qzelp1Uc+orupZ1U09p7qr51UP9YLqqV5UvVRv1Uf9oi4or/qp/ipBDVAD1StqkBqshqihaph6VQ1Xr6kR6nWVqEaqUeoNNVq9qcaot9RYNU6NV2+rCWqimqQmqylqqkpS76hp6l2VrN5T09UMNVPNUilqthpyeaX5/0T+u38nf8SlV9+qtqlP1Xa1Q+1Uu9RutUftVXvVPrVP7Vf7VabKVAfUAXVQHVRZKktlq2x1SB1Sh9VhdUQdUUfVUXVMHVdn1Y/qpPpJnVKn1Wl1Vp1T59T5y98DoUFLrbTWgc6lc+sYnUfn1dfofPpanV9fpyP6eh2rb9AF9I26oC6kC+siOk4X1cW00aitJh3q4rqEjuqbdEl9s47XpXRpXUY7XVaX07f8y/l/VF9b3Va30+10e91ed9QddSfdSXfWnXUX3UV31V11N91Nd9fddQ/dQ/fUPXUv3Uv30X10X91X99P9dIJO0AP1K3qQHqyH6KF6mH5VD9fD9Qg9QifqRD1Kj9Kj9Wg9Ro/RY/VYPV6P1xP0BD1JT9JT9BSdpJP0ND1NJ+tkPV1P1zP1TJ2iU/QcPUfP1XP1fD1fL9AL9EK9UC/Wi3WqTtVpOk2n63S9TC/TGXq5Xq5X6pV6tV6t1+q1er1erzfqjXqz3qwz9Da9TW/X2/VOvVPv1rv1Xr1X79P79H69X2fqTH1AH9AH9UGdpbN0ts7Wh/QhfVgf1kf0EX1UH9XH9DF9Qp/QJ/VJfUqf0mf0GX1On9Pn9Xl9QV+4uO0LZCADHeggV5AriAligrxB3iBfkC/IH+QPIkEkiA1igwLBjUHBoFBQOCgSxAVFg2KBCTCwAQVhUDwoEUSDm4KSwc1BfFAqKB2UCVxQNigX3BKUD24NKgS3BRWD24NKwR1B5aBKUDWoFtwZVA/uCmoENYNawd1B7aDOX34PFdwbNAjuCxoG9weNggeCxsGDQZPgoaBp8HDQLHgkaB48GrQIHgtaBq2C1kGboO0/u35QN6gX3BPU/931vT9V6AnXz/Q3CWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm0Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNknnHTDPvmmTznpluZpiZZpZJMbPNHPO+mWvmmfnmA7PAfGgWmkVmsVliUs1HJs0sNenmY7PMfGIyzHKzwqw0q8xqs8asNevMerPBbDSbzGazxWw128ynZrvZYXaaXWa32WP2ms/MPvO52W++MJnmS3PA/MkcNF+ZLPO1yTbfmEPmW3PYfGeOmO/NUfODOWaOmxPmR3PS/GROmdPmjDlrzpmfzXnzi7lg/MXN/cWPd9SoMRfmwhiMwbyYF/NhPsyP+TGCEYzFWCyABbAgFsTCWBjjMA6LYTG8iJCwOBbHKEaxJJbEeIzH0lgaHTosh+WwPJbHClgBK2JFrISVsDJWxqpYFe/EO/EuvAtrYk28G+/GOlgH62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsYu2AW7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/ud7YcJmIADcSAOwkE4BIfgMByGw3E4jsARmIiJOApH4WgcjWNwDI7FcTge38YJOBEn4WScglMxCZNwGk7DZEzG6TgdZ+JMTMEUnINzcC7Oxfk4HxfgAlyIC3ExLsZUTMU0TMN0TMdluAwzMANX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DbfjdtyJO3E37sa9uBf34T7cj/sxEzPxAB7Ag3gQszALszEbD+EhPIyH8QgewaN4FI/hMTyBJ/AknsRTeArP4Bk8hz/jefwFL6DHGCtFXnuNzWevtfntdTbG5rF/Gxe2RWycLWqLWWML2kK/itFaG29L2dK2jHW2rC1nb/lNXNlWsVVtNXunrW7vsjV+E9e399oG9j7b0N5v69l7fhU3sg/YxvZR28Q+ZpvaVraZbWOb20dtC/uYbWlb2da2je1kn7Kd7dO2i33GdrXP/iZOs0vtOrvebrAb7T77uT1jz9rD9jt7zv5s+9n+dph91Q63r9kR9nWb2HDkr2M70o63b9sJdqKdZCfbKXbqb+KZdpZNsbPtHPu+nWvn/SZOtR/ZBTbdLrSL7GK75FJ8saZ0+7FdZj+xGXa5XWFX2lV2tV1j1/611pV2s91it9q99jO73e6wO+0uu9vuuRRfPI/99gubab+0h+y39qD9ymbZIzbbfnMpvnh+R+z39qj9wR6zx+0J+6M9aX+yp+zpS+d/8dx/tL/YC9ZbQUCSFGkKKBflphjKQ3npGspH11J+uo4idD3F0g1UgG6kglSIClMRiqOiVIwMIVkiCqk4laAo3UQl6WaKp1JUmsqQo7JUjm6h8nQrVaDbqCLdTpXoDqpMVagqVaM7qTrdRTWoJtWiu6k21aG6VI/uofp0LzWg+6gh3U+N6AFqTA9SE3qImtLD1Iweoeb0KLWgx6gltaLW1Iba0uPUjp6g9tSBOtKT1Imeos70NHWhZ6grPUvd6DnqTs9TD3qBetKL1It6Ux96ifrSy9SP+lMCDaCB9AoNosE0hIbSMHqVhtNrNIJep0QaSaPoDRpNb9IYeovG0jgaT2/TBJpIk2gyTaGplETv0DR6l5LpPZpOM2gmzaIUmk1z6H2aS/NoPn1AC+hDWkiLaDEtoVT6iNJoKaXTx7SMPqEMWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jb6lLbTDtpJu2g37aG99Bnto89pP31BmfQlHaA/0UH6irLoa8qmb+gQfUuH6Ts6Qt/TUfqBjtFxOkE/0kn6iU7RaTpDZ+kc/Uzn6Re6QJ5ECKEMVajDIMwV5g5jwjxh3vCaMF94bZg/vC6MhNeHseENYYHwxrBgWCgsHBYJ48KiYbHQhBjakMIwLB6WCIW4KSwZ3hzGh6XC0mGZ0IVlw3LhLWH58NawQnhbWDG8PawU3hFWDquEj95fLbwzrB7eFdYIa4a1wrvD2mGdsG5YL7wnrB/eGzYI7wsbhveHFcIHwsbhg2GT8KGwafhw2Cx8JGwePhq2CB8LW4atwtZhm7Bt+HjYLnwibB92CDuGT4adwqfCzuHTYZfwmbBr+OwfHk8IB4QDw1fCV0Lv71OLo0uiqdGPomnRpdH06MfRZdFPohnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a1R7+vlFg6cdMppF7hcLreLcXlcXneNy+eudfnddS7irnex7gZXwN3oCrpCrrAr4uJcUVfMGYfOOnKhK+5KuKi7yZV0N7t4V8qVdmWcc2VdOdfGtXVtXTv3hGvvOriO7kn3pHvKPeXyiKfdM66re9Z1c8+57u5518O94F5wL7perrfr415yfd3Lrp/r7xJcghvoBrpBbpAb4obkurwHcyPcCJfoEt0oN8qNdqPdGDfGjXVj3Xg33k1wE9wkN8lNcVNckkty09w0l+yS3XQ33c10M12KS3Fz3Bw318118918tyB+gVvoFrrFbrFLdakuzaW5dJfulrllLsNluBVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrntbrvb6Xa63W632+v2un1un9vv9rtMl+kOuAPuoDvostzXLtt94w65b91h95074r53R90P7pg77k64H91J95M75U67M+6sO+d+dufdL+6C8y4p8k5kWuTdSHLkvcj0yIzIzMisSEpkdmRO5P3I3Mi8yPzIB5EFkQ8jCyOLIosjSyKpkY8iaZGlkfTIx5FlkU8iGZHlkRWRlZFVkdUR74tuD31xX8JH/U2+pL/Zx/tSvrQv450v68v5W3x5f6uv4G/zFf3tvpK/w1f2VXxV/5hv6Vv51r6Nb+sf9+38E7697+A7+id9J/+U7+yf9l38M76rf9Z388/57v5538O/4Hv6F30v39v38S/5vv5l38/39wl+gB/oX/GD/GA/xA/1w/yrfrh/zY/wr/tEP9KP8m/40f5NP8a/5cf6cX68f9tP8BP9JD/ZT/FTfZJ/x0/z7/pk/56f7mf4mX6WT/Gz/Rz/vp/r5/n5/gO/wH/oF/pFfrFf4lP9Rz7NL/Xp/mO/zH/iM/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8p3673+F3+l1+t9/j9/rP/D7/ud/vv/CZ/kt/wP/JH/Rf+Sz/tc/23/hD/lt/2H/nj/jv/VH/gz/mj/sT/kd/0v/kT/nT/ow/68/5n/15/4u/wH+zxhhjjDH2T0nO+v3jA/7OY/LyuGigEOLaHUWy//a4FkJsKvjn+WAZ1ykihHimf8+H/zJq105ISLj83AwlghKLhBCRK/mXLkMux8tFR/GU6CI6iPJ/t77Bsvc5+p314Zj30duFyPs3OTHiSnxl/Vv/wfqPPzk+rVJ4JvbX65+/vN+8WH90kRDxJa7k5BFX4ivrV/gH6xdq93v1ZyiR56skIdr/TU4+cSW+sn458YR4VnT51TMZY4wxxhhjjLE/Gyyrdv+D689L1+dx+lJ46eHc4q/xH16fM8YYY4wxxhhj7Op7vnefpx/v0qVDd57whCc8+evkav9kYowxxhhjjP27Xdn0/8OnZKX+RytijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZynv/EvxO72ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXW3/JwAA///UJ0JQ") chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x181402, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 54.43390051s ago: executing program 32 (id=1371): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000004c, &(0x7f00000008c0)=ANY=[@ANYRES16=0x0, @ANYRESOCT, @ANYRES32=0x0, @ANYBLOB="b71fe84fda50cf6fbefac5a5891d03a05027c0e6658ea94f09636160112a47b688552b72051bf0111daffbe0adef82589ee2fac726c31d20f98aa1f9761873cd604dab0d22b4b321f4c20044c5a8e018b51e52342814e4c33a7f4807781862b524b303c604203d95ef2f4feb698f5a4f3983ca0adeae0088c2e16969e9000a6a9d85bf9d4ee333cfeb763ad6506f66797f154f0923a63f106d908d1cf2a884e57ab63950b9883c40449a94847df80ca39e9394f8de077bfd7f0c81e773fe8ad33c339a0f92997d172adcde0c53c97cce8a0f42c862a0c88c9a25ccf6799b85dadc245f608d", @ANYBLOB="2c616c6c6f775f753d30303030303030a552303030303030303030303030303030372c646973636172642c00f7d4dceab5ea879b952debb95a4bd62fee1c5818ede60164889e83a588b4e8d85d0c30a28fa4ac4bf29b850e0f3403fda87be3922e7cff7f0000dd9fd4b9ef9af86ead00000000436cdb4047ce2f9fd77a67cf5b8ce94c9f9c55240d215f0cd19cbc29c929d50ee5aad4d9d5ff5709e589ccaf2f461164eb96418b01fc94850a03f75beb688e0efea28d60a7d8a7ba6f0a4eaf2caebdf1fc88d4cac84742fc33dedd39c639b1bb0f"], 0xfe, 0x1518, &(0x7f0000000d80)="$eJzs3AuYjtX6MPB1r7UehqS3SQ7Dutf98KbBIklySMghSZIkySkhSZIkJIackoYk5DhpchhCcpjGpHE+H3JOmmxNkyQhOSXru9j2tvvau/b/2/vb/tee+3dd65p1v897r/d+5n6vedfzzDXzXc9RdZvXq9WUiMS/BP78JUEIESOEGCaEuE4IEQghKsZWjL14PI+ChH/tRdi/18MpV7sCdjVx/3M27n/Oxv3P2bj/ORv3P2fj/uds3P+cjfvPWE62bXaR63nk3MH3/3My/vz/L5JddvJXG8re2Ot/kML9z9m4/zkb9z9n4/7nbNz/nI37/9+v5u8c4/7nbNx/xnKyv94LPu+9/19wP5rHf3Zc7fcfY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjLGc4Yy/Qgsh/jK/2nUxxhhjjDHGGGPs38fnvtoVMMYYY4wxxhhj7P8/EFIooUUgconcIkbkEXnFNSKfuFbkF9eJiLhexIobRAFxoygoConCooiIE0VFMWEECitIhKK4KCGi4iZRUtws4kUpUVqUEU6UFeXELaK8uFVUELeJiuJ2UUncISqLKqKqqCbuFNXFXaKGqClqibtFbVFH1BX1xD2ivrhXNBD3iYbiftFIPCAaiwdFE/GQaCoeFs3EI6K5eFS0EI+JlqKVaC3aiLb/T/kvib7iZdFP9BcJYoAYKF4Rg8RgMUQMFcPEq2K4eE2MEK+LRDFSjBJviNHiTTFGvCXGinFivHhbTBATxSQxWUwRU0WSeEdME++KZPGemC5miJlilkgRs8Uc8b6YK+aJ+eIDsUB8KBaKRWKxWCJSxUciTSwV6eJjsUx8IjLEcrFCrBSrxGqxRqwV68R6sUFsFJvEZrFFbBXbxKdiu9ghdopdYrfYI/aKz8Q+8bnYL74QmeLL/2H+6f8rvxcIECBBggYNuSAXxEAM5IW8kA/yQX7IDxGIQCzEQgEoAAWhIBSGwhAHcVAMigECAgFBcSgOUYhCSSgJ8RAPpaE0OHBQDspBebgVKkAFqAgVoRJUgspQBapANagG1aE61IAaUAtqQW2oDXWhLtwD98C90AAaQENoCI2gETSGxtAEmkBTaArNoBk0h+bQAlpAS2gJraE1tIW20A7aQXtoDx2hI3SCTtAZOkMXUJff392gO3SHHtADekJP6AW9oTe8BC/By/Ay9IfacgAMhIEwCAbBEBgKQ+FVGA6vwWvwOiTCSBgFb8Ab8CaMgVMwFsbBeBgP1eVEmASTgeRUSIIkmAbTIBmSYTrMgBkwC1JgNsyBOTAX5sE8+AAWwIfwISyCRbAEUiEV0mAppEM6LIPTkAHLYQWshFWwGlbBWlgHa2EDbIQNsBk2w1bYCp/Cp7ADdsAu2AV7YA98Bp/B5/A5JEImZMIBOAAH4SBkQRZkQzYcgkNwGA7DETgCR+EoHIPjcAKOw0k4CafgNJyBM3AOzsF5eCHum2Z7Sq1PFPIiLbXMJXPJGBkj88q8Mp/MJ/PL/DIiIzJWxsoCsoAsKAvKwrKwjJNxspgsJlGiJBnK4rK4jMqoLClLyngZL0vL0tJJJ8vJcrK8LC8ryAqyorxdVpJ3yMqyiuzgqslqsrrs6GrImrKWrCVryzqyrqwn68n6sr5sIBvIhrKhbCQbycbyQdlEDoAh8LC82JnmciS0kKOgpWwlW8s28k14XLaTY6C97CA7yiflOBgLnWU710U+I7vKSdBNPicnw/Oyh5wKPeWLspfsLfvIl2Rf2d71k/3ldBggB8pZMEgOlkPkUDkX6siLHasrX5eJcqQcJd+QS+BNOUa+JcfKcXK8fFtOkBPlJDlZTpFTZZJ8R06T78pk+Z6cLmfImXKWTJGz5Rz5vpwr58n58gO5QH4oF8pFcrFcIlPlRzJNLpXp8mO5TH4iM+RyuUKulKvkarlGrpXr5Hq5QW6Um+RmuUVuldvkp3K73CF3yl1yt9wj98rP5D75udwvv5CZ8kt5QP5JHpRfySz5tcyW38hD8lt5WH4nj8jv5VH5gzwmj8sT8kd5Uv4kT8nT8ow8K8/Jn+V5+Yu8IL0UCpRUSmkVqFwqt4pReVRedY3Kp65V+dV1KqKuV7HqBlVA3agKqkKqsCqi4lRRVUwZhcoqUqEqrkqoqLpJlVQ3q3hVSpVWZZRTZVU5dYsqr25VFdRtqqK6XVVSd6jKqoqqqqqpO1V1dZeqoWqqWupuVVvVUXVVPXWPqq/uVQ3Ufaqhul81Ug+oxupB1UQ9pJqqh1Uz9Yhqrh5VLdRjqqVqpVqrNqqtely1U0+o9qqD6qieVJ3UU6qzelp1Uc+orupZ1U09p7qr51UP9YLqqV5UvVRv1Uf9oi4or/qp/ipBDVAD1StqkBqshqihaph6VQ1Xr6kR6nWVqEaqUeoNNVq9qcaot9RYNU6NV2+rCWqimqQmqylqqkpS76hp6l2VrN5T09UMNVPNUilqthpyeaX5/0T+u38nf8SlV9+qtqlP1Xa1Q+1Uu9RutUftVXvVPrVP7Vf7VabKVAfUAXVQHVRZKktlq2x1SB1Sh9VhdUQdUUfVUXVMHVdn1Y/qpPpJnVKn1Wl1Vp1T59T5y98DoUFLrbTWgc6lc+sYnUfn1dfofPpanV9fpyP6eh2rb9AF9I26oC6kC+siOk4X1cW00aitJh3q4rqEjuqbdEl9s47XpXRpXUY7XVaX07f8y/l/VF9b3Va30+10e91ed9QddSfdSXfWnXUX3UV31V11N91Nd9fddQ/dQ/fUPXUv3Uv30X10X91X99P9dIJO0AP1K3qQHqyH6KF6mH5VD9fD9Qg9QifqRD1Kj9Kj9Wg9Ro/RY/VYPV6P1xP0BD1JT9JT9BSdpJP0ND1NJ+tkPV1P1zP1TJ2iU/QcPUfP1XP1fD1fL9AL9EK9UC/Wi3WqTtVpOk2n63S9TC/TGXq5Xq5X6pV6tV6t1+q1er1erzfqjXqz3qwz9Da9TW/X2/VOvVPv1rv1Xr1X79P79H69X2fqTH1AH9AH9UGdpbN0ts7Wh/QhfVgf1kf0EX1UH9XH9DF9Qp/QJ/VJfUqf0mf0GX1On9Pn9Xl9QV+4uO0LZCADHeggV5AriAligrxB3iBfkC/IH+QPIkEkiA1igwLBjUHBoFBQOCgSxAVFg2KBCTCwAQVhUDwoEUSDm4KSwc1BfFAqKB2UCVxQNigX3BKUD24NKgS3BRWD24NKwR1B5aBKUDWoFtwZVA/uCmoENYNawd1B7aDOX34PFdwbNAjuCxoG9weNggeCxsGDQZPgoaBp8HDQLHgkaB48GrQIHgtaBq2C1kGboO0/u35QN6gX3BPU/931vT9V6AnXz/Q3CWaAGWheMYPMYDPEDDXDzKtmuHnNjDCvm0Qz0owyb5jR5k0zxrxlxppxZrx520wwE80kM9lMMVNNknnHTDPvmmTznpluZpiZZpZJMbPNHPO+mWvmmfnmA7PAfGgWmkVmsVliUs1HJs0sNenmY7PMfGIyzHKzwqw0q8xqs8asNevMerPBbDSbzGazxWw128ynZrvZYXaaXWa32WP2ms/MPvO52W++MJnmS3PA/MkcNF+ZLPO1yTbfmEPmW3PYfGeOmO/NUfODOWaOmxPmR3PS/GROmdPmjDlrzpmfzXnzi7lg/MXN/cWPd9SoMRfmwhiMwbyYF/NhPsyP+TGCEYzFWCyABbAgFsTCWBjjMA6LYTG8iJCwOBbHKEaxJJbEeIzH0lgaHTosh+WwPJbHClgBK2JFrISVsDJWxqpYFe/EO/EuvAtrYk28G+/GOlgH62E9rI/1sQE2wIbYEBthI2yMjbEJNsGm2BSbYTNsjs2xBbbAltgSW2NrbIttsR22w/bYHjtiR+yEnbAzdsYu2AW7Ylfsht2wO3bHHtgDe2JP7IW9sA/2wb7YF/ud7YcJmIADcSAOwkE4BIfgMByGw3E4jsARmIiJOApH4WgcjWNwDI7FcTge38YJOBEn4WScglMxCZNwGk7DZEzG6TgdZ+JMTMEUnINzcC7Oxfk4HxfgAlyIC3ExLsZUTMU0TMN0TMdluAwzMANX4ApchatwDa7BdbgON+AG3ISbcAtuwW24DbfjdtyJO3E37sa9uBf34T7cj/sxEzPxAB7Ag3gQszALszEbD+EhPIyH8QgewaN4FI/hMTyBJ/AknsRTeArP4Bk8hz/jefwFL6DHGCtFXnuNzWevtfntdTbG5rF/Gxe2RWycLWqLWWML2kK/itFaG29L2dK2jHW2rC1nb/lNXNlWsVVtNXunrW7vsjV+E9e399oG9j7b0N5v69l7fhU3sg/YxvZR28Q+ZpvaVraZbWOb20dtC/uYbWlb2da2je1kn7Kd7dO2i33GdrXP/iZOs0vtOrvebrAb7T77uT1jz9rD9jt7zv5s+9n+dph91Q63r9kR9nWb2HDkr2M70o63b9sJdqKdZCfbKXbqb+KZdpZNsbPtHPu+nWvn/SZOtR/ZBTbdLrSL7GK75FJ8saZ0+7FdZj+xGXa5XWFX2lV2tV1j1/611pV2s91it9q99jO73e6wO+0uu9vuuRRfPI/99gubab+0h+y39qD9ymbZIzbbfnMpvnh+R+z39qj9wR6zx+0J+6M9aX+yp+zpS+d/8dx/tL/YC9ZbQUCSFGkKKBflphjKQ3npGspH11J+uo4idD3F0g1UgG6kglSIClMRiqOiVIwMIVkiCqk4laAo3UQl6WaKp1JUmsqQo7JUjm6h8nQrVaDbqCLdTpXoDqpMVagqVaM7qTrdRTWoJtWiu6k21aG6VI/uofp0LzWg+6gh3U+N6AFqTA9SE3qImtLD1Iweoeb0KLWgx6gltaLW1Iba0uPUjp6g9tSBOtKT1Imeos70NHWhZ6grPUvd6DnqTs9TD3qBetKL1It6Ux96ifrSy9SP+lMCDaCB9AoNosE0hIbSMHqVhtNrNIJep0QaSaPoDRpNb9IYeovG0jgaT2/TBJpIk2gyTaGplETv0DR6l5LpPZpOM2gmzaIUmk1z6H2aS/NoPn1AC+hDWkiLaDEtoVT6iNJoKaXTx7SMPqEMWk4raCWtotW0htbSOlpPG2gjbaLNtIW20jb6lLbTDtpJu2g37aG99Bnto89pP31BmfQlHaA/0UH6irLoa8qmb+gQfUuH6Ts6Qt/TUfqBjtFxOkE/0kn6iU7RaTpDZ+kc/Uzn6Re6QJ5ECKEMVajDIMwV5g5jwjxh3vCaMF94bZg/vC6MhNeHseENYYHwxrBgWCgsHBYJ48KiYbHQhBjakMIwLB6WCIW4KSwZ3hzGh6XC0mGZ0IVlw3LhLWH58NawQnhbWDG8PawU3hFWDquEj95fLbwzrB7eFdYIa4a1wrvD2mGdsG5YL7wnrB/eGzYI7wsbhveHFcIHwsbhg2GT8KGwafhw2Cx8JGwePhq2CB8LW4atwtZhm7Bt+HjYLnwibB92CDuGT4adwqfCzuHTYZfwmbBr+OwfHk8IB4QDw1fCV0Lv71OLo0uiqdGPomnRpdH06MfRZdFPohnR5dEV0ZXRVdHV0TXRtdF10fXRDdGN0U3RzdEt0a1R7+vlFg6cdMppF7hcLreLcXlcXneNy+eudfnddS7irnex7gZXwN3oCrpCrrAr4uJcUVfMGYfOOnKhK+5KuKi7yZV0N7t4V8qVdmWcc2VdOdfGtXVtXTv3hGvvOriO7kn3pHvKPeXyiKfdM66re9Z1c8+57u5518O94F5wL7perrfr415yfd3Lrp/r7xJcghvoBrpBbpAb4obkurwHcyPcCJfoEt0oN8qNdqPdGDfGjXVj3Xg33k1wE9wkN8lNcVNckkty09w0l+yS3XQ33c10M12KS3Fz3Bw318118918tyB+gVvoFrrFbrFLdakuzaW5dJfulrllLsNluBVuhVvlVrk1bo1b59a5DW6D2+Q2uS1ui9vmtrntbrvb6Xa63W632+v2un1un9vv9rtMl+kOuAPuoDvostzXLtt94w65b91h95074r53R90P7pg77k64H91J95M75U67M+6sO+d+dufdL+6C8y4p8k5kWuTdSHLkvcj0yIzIzMisSEpkdmRO5P3I3Mi8yPzIB5EFkQ8jCyOLIosjSyKpkY8iaZGlkfTIx5FlkU8iGZHlkRWRlZFVkdUR74tuD31xX8JH/U2+pL/Zx/tSvrQv450v68v5W3x5f6uv4G/zFf3tvpK/w1f2VXxV/5hv6Vv51r6Nb+sf9+38E7697+A7+id9J/+U7+yf9l38M76rf9Z388/57v5538O/4Hv6F30v39v38S/5vv5l38/39wl+gB/oX/GD/GA/xA/1w/yrfrh/zY/wr/tEP9KP8m/40f5NP8a/5cf6cX68f9tP8BP9JD/ZT/FTfZJ/x0/z7/pk/56f7mf4mX6WT/Gz/Rz/vp/r5/n5/gO/wH/oF/pFfrFf4lP9Rz7NL/Xp/mO/zH/iM/xyv8Kv9Kv8ar/Gr/Xr/Hq/wW/0m/xmv8Vv9dv8p3673+F3+l1+t9/j9/rP/D7/ud/vv/CZ/kt/wP/JH/Rf+Sz/tc/23/hD/lt/2H/nj/jv/VH/gz/mj/sT/kd/0v/kT/nT/ow/68/5n/15/4u/wH+zxhhjjDH2T0nO+v3jA/7OY/LyuGigEOLaHUWy//a4FkJsKvjn+WAZ1ykihHimf8+H/zJq105ISLj83AwlghKLhBCRK/mXLkMux8tFR/GU6CI6iPJ/t77Bsvc5+p314Zj30duFyPs3OTHiSnxl/Vv/wfqPPzk+rVJ4JvbX65+/vN+8WH90kRDxJa7k5BFX4ivrV/gH6xdq93v1ZyiR56skIdr/TU4+cSW+sn458YR4VnT51TMZY4wxxhhjjLE/Gyyrdv+D689L1+dx+lJ46eHc4q/xH16fM8YYY4wxxhhj7Op7vnefpx/v0qVDd57whCc8+evkav9kYowxxhhjjP27Xdn0/8OnZKX+RytijDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZynv/EvxO72ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXW3/JwAA///UJ0JQ") chdir(&(0x7f0000000540)='./file0\x00') r0 = open(&(0x7f0000000000)='./file0\x00', 0x181402, 0x0) write$FUSE_IOCTL(r0, &(0x7f0000000100)={0x20}, 0xfdef) 9.150127467s ago: executing program 2 (id=1568): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) 8.894403907s ago: executing program 2 (id=1571): syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x800700, &(0x7f0000000140)={[{@usrquota}, {@nogrpid}, {@commit={'commit', 0x3d, 0x3}}, {@errors_remount}, {@resgid}, {@sysvgroups}, {@usrjquota}]}, 0x3, 0x480, &(0x7f0000000cc0)="$eJzs3M9vFFUcAPDvTH/wm1ZEExC1SoyNP1paUDl40WjiAaOJHvBY20IICzW0JkKIVGPwYmIwejYeTfwLvHkx6snEq94NCVFiAnqqmd0Z2C673d2y7EL380kW3uu8mXnfffN23syb3QD61lj2TxKxPSJ+j4iRSnZ1gbHKf9evnp/99+r52SRWVt76KymXu3b1/GxRtFhvW54ZTyPST5J8J7GperOLZ8+dnCmV5s/k+cmlU+9NLp499+yJUzPH54/Pn54+fPjQwakXnp9+rqU4kibLs7iu7f1wYd+e19659Prs0Uvv/vxdts72fHl1HJ0ylgX+90pZ7bInOr2zHttRlU4Ge1gR2jIQEVlzDZX7/0gMxM3GG4lXP+5p5YA7Kjs3bWq8eHkF2MCSaF7mn25UBOiy4kSfXf8Wry4NPe4KV16qXABlcV/PX5Ulg5HmZYZqrm87aSwiji7/93X2ijt0HwIAoNpns18diWfycceq8V8aD1aV25nPoYxGxH0RsSsi7o+I3RHxQERWtnZI2ZKxmvyt45/08jpDa0k2/nsxn9taPf4rRn8xOpDndpTjH0qOnSjNH8jfk/EY2pTlp9bYxw+v/PZ5o2XV47/sle2/GAvm9bg8WHODbm5maaY8KO2AKx9F7B2sF39yYyYgiYg9EbG3vU3vLBInnvp235Z99Qs1j7+ePPgOzDOtfBPxZKX9l6Mm/kKy9vzk5OYozR+YLI6KW/3y68U3G0TQKP7h24+sNVn7b119/NcWGU2q52sX29/HxT8+bXhNs97jfzh5u9wuxRv1wczS0pmpiOHkSDm/6u/TN9ct8kX5LP7x/fX7/658nWw/D0VEdgg/HBGPRMSjed0fi4jHI2L/GvH/9HKeqHO8ruv471Dfj7z95+p+/t04/mvav/3EwMkfvy82trnt+LP2P1ROjed/KX/+NdFqBW/3/QMAAIB7QVp+Bj5JJ26k03RiovIM/+7YmpYWFpeePrbw/unhyrPyozGUFne6Rqruh04ly/kWK/np/F5xsfxgft/4y4Et5fzE7EJprsexQ7/b1qD/Z/4c6HXtgDuu3jzadNemoIBequ3/6ershTe6WRmgq9p9jqbZl+2Be0eT/p92qx5A9/m9Fuhf9fr/hZq8uQDYmJz/oX/p/9C/6vb/L7pfD6D7nP+hLzX6bnwx57fOr/xLbPhEpKXS3OaItQsXPwh0d9RZovVEbz+XAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOuX/AAAA//+gafEr") socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_open_procfs(0x0, &(0x7f0000000540)='net/route\x00') preadv(r1, &(0x7f0000000900)=[{&(0x7f0000000580)=""/240, 0xf0}], 0x1, 0x47, 0x3) 8.200260211s ago: executing program 4 (id=1574): unshare(0x20000400) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa07, &(0x7f0000000100)={{&(0x7f00001a1000/0x3000)=nil, 0x3000}, 0x2}) 7.458333162s ago: executing program 2 (id=1576): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) io_submit(0x0, 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, 0x0, &(0x7f0000000040)) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0xfffffffffffffffd}, 0xc) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x4e20, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x8000000000000001, 0x7, 0x80000000}, {0x7fff, 0x8000000000000000, 0xf04a}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0xfffffffd, 0x6c}, 0x0, @in6=@mcast2, 0x0, 0x3, 0x0, 0x8, 0x3}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x21, 0x0) 7.331049816s ago: executing program 4 (id=1579): r0 = socket$inet6(0xa, 0x3, 0x8) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000180)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x82, &(0x7f0000000700)=ANY=[@ANYBLOB='iocharset=default,noadinicb,gid=forget,gid=ignore,nostrict,gid=', @ANYRESDEC=0x0, @ANYRESOCT=r0], 0xfd, 0xc34, &(0x7f0000001080)="$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") r1 = open(&(0x7f0000000200)='./bus\x00', 0x14507e, 0x46) read$FUSE(r1, &(0x7f0000000a00)={0x2020}, 0x2020) 6.662574s ago: executing program 4 (id=1581): syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f0000000300)={[{@errors_continue}, {@nocheckpoint_merge}, {@alloc_mode_def}, {@six_active_logs}, {@acl}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@compress_cache}, {@lfs_mode}]}, 0x1, 0x5505, &(0x7f0000002480)="$eJzs3E1rY9UbAPAn7XTe//Mv4sLdXBiEFiZh0nlBd6PO4At2KKMuXGmapCEzSW5p0rR25cKluPCbiIIrl34GF67diQvFnaDknlud+gJC08ZOfz+4ee45OXnuc8Iw8NxbEsCptZj9/GMlrsSFiJiPiMsRxXmlPAp3U3guIq5GxNwTR6Wc/33ibERcjIgrk+QpZ6V869Pr42u3f3jjp6++OXfm0mdffju7XQOz9nxE9DfT+U4/xbyT4qNyvjHuFrF/a1zG9Eb/cTnOU9xprxcZdhr76xpFvNlJ6/PN7eEkbvQazUnsdDeK+c1BuuBw3NnPU3zgUWOrGLfa60XsDvMidvZSXbt76f+2veEo5WmV+T4o0sdotB/TfHu3nfaz+biIzcGonE9581Z7dxLHZSwvF8281yrqWD/MN/3f9mZ3sL2bjdtbw24+yG7X6i/U6neq9a281R61b1Ub/dadW9lSpzdZVh21G/27nTzv9Nq1Zt5fzpY6zWa1Xs+W7rXXu41BVq/XbtZuVG8vl2fXs1cfvJP1WtnSJL7cHWyPur1htpFvZekTy9lK7eaLy9m1evbW6lq29vD+/dW1t9+79+6Dl1Zff6Vc9JeysqWVGysr1fqN6kp9+RTt/6Oy6CnuHw6lMusCAE4e/T8wC0fX/289jDj6/j/0/1Nxovrf097/H8H+4VD0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAp9Z3C5+/VpwspvGlcv5/5dQz5bgSEXMR8evfmI+zB3LOl3kW/mH9wp9q+LoSRYbJNc6Vx8WIuFsev/z/qL8FAAAAeHp98eHVT1K3nl4WZ10QxyndtJm7/P6U8lUiYmHx+yllm5u8PDulZMW/7zOxO6VsxQ2s81NKlm65nZlWtn9l/kA4/0SopDB3rOUAAADH4mAncLxdCAAAAMfp41kXwGxUYv9R5v6z4OIv7/94IHjhwAgAAAA4gSqzLgAAAAA4ckX/7/f/AAAA4OmWfv8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAfmPnfm4TB6I4AD8bvLD/tGi1921lb1DGlrDHPUYUkCYoIAfSQhqgBnJLCRFEeBwCEYdIHttK9H2SMxnL/HiD4DAz0gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAF26r9aL26vf121zdvt28owGAAAAuGRbrRf1P7PU/9rc/97c+tn0i4goI+LS3H0Un84yR01O9fL8zenz1asa7iLqhMN7TJrrS0T8aa7HH11/CgAAAPBxbZareZqtpz+zoQuiT2nRpvz2N1NeERHV7CFTWnnI+5UprP5+j+N/prR6AWuaKSwtuY1zpb1J/XM/rtpNT5oiNeXFlx2LzDZ2AACgR6Ozpt9ZCAAAAH36N3QBDKOI563M41bgJDXN9t7nsx4AAADwDhVDFwAAAAB0rp7/93T+3975fwAAADCMdP4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXdpW68VmuZq3zdnt28kzGgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHhif95RIATCIAz2ru9M5v6HlQZNTU2qQPj4G4MBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA3v/vL/4mpcSaZe20sPY8ka6fG1qmxd24c/WF8/RoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIv9eUmBEAiCKJgz/nfS9z+sJOgZRIiAhkcVtWgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4It+98v/ialxJpk7bSwdjyRrV42tq8beg8bRg/H2bwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgIud+3mNo4oDAP5mZmdrq+IaZQ8RUfCgF7vd1tbexIMSPPgnCCHd1titP9ocbCliLt4k515EjyKCEm/9H3JOIJd4y2EPETwrMzuTnfwA118zm+TzgTfvu8Mw7/tmIeQ77yUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACURm9P4iQ7dMZxXJzb3Hu4lPVbh/rM47Xt+axlcVRn0ifDi9UPUbe5RAAAADg7krK+DyHspOsLWR938vo/La/Jav5vnx7HZT1/uO4v+7L2z9ovP+8+vz9QZzxOdtOby8PBpaOptP6/Wc62Z/7yilb+5PN3L0n+hcTvrT43SvPnGX29sfFOOw/P1ZEtAPBPXCz7Iih/H8r6fpOJAXBmtCqFd1n/J51mcwIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACow2g1PFnGUQhhvjWJM1t7D5eO6x+vbc+X7dqjR2vhy8k9s1ukIYSby8PBpVpnM9vu3X9we3E4HNytP3gphNDU6G8V07/9wRQXh9DI8xH8R0FcfNmzks/JCBr8oQQAwKmUFi2r63fS9YXsXDQXwh/fHaz/X63EYcr6f/fDa5vVsar1f7+2Gc6+3sqdT3v37j94ffnO4q3BrcHHb1zuv9m/cv3q1eu9/F1JzxsTAAAA/p120ar1fzx3dP3/QiUOU9b/n33T/6I6VqL+P9Zk0a/pTAAAAM62Z1/+/bfomPNRux0+X1xZudsfH/c/Xx4fG0j1bztXtGr9n8w1nRUAAABQh9FqdGD9/0YlDlOu/z/1/Qs/Vu+ZhBDOF+v/F5c+Gd6obzozrY4/J256jgAAADTrfNGq6/9pvv8/3t/yEIcQXntlHBf/BnCq+j9596sfqmNV9/9fqW+KMynujp9H3ndDaHWbzggAAIDT7ImiZcX+r+n6wkc/XXi/bf8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQN3+DAAA//962D6S") open(&(0x7f00000000c0)='./file7\x00', 0x48cc03, 0x120) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1ff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) getsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xa, &(0x7f0000000040), 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000180)={@local, @link_local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x1, 0x5, 0x58, 0x68, 0x0, 0x1, 0x2f, 0x0, @private=0xa010102, @local}, {{0x0, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x4, {{0x7, 0x1, 0x2, 0x2, 0x1, 0x2, 0x3, 0x8}}}, {0x8, 0x22eb, 0x3, {{0x1, 0x2, 0x9, 0x3, 0x0, 0x1, 0x0, 0xbb}, 0x2, {0x7, 0x4, 0x3, 0x9, 0x0, 0x1, 0x3, 0x0, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) creat(&(0x7f00000000c0)='./bus\x00', 0x0) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000200)={'syz', 0x0}, &(0x7f0000000e40)="c9", 0x1, 0xfffffffffffffffe) keyctl$revoke(0x3, r5) fsetxattr$security_ima(r0, &(0x7f0000000040), &(0x7f0000000980)=ANY=[@ANYBLOB], 0x9, 0x1) symlink(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000100)='./file7\x00') 6.394726729s ago: executing program 2 (id=1587): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) msync(&(0x7f000096b000/0x1000)=nil, 0x1000, 0x4) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000001c0)={0x1f, 0x0, @any, 0xfffd}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x101}, 0xc) listen(r2, 0x0) ioctl$sock_bt_hci(r1, 0x400448c8, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x202, @time={0x5, 0x9}, 0x7, {0x4, 0x7}, 0xbb, 0x0, 0x9}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="7c000000010405000000000000000000000000000600064000000000080005400000000005000100010000000a0002"], 0x7c}}, 0x0) 5.854687378s ago: executing program 5 (id=1589): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r0, &(0x7f0000000140)=[{0x1f, 0x0, 0x0, 0x0, @tick, {}, {}, @raw32}], 0x1c) 4.696218344s ago: executing program 5 (id=1592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x321c0de, &(0x7f0000000440)=ANY=[], 0x1, 0x714, &(0x7f0000002dc0)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) syz_usb_connect$cdc_ecm(0x0, 0x5b, &(0x7f0000001440)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x49, 0x1, 0x1, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0xff, 0x2, 0x2, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@call_mgmt={0x5, 0x24, 0x1, 0x5}]}, {[{}], {{0x9, 0x5, 0x82, 0x2, 0x20}}, {{0x9, 0x5, 0x3, 0x2, 0x8}}}}}]}}]}}, 0x0) 3.327008019s ago: executing program 3 (id=1600): syz_mount_image$udf(&(0x7f0000000640), &(0x7f0000000680)='./bus\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], 0x1, 0x61c, &(0x7f0000000d40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000240)="0bcb93b7b7c4", 0xf6d}], 0x1) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, 0x0, 0x0) chdir(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xb, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$vsock_stream(0x28, 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) socket(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYBLOB="04060400c9"], 0x6) capset(0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) semctl$SETVAL(0x0, 0x0, 0x10, &(0x7f0000000040)) write$sndseq(r0, &(0x7f0000000280)=[{0x9, 0xa, 0x7, 0x4, @time={0x1ff, 0xfffffff8}, {0x11, 0x7}, {0x2, 0x7}, @raw32={[0x2, 0x63b, 0x9]}}], 0x1c) 2.421028612s ago: executing program 4 (id=1601): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003300)=@newnexthop={0x24, 0x68, 0x1, 0x20000003, 0x25dfdbfd, {}, [@NHA_GROUP={0xc, 0x2, [{0x2, 0x6}]}]}, 0x24}}, 0x4000) 2.137367715s ago: executing program 2 (id=1603): syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x803, &(0x7f00000004c0)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@discard}, {@discard}, {@namecase}, {@errors_remount}, {@codepage={'codepage', 0x3d, 'iso8859-13'}}, {@discard}, {@dmask={'dmask', 0x3d, 0x5}}, {@iocharset={'iocharset', 0x3d, 'koi8-ru'}}, {@fmask={'fmask', 0x3d, 0x7}}], [{@appraise_type}, {@subj_role={'subj_role', 0x3d, 'iso8859-13'}}, {@uid_gt}, {@permit_directio}, {@uid_eq}]}, 0x5, 0x1522, &(0x7f00000037c0)="$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") syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x400, &(0x7f0000000dc0)="$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") mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, 0xffffffffffffffff, 0xf89aa000) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000080)={[{@usrjquota}, {@nolazytime}]}, 0x2, 0x5ed, &(0x7f0000000740)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0c000310"], 0xf) openat(0xffffffffffffffff, 0x0, 0x80880, 0x110) 1.438802444s ago: executing program 3 (id=1605): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/87, 0x57}, {&(0x7f0000000200)=""/253, 0xfd}, {&(0x7f0000001fc0)=""/4107, 0x100b}, {&(0x7f0000000cc0)=""/210, 0xd2}, {&(0x7f00000001c0)=""/55, 0x37}, {&(0x7f0000000bc0)=""/203, 0xcb}, {&(0x7f0000000340)=""/178, 0xb2}], 0x7}}], 0x1, 0x0, 0x0) 1.175252662s ago: executing program 5 (id=1607): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) select(0x40, &(0x7f0000000080)={0x0, 0x0, 0xfffffffffffffff2}, &(0x7f00000000c0)={0x4}, 0x0, &(0x7f0000000100)={0x7fffffffffffffff}) 1.16900304s ago: executing program 3 (id=1608): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x2, 0x3, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x4e21, 0xffffffff, @loopback, 0x1000}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x29, 0x2, 0x4bfffffe}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}]}, 0x60}}, 0x4004880) 916.42212ms ago: executing program 0 (id=1610): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000400000000000000000085000000bb00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 916.178619ms ago: executing program 5 (id=1611): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000050000009500000000000000e6923b33b19a35d427f5e67496beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd192f43aac1624b"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$unix(0xffffffffffffffff, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000640)=ANY=[@ANYBLOB="84010000", @ANYRES16=r1, @ANYBLOB="0100000000000000000001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1507b6e901b9ff2f518c78042fb54238010880e800008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691cc000098028000080060001000a000000140002000000000005000300000000001c0000800600"], 0x184}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) 871.234365ms ago: executing program 3 (id=1612): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x28, 0x10, 0x801, 0x400000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x11, 0x4c001}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 770.725399ms ago: executing program 0 (id=1613): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x3, 0x2, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 735.676216ms ago: executing program 5 (id=1614): r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000240)="dca8e28c5ac6119edc250389b8c2ea179263ce3762cdd8ddfaa798945fce067d3b884b5cf1948e35f5103d56d29320e6456768ca6f40d94bd5432e16970e12e5060948024b1f2307cb983d1c6dcf8a8ab862d1886bc5b5be3dba0352a2dd2f3ac0", 0x61}], 0x1) 630.99427ms ago: executing program 3 (id=1615): socket$packet(0x11, 0x2, 0x300) socket$packet(0x11, 0x3, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000c80)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca7f8fbc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c0301000000010000003d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6e70af07da5ceb01b7551ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cde7a6b73340cc2160a1fe3c184b751c51160fbce841dfebd31a08b32808b80200000000009dd27080e71113610e10d8fb9c2aec61ce63a3462fd50117b89a9ab759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000002cab154ad029a119ca3c972780870014605c83d7d11c3c975d5aec84222fff0d7216fdb0d3a0ec4bfae563858dc06e7c337642d3e5a815212f5e16c1b30c3a2a71bc85018e5ff2c910496f18afc9ffc2cc788bee1b47683db01a46939868d75211bbae0e7313bff5d4c391ddece00fc772dd6b4d4d0a917b239fe12280fc92c88c5b8dcdcc22ee1747790a8992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5cc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffff7f23877a6b24db0e067345560942fa629fbef2461c96a08707671215c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e42e50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859adfe38f77b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2499d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc874b2f663ddeef0005b3d96c7aae73835d5a3cda9e90d76c1993e0799d4894ee7f8249dc1e3428d2129369ee1b85afa1a5b6154eb2eea0d0df414b315f65112412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7ade8a5b859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355a500587b603306a5af8d867d80a07f10d82eafb03062e95196d5e3ffea0000000000000be959096ea948cfa8e7194123e918914a71ad5a8521fb9553bc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c63ebb4380b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989177a1bcd1e30280bc586e79a5dd80701018e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fc03000000000000001547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f0000000011d415b6b085fb73a2c7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aac029d15af607ad83532ff181c985f54b39370c06e63055b4d6a36fa98a44e379d28307c9912fb097601f3f88a2ca6fd1f9320cfe7fc8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589c95d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd926891927a7267c47cf897853d160100b39b613faefe16bed1fc105dddd77ab929b837d4442d13d5a29179a00837918dd7854aa17eb9fbdc2bdc0e98ae2c3f23a6131e2879f04ff01000030b92dd493be66c2242f8184733b80ba28e8ffffff7f00000000bb2f89049c5f6d63d56995747639964217aacfe548bc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc17587641ed01889c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5d371c61f550e9d86aabda45706bda78ab60200000000000000000000000000000000000000706f78f0a2ea9667fb5b951808545a46830970c2dfae01adbda7d29bf1f7abdaf52e0de6f9d7150808ed086642e64ebf98762b34338b80e41b704c3eefaf0bb5ff070000000000000ea15ccc0d7a830b6eb33b6b61675511d693ef5e3c44bbf71cabc5f45c879e7499f8baae2a1a09cf38da73297764fbc0e723e1cc3abb12e3076982ed32c94a2ce3e6f37c47e983da4ca5c96187db5a2a2e1742bc93a65d7187126126b3a80f17dd2f7dbbe82d104ede9ba6925afc2ee6cb94f56f1363cad635abf8f983292c49c0ebf5005154c7b58a3a2a2ea86d2fd92b8661264f781e3fb02d05a28f3f17b64d0258853d45cb5ebde10cd3d82eeed2f1ed925b7cf400304932c5ed0a362b235ce37e1f17700f7d1fecf8be8a2c5d25a9c60657560d05441387ff158a018d19a286c58684a1d2f624c3eb59d509ee89cc2df52881d005b2e5c27563ba54e4153c132d0366aa660000000000000009c1aaec93ec0f925921fb2e9eb202a29bef28224dbabe723de5c584bc398a8792e493048c87f60a51a391e95921218149403558fd13c649f90b0911d57eeb298b590581eba1ce383b539ab80fd15445987b1bb4eb512545e1ab65fef3103ce10b1ee362b51c72f82edf2f502ddf52567775e34a56d1be892f1e62b08950d517fa6fb1b0ef2edf1b67f8644786116b037d4a36fdd30b000063e58c856ec44cbbc2d370553f832af9480215e09aaa3843fe360b1c293a14627f2cfbe278f31d0abc0f5aaa10926dbbfe8a4b131c13a73d4e6d065c2c0fed3ab8442520ce0e0ad7d2d177377ab197ace3ef8b1c24ceb0bdee84bd6e6317633938dd19dc42de7f8f860eca6d9c74525fcd3497526df4c13e3ba5f0d75365a4542ae9440d2fede416d618cdaaf7e038879c5d177b3876fda4121e00000100000000003edd3d43cc64e0d26b46907b42e08d000000000000903350932d3eef7fdada20c19807066e2c72d0d816eb9fa50be213bf6bbb7ccb9f2e8a153e6ced68f192ebed6e86af0f2cec7335fa8039fd6eb025440bc2a34d071f0a0e6774308a74748b8cd994ed368695aa2c5986aa9200a1306ffa5a71ca69e89a6980612b35fc858f37c2c398515a910a35e22ab0573c10b85df4c2972a2fb8b9c080fbb41a753791df727fdeaded2930376eda31312256191c620cce34d1e3bf40a4a207ab1575b399eb8155781bfc7cb5920b49c039935a888d77041894f60fbbcafa487ee96b368e8769da90b44190e569fe8b923c32c288baaca5c5558b5a78bb43e5d9e47a1d5809bb178184b5672d08e29aecf1f572ac1e6cab7e820751e95999b7532603494d37a2bff35a9eec46dfc8a52433f605ebf151c837b4966b5f3628a406175a87e32c5e4268d3000933b580415b162e2946446b8f02554c8a1225217d69d049685dd06aa8528673a9673a723ac414af77f523ad730d00e8700c213f95c87a94f39f506b9e000000000000000000000000000000000000000000000000000090668ac41a1c2a4f7831e6c6a3e9c68ca2c449482bb70a994e71a7f24873848fbb128c820c1de19cc003dfa65a2b296caeb1253802080e08eeb724c4c7b7e052afa19b0f2cd7a13bda4b5a8f3b8fa3ca70bb756a3d529718d5c79d9bdb89e5d33793533211d76d00a45079eff797476106bf76f1fed952a7c9162b88911b5b00c3d26fd2fb4d7b29d1ce025e102d458efd5cca3f3835ce760359eaa01cb13cb28d60e8942fdc02b6824c00dac62f8a2d4c680ae284a82f09d6641921536814b444e4188d9b2e97eb3b108e7876f0f3f3863147ab694218c7cecc075d52d590dddbb57fc6fedf5ec69d7894a7b5c8109f303dab998815c80534b0bd34c49eea63997e56728a8185a8bb6988a7197b87f5548f5edfdfb3efc907fe561b33a6f7c707f7828c6adaf3b2a39929b4b65253e787d65c08aff5e4a9b2267bd8f803ea38f10a6e9c4a49bf23525e08c12d229211fe4d88cf1440f29accfa50f327ac1fb20d7f164100111bd21fca713b2475f1c997f3000000000080c426bcec79c6bc83ce4e6cbb17c01be69db342192d0a716cc24710d23321441f475ec485d642b61c6bd907071dbbe37c0b78f60fd2ad0d13ca62d9d9aafb01c3920b64cb5e023810e2de4327f90c389ce36d90ff9f3cb9d8cd2260d05a8126943a3df17157470595c68ac8df7fea6d42ecb2cdb65b4f2aef0db2b2de949a6d4ec37f2fd693ae44944041a64fe6336aba1c66b1b95d2edbc40364a049616ae962d75eae619548aa86bd5f0bad56e7ad7de2ee5e6f3b42e3a27094b6b5face99456d9af1926b21d37faf7612d9752cf58e6424decd530b5419e117ec08647566b1bdd75d6a9a1e600aaf0f42ce94b4725d4c2da80150dc34e5975d6904f061ed9a7608959f2d24ee6ec4f2395d16e02f53c746f74b12013f738d76456c3407188eff97f31ca36e5d79e1f1c7c3b688ee21d37ba5ebf4afc2a61f16"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x55, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$packet(0x11, 0xa, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe06, 0x1000000, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000}, 0x2c) 630.654782ms ago: executing program 4 (id=1616): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cryptd(crct10dif-generic)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) recvfrom(r1, 0x0, 0x0, 0x40012000, 0x0, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000b00)=ANY=[], 0x47c}, 0x1, 0x0, 0x0, 0x84}, 0x40000) 537.364911ms ago: executing program 5 (id=1617): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x25dfdbfe, {0x0, 0x48, 0x0, r2, 0x21eae}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x70bd29, 0x0, {0xa, 0x0, 0x91, 0x0, r2}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x400}]}, 0x34}}, 0x0) 519.692918ms ago: executing program 0 (id=1618): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000700), 0x2040, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000740)={0x7ff, 0xd, 0x3ff, 0xa, 0xf, "0a8b44e63cdad85f"}) 391.134122ms ago: executing program 2 (id=1619): bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x58}}]}}) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x1217880, 0x0) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r2, &(0x7f0000002140)={0x2020}, 0x2100) 357.138632ms ago: executing program 0 (id=1620): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x5, 0x100a, &(0x7f0000005480)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 276.942617ms ago: executing program 4 (id=1621): mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r1 = dup2(r0, r0) ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f0000000000)={'\x00', 0x0, 0xa, 0x1}) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) 207.137827ms ago: executing program 0 (id=1622): r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r1, &(0x7f00000003c0)={0x20000008}) 91.156884ms ago: executing program 0 (id=1623): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24000000180083ad0400000000000000020000000000fe020c00000008001e00", @ANYRES32], 0x24}}, 0x0) 0s ago: executing program 3 (id=1624): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000b5c3591d0968369f00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) setrlimit(0x5, &(0x7f00000006c0)={0x100000001, 0x400}) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x2d, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00050201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f290c89c0090501250183020c00090402000001020000090402010101020000072401018105000b2402010f04b4018c703c090582094000"], 0x0) r5 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1400000010000100f50c0000c53af17ad700000a14000000000900000000000000000000010000003c0000002440fe9eda0f3665000a090a01040000000000000000faf3c8d208000a40000000000932000000000900010073797a3000000000080005400000001f340000000c0a01010000000000000000010000000900"], 0xac}}, 0x0) write$uinput_user_dev(r5, &(0x7f0000000100)={'syz1\x00', {0xa521, 0x6, 0x4, 0x2}, 0x22, [0xff, 0x7ff, 0x100000, 0x401, 0x1, 0x10000, 0xaa07, 0xc984, 0x3, 0x6, 0xa3c7, 0x1ff, 0x5, 0x9, 0x9, 0x7ff, 0x2, 0x8, 0x0, 0x8, 0x91e, 0x36ab44bd, 0x1, 0x80000001, 0x89, 0x4, 0x7f, 0x6, 0x3, 0x1, 0x1000, 0xffff, 0x6, 0xd5, 0x3f7, 0x5, 0x0, 0x3, 0x4, 0x926, 0x9d2, 0x5, 0x0, 0x80, 0x80000001, 0x0, 0x0, 0x6, 0x2, 0x4, 0x1278, 0x7, 0x30, 0x1, 0x1, 0x9, 0x8, 0x6, 0x3, 0x0, 0x8, 0x8fc, 0xfffffff8, 0x40], [0xb, 0x8000, 0xfff, 0x9, 0x4, 0xf, 0x2, 0x5, 0x8, 0x4, 0x0, 0x7, 0x84, 0xffffff00, 0x205f, 0x4, 0x2e4, 0x5, 0x6, 0x8, 0x48e392a3, 0xe3e, 0xfff, 0x80010, 0x5, 0xb, 0x4, 0x60000000, 0x5, 0x2ec6, 0xffffffff, 0xbb, 0x8, 0x4, 0x0, 0x2, 0x10001, 0x8, 0x80000000, 0x2, 0x2, 0x0, 0x7, 0x9, 0x2, 0xfffffffc, 0x9, 0x3, 0x40000000, 0x7, 0x6d, 0x0, 0x10, 0x7, 0x4, 0xfffffffc, 0x6, 0x9, 0xc0, 0x9, 0x101, 0x4, 0xb, 0x3], [0x2, 0xfce, 0x8, 0x8d6, 0x1000, 0xd9, 0x10001, 0x159d, 0x1ff, 0xfffffffb, 0x9, 0x3, 0x10000, 0x4, 0x6, 0x1, 0x5, 0x2, 0x50800000, 0x2, 0x400, 0x7, 0x8, 0x1, 0x7f, 0xf, 0xffff, 0x10, 0xfffffe01, 0xb, 0xa08, 0x1, 0x101, 0x7fff, 0x8, 0x80000001, 0xfffffffd, 0x1, 0x9, 0x4, 0x0, 0x9, 0x3, 0xfffffffc, 0x4, 0x1, 0x4, 0x100, 0x6, 0x1, 0x4ecddcb2, 0x4, 0x200, 0x401, 0x5, 0x9, 0x5, 0x2, 0x115fe71e, 0x1, 0x9, 0x9, 0xff, 0x1], [0xd751, 0x3735, 0x4, 0x6, 0x8, 0x7, 0x800, 0x1, 0x6, 0x6, 0x8, 0x4, 0x7, 0xeaf6, 0xb, 0x1ff, 0x51, 0x80000000, 0x1, 0x10, 0x0, 0x7, 0x10, 0xffffffff, 0x3, 0x5, 0x2, 0x2, 0x4, 0x7, 0x2, 0x6, 0x9, 0x101, 0x8001, 0x9, 0x3, 0x2, 0x6, 0xc, 0x2, 0x4, 0x8, 0x6, 0xd2a, 0x9, 0xff, 0x0, 0xffff8000, 0x8, 0xac, 0x6, 0x7, 0x7, 0x0, 0x9, 0xba2, 0x7fff, 0x2, 0x6, 0xc, 0x1, 0x200, 0x3]}, 0x45c) kernel console output (not intermixed with test programs): 7e-477c-816d-cd80a5b93e5d [ 441.731788][T10565] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 441.740948][T10565] BTRFS info (device loop0): using free-space-tree [ 441.830707][ T971] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 441.890927][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 441.912564][ T5184] bcm5974 4-1:0.0: could not read from device [ 441.948295][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 441.959739][ T971] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 442.542348][ T971] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 442.552767][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.562586][ T971] usb 3-1: config 0 descriptor?? [ 442.568423][T10565] workqueue: Failed to create a rescuer kthread for wq "btrfs-compressed-write": -EINTR [ 442.568673][T10565] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 442.579089][T10565] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 442.588920][T10565] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 442.637034][T10565] BTRFS error (device loop0): open_ctree failed [ 442.664203][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 442.676034][ T5184] bcm5974 4-1:0.0: could not read from device [ 442.707618][ T5184] bcm5974 4-1:0.0: could not read from device [ 442.729931][T10568] tipc: Invalid UDP bearer configuration [ 442.729978][T10568] tipc: Enabling of bearer rejected, failed to enable media [ 442.755437][ T47] usb 4-1: USB disconnect, device number 22 [ 442.973803][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.048328][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.084350][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.108394][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.115856][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.123491][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.131124][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.138655][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.146077][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.153882][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.161726][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.170086][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.177508][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.185840][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.193757][ T971] plantronics 0003:047F:FFFF.0015: unknown main item tag 0x0 [ 443.205564][ T971] plantronics 0003:047F:FFFF.0015: No inputs registered, leaving [ 444.273290][ T971] plantronics 0003:047F:FFFF.0015: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 444.558684][ T5826] usb 3-1: USB disconnect, device number 26 [ 444.730432][T10586] loop1: detected capacity change from 0 to 40427 [ 444.792129][T10586] F2FS-fs (loop1): build fault injection attr: rate: 690, type: 0x1fffff [ 444.801051][T10586] F2FS-fs (loop1): Image doesn't support compression [ 444.813159][T10586] F2FS-fs (loop1): Image doesn't support compression [ 444.823055][T10586] F2FS-fs (loop1): invalid crc value [ 444.830924][T10586] F2FS-fs (loop1): Found nat_bits in checkpoint [ 444.971712][T10586] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 445.486039][ T29] audit: type=1800 audit(1730912338.691:45): pid=10586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1084" name="file1" dev="loop1" ino=10 res=0 errno=0 [ 446.768989][ T5821] syz-executor: attempt to access beyond end of device [ 446.768989][ T5821] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 446.801477][ T5821] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 446.837291][ T5821] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 447.306458][T10615] loop3: detected capacity change from 0 to 2048 [ 447.328379][T10613] nfs4: Unknown parameter '/proc/bus/input/devices' [ 447.386142][T10613] loop2: detected capacity change from 0 to 512 [ 447.426663][T10613] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 447.429407][T10615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 448.412131][T10613] EXT4-fs (loop2): 1 truncate cleaned up [ 448.441614][T10613] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 449.479734][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.520541][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 449.684091][T10630] nfs4: Unknown parameter '/proc/bus/input/devices' [ 449.736238][T10630] loop2: detected capacity change from 0 to 512 [ 449.778564][T10630] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 449.855104][T10630] EXT4-fs (loop2): 1 truncate cleaned up [ 449.870563][T10630] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 451.704701][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 453.218535][ T5826] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 453.379038][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 453.397956][ T5826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 453.418229][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.436610][ T5826] usb 2-1: Product: syz [ 453.443662][ T5826] usb 2-1: Manufacturer: syz [ 453.458309][ T5826] usb 2-1: SerialNumber: syz [ 453.469951][ T5826] usb 2-1: config 0 descriptor?? [ 453.528294][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 453.681847][ T8] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 453.698279][ T5826] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 453.700427][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 453.750195][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 453.782579][ T8] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 453.815689][ T8] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 453.845527][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 453.874741][ T8] usb 3-1: config 0 descriptor?? [ 454.091166][T10651] loop0: detected capacity change from 0 to 40427 [ 454.126502][T10651] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 454.145895][T10651] F2FS-fs (loop0): Image doesn't support compression [ 454.164461][T10651] F2FS-fs (loop0): Image doesn't support compression [ 454.191909][T10651] F2FS-fs (loop0): invalid crc value [ 454.201648][T10657] loop3: detected capacity change from 0 to 40427 [ 454.217770][T10657] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 454.233035][T10651] F2FS-fs (loop0): Found nat_bits in checkpoint [ 454.235447][T10657] F2FS-fs (loop3): Image doesn't support compression [ 454.246928][T10657] F2FS-fs (loop3): Image doesn't support compression [ 454.300386][T10657] F2FS-fs (loop3): invalid crc value [ 454.310134][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.330278][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.338445][T10651] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 454.343579][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.356494][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.364162][T10657] F2FS-fs (loop3): Found nat_bits in checkpoint [ 454.392385][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.392895][ T29] audit: type=1800 audit(1730912347.601:46): pid=10651 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1099" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 454.418274][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.445933][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.463957][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.483839][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.500471][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.514021][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.524500][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.549570][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.557447][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.586433][ T8] plantronics 0003:047F:FFFF.0016: unknown main item tag 0x0 [ 454.601526][ T8] plantronics 0003:047F:FFFF.0016: No inputs registered, leaving [ 454.623970][T10657] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 454.663255][ T29] audit: type=1800 audit(1730912347.871:47): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1102" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 454.692668][ T8] plantronics 0003:047F:FFFF.0016: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 454.998541][T10669] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 455.528752][ T5827] syz-executor: attempt to access beyond end of device [ 455.528752][ T5827] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 455.553908][ T8] usb 3-1: USB disconnect, device number 27 [ 455.560893][ T5827] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 455.610961][ T5827] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 455.685744][ T5829] syz-executor: attempt to access beyond end of device [ 455.685744][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 455.708421][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 455.715790][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 456.541605][ T5826] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 456.689286][ T5826] usb 2-1: USB disconnect, device number 20 [ 456.922908][T10683] loop3: detected capacity change from 0 to 2048 [ 456.985012][T10683] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 457.208931][T10679] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 457.225506][T10679] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 457.236524][T10679] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 457.504475][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 459.668608][ T5824] Bluetooth: hci3: command 0x0c1a tx timeout [ 459.674735][ T5824] Bluetooth: hci2: command 0x0c1a tx timeout [ 459.680936][ T5824] Bluetooth: hci0: command 0x0c1a tx timeout [ 460.468598][T10717] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 460.575680][ T5831] Bluetooth: hci0: unexpected event for opcode 0x2006 [ 460.866465][T10724] nfs4: Unknown parameter '/proc/bus/input/devices' [ 460.914759][T10724] loop1: detected capacity change from 0 to 512 [ 460.921303][ T47] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 460.958550][T10724] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 461.008404][T10724] EXT4-fs (loop1): 1 truncate cleaned up [ 461.019141][T10724] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 461.026804][T10714] loop4: detected capacity change from 0 to 40427 [ 461.042389][T10714] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 461.051096][T10714] F2FS-fs (loop4): Image doesn't support compression [ 461.057833][T10714] F2FS-fs (loop4): Image doesn't support compression [ 461.096585][T10714] F2FS-fs (loop4): invalid crc value [ 461.154809][T10710] loop3: detected capacity change from 0 to 32768 [ 461.172401][T10710] XFS: noikeep mount option is deprecated. [ 461.196836][T10714] F2FS-fs (loop4): Found nat_bits in checkpoint [ 461.262925][ T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 461.274597][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 461.285683][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 461.286463][T10710] XFS (loop3): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 461.296326][ T47] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 461.318238][ T47] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 461.327290][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 461.341459][ T47] usb 1-1: config 0 descriptor?? [ 461.974039][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 461.997499][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.019142][T10714] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 462.032403][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.035763][T10710] XFS (loop3): Ending clean mount [ 462.041009][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 462.060258][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.080674][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.084728][T10710] XFS (loop3): Quotacheck needed: Please wait. [ 462.089751][ T29] audit: type=1800 audit(1730912355.291:48): pid=10714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1114" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 462.115807][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.128429][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.137793][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.152485][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.162999][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.175527][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.185845][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.200662][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.213690][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.224031][ T47] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 462.251918][ T47] plantronics 0003:047F:FFFF.0017: No inputs registered, leaving [ 462.290264][T10710] XFS (loop3): Quotacheck: Done. [ 462.326814][ T29] audit: type=1804 audit(1730912355.531:49): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1110" name="/newroot/199/file0/bus" dev="loop3" ino=4426 res=1 errno=0 [ 462.350193][ T47] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 462.406744][ T47] usb 1-1: USB disconnect, device number 22 [ 462.542556][ T29] audit: type=1804 audit(1730912355.571:50): pid=10710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1110" name="/newroot/199/file0/bus" dev="loop3" ino=4426 res=1 errno=0 [ 462.650686][ T5829] XFS (loop3): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 463.045167][ T5838] syz-executor: attempt to access beyond end of device [ 463.045167][ T5838] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 463.105023][ T5826] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 463.131180][T10751] nfs4: Unknown parameter '/proc/bus/input/devices' [ 463.218412][ T5838] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of __submit_merged_bio+0x28c/0x700 [ 463.231220][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 463.290542][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 463.304515][T10754] loop2: detected capacity change from 0 to 512 [ 463.319858][T10754] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 463.386886][ T5826] usb 2-1: Using ep0 maxpacket: 8 [ 463.549636][ T5826] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 463.644623][ T5826] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.773465][T10754] EXT4-fs (loop2): 1 truncate cleaned up [ 463.831709][ T5826] usb 2-1: Product: syz [ 463.900240][T10754] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 463.933875][ T5826] usb 2-1: Manufacturer: syz [ 464.029553][ T5826] usb 2-1: SerialNumber: syz [ 464.074375][ T5826] usb 2-1: config 0 descriptor?? [ 464.083264][T10749] loop0: detected capacity change from 0 to 2048 [ 464.751557][ T5826] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 464.762388][ T5831] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 464.773110][ T5831] Bluetooth: hci0: Injecting HCI hardware error event [ 464.782780][ T5831] Bluetooth: hci0: hardware error 0x00 [ 464.811076][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 464.833414][T10763] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 464.887185][T10749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 464.960578][ T5824] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 465.544748][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 465.741849][T10780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1128'. [ 466.476000][T10783] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 466.482820][T10783] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 466.708955][ T5826] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 466.728520][ T5826] usb 2-1: USB disconnect, device number 21 [ 466.799358][ T5831] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 466.873080][T10793] nfs4: Unknown parameter '/proc/bus/input/devices' [ 466.893620][T10793] loop0: detected capacity change from 0 to 512 [ 466.916944][T10793] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 466.971790][T10793] EXT4-fs (loop0): 1 truncate cleaned up [ 466.982094][T10793] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.018369][ T5940] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 467.197999][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 467.217290][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 467.791421][ T5940] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 467.801362][ T5940] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 467.814654][ T5940] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 467.823844][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 467.840082][ T5940] usb 5-1: config 0 descriptor?? [ 467.852964][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 467.939806][T10808] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 468.093842][ T5831] Bluetooth: hci3: unexpected event for opcode 0x2006 [ 468.286125][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.293757][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.301434][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.308915][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.316611][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.324161][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.331592][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 468.338228][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.345649][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.353085][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.361228][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.368669][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.376047][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.383474][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.390917][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.398630][ T5940] plantronics 0003:047F:FFFF.0018: unknown main item tag 0x0 [ 468.408528][ T5940] plantronics 0003:047F:FFFF.0018: No inputs registered, leaving [ 468.423038][ T5940] plantronics 0003:047F:FFFF.0018: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 468.486591][T10804] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.492697][T10812] loop3: detected capacity change from 0 to 2048 [ 468.788359][ T5826] usb 5-1: USB disconnect, device number 28 [ 468.826649][T10804] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 469.068714][T10812] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 469.340856][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 470.478369][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 470.747633][T10833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1145'. [ 470.901989][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 471.469072][T10839] nfs4: Unknown parameter '/proc/bus/input/devices' [ 471.508078][T10839] loop1: detected capacity change from 0 to 512 [ 471.532851][T10839] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 471.596816][T10826] loop0: detected capacity change from 0 to 40427 [ 471.611853][T10839] EXT4-fs (loop1): 1 truncate cleaned up [ 471.634724][T10839] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 471.689273][T10826] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 471.777790][T10826] F2FS-fs (loop0): Image doesn't support compression [ 471.798322][ T47] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 471.870009][T10826] F2FS-fs (loop0): Image doesn't support compression [ 471.897963][T10826] F2FS-fs (loop0): invalid crc value [ 471.989150][T10826] F2FS-fs (loop0): Found nat_bits in checkpoint [ 472.004609][T10836] loop3: detected capacity change from 0 to 32768 [ 472.069815][T10836] [ 472.069815][T10836] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 472.069815][T10836] [ 472.093461][ T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 472.102631][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.117389][ T47] usb 5-1: config 0 descriptor?? [ 472.864810][ T47] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input24 [ 473.055770][T10826] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 473.113952][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 473.276459][T10852] [ 473.276459][T10852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 473.276459][T10852] [ 473.287005][T10852] [ 473.287005][T10852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 473.287005][T10852] [ 473.297557][T10852] [ 473.297557][T10852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 473.297557][T10852] [ 473.308084][T10852] [ 473.308084][T10852] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 473.308084][T10852] [ 473.907371][ T113] [ 473.907371][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 473.907371][ T113] [ 474.746575][ T5829] [ 474.746575][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.746575][ T5829] [ 474.767186][ T5829] [ 474.767186][ T5829] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 474.767186][ T5829] [ 474.789001][ T5827] F2FS-fs (loop0): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x58f/0x1e40 [ 474.812124][ T5827] F2FS-fs (loop0): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 475.303064][T10860] loop2: detected capacity change from 0 to 2048 [ 475.938456][ T5184] bcm5974 5-1:0.0: could not read from device [ 476.110837][T10856] loop1: detected capacity change from 0 to 32768 [ 476.151198][ T5184] bcm5974 5-1:0.0: could not read from device [ 476.203490][ T47] usb 5-1: USB disconnect, device number 29 [ 476.578489][ T47] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 476.694840][T10856] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 477.021070][ T47] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 477.032544][T10879] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 477.032712][T10879] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 477.045186][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 477.085265][ T47] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 478.041992][ T47] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 478.055048][ T47] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 478.064357][ T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 478.125391][ T47] usb 5-1: config 0 descriptor?? [ 478.221606][T10883] loop3: detected capacity change from 0 to 40427 [ 478.469812][T10883] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 478.497740][ T5821] ocfs2: Unmounting device (7,1) on (node local) [ 478.528392][T10883] F2FS-fs (loop3): Image doesn't support compression [ 478.535213][T10883] F2FS-fs (loop3): Image doesn't support compression [ 478.553251][T10886] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1158'. [ 478.586991][ T5831] Bluetooth: hci2: command 0x0c1a tx timeout [ 478.613252][T10883] F2FS-fs (loop3): invalid crc value [ 478.631179][T10883] F2FS-fs (loop3): Found nat_bits in checkpoint [ 478.665684][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.673440][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.680941][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.688545][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.696058][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.704218][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.712196][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.720152][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.727701][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.735510][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.743584][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.751531][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.759034][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.766455][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.774190][ T47] plantronics 0003:047F:FFFF.0019: unknown main item tag 0x0 [ 478.782356][ T47] plantronics 0003:047F:FFFF.0019: No inputs registered, leaving [ 478.823023][ T47] plantronics 0003:047F:FFFF.0019: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 478.840951][T10883] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 478.978329][ T29] audit: type=1800 audit(1730912372.161:51): pid=10883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1157" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 479.015878][ T47] usb 5-1: USB disconnect, device number 30 [ 479.241898][ T5831] Bluetooth: hci3: command 0x0c1a tx timeout [ 479.248976][T10898] nfs4: Unknown parameter '/proc/bus/input/devices' [ 479.263937][T10898] loop1: detected capacity change from 0 to 512 [ 479.666659][T10895] loop0: detected capacity change from 0 to 40427 [ 479.789992][T10898] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 479.796651][T10895] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 479.825290][T10895] F2FS-fs (loop0): Image doesn't support compression [ 479.833151][T10895] F2FS-fs (loop0): Image doesn't support compression [ 479.838988][ T5829] syz-executor: attempt to access beyond end of device [ 479.838988][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 479.854470][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 479.897729][T10895] F2FS-fs (loop0): invalid crc value [ 479.916388][T10898] EXT4-fs (loop1): 1 truncate cleaned up [ 479.923218][T10898] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 480.051884][T10895] F2FS-fs (loop0): Found nat_bits in checkpoint [ 480.418641][T10895] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 480.464769][ T29] audit: type=1800 audit(1730912373.671:52): pid=10895 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1161" name="file1" dev="loop0" ino=10 res=0 errno=0 [ 480.826374][T10911] F2FS-fs (loop0): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 480.856129][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 481.256685][ T5827] syz-executor: attempt to access beyond end of device [ 481.256685][ T5827] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 481.296779][ T5827] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 481.317203][ T5827] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 481.531522][T10907] loop4: detected capacity change from 0 to 32768 [ 481.604069][T10907] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 481.743014][ T47] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 481.808442][ T5826] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 481.981590][ T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0223, bcdDevice=e1.fc [ 481.991195][ T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 482.028416][ T5826] usb 4-1: Using ep0 maxpacket: 8 [ 482.762547][ T47] usb 2-1: config 0 descriptor?? [ 482.771981][ T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input25 [ 483.136609][ T5826] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 483.145816][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.153919][ T5826] usb 4-1: Product: syz [ 483.158289][ T5826] usb 4-1: Manufacturer: syz [ 483.171094][ T5826] usb 4-1: SerialNumber: syz [ 483.197135][ T5826] usb 4-1: config 0 descriptor?? [ 484.823618][ T5826] dvb_usb_rtl28xxu 4-1:0.0: chip type detection failed -71 [ 484.853464][ T5826] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 484.873550][ T5838] ocfs2: Unmounting device (7,4) on (node local) [ 485.108459][ T5826] usb 4-1: USB disconnect, device number 23 [ 485.232837][ T5184] bcm5974 2-1:0.0: could not read from device [ 485.754611][T10941] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1171'. [ 485.847119][T10943] loop1: detected capacity change from 0 to 32768 [ 485.896767][ T9] usb 2-1: USB disconnect, device number 22 [ 486.154579][T10943] [ 486.154579][T10943] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 486.154579][T10943] [ 486.524419][T10950] read_mapping_page failed! [ 486.529162][T10950] ERROR: (device loop1): txCommit: [ 486.529162][T10950] [ 486.937243][T10951] jfs_unlink: dtDelete returned -116 [ 486.942938][T10951] jfs_unlink: dtDelete returned -116 [ 486.963542][T10948] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 487.114584][T10945] loop4: detected capacity change from 0 to 2048 [ 487.322611][T10955] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 487.332259][T10955] overlayfs: missing 'lowerdir' [ 488.411879][T10960] loop2: detected capacity change from 0 to 32768 [ 488.440970][T10960] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1176 (10960) [ 488.464694][T10960] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 488.474898][T10960] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 488.483569][T10960] BTRFS info (device loop2): using free-space-tree [ 488.737776][T10963] loop0: detected capacity change from 0 to 512 [ 488.750625][T10963] EXT4-fs: Ignoring removed bh option [ 488.756355][T10963] EXT4-fs: inline encryption not supported [ 488.796765][T10963] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 488.877939][T10945] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 488.986228][T10963] EXT4-fs (loop0): failed to open journal device unknown-block(0,0) -6 [ 489.206064][ T5821] [ 489.206064][ T5821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 489.206064][ T5821] [ 489.221579][ T5821] [ 489.221579][ T5821] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 489.221579][ T5821] [ 489.241352][ T7821] bcm5974 2-1:0.0: could not read from device [ 489.506574][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 489.814625][ T5825] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 490.539245][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 490.959828][T10992] loop3: detected capacity change from 0 to 40427 [ 491.027953][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 491.047782][ T9] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 491.065289][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 491.074548][T10992] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 491.108453][T10992] F2FS-fs (loop3): Image doesn't support compression [ 491.116623][T11009] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 491.132565][ T9] usb 5-1: config 0 descriptor?? [ 491.147773][T10992] F2FS-fs (loop3): Image doesn't support compression [ 491.167789][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 491.177723][T10992] F2FS-fs (loop3): invalid crc value [ 491.187425][T10992] F2FS-fs (loop3): Found nat_bits in checkpoint [ 491.285148][T10992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 491.380481][ T9] pwc: send_video_command error -71 [ 491.385781][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 491.408339][ T9] Philips webcam 5-1:0.0: probe with driver Philips webcam failed with error -71 [ 491.411729][T11006] loop2: detected capacity change from 0 to 4096 [ 491.426495][T11015] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 491.444252][T11006] ntfs3: Bad value for 'uid' [ 491.448971][T11006] ntfs3: Bad value for 'uid' [ 491.453262][ T29] audit: type=1800 audit(1730912384.661:53): pid=10992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1180" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 491.494549][ T9] usb 5-1: USB disconnect, device number 31 [ 491.834400][T11023] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 492.014606][T11019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1185'. [ 492.277282][ T5829] syz-executor: attempt to access beyond end of device [ 492.277282][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 492.311813][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 492.328858][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 492.468277][ T9] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 493.219115][ T9] usb 5-1: device descriptor read/all, error -71 [ 493.311733][T11024] loop2: detected capacity change from 0 to 32768 [ 494.352366][T11031] loop4: detected capacity change from 0 to 32768 [ 494.378234][T11031] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1190 (11031) [ 494.398978][T11031] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 494.409219][T11031] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 494.417908][T11031] BTRFS info (device loop4): using free-space-tree [ 494.427780][T11024] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 495.930857][T11058] loop1: detected capacity change from 0 to 512 [ 496.146914][T11058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 496.216742][T11058] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 496.271912][ T5825] ocfs2: Unmounting device (7,2) on (node local) [ 496.824623][T11062] loop3: detected capacity change from 0 to 40427 [ 496.830394][ T5838] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 496.874858][T11062] F2FS-fs (loop3): build fault injection attr: rate: 690, type: 0x1fffff [ 496.898462][T11062] F2FS-fs (loop3): Image doesn't support compression [ 496.927343][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 496.958283][T11062] F2FS-fs (loop3): Image doesn't support compression [ 496.976043][T11062] F2FS-fs (loop3): invalid crc value [ 496.987642][T11062] F2FS-fs (loop3): Found nat_bits in checkpoint [ 497.173860][T11050] loop0: detected capacity change from 0 to 40427 [ 497.228587][T11050] F2FS-fs (loop0): build fault injection attr: rate: 690, type: 0x1fffff [ 497.228831][T11062] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 497.247843][T11050] F2FS-fs (loop0): Image doesn't support compression [ 497.271160][T11050] F2FS-fs (loop0): Image doesn't support compression [ 497.295442][T11050] F2FS-fs (loop0): invalid crc value [ 497.299491][ T29] audit: type=1800 audit(1730912390.501:54): pid=11062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1189" name="file1" dev="loop3" ino=10 res=0 errno=0 [ 497.344871][T11050] F2FS-fs (loop0): Found nat_bits in checkpoint [ 498.117083][T11083] F2FS-fs (loop3): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 498.908706][ T5829] syz-executor: attempt to access beyond end of device [ 498.908706][ T5829] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 498.922881][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 498.929874][ T5829] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 499.298248][ T971] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 499.448341][ T971] usb 3-1: Using ep0 maxpacket: 16 [ 499.469437][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 499.496486][ T971] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 499.527029][ T971] usb 3-1: New USB device found, idVendor=0c70, idProduct=f0b6, bcdDevice= 0.00 [ 500.328465][ T971] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.380664][ T971] usb 3-1: config 0 descriptor?? [ 500.557218][T11090] loop4: detected capacity change from 0 to 40427 [ 500.610974][T11090] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 500.620835][T11090] F2FS-fs (loop4): Image doesn't support compression [ 500.627693][T11090] F2FS-fs (loop4): Image doesn't support compression [ 500.738599][T11090] F2FS-fs (loop4): invalid crc value [ 500.748293][ T9] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 500.795704][T11090] F2FS-fs (loop4): Found nat_bits in checkpoint [ 500.860952][ T971] aquacomputer_d5next 0003:0C70:F0B6.001A: unknown main item tag 0xe [ 500.964970][T11090] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 500.979844][T11100] loop0: detected capacity change from 0 to 32768 [ 501.001376][T11100] [ 501.001376][T11100] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.001376][T11100] [ 501.065888][ T971] aquacomputer_d5next 0003:0C70:F0B6.001A: hidraw0: USB HID v0.00 Device [HID 0c70:f0b6] on usb-dummy_hcd.2-1/input0 [ 501.564003][T11113] [ 501.564003][T11113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.564003][T11113] [ 501.574681][T11113] [ 501.574681][T11113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.574681][T11113] [ 501.585395][T11113] [ 501.585395][T11113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.585395][T11113] [ 501.596009][T11113] [ 501.596009][T11113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 501.596009][T11113] [ 502.070693][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.079610][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.159042][ T112] [ 502.159042][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 502.159042][ T112] [ 502.170274][T11115] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1202'. [ 502.439309][ T5940] usb 3-1: reset high-speed USB device number 28 using dummy_hcd [ 502.815875][ T5838] F2FS-fs (loop4): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_write+0x58f/0x1e40 [ 502.833240][ T5838] F2FS-fs (loop4): invalid blkaddr: 1028, type: 10, run fsck to fix. [ 502.868461][ T5827] [ 502.868461][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 502.868461][ T5827] [ 503.046535][ T5162] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 503.189810][ T5827] [ 503.189810][ T5827] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 503.189810][ T5827] [ 503.291834][ T5162] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 503.423089][ T5162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 503.497653][ T5162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 503.576550][ T5162] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 503.658610][ T5162] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 503.752059][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.845330][ T5162] usb 4-1: config 0 descriptor?? [ 504.717820][ T5162] plantronics 0003:047F:FFFF.001B: No inputs registered, leaving [ 504.802616][ T5162] plantronics 0003:047F:FFFF.001B: hiddev0,hidraw1: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 505.200481][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 505.236379][ T8] usb 3-1: USB disconnect, device number 28 [ 505.445717][T11146] loop0: detected capacity change from 0 to 128 [ 505.458719][T11146] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 505.548044][T11146] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 505.654778][T11146] process 'syz.0.1213' launched './file1' with NULL argv: empty string added [ 505.696331][T11129] loop4: detected capacity change from 0 to 32768 [ 505.831555][T11129] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 505.912502][ T5162] usb 4-1: USB disconnect, device number 24 [ 506.043999][T11154] cgroup: Unknown subsys name 'cpuset' [ 506.200720][T11156] loop2: detected capacity change from 0 to 1024 [ 507.511310][ T5838] ocfs2: Unmounting device (7,4) on (node local) [ 507.648473][ T5162] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 507.673671][ T29] audit: type=1326 audit(1730912400.881:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11151 comm="syz.0.1214" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f4200d7e719 code=0x0 [ 507.809664][ T5162] usb 2-1: Using ep0 maxpacket: 8 [ 507.816969][ T5162] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 507.841744][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 507.885475][ T5162] usb 2-1: config 0 descriptor?? [ 507.889439][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 507.948920][ T47] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 508.127951][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 508.143257][ T8] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 508.182428][ T47] usb 4-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 508.195205][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.218024][T11181] loop0: detected capacity change from 0 to 16 [ 508.236982][T11181] erofs: (device loop0): mounted with root inode @ nid 36. [ 508.407880][ T47] usb 4-1: config 0 descriptor?? [ 508.424689][T11179] loop4: detected capacity change from 0 to 256 [ 508.721040][T11179] vfat: Bad value for 'dmask' [ 509.074439][ T8] usb 3-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 509.083605][ T8] usb 3-1: New USB device strings: Mfr=32, Product=0, SerialNumber=0 [ 509.091773][ T8] usb 3-1: Manufacturer: syz [ 509.110686][T11184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1226'. [ 509.138805][ T8] usb 3-1: config 0 descriptor?? [ 509.185228][ T47] pegasus 4-1:0.0: probe with driver pegasus failed with error -71 [ 509.233697][ T5826] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 509.252952][ T47] usb 4-1: USB disconnect, device number 25 [ 509.262607][ T29] audit: type=1326 audit(1730912402.441:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11185 comm="syz.0.1227" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4200d7e719 code=0x0 [ 509.264348][ T5826] hid-generic 0000:0000:0000.001C: unknown main item tag 0x0 [ 509.338583][ T5826] hid-generic 0000:0000:0000.001C: hidraw0: HID v0.00 Device [syz0] on syz1 [ 509.603965][ T8] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 509.656907][ T8] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 509.690754][ T8] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 509.697959][ T8] redragon 0003:0C45:760B.001D: unknown main item tag 0x0 [ 509.721500][ T8] redragon 0003:0C45:760B.001D: hidraw1: USB HID v0.00 Device [syz] on usb-dummy_hcd.2-1/input0 [ 509.923815][ T8] usb 3-1: USB disconnect, device number 29 [ 509.935339][ T5162] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0012: -71 [ 510.912517][ T5162] asix 2-1:0.0: probe with driver asix failed with error -71 [ 510.933131][ T5162] usb 2-1: USB disconnect, device number 24 [ 511.334173][T11213] loop2: detected capacity change from 0 to 16 [ 511.829299][T11213] erofs: (device loop2): mounted with root inode @ nid 36. [ 511.859236][T11196] loop4: detected capacity change from 0 to 32768 [ 511.880145][T11196] [ 511.880145][T11196] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 511.880145][T11196] [ 512.892109][T11230] read_mapping_page failed! [ 512.896658][T11230] ERROR: (device loop4): txCommit: [ 512.896658][T11230] [ 512.962478][T11235] jfs_unlink: dtDelete returned -116 [ 512.981942][T11235] jfs_unlink: dtDelete returned -116 [ 513.038492][ T5162] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 513.140820][T11239] loop0: detected capacity change from 0 to 2048 [ 513.201163][T11239] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 513.218526][ T5162] usb 4-1: Using ep0 maxpacket: 32 [ 513.220220][T11246] loop1: detected capacity change from 0 to 512 [ 513.226982][ T5162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 513.230152][T11239] ext4 filesystem being mounted at /252/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 513.246892][ T5162] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 513.263808][ T5162] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 513.273013][ T5162] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 513.286676][T11246] EXT4-fs (loop1): blocks per group (95) and clusters per group (32768) inconsistent [ 513.289420][ T5162] usb 4-1: config 0 descriptor?? [ 513.302259][T11228] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 513.313761][ T5162] hub 4-1:0.0: USB hub found [ 513.374142][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 513.535524][ T5162] hub 4-1:0.0: 2 ports detected [ 514.452972][T11258] loop2: detected capacity change from 0 to 256 [ 514.487606][T11258] vfat: Unknown parameter 'nnonumtail' [ 514.730632][T11262] loop2: detected capacity change from 0 to 256 [ 514.781006][ T5838] [ 514.781006][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.781006][ T5838] [ 514.798846][ T5838] [ 514.798846][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 514.798846][ T5838] [ 514.850753][T11262] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 514.966858][T11264] loop1: detected capacity change from 0 to 512 [ 515.039434][T11264] EXT4-fs (loop1): Test dummy encryption mode enabled [ 515.046398][T11264] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 515.204194][ T5826] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 515.220831][T11264] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 515.244840][T11264] System zones: 1-12 [ 515.262422][T11266] loop0: detected capacity change from 0 to 2048 [ 515.279055][T11264] EXT4-fs (loop1): 1 truncate cleaned up [ 515.319561][T11264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 515.354196][T11266] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found! [ 515.408297][ T5826] usb 3-1: Using ep0 maxpacket: 16 [ 515.427116][T11266] UDF-fs: error (device loop0): udf_read_inode: (ino 1312) failed !bh [ 515.465830][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 107, changing to 7 [ 515.485315][T11266] UDF-fs: Scanning with blocksize 512 failed [ 515.522929][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59043, setting to 1024 [ 515.558266][T11266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 515.591385][ T5826] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 515.611661][T11266] UDF-fs: Scanning with blocksize 1024 failed [ 515.666288][ T5826] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 515.684999][T11266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 515.722361][ T5826] usb 3-1: Product: syz [ 515.729931][T11266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 515.752717][ T5826] usb 3-1: Manufacturer: syz [ 515.769958][ T5826] usb 3-1: SerialNumber: syz [ 515.784550][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 515.798244][T11266] UDF-fs: Scanning with blocksize 2048 failed [ 515.818624][ T5826] usb 3-1: config 0 descriptor?? [ 515.838843][T11266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 515.866904][ T5826] hub 3-1:0.0: bad descriptor, ignoring hub [ 515.884830][T11266] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512 [ 515.894613][T11266] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 515.916105][ T5826] hub 3-1:0.0: probe with driver hub failed with error -5 [ 515.917149][T11266] UDF-fs: Scanning with blocksize 4096 failed [ 515.930339][ T5162] hub 4-1:0.0: hub_ext_port_status failed (err = 0) [ 515.938741][T11266] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1) [ 515.991374][ T5826] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input27 [ 516.197320][ T5162] usb 4-1: reset high-speed USB device number 26 using dummy_hcd [ 517.079664][T11295] loop2: detected capacity change from 0 to 1024 [ 517.256010][ T5162] hub 4-1:0.0: set hub depth failed [ 517.275421][ T47] usb 4-1: USB disconnect, device number 26 [ 517.317743][T11293] loop3: detected capacity change from 0 to 8 [ 517.902851][T11299] loop0: detected capacity change from 0 to 512 [ 517.970344][T11299] EXT4-fs error (device loop0): ext4_orphan_get:1388: inode #15: comm syz.0.1267: casefold flag without casefold feature [ 518.044361][ T1028] hfsplus: b-tree write err: -5, ino 4 [ 518.161716][T11299] EXT4-fs error (device loop0): ext4_orphan_get:1393: comm syz.0.1267: couldn't read orphan inode 15 (err -117) [ 518.205963][T11299] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 518.838778][T11297] EXT4-fs error (device loop0): ext4_add_entry:2444: inode #2: comm syz.0.1267: Directory hole found for htree leaf block 0 [ 519.307236][T11310] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1270'. [ 519.501554][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 519.579184][T11312] loop4: detected capacity change from 0 to 32768 [ 519.598220][T11312] [ 519.598220][T11312] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 519.598220][T11312] [ 520.046129][T11324] [ 520.046129][T11324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.046129][T11324] [ 520.056806][T11324] [ 520.056806][T11324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.056806][T11324] [ 520.067430][T11324] [ 520.067430][T11324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.067430][T11324] [ 520.078447][T11324] [ 520.078447][T11324] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.078447][T11324] [ 520.143268][ T113] [ 520.143268][ T113] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.143268][ T113] [ 520.372217][T11323] loop0: detected capacity change from 0 to 512 [ 520.433241][T11323] EXT4-fs (loop0): Invalid default hash set in the superblock [ 520.507540][ T5838] [ 520.507540][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.507540][ T5838] [ 520.523035][T11315] loop2: detected capacity change from 0 to 40427 [ 520.554047][ T5838] [ 520.554047][ T5838] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 520.554047][ T5838] [ 520.574477][T11328] loop1: detected capacity change from 0 to 256 [ 520.583883][T11315] F2FS-fs (loop2): build fault injection attr: rate: 690, type: 0x1fffff [ 520.592799][T11315] F2FS-fs (loop2): Image doesn't support compression [ 520.599711][T11315] F2FS-fs (loop2): Image doesn't support compression [ 520.600211][T11330] loop3: detected capacity change from 0 to 1024 [ 520.626441][T11315] F2FS-fs (loop2): invalid crc value [ 522.404988][T11339] loop4: detected capacity change from 0 to 128 [ 522.412208][T11339] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 522.432956][T11339] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 522.728139][T11315] F2FS-fs (loop2): Found nat_bits in checkpoint [ 523.506004][T11347] loop4: detected capacity change from 0 to 256 [ 523.674472][T11328] exFAT-fs (loop1): failed to load alloc-bitmap [ 523.681868][T11328] exFAT-fs (loop1): failed to recognize exfat type [ 523.993548][ T5826] usb 3-1: USB disconnect, device number 30 [ 524.079521][T11352] loop0: detected capacity change from 0 to 256 [ 524.086644][T11352] exfat: Deprecated parameter 'namecase' [ 524.210633][T11352] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 524.409715][T11352] exFAT-fs (loop0): start_clu is invalid cluster(0x0) [ 524.442798][T11363] loop1: detected capacity change from 0 to 512 [ 524.487338][T11363] EXT4-fs: Ignoring removed mblk_io_submit option [ 524.502139][T11363] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 524.581279][T11363] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b042c119, mo2=0082] [ 524.589621][T11363] System zones: 1-12 [ 524.734273][T11363] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2240: inode #15: comm syz.1.1291: corrupted in-inode xattr: e_value size too large [ 524.753266][T11363] EXT4-fs error (device loop1): ext4_orphan_get:1393: comm syz.1.1291: couldn't read orphan inode 15 (err -117) [ 524.864610][T11363] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 524.876992][T11369] loop2: detected capacity change from 0 to 128 [ 524.985874][ T29] audit: type=1326 audit(1730912418.181:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11354 comm="syz.3.1287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7fc00000 [ 525.100338][T11371] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 525.167899][T11363] EXT4-fs (loop1): shut down requested (2) [ 525.223217][T11375] loop2: detected capacity change from 0 to 512 [ 525.288338][ T5874] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 525.387693][T11375] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 525.422386][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.456922][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 525.469942][T11375] ext4 filesystem being mounted at /266/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 525.511563][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 525.572746][T11375] EXT4-fs error (device loop2): ext4_empty_dir:3094: inode #12: comm syz.2.1295: invalid size [ 525.592933][ T5874] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 525.666921][ T5874] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 525.753977][ T5874] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 525.792256][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 525.823825][ T5874] usb 5-1: config 0 descriptor?? [ 525.881854][T11390] loop1: detected capacity change from 0 to 512 [ 526.063620][T11389] binder_alloc: 11385: binder_alloc_buf, no vma [ 526.064078][T11390] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 526.095949][T11390] ext4 filesystem being mounted at /277/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 526.241458][ T5821] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 527.283639][ T5874] usbhid 5-1:0.0: can't add hid device: -71 [ 527.347061][T11417] loop1: detected capacity change from 0 to 1024 [ 527.356891][ T5874] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 527.392832][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 527.424737][ T5874] usb 5-1: USB disconnect, device number 34 [ 527.471894][T11420] loop2: detected capacity change from 0 to 2048 [ 527.478665][T11417] hfsplus: request for non-existent node 33423360 in B*Tree [ 527.498952][T11417] hfsplus: request for non-existent node 33423360 in B*Tree [ 527.526100][T11420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 527.587735][ T8] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 527.625621][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.656294][ T8] usb 4-1: config 0 descriptor?? [ 527.682768][ T8] cp210x 4-1:0.0: cp210x converter detected [ 527.869392][T11427] veth0_to_team: entered promiscuous mode [ 527.885777][T11427] veth0_to_team: entered allmulticast mode [ 528.050891][T11431] loop0: detected capacity change from 0 to 512 [ 528.072614][T11427] loop1: detected capacity change from 0 to 16 [ 528.094872][T11433] loop4: detected capacity change from 0 to 1024 [ 528.109063][T11427] erofs: Unknown parameter 'ƒœ' [ 528.129021][T11433] EXT4-fs: Ignoring removed orlov option [ 528.167545][T11433] EXT4-fs (loop4): Test dummy encryption mode enabled [ 528.189791][T11433] EXT4-fs (loop4): stripe (7) is not aligned with cluster size (16), stripe is disabled [ 528.215191][T11431] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 528.272567][ T8] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 528.291748][ T8] cp210x 4-1:0.0: GPIO initialisation failed: -71 [ 528.312659][ T8] usb 4-1: cp210x converter now attached to ttyUSB0 [ 528.342662][ T8] usb 4-1: USB disconnect, device number 27 [ 528.360683][ T8] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 528.372919][T11433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.392147][T11431] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 528.406687][ T8] cp210x 4-1:0.0: device disconnected [ 528.424940][T11431] ext4 filesystem being mounted at /264/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 528.500723][T11431] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 528.541430][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 528.558284][ T5826] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 528.680918][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 529.077867][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 529.159443][T11452] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 529.329699][ T5826] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 529.598393][ T5826] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 529.611504][ T5826] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 529.620627][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 529.624795][T11455] loop0: detected capacity change from 0 to 16 [ 529.649241][ T5826] usb 3-1: config 0 descriptor?? [ 529.660458][T11443] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 529.696045][T11455] erofs: (device loop0): mounted with root inode @ nid 36. [ 529.876695][T11443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 529.897670][T11443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 530.142990][ T5826] usbhid 3-1:0.0: can't add hid device: -71 [ 530.149144][ T5826] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 530.158938][ T47] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 530.200914][ T5826] usb 3-1: USB disconnect, device number 31 [ 530.328248][ T47] usb 4-1: Using ep0 maxpacket: 32 [ 530.335744][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 530.347423][ T47] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 530.357801][ T47] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 530.367065][ T47] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 530.384577][ T47] usb 4-1: config 0 descriptor?? [ 530.393819][ T47] hub 4-1:0.0: USB hub found [ 530.593570][ T47] hub 4-1:0.0: 1 port detected [ 530.837295][ T47] hub 4-1:0.0: hub_hub_status failed (err = -71) [ 530.931572][ T47] hub 4-1:0.0: config failed, can't get hub status (err -71) [ 530.976925][ T29] audit: type=1326 audit(1730912423.951:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ef7e719 code=0x7ffc0000 [ 531.161705][ T47] usbhid 4-1:0.0: can't add hid device: -71 [ 531.254639][ T47] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 531.323652][ T29] audit: type=1326 audit(1730912423.951:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ef7e719 code=0x7ffc0000 [ 531.379712][ T47] usb 4-1: USB disconnect, device number 28 [ 531.467939][ T29] audit: type=1326 audit(1730912423.951:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7fe06ef7e719 code=0x7ffc0000 [ 532.525489][ T29] audit: type=1326 audit(1730912423.951:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ef7e719 code=0x7ffc0000 [ 532.528428][ T5831] Bluetooth: hci3: unexpected event for opcode 0x200c [ 532.791957][ T29] audit: type=1326 audit(1730912423.951:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11478 comm="syz.1.1333" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe06ef7e719 code=0x7ffc0000 [ 533.895984][T11495] loop1: detected capacity change from 0 to 8 [ 535.569250][T11512] loop3: detected capacity change from 0 to 2048 [ 535.843554][T11522] loop1: detected capacity change from 0 to 1024 [ 535.881970][T11524] loop0: detected capacity change from 0 to 2048 [ 535.944079][T11524] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 535.964639][T11526] loop3: detected capacity change from 0 to 2048 [ 536.035242][T11526] loop3: p3 < > p4 < > [ 536.081802][T11524] ext4 filesystem being mounted at /271/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 536.175988][T11524] /dev/loop0: Can't open blockdev [ 536.210627][ T8481] udevd[8481]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 536.221052][ T6044] udevd[6044]: inotify_add_watch(7, /dev/loop3p3, 10) failed: No such file or directory [ 536.277034][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 537.911329][T11555] loop3: detected capacity change from 0 to 1024 [ 537.929129][T11555] EXT4-fs: Ignoring removed orlov option [ 537.936304][T11555] EXT4-fs: Ignoring removed nomblk_io_submit option [ 538.302212][T11563] loop2: detected capacity change from 0 to 128 [ 538.375187][T11563] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 538.385794][T11563] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 1, start 00000001) [ 538.398823][T11567] loop4: detected capacity change from 0 to 2048 [ 538.466128][T11555] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 538.493894][T11567] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 539.555050][T11582] loop0: detected capacity change from 0 to 512 [ 539.747085][T11582] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 539.782255][T11582] ext4 filesystem being mounted at /277/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 539.983737][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 540.037623][T11582] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000d40000 ro. Quota mode: writeback. [ 540.357330][ T5983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.071011][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 542.063713][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 542.081684][ T5983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.111257][T11603] loop2: detected capacity change from 0 to 2048 [ 542.138279][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 542.147126][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 542.156277][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 542.218695][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 542.226117][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 542.685486][ T5983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.798502][ T5826] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 542.850143][ T5983] team0: Port device netdevsim0 removed [ 542.857063][ T5983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.881561][T11624] loop0: detected capacity change from 0 to 512 [ 542.904098][T11624] EXT4-fs (loop0): blocks per group (64) and clusters per group (20800) inconsistent [ 542.974010][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 542.991173][ T5826] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 543.019587][ T5826] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 543.041880][ T5826] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 543.071220][ T5826] usb 4-1: SerialNumber: syz [ 543.196235][T11606] chnl_net:caif_netlink_parms(): no params data found [ 543.239842][T11603] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 543.329895][ T5826] usb 4-1: 0:2 : does not exist [ 543.334878][ T5826] usb 4-1: unit 5 not found! [ 543.377269][T11634] loop4: detected capacity change from 0 to 256 [ 543.426426][T11634] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 543.429151][ T5826] usb 4-1: USB disconnect, device number 29 [ 543.796150][T11638] mmap: syz.0.1389 (11638) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 543.875842][ T5983] bridge_slave_0: left allmulticast mode [ 543.882673][ T5983] bridge_slave_0: left promiscuous mode [ 543.895154][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 544.037237][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 544.066352][T11603] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 544.351289][ T5831] Bluetooth: hci0: command tx timeout [ 544.777493][T11652] loop2: detected capacity change from 0 to 256 [ 546.208570][T11652] FAT-fs (loop2): Directory bread(block 64) failed [ 546.215260][T11652] FAT-fs (loop2): Directory bread(block 65) failed [ 546.236081][T11652] FAT-fs (loop2): Directory bread(block 66) failed [ 546.325345][T11652] FAT-fs (loop2): Directory bread(block 67) failed [ 546.398317][ T5831] Bluetooth: hci0: command tx timeout [ 546.482256][T11652] FAT-fs (loop2): Directory bread(block 68) failed [ 546.489754][T11652] FAT-fs (loop2): Directory bread(block 69) failed [ 546.498304][T11652] FAT-fs (loop2): Directory bread(block 70) failed [ 546.513232][T11652] FAT-fs (loop2): Directory bread(block 71) failed [ 546.519959][T11652] FAT-fs (loop2): Directory bread(block 72) failed [ 546.526521][T11652] FAT-fs (loop2): Directory bread(block 73) failed [ 546.565612][T11665] loop3: detected capacity change from 0 to 512 [ 546.623877][T11665] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 546.667677][T11669] loop4: detected capacity change from 0 to 1024 [ 546.667801][T11665] ext4 filesystem being mounted at /256/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 546.870713][T11669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 546.996717][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 547.083161][ T29] audit: type=1800 audit(1730912440.291:63): pid=11669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1400" name="bus" dev="loop4" ino=861 res=0 errno=0 [ 547.414439][T11692] loop3: detected capacity change from 0 to 8 [ 547.461659][T11692] SQUASHFS error: Unable to read directory block [1d0:0] [ 547.658368][ T9] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 547.808299][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 547.824921][ T9] usb 3-1: config 0 has an invalid interface number: 2 but max is 0 [ 547.875808][ T9] usb 3-1: config 0 has no interface number 0 [ 547.897788][ T9] usb 3-1: config 0 interface 2 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 547.926790][ T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0005, bcdDevice= 0.88 [ 547.946437][ T9] usb 3-1: New USB device strings: Mfr=0, Product=2, SerialNumber=3 [ 547.961558][ T9] usb 3-1: Product: syz [ 547.987033][ T9] usb 3-1: SerialNumber: syz [ 547.995299][ T9] usb 3-1: config 0 descriptor?? [ 548.242000][ T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 548.315056][ T9] snd-usb-audio 3-1:0.2: probe with driver snd-usb-audio failed with error -2 [ 548.353797][ T9] usb 3-1: USB disconnect, device number 32 [ 548.402712][ T6044] udevd[6044]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 548.488348][ T5831] Bluetooth: hci0: command tx timeout [ 548.628563][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 548.713036][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 548.752695][ T5983] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 548.782234][ T5983] bond0 (unregistering): Released all slaves [ 548.984409][ T29] audit: type=1326 audit(1730912442.191:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.0.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4200d7e719 code=0x7ffc0000 [ 549.154407][ T29] audit: type=1326 audit(1730912442.191:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.0.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=324 compat=0 ip=0x7f4200d7e719 code=0x7ffc0000 [ 549.190628][T11717] loop0: detected capacity change from 0 to 512 [ 549.418448][ T29] audit: type=1326 audit(1730912442.191:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.0.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4200d7e719 code=0x7ffc0000 [ 549.440940][ T29] audit: type=1326 audit(1730912442.191:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11711 comm="syz.0.1413" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4200d7e719 code=0x7ffc0000 [ 549.593207][T11717] EXT4-fs (loop0): Test dummy encryption mode enabled [ 549.602850][T11717] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 549.614311][T11606] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.632554][T11728] loop2: detected capacity change from 0 to 164 [ 549.635750][T11606] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.679861][T11717] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00cc018, mo2=0002] [ 549.691087][T11728] Unable to read rock-ridge attributes [ 549.692949][T11732] loop3: detected capacity change from 0 to 256 [ 549.735556][T11606] bridge_slave_0: entered allmulticast mode [ 549.742022][T11717] System zones: 1-12 [ 549.777465][T11717] EXT4-fs (loop0): 1 truncate cleaned up [ 549.784936][T11606] bridge_slave_0: entered promiscuous mode [ 549.787160][T11733] loop4: detected capacity change from 0 to 1024 [ 549.811092][T11717] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 549.827582][T11737] loop2: detected capacity change from 0 to 1024 [ 549.834984][T11733] EXT4-fs: Ignoring removed orlov option [ 549.850719][T11733] EXT4-fs: Ignoring removed nomblk_io_submit option [ 549.932227][T11737] EXT4-fs (loop2): Test dummy encryption mode enabled [ 549.946673][T11737] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 549.962599][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 549.963116][T11737] EXT4-fs (loop2): can't mount with data=, fs mounted w/o journal [ 550.078358][ T29] audit: type=1326 audit(1730912443.241:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 550.113802][ T29] audit: type=1326 audit(1730912443.241:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 550.148256][ T29] audit: type=1326 audit(1730912443.271:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 550.170779][ T29] audit: type=1326 audit(1730912443.271:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 550.193634][ T29] audit: type=1326 audit(1730912443.271:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7faf2f38066a code=0x7ffc0000 [ 550.287920][T11742] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 550.294498][T11742] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 550.962334][ T5831] Bluetooth: hci0: command tx timeout [ 551.048624][T11606] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.055783][T11606] bridge0: port 2(bridge_slave_1) entered disabled state [ 551.063994][T11733] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 551.088695][T11742] vhci_hcd vhci_hcd.0: Device attached [ 551.105881][T11606] bridge_slave_1: entered allmulticast mode [ 551.144307][T11606] bridge_slave_1: entered promiscuous mode [ 551.328315][ T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 551.785854][T11758] loop3: detected capacity change from 0 to 512 [ 551.793080][T11757] loop2: detected capacity change from 0 to 256 [ 551.793301][T11758] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 551.947844][T11758] EXT4-fs (loop3): 1 truncate cleaned up [ 551.966707][T11758] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.690049][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 552.690067][ T29] audit: type=1326 audit(1730912445.901:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.436690][ T29] audit: type=1326 audit(1730912445.901:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.501740][T11745] vhci_hcd: connection reset by peer [ 553.504910][T11606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 553.528527][ T5994] vhci_hcd: stop threads [ 553.542575][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.544248][ T5994] vhci_hcd: release socket [ 553.563919][ T29] audit: type=1326 audit(1730912445.901:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.593994][ T5994] vhci_hcd: disconnect device [ 553.612146][T11606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 553.618479][ T29] audit: type=1326 audit(1730912445.931:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=87 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.643677][ C0] vkms_vblank_simulate: vblank timer overrun [ 553.664276][ T29] audit: type=1326 audit(1730912446.621:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.717198][ T29] audit: type=1326 audit(1730912446.621:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11740 comm="syz.3.1420" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 553.874994][T11779] loop0: detected capacity change from 0 to 2048 [ 553.974901][T11779] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 554.013693][T11606] team0: Port device team_slave_0 added [ 554.063362][T11606] team0: Port device team_slave_1 added [ 554.116998][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.146448][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 555.062332][T11606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 555.069937][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 555.179106][T11606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 555.263089][T11813] loop2: detected capacity change from 0 to 256 [ 555.324191][T11813] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x88000078, utbl_chksum : 0xe619d30d) [ 555.821285][ T5983] hsr_slave_0: left promiscuous mode [ 556.082851][ T5983] hsr_slave_1: left promiscuous mode [ 556.187753][T11825] loop2: detected capacity change from 0 to 128 [ 556.250688][T11825] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 556.300205][T11825] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 556.338736][ T5831] Bluetooth: hci3: Malformed LE Event: 0x0d [ 556.378671][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.386363][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.428221][T11825] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 556.446891][T11830] loop0: detected capacity change from 0 to 8 [ 556.470013][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.488639][ T9] vhci_hcd: vhci_device speed not set [ 556.539266][T11825] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 556.562292][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.846941][T11825] UDF-fs: error (device loop2): udf_read_tagged: tag checksum failed, block 93: 0xcc != 0x00 [ 557.098346][T11825] UDF-fs: error (device loop2): udf_count_free_bitmap: udf_count_free failed [ 557.417309][T11838] syz.0.1439: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 557.435667][T11838] CPU: 1 UID: 0 PID: 11838 Comm: syz.0.1439 Not tainted 6.12.0-rc6-next-20241106-syzkaller #0 [ 557.445939][T11838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 557.458439][T11838] Call Trace: [ 557.458454][T11838] [ 557.458463][T11838] dump_stack_lvl+0x241/0x360 [ 557.458498][T11838] ? __pfx_dump_stack_lvl+0x10/0x10 [ 557.474590][T11838] ? __pfx__printk+0x10/0x10 [ 557.479213][T11838] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 557.485654][T11838] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 557.492185][T11838] warn_alloc+0x278/0x410 [ 557.496548][T11838] ? __pfx_warn_alloc+0x10/0x10 [ 557.501432][T11838] ? translate_table+0x174/0x2260 [ 557.506477][T11838] ? __get_vm_area_node+0x1c8/0x2d0 [ 557.511784][T11838] ? __get_vm_area_node+0x25c/0x2d0 [ 557.517017][T11838] __vmalloc_node_range_noprof+0x62f/0x1380 [ 557.523023][T11838] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 557.528786][T11838] ? rcu_is_watching+0x15/0xb0 [ 557.533607][T11838] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 557.539959][T11838] ? rcu_is_watching+0x15/0xb0 [ 557.544745][T11838] ? trace_kmalloc+0x1f/0xd0 [ 557.549352][T11838] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 557.554829][T11838] ? __kvmalloc_node_noprof+0x72/0x190 [ 557.560310][T11838] __kvmalloc_node_noprof+0x142/0x190 [ 557.565704][T11838] ? translate_table+0x174/0x2260 [ 557.570749][T11838] translate_table+0x174/0x2260 [ 557.575650][T11838] ? __pfx_translate_table+0x10/0x10 [ 557.580955][T11838] ? __might_fault+0xaa/0x120 [ 557.585648][T11838] ? __pfx_lock_release+0x10/0x10 [ 557.590688][T11838] ? __virt_addr_valid+0x183/0x530 [ 557.595830][T11838] ? __virt_addr_valid+0x4e1/0x530 [ 557.600960][T11838] ? __might_fault+0xaa/0x120 [ 557.605656][T11838] ? __might_fault+0xc6/0x120 [ 557.610360][T11838] ? _copy_from_user+0x99/0xc0 [ 557.615151][T11838] ? copy_from_sockptr_offset+0x6b/0xb0 [ 557.620804][T11838] do_ipt_set_ctl+0xe3d/0x1250 [ 557.625599][T11838] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 557.630818][T11838] ? __pfx_lock_release+0x10/0x10 [ 557.635872][T11838] ? __mutex_unlock_slowpath+0x21e/0x790 [ 557.641530][T11838] ? lockdep_hardirqs_on+0x99/0x150 [ 557.646759][T11838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 557.652856][T11838] ? nf_setsockopt+0xea/0x2c0 [ 557.658770][T11838] ? nf_setsockopt+0xf3/0x2c0 [ 557.663557][T11838] nf_setsockopt+0x295/0x2c0 [ 557.668181][T11838] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 557.674094][T11838] do_sock_setsockopt+0x3af/0x720 [ 557.679147][T11838] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 557.684716][T11838] ? __fget_files+0x395/0x410 [ 557.689409][T11838] ? __fget_files+0x2a/0x410 [ 557.694025][T11838] __x64_sys_setsockopt+0x1ee/0x280 [ 557.699254][T11838] do_syscall_64+0xf3/0x230 [ 557.703781][T11838] ? clear_bhb_loop+0x35/0x90 [ 557.708486][T11838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.714399][T11838] RIP: 0033:0x7f4200d7e719 [ 557.718826][T11838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.738466][T11838] RSP: 002b:00007f41ff1f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 557.746918][T11838] RAX: ffffffffffffffda RBX: 00007f4200f36130 RCX: 00007f4200d7e719 [ 557.754923][T11838] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000009 [ 557.762919][T11838] RBP: 00007f4200df139e R08: 0000000000000548 R09: 0000000000000000 [ 557.770910][T11838] R10: 00000000200004c0 R11: 0000000000000246 R12: 0000000000000000 [ 557.778905][T11838] R13: 0000000000000000 R14: 00007f4200f36130 R15: 00007ffda008f0e8 [ 557.786912][T11838] [ 557.790987][T11838] Mem-Info: [ 557.794138][T11838] active_anon:10622 inactive_anon:0 isolated_anon:0 [ 557.794138][T11838] active_file:20847 inactive_file:38491 isolated_file:0 [ 557.794138][T11838] unevictable:768 dirty:126 writeback:0 [ 557.794138][T11838] slab_reclaimable:10896 slab_unreclaimable:100814 [ 557.794138][T11838] mapped:25128 shmem:6268 pagetables:860 [ 557.794138][T11838] sec_pagetables:0 bounce:0 [ 557.794138][T11838] kernel_misc_reclaimable:0 [ 557.794138][T11838] free:1297248 free_pcp:8543 free_cma:0 [ 557.839575][T11838] Node 0 active_anon:35288kB inactive_anon:0kB active_file:83388kB inactive_file:153892kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:100512kB dirty:500kB writeback:0kB shmem:16336kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11068kB pagetables:3440kB sec_pagetables:0kB all_unreclaimable? no [ 557.873203][T11838] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 557.903403][T11838] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 557.930869][T11838] lowmem_reserve[]: 0 2465 2466 0 0 [ 557.936179][T11838] Node 0 DMA32 free:1299664kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:35052kB inactive_anon:0kB active_file:83388kB inactive_file:153064kB unevictable:1536kB writepending:496kB present:3129332kB managed:2552528kB mlocked:0kB bounce:0kB free_pcp:8172kB local_pcp:7280kB free_cma:0kB [ 557.967381][T11838] lowmem_reserve[]: 0 0 0 0 0 [ 557.972605][T11838] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 558.000161][ T5983] veth1_macvtap: left promiscuous mode [ 558.000425][ T5983] veth0_macvtap: left promiscuous mode [ 558.000545][ T5983] veth1_vlan: left promiscuous mode [ 558.000811][ T5983] veth0_vlan: left promiscuous mode [ 558.022829][T11838] lowmem_reserve[]: 0 0 0 0 0 [ 558.027583][T11838] Node 1 Normal free:3908016kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 558.059444][T11838] lowmem_reserve[]: 0 0 0 0 0 [ 558.064594][T11838] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 558.077588][T11838] Node 0 DMA32: 979*4kB (M) 1105*8kB (UM) 722*16kB (UME) 456*32kB (UM) 311*64kB (UM) 41*128kB (ME) 27*256kB (M) 17*512kB (ME) 7*1024kB (UME) 4*2048kB (M) 294*4096kB (M) = 1299252kB [ 558.097316][T11838] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 558.109959][T11838] Node 1 Normal: 206*4kB (UME) 55*8kB (UME) 34*16kB (UME) 211*32kB (UME) 107*64kB (UME) 33*128kB (UME) 21*256kB (UME) 6*512kB (UME) 3*1024kB (UM) 3*2048kB (UE) 945*4096kB (UM) = 3908016kB [ 558.128715][T11838] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.138349][T11838] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.147662][T11838] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 558.157725][T11838] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 558.168095][T11838] 63749 total pagecache pages [ 558.174158][T11838] 0 pages in swap cache [ 558.178401][T11838] Free swap = 124520kB [ 558.182577][T11838] Total swap = 124996kB [ 558.198279][T11838] 2097051 pages RAM [ 558.202126][T11838] 0 pages HighMem/MovableOnly [ 558.206865][T11838] 427069 pages reserved [ 558.211688][T11838] 0 pages cma reserved [ 558.332712][T11849] loop2: detected capacity change from 0 to 512 [ 558.400465][T11849] EXT4-fs (loop2): Invalid default hash set in the superblock [ 559.007720][ T5983] infiniband syz0: set down [ 562.345290][T11870] loop2: detected capacity change from 0 to 8192 [ 562.541211][T11872] loop2: detected capacity change from 0 to 512 [ 562.586584][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 562.603350][T11872] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.616361][T11872] ext4 filesystem being mounted at /305/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 562.652307][ T68] smc: removing ib device syz0 [ 562.699809][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 562.910920][ T5826] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 563.078328][ T5826] usb 3-1: Using ep0 maxpacket: 8 [ 563.109167][ T5826] usb 3-1: config index 0 descriptor too short (expected 51034, got 18) [ 563.125029][ T1292] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.131653][ T1292] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.148432][ T5826] usb 3-1: config 0 has an invalid descriptor of length 144, skipping remainder of the config [ 563.161497][ T5826] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 18 [ 563.170800][ T5826] usb 3-1: New USB device found, idVendor=0403, idProduct=fa78, bcdDevice=71.0b [ 563.180559][ T5826] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 563.205378][ T5826] usb 3-1: config 0 descriptor?? [ 563.319176][T11606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 563.326249][T11606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 563.352576][T11606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 563.625275][ T5826] usb 3-1: string descriptor 0 read error: -71 [ 563.654446][ T5826] usb 3-1: USB disconnect, device number 33 [ 563.725557][T11880] loop4: detected capacity change from 0 to 1024 [ 563.764537][T11606] hsr_slave_0: entered promiscuous mode [ 563.778452][T11880] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 563.809413][T11606] hsr_slave_1: entered promiscuous mode [ 563.852168][T11891] loop3: detected capacity change from 0 to 1024 [ 563.879428][T11891] EXT4-fs: Ignoring removed nomblk_io_submit option [ 563.896738][T11891] EXT4-fs (loop3): Test dummy encryption mode enabled [ 563.911017][T11891] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c85cc01c, mo2=0003] [ 563.948548][ T9] usb 1-1: new low-speed USB device number 23 using dummy_hcd [ 563.977689][T11891] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 564.150671][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 564.160610][ T9] usb 1-1: config 179 has no interface number 0 [ 564.166886][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 564.184536][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.190197][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.207033][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 564.230102][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 25344, setting to 8 [ 564.248526][ T5829] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 564.275020][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 564.338507][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 564.347609][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 564.541329][T11886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.569332][T11886] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 564.770289][T11910] loop3: detected capacity change from 0 to 256 [ 564.887297][T11910] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 565.010053][ T9] usb 1-1: USB disconnect, device number 23 [ 565.016323][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 565.016375][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 565.158927][ T29] audit: type=1800 audit(1730912458.371:87): pid=11916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1460" name="file1" dev="loop3" ino=1048650 res=0 errno=0 [ 565.215167][T11606] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 565.312720][T11606] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 565.347444][T11924] loop2: detected capacity change from 0 to 256 [ 565.421728][T11606] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 565.484462][T11606] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 565.755890][T11931] loop2: detected capacity change from 0 to 1024 [ 566.125922][T11931] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 566.626579][T11606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.658716][ T47] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 566.993868][T11606] 8021q: adding VLAN 0 to HW filter on device team0 [ 567.025159][T11606] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 567.088409][T11606] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 567.116347][ T6203] bridge0: port 1(bridge_slave_0) entered blocking state [ 567.124813][ T6203] bridge0: port 1(bridge_slave_0) entered forwarding state [ 567.136410][ T47] usb 3-1: config 255 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0 [ 567.166520][ T47] usb 3-1: config 255 has no interfaces? [ 567.188945][ T47] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 567.201534][ T6203] bridge0: port 2(bridge_slave_1) entered blocking state [ 567.208817][ T6203] bridge0: port 2(bridge_slave_1) entered forwarding state [ 567.218969][ T9] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 567.233359][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 567.425226][ T9] usb 5-1: LPM exit latency is zeroed, disabling LPM. [ 567.433823][ T9] usb 5-1: config 0 has no interfaces? [ 567.521038][ T9] usb 5-1: string descriptor 0 read error: -22 [ 567.527528][ T9] usb 5-1: New USB device found, idVendor=056a, idProduct=00ba, bcdDevice= 0.40 [ 567.608417][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.687610][ T9] usb 5-1: config 0 descriptor?? [ 567.806489][T11957] loop0: detected capacity change from 0 to 2048 [ 567.854649][T11957] udf: Bad value for 'mode' [ 567.872841][ T47] usb 3-1: string descriptor 0 read error: -71 [ 567.885179][ T47] usb 3-1: USB disconnect, device number 34 [ 567.986974][T11934] loop4: detected capacity change from 0 to 2048 [ 567.997135][T11606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.101356][T11934] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 568.162165][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 568.203511][T11970] loop0: detected capacity change from 0 to 256 [ 568.353937][ T29] audit: type=1800 audit(1730912461.551:88): pid=11934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1466" name="bus" dev="loop4" ino=19 res=0 errno=0 [ 568.459065][T11970] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x905a013b, utbl_chksum : 0xe619d30d) [ 568.698942][ T5874] usb 5-1: USB disconnect, device number 35 [ 568.764466][T11606] veth0_vlan: entered promiscuous mode [ 568.870992][T11606] veth1_vlan: entered promiscuous mode [ 569.190268][T11606] veth0_macvtap: entered promiscuous mode [ 569.246058][T11606] veth1_macvtap: entered promiscuous mode [ 569.315297][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.348830][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.377930][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.410797][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.439758][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.468566][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.492208][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 569.515238][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.556290][T11606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 569.558894][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 569.599732][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.638228][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.669262][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.705964][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.759290][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.785443][T12007] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1478'. [ 569.800012][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.830712][T11606] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 569.868433][T11606] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 569.899673][T11606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 569.943691][T11606] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.962741][T11606] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 569.996580][T11606] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.016223][T11606] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.140110][T12013] loop2: detected capacity change from 0 to 1024 [ 570.183466][T12013] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 570.218880][T12013] JBD2: no valid journal superblock found [ 570.240110][T12013] EXT4-fs (loop2): Could not load journal inode [ 570.315474][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.343176][T12025] loop0: detected capacity change from 0 to 8 [ 570.356635][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.428469][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 570.444238][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 570.446220][T12027] loop2: detected capacity change from 0 to 256 [ 570.602360][T12033] loop3: detected capacity change from 0 to 1024 [ 570.614201][T12032] loop4: detected capacity change from 0 to 512 [ 570.646657][T12032] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 570.743598][ T29] audit: type=1800 audit(1730912463.951:89): pid=12033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1488" name="file1" dev="loop3" ino=20 res=0 errno=0 [ 570.872821][T12034] loop0: detected capacity change from 0 to 164 [ 570.928295][ T29] audit: type=1326 audit(1730912464.081:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.055143][ T29] audit: type=1326 audit(1730912464.081:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.078152][ T29] audit: type=1326 audit(1730912464.081:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.101595][ T29] audit: type=1326 audit(1730912464.081:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.124325][ T29] audit: type=1326 audit(1730912464.081:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.146719][ T29] audit: type=1326 audit(1730912464.111:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.169581][ T29] audit: type=1326 audit(1730912464.111:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.192444][ T29] audit: type=1326 audit(1730912464.111:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 571.217173][ T29] audit: type=1326 audit(1730912464.111:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12030 comm="syz.3.1488" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7faf2f37e719 code=0x7ffc0000 [ 572.519932][T12082] loop5: detected capacity change from 0 to 512 [ 572.668619][T12082] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 573.204146][T12082] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 573.307132][T12091] loop3: detected capacity change from 0 to 164 [ 573.342390][T12087] loop0: detected capacity change from 0 to 2048 [ 573.363830][T12082] batadv_slave_1: entered promiscuous mode [ 573.406122][T12087] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 573.456215][T12087] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 573.493853][T12082] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000d40000 ro. Quota mode: writeback. [ 573.525290][T12081] batadv_slave_1: left promiscuous mode [ 573.587042][ T5827] UDF-fs: warning (device loop0): udf_evict_inode: Inode 1367 (mode 100100) has inode size 64788 different from extent length 65024. Filesystem need not be standards compliant. [ 573.831090][T11606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 574.298984][T12132] pim6reg1: entered promiscuous mode [ 574.427433][T12132] pim6reg1: entered allmulticast mode [ 574.468710][T12137] netlink: 'syz.2.1514': attribute type 2 has an invalid length. [ 574.769863][T12142] loop2: detected capacity change from 0 to 1024 [ 574.862152][T12144] loop0: detected capacity change from 0 to 512 [ 574.896216][T12144] EXT4-fs: Ignoring removed orlov option [ 574.941528][T12144] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 574.964438][T12144] ext4 filesystem being mounted at /311/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 575.000680][T12148] loop5: detected capacity change from 0 to 1024 [ 575.249164][T12148] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 575.296525][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.536606][T12166] loop3: detected capacity change from 0 to 1024 [ 575.545156][T12148] EXT4-fs warning (device loop5): empty_inline_dir:1839: bad inline directory (dir #12) - no `..' [ 575.713838][T11606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 575.750658][ T9] usb 1-1: new low-speed USB device number 24 using dummy_hcd [ 575.819051][ T47] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 575.880712][ T5162] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 575.965728][ T9] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 575.978993][ T9] usb 1-1: config 179 has no interface number 0 [ 576.002141][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 576.038354][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 576.045649][ T47] usb 3-1: config 0 has an invalid interface number: 41 but max is 0 [ 576.054334][ T47] usb 3-1: config 0 has no interface number 0 [ 576.061753][T12185] loop5: detected capacity change from 0 to 16 [ 576.068072][ T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 576.079986][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 576.084471][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8 [ 576.092194][ T5162] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 576.132466][ T47] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 576.155306][T12185] erofs: (device loop5): mounted with root inode @ nid 36. [ 576.174393][ T9] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 25354, setting to 8 [ 576.174547][ T47] usb 3-1: config 0 interface 41 has no altsetting 0 [ 576.194670][ T5162] usb 5-1: New USB device found, idVendor=18d1, idProduct=5030, bcdDevice= 0.00 [ 576.214296][ T5162] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.230537][ T47] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 576.259214][ T9] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 576.264200][ T5162] usb 5-1: config 0 descriptor?? [ 576.298247][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 576.308399][ T47] usb 3-1: Product: syz [ 576.312613][ T47] usb 3-1: Manufacturer: syz [ 576.313674][ T9] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 576.341078][ T47] usb 3-1: SerialNumber: syz [ 576.353796][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 576.373365][ T47] usb 3-1: config 0 descriptor?? [ 576.391581][T12164] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 576.397246][T12162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.399461][T12164] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 576.406367][T12162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.431865][T12191] 9pnet_fd: Insufficient options for proto=fd [ 576.626068][T12162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.633585][T12162] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 576.690548][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 576.698898][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 576.733526][ T5162] hid-generic 0003:18D1:5030.001E: hidraw0: USB HID v0.00 Device [HID 18d1:5030] on usb-dummy_hcd.4-1/input0 [ 576.778938][ T9] usb 1-1: USB disconnect, device number 24 [ 576.939385][ T5162] usb 5-1: USB disconnect, device number 36 [ 577.237498][T11606] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 46 [ 577.348439][T11606] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 577.389415][T11606] erofs: (device loop5): erofs_readdir: invalid de[0].nameoff 0 @ nid 89 [ 577.648575][ T5162] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 577.673953][ T47] CoreChips 3-1:0.41: probe with driver CoreChips failed with error -71 [ 577.690377][T12205] loop5: detected capacity change from 0 to 1024 [ 577.706316][ T47] usb 3-1: USB disconnect, device number 35 [ 577.706717][T12205] EXT4-fs: Ignoring removed orlov option [ 577.733447][T12205] EXT4-fs: Ignoring removed oldalloc option [ 577.787303][T12205] EXT4-fs (loop5): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors [ 577.818839][T12205] EXT4-fs (loop5): ext4_check_descriptors: Checksum for group 0 failed (12914!=20869) [ 577.849795][ T5162] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 577.874966][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 577.908519][T12205] EXT4-fs (loop5): invalid journal inode [ 577.927296][T12205] EXT4-fs (loop5): can't get journal size [ 577.988089][ T5162] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 578.011572][T12205] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 578.048500][ T5162] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 578.058292][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 578.066376][ T5162] usb 1-1: Product: syz [ 578.071205][ T5162] usb 1-1: Manufacturer: syz [ 578.075839][ T5162] usb 1-1: SerialNumber: syz [ 578.304195][T12227] loop3: detected capacity change from 0 to 512 [ 578.331530][T12227] ext4: Unknown parameter 'euid>00000000000000000000' [ 578.955556][T11606] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.477896][T12239] loop4: detected capacity change from 0 to 2048 [ 579.530597][ T5162] cdc_ncm 1-1:1.0: bind() failure [ 579.539557][ T5162] cdc_ncm 1-1:1.1: probe with driver cdc_ncm failed with error -71 [ 579.551024][ T5162] cdc_mbim 1-1:1.1: probe with driver cdc_mbim failed with error -71 [ 579.598884][ T5162] usbtest 1-1:1.1: probe with driver usbtest failed with error -71 [ 579.620591][T12239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 579.727579][ T5162] usb 1-1: USB disconnect, device number 25 [ 579.855686][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 579.877882][T12250] input: syz1 as /devices/virtual/input/input29 [ 580.192824][T12257] loop2: detected capacity change from 0 to 128 [ 580.209512][T12258] loop0: detected capacity change from 0 to 8 [ 582.544190][T12282] loop4: detected capacity change from 0 to 2048 [ 582.744484][T12282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 582.823384][T12294] loop2: detected capacity change from 0 to 512 [ 582.886945][T12294] EXT4-fs (loop2): blocks per group (95) and clusters per group (32768) inconsistent [ 583.275877][ T9] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 583.450765][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 583.507508][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 583.630565][ T9] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 583.659073][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.719172][ T9] usb 5-1: Product: syz [ 583.723396][ T9] usb 5-1: Manufacturer: syz [ 583.728010][ T9] usb 5-1: SerialNumber: syz [ 583.780221][ T9] usb 5-1: config 0 descriptor?? [ 583.850207][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 583.860676][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 583.877436][ T9] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input30 [ 584.104543][T12323] loop4: detected capacity change from 0 to 8 [ 584.114009][T12323] SQUASHFS error: zlib decompression failed, data probably corrupt [ 584.572812][T12329] loop0: detected capacity change from 0 to 512 [ 584.589414][T12323] SQUASHFS error: Failed to read block 0x9b: -5 [ 584.595721][T12323] SQUASHFS error: Unable to read metadata cache entry [99] [ 584.618461][T12323] SQUASHFS error: Unable to read inode 0x127 [ 584.661576][T12323] ecryptfs_parse_options: eCryptfs: unrecognized option [&@] [ 584.689042][T12323] ecryptfs_parse_options: eCryptfs: unrecognized option [shfs] [ 584.697321][T12323] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 584.714027][T12325] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 584.722803][T12325] overlayfs: missing 'lowerdir' [ 584.749956][T12323] Error parsing options; rc = [-22] [ 584.785980][T12329] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 584.809198][T12325] loop3: detected capacity change from 0 to 512 [ 584.816391][T12325] EXT4-fs: Ignoring removed bh option [ 584.821948][T12325] EXT4-fs: inline encryption not supported [ 584.828592][T12325] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 584.852578][T12337] loop4: detected capacity change from 0 to 128 [ 584.911006][T12337] vfat: Unknown parameter 'ecryptfs' [ 584.998723][ T47] usb 5-1: USB disconnect, device number 37 [ 585.022131][T12325] EXT4-fs (loop3): failed to open journal device unknown-block(0,0) -6 [ 585.039071][ T5827] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 585.297344][T12344] loop3: detected capacity change from 0 to 1024 [ 585.598722][T12353] loop0: detected capacity change from 0 to 8 [ 585.611447][T12355] loop2: detected capacity change from 0 to 512 [ 585.629117][T12353] Page size > filesystem block size (96). This is currently not supported! [ 585.649966][T12355] EXT4-fs (loop2): couldn't mount as ext3 due to feature incompatibilities [ 585.728101][T12357] loop4: detected capacity change from 0 to 1024 [ 586.023710][T12357] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 586.671070][ T5838] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 587.311571][T12388] loop3: detected capacity change from 0 to 2048 [ 587.333944][T12386] loop4: detected capacity change from 0 to 2048 [ 587.473798][T12388] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 587.493929][T12386] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 587.508526][T12388] UDF-fs: Scanning with blocksize 512 failed [ 587.622498][T12388] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.635460][T12386] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 587.771845][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 587.771859][ T29] audit: type=1800 audit(1730912480.871:107): pid=12386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1579" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 587.932946][ T5831] Bluetooth: hci2: unexpected event for opcode 0x1004 [ 590.346826][T12431] loop5: detected capacity change from 0 to 764 [ 590.422566][T12437] loop3: detected capacity change from 0 to 128 [ 590.688567][ T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 590.727122][T12406] loop4: detected capacity change from 0 to 40427 [ 590.821691][T12406] F2FS-fs (loop4): build fault injection attr: rate: 690, type: 0x1fffff [ 590.849442][T12406] F2FS-fs (loop4): Image doesn't support compression [ 590.858279][T12406] F2FS-fs (loop4): Image doesn't support compression [ 590.882181][ T9] usb 6-1: Using ep0 maxpacket: 16 [ 590.892649][T12406] F2FS-fs (loop4): invalid crc value [ 590.920487][T12406] F2FS-fs (loop4): Found nat_bits in checkpoint [ 590.930746][ T9] usb 6-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 590.978332][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 591.038397][ T9] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 591.057473][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 591.093162][ T9] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 591.118986][ T9] usb 6-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 591.127300][T12460] loop3: detected capacity change from 0 to 512 [ 591.139994][T12458] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1599'. [ 591.158848][T12406] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 591.163934][ T9] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 591.166538][T12458] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1599'. [ 591.214161][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 591.244167][T12460] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 591.244470][ T9] usb 6-1: SerialNumber: syz [ 591.261956][T12460] UDF-fs: Scanning with blocksize 512 failed [ 591.276162][ T29] audit: type=1800 audit(1730912484.481:108): pid=12406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1581" name="file1" dev="loop4" ino=10 res=0 errno=0 [ 591.302372][T12431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 591.312802][T12458] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1599'. [ 591.325536][T12460] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 591.338938][T12431] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 591.357042][T12460] UDF-fs: Scanning with blocksize 1024 failed [ 591.509063][ T9] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 591.518733][ T9] cdc_acm 6-1:1.0: probe with driver cdc_acm failed with error -12 [ 591.538231][T12460] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found [ 591.546120][T12460] UDF-fs: Scanning with blocksize 2048 failed [ 591.630884][T12468] F2FS-fs (loop4): inject alloc nid in f2fs_alloc_nid of f2fs_new_inode+0x14d/0x1220 [ 591.946532][T12460] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256 [ 591.964182][ T5838] syz-executor: attempt to access beyond end of device [ 591.964182][ T5838] loop4: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 592.038530][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 592.050699][ T5838] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 592.061261][ T5831] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 592.069887][ T5831] Bluetooth: hci2: Injecting HCI hardware error event [ 592.080628][ T5831] Bluetooth: hci2: hardware error 0x00 [ 592.124927][T12460] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 592.350285][ T29] audit: type=1800 audit(1730912485.351:109): pid=12460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1600" name="file1" dev="loop3" ino=39 res=0 errno=0 [ 592.417229][ T9] usb 6-1: USB disconnect, device number 2 [ 592.957233][T12481] loop2: detected capacity change from 0 to 256 [ 592.971304][ T5829] UDF-fs: warning (device loop3): udf_evict_inode: Inode 39 (mode 100755) has inode size 3977 different from extent length 4096. Filesystem need not be standards compliant. [ 592.999053][T12481] exfat: Deprecated parameter 'namecase' [ 593.004793][T12481] exfat: Deprecated parameter 'codepage' [ 593.010619][T12481] exfat: Bad value for 'codepage' [ 593.042446][T12481] loop2: detected capacity change from 0 to 512 [ 593.306502][T12481] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 593.593460][T12508] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 593.791377][ T29] audit: type=1400 audit(1730912487.001:110): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=12516 comm="syz.5.1614" [ 594.158400][ T5831] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 594.361401][ T5825] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 594.534814][T12543] [ 594.537206][T12543] ====================================================== [ 594.544247][T12543] WARNING: possible circular locking dependency detected [ 594.551283][T12543] 6.12.0-rc6-next-20241106-syzkaller #0 Not tainted [ 594.557886][T12543] ------------------------------------------------------ [ 594.564922][T12543] syz.4.1621/12543 is trying to acquire lock: [ 594.571012][T12543] ffff88807e0e15e0 (&mm->mmap_lock){++++}-{4:4}, at: __might_fault+0xaa/0x120 [ 594.579972][T12543] [ 594.579972][T12543] but task is already holding lock: [ 594.587415][T12543] ffff888024fb73f0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 594.596828][T12543] [ 594.596828][T12543] which lock already depends on the new lock. [ 594.596828][T12543] [ 594.607250][T12543] [ 594.607250][T12543] the existing dependency chain (in reverse order) is: [ 594.616255][T12543] [ 594.616255][T12543] -> #3 (&q->debugfs_mutex){+.+.}-{4:4}: [ 594.624066][T12543] lock_acquire+0x1ed/0x550 [ 594.629092][T12543] __mutex_lock+0x1ac/0xee0 [ 594.634131][T12543] blk_mq_init_sched+0x3fa/0x830 [ 594.639590][T12543] elevator_init_mq+0x1d8/0x2d0 [ 594.644964][T12543] add_disk_fwnode+0x10d/0xf80 [ 594.650250][T12543] sd_probe+0xba6/0x1100 [ 594.655006][T12543] really_probe+0x2b8/0xad0 [ 594.660027][T12543] __driver_probe_device+0x1a2/0x390 [ 594.665831][T12543] driver_probe_device+0x50/0x430 [ 594.671461][T12543] __device_attach_driver+0x2d6/0x530 [ 594.677352][T12543] bus_for_each_drv+0x24e/0x2e0 [ 594.682723][T12543] __device_attach_async_helper+0x22d/0x300 [ 594.689217][T12543] async_run_entry_fn+0xa8/0x420 [ 594.694705][T12543] process_scheduled_works+0xa63/0x1850 [ 594.700770][T12543] worker_thread+0x870/0xd30 [ 594.705905][T12543] kthread+0x2f0/0x390 [ 594.710488][T12543] ret_from_fork+0x4b/0x80 [ 594.715429][T12543] ret_from_fork_asm+0x1a/0x30 [ 594.720715][T12543] [ 594.720715][T12543] -> #2 (&q->q_usage_counter(io)#66){++++}-{0:0}: [ 594.729311][T12543] lock_acquire+0x1ed/0x550 [ 594.734329][T12543] blk_mq_submit_bio+0x1510/0x2490 [ 594.739968][T12543] __submit_bio+0x2c2/0x560 [ 594.744993][T12543] submit_bio_noacct_nocheck+0x4d3/0xe30 [ 594.751140][T12543] ext4_bio_write_folio+0x123a/0x1d70 [ 594.757043][T12543] mpage_submit_folio+0x1af/0x230 [ 594.762701][T12543] ext4_do_writepages+0x1d1d/0x3d20 [ 594.768442][T12543] ext4_writepages+0x213/0x3c0 [ 594.773812][T12543] do_writepages+0x35d/0x870 [ 594.778919][T12543] __writeback_single_inode+0x14f/0x10d0 [ 594.785075][T12543] writeback_sb_inodes+0x80c/0x1370 [ 594.790793][T12543] __writeback_inodes_wb+0x11b/0x260 [ 594.796669][T12543] wb_writeback+0x42f/0xbd0 [ 594.801690][T12543] wb_workfn+0xba1/0x1090 [ 594.806544][T12543] process_scheduled_works+0xa63/0x1850 [ 594.812618][T12543] worker_thread+0x870/0xd30 [ 594.817734][T12543] kthread+0x2f0/0x390 [ 594.822317][T12543] ret_from_fork+0x4b/0x80 [ 594.827287][T12543] ret_from_fork_asm+0x1a/0x30 [ 594.832586][T12543] [ 594.832586][T12543] -> #1 (jbd2_handle){++++}-{0:0}: [ 594.839953][T12543] lock_acquire+0x1ed/0x550 [ 594.844979][T12543] start_this_handle+0x1eb4/0x2110 [ 594.850635][T12543] jbd2__journal_start+0x2da/0x5d0 [ 594.856286][T12543] __ext4_journal_start_sb+0x239/0x600 [ 594.862282][T12543] ext4_dirty_inode+0x92/0x110 [ 594.867569][T12543] __mark_inode_dirty+0x2ee/0xe90 [ 594.873116][T12543] touch_atime+0x413/0x690 [ 594.878053][T12543] ext4_file_mmap+0x18c/0x540 [ 594.883252][T12543] __mmap_region+0x2204/0x2cd0 [ 594.888548][T12543] mmap_region+0x226/0x2c0 [ 594.893483][T12543] do_mmap+0x8f0/0x1000 [ 594.898171][T12543] vm_mmap_pgoff+0x214/0x430 [ 594.903307][T12543] ksys_mmap_pgoff+0x4eb/0x720 [ 594.908607][T12543] do_syscall_64+0xf3/0x230 [ 594.913650][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.920167][T12543] [ 594.920167][T12543] -> #0 (&mm->mmap_lock){++++}-{4:4}: [ 594.927810][T12543] validate_chain+0x18ef/0x5920 [ 594.933221][T12543] __lock_acquire+0x1397/0x2100 [ 594.938593][T12543] lock_acquire+0x1ed/0x550 [ 594.943613][T12543] __might_fault+0xc6/0x120 [ 594.948638][T12543] _copy_from_user+0x2a/0xc0 [ 594.953753][T12543] blk_trace_ioctl+0x1ad/0x9a0 [ 594.959060][T12543] blkdev_ioctl+0x40c/0x6a0 [ 594.964102][T12543] __se_sys_ioctl+0xf5/0x170 [ 594.969267][T12543] do_syscall_64+0xf3/0x230 [ 594.974309][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.980735][T12543] [ 594.980735][T12543] other info that might help us debug this: [ 594.980735][T12543] [ 594.990983][T12543] Chain exists of: [ 594.990983][T12543] &mm->mmap_lock --> &q->q_usage_counter(io)#66 --> &q->debugfs_mutex [ 594.990983][T12543] [ 595.005218][T12543] Possible unsafe locking scenario: [ 595.005218][T12543] [ 595.012757][T12543] CPU0 CPU1 [ 595.018133][T12543] ---- ---- [ 595.023525][T12543] lock(&q->debugfs_mutex); [ 595.028123][T12543] lock(&q->q_usage_counter(io)#66); [ 595.036053][T12543] lock(&q->debugfs_mutex); [ 595.043173][T12543] rlock(&mm->mmap_lock); [ 595.047682][T12543] [ 595.047682][T12543] *** DEADLOCK *** [ 595.047682][T12543] [ 595.055871][T12543] 1 lock held by syz.4.1621/12543: [ 595.061073][T12543] #0: ffff888024fb73f0 (&q->debugfs_mutex){+.+.}-{4:4}, at: blk_trace_ioctl+0xdd/0x9a0 [ 595.071004][T12543] [ 595.071004][T12543] stack backtrace: [ 595.076945][T12543] CPU: 1 UID: 0 PID: 12543 Comm: syz.4.1621 Not tainted 6.12.0-rc6-next-20241106-syzkaller #0 [ 595.087207][T12543] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 595.097270][T12543] Call Trace: [ 595.100574][T12543] [ 595.103538][T12543] dump_stack_lvl+0x241/0x360 [ 595.108323][T12543] ? __pfx_dump_stack_lvl+0x10/0x10 [ 595.113570][T12543] ? __pfx__printk+0x10/0x10 [ 595.118172][T12543] print_circular_bug+0x13a/0x1b0 [ 595.123214][T12543] check_noncircular+0x36a/0x4a0 [ 595.128172][T12543] ? __pfx_check_noncircular+0x10/0x10 [ 595.133742][T12543] ? lockdep_lock+0x123/0x2b0 [ 595.138530][T12543] validate_chain+0x18ef/0x5920 [ 595.143390][T12543] ? is_bpf_text_address+0x26/0x2a0 [ 595.148593][T12543] ? 0xffffffffa0000958 [ 595.152759][T12543] ? 0xffffffffa0000958 [ 595.157041][T12543] ? __pfx_validate_chain+0x10/0x10 [ 595.162347][T12543] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 595.168507][T12543] ? kernel_text_address+0xa7/0xe0 [ 595.173615][T12543] ? mark_lock+0x9a/0x360 [ 595.177949][T12543] ? __lock_acquire+0x1397/0x2100 [ 595.182971][T12543] ? string+0x26a/0x2b0 [ 595.187312][T12543] ? widen_string+0x3a/0x310 [ 595.191904][T12543] ? string+0x26a/0x2b0 [ 595.196052][T12543] ? bdev_name+0x2b1/0x3c0 [ 595.200468][T12543] ? mark_lock+0x9a/0x360 [ 595.204805][T12543] __lock_acquire+0x1397/0x2100 [ 595.209657][T12543] lock_acquire+0x1ed/0x550 [ 595.214285][T12543] ? __might_fault+0xaa/0x120 [ 595.218983][T12543] ? __pfx_lock_acquire+0x10/0x10 [ 595.224028][T12543] ? __pfx___might_resched+0x10/0x10 [ 595.229321][T12543] ? snprintf+0xda/0x120 [ 595.233587][T12543] ? __pfx___mutex_lock+0x10/0x10 [ 595.238670][T12543] ? blk_trace_ioctl+0xec/0x9a0 [ 595.243608][T12543] ? __pfx_snprintf+0x10/0x10 [ 595.248278][T12543] ? __might_fault+0xaa/0x120 [ 595.252954][T12543] __might_fault+0xc6/0x120 [ 595.257453][T12543] ? __might_fault+0xaa/0x120 [ 595.262147][T12543] _copy_from_user+0x2a/0xc0 [ 595.266740][T12543] blk_trace_ioctl+0x1ad/0x9a0 [ 595.271528][T12543] ? tomoyo_path_number_perm+0x6f9/0x860 [ 595.277168][T12543] ? tomoyo_path_number_perm+0x206/0x860 [ 595.282817][T12543] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 595.288198][T12543] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 595.294204][T12543] ? file_to_blk_mode+0xcc/0x140 [ 595.299237][T12543] blkdev_ioctl+0x40c/0x6a0 [ 595.304085][T12543] ? __pfx_blkdev_ioctl+0x10/0x10 [ 595.309115][T12543] ? __pfx_blkdev_ioctl+0x10/0x10 [ 595.314133][T12543] __se_sys_ioctl+0xf5/0x170 [ 595.318734][T12543] do_syscall_64+0xf3/0x230 [ 595.323256][T12543] ? clear_bhb_loop+0x35/0x90 [ 595.327965][T12543] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.333944][T12543] RIP: 0033:0x7f246b17e719 [ 595.338353][T12543] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.358041][T12543] RSP: 002b:00007f246bf96038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 595.366455][T12543] RAX: ffffffffffffffda RBX: 00007f246b335f80 RCX: 00007f246b17e719 [ 595.374432][T12543] RDX: 0000000020000000 RSI: 00000000c0481273 RDI: 0000000000000003 [ 595.382403][T12543] RBP: 00007f246b1f139e R08: 0000000000000000 R09: 0000000000000000 [ 595.390370][T12543] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 595.398342][T12543] R13: 0000000000000000 R14: 00007f246b335f80 R15: 00007fff3b623248 [ 595.406544][T12543] [ 595.834041][T12529] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 596.132031][ T5826] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 596.171322][ T68] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.215802][ T68] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.294610][ T68] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.309581][ T5826] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 596.325078][ T5826] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 596.335663][ T5826] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 596.348118][ T5826] usb 4-1: config 1 has no interface number 1 [ 596.356580][ T5826] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 596.373216][ T5826] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 596.402690][ T5826] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 596.412434][ T68] team0: Port device netdevsim0 removed [ 596.412588][ T5826] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 596.420402][ T68] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.427966][ T5826] usb 4-1: Product: syz [ 596.441040][ T5826] usb 4-1: Manufacturer: syz [ 596.458517][ T5826] usb 4-1: SerialNumber: syz [ 596.555533][ T68] bridge_slave_1: left allmulticast mode [ 596.564740][ T68] bridge_slave_1: left promiscuous mode [ 596.572422][ T68] bridge0: port 2(bridge_slave_1) entered disabled state [ 596.582863][ T68] bridge_slave_0: left allmulticast mode [ 596.588804][ T68] bridge_slave_0: left promiscuous mode [ 596.594525][ T68] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.886768][ T68] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 596.897431][ T68] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 596.908690][ T68] bond0 (unregistering): Released all slaves [ 597.136486][ T68] hsr_slave_0: left promiscuous mode [ 597.146689][ T68] hsr_slave_1: left promiscuous mode [ 597.158851][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 597.166304][ T68] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 597.191515][ T68] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.211573][ T68] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 597.233435][ T68] veth1_macvtap: left promiscuous mode [ 597.247368][ T68] veth0_macvtap: left promiscuous mode [ 597.258057][ T68] veth1_vlan: left promiscuous mode [ 597.270623][ T68] veth0_vlan: left promiscuous mode [ 597.480798][ T68] team0 (unregistering): Port device team_slave_1 removed [ 597.517925][ T68] team0 (unregistering): Port device team_slave_0 removed [ 597.765511][ T5826] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 597.786989][ T5826] usb 4-1: USB disconnect, device number 30 [ 597.972018][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory