last executing test programs: 9.080093368s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000010700000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = dup(r1) mount$9p_fd(0x7, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r5]) 8.206362123s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17320000000000000109022400010000b415090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x7, "f2"}, @global=@item_4={0x3, 0x1, 0x0, "0bea29b3"}, @local=@item_4={0x3, 0x2, 0x0, "a40800a5"}]}}, 0x0}, 0x0) 8.129809415s ago: executing program 1: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 8.117202557s ago: executing program 1: r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) request_key(&(0x7f00000001c0)='logon\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000280)='.:\x00', 0xfffffffffffffffe) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000040), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$SO_TIMESTAMPING(r4, 0x1, 0x0, 0x0, &(0x7f0000000400)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000080)='sys_enter\x00', r2}, 0x10) mlockall(0x1) mremap(&(0x7f0000ff5000/0x2000)=nil, 0x2000, 0x5000000, 0x3, &(0x7f0000ffd000/0x1000)=nil) munmap(&(0x7f0000ff5000/0x2000)=nil, 0x2000) syz_open_procfs$userns(0x0, 0xffffffffffffffff) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/251, 0xfb, 0x1, &(0x7f0000000040)=""/42, 0x2a}, &(0x7f00000003c0)=0x40) getgroups(0x0, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x7, &(0x7f00000002c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_evict_inode\x00', r7}, 0x10) syz_mount_image$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) r8 = socket$unix(0x1, 0x1, 0x0) fcntl$F_SET_RW_HINT(r8, 0x40c, &(0x7f0000000400)=0xa) 7.670191366s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17320000000000000109022400010000b415090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x7, "f2"}, @global=@item_4={0x3, 0x1, 0x0, "0bea29b3"}, @local=@item_4={0x3, 0x2, 0x0, "a40800a5"}]}}, 0x0}, 0x0) 7.371313002s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x5, 'K<'}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "7441d607"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 6.276347931s ago: executing program 3: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x0, 0x128200}}, 0x50) lstat(&(0x7f0000000700)='./file0/file0/file0\x00', 0x0) 6.206379312s ago: executing program 3: socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x3, 0x2, 0x820, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x81, 0x0, 0xc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2004, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) 5.816670542s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x5, 'K<'}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "7441d607"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 5.327861268s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 5.18711843s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xe, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x7, 0x8, 0x22}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r1, r0, 0x5}, 0x10) r2 = socket(0x1, 0x3, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r1, &(0x7f0000000680), &(0x7f0000000080)=@udp6=r2}, 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000008c50000000f000000850000009e00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r5, 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r6, 0x2) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000446600100000000000000000850000007d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f00000003c0)='kmem_cache_free\x00', r7}, 0x10) bind$unix(r2, &(0x7f0000000300)=@file={0x1, './file0\x00'}, 0x6e) r8 = socket(0x1, 0x3, 0x0) sendmmsg$unix(r8, &(0x7f0000000c80)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x40004, 0xfffffffffffffffe, 0x3, 0x0, &(0x7f0000000280)) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r9, &(0x7f00000002c0)=ANY=[@ANYBLOB="15000000feffff0180000008003950"], 0x15) r10 = dup(r9) r11 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@flushsa={0x38, 0x1c, 0x331, 0x70bd2c, 0x0, {}, [@lifetime_val={0x24, 0x9, {0x0, 0x0, 0x0, 0xfffffffffffffffc}}]}, 0x38}}, 0x0) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000000000000ff010000850000000e000000a60000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) write$FUSE_BMAP(r10, &(0x7f0000000200)={0x18}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000280)='9p_protocol_dump\x00', r12}, 0x10) 4.336669621s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000069000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17320000000000000109022400010000b415090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x7, "f2"}, @global=@item_4={0x3, 0x1, 0x0, "0bea29b3"}, @local=@item_4={0x3, 0x2, 0x0, "a40800a5"}]}}, 0x0}, 0x0) 3.948516041s ago: executing program 4: syz_mount_image$ext4(0x0, &(0x7f0000000440)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000042c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000000)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f0000004300)="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", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x78, 0x0, 0x0, {0x88, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x21, 0x0, 0x128200}}, 0x50) lstat(&(0x7f0000000700)='./file0/file0/file0\x00', 0x0) 3.885324311s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002000622c, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x3}]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 3.75883106s ago: executing program 4: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x5, 'K<'}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "7441d607"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 3.672401243s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 2.475821358s ago: executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x3, 0x2, 0x820, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x81, 0x0, 0xc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2004, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) 2.094231047s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da070000000000010902240001000000000904000009030000000921000000012222000905810308"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000140)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_4={0x3, 0x1, 0x0, "f7940ef7"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @global=@item_012={0x2, 0x1, 0x5, 'K<'}, @local=@item_012={0x2, 0x2, 0x0, "1a70"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "7441d607"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000440)='mm_page_alloc\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f0000000800), &(0x7f0000000840)=r2}, 0x20) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000000)='B') 2.016255369s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0), &(0x7f0000000300), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='qdisc_reset\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 1.988683884s ago: executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 1.965582397s ago: executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) 1.954405129s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{}, 0x3}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_connect(0x0, 0x10b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000b24b4a10e60407007501000005010902240001010000000904"], 0x0) 1.601296443s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) close(r2) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) move_mount(r3, &(0x7f0000000280)='./bus\x00', 0xffffffffffffffff, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r3, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc4}) chdir(&(0x7f0000000300)='./bus\x00') add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f0000001340)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0", 0x3c}, 0x48, 0xfffffffffffffffd) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) write$binfmt_aout(r4, &(0x7f0000000000)=ANY=[], 0xff2e) syz_open_pts(r4, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x541b, 0x0) symlink(&(0x7f0000000080)='./bus\x00', &(0x7f00000000c0)='./bus\x00') clock_getres(0x1, &(0x7f0000001300)) r5 = dup(r0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f00000013c0)="1bc997a07f3f003371b098fd7bbc4d83ebd521c1acfa8e7fad3b9aa4a11f8e81d094caa4f09e9e7a21fde1d83a85a2231b099f49750a7a8b04ea9c585df0e6dc5f596d96f5ec046602f29b2f1a7437b2f3e94e04ffac8dabb0750222ce", 0x5d, 0x4008040, 0x0, 0x0) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6}]}, 0x10) dup3(r5, r6, 0x0) 1.597454684s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000140)=0x1, 0x4) socket$xdp(0x2c, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) io_setup(0x6, &(0x7f0000000680)=0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) r5 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r5, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) recvfrom$inet6(r5, &(0x7f0000000000)=""/42, 0x2a, 0x0, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{}], 0x1) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r2, 0x0, r4, 0x0, 0x200002000622c, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000000000)={0x180a, 0x0, 0x3, 0x1, 0x0, r0, 0x0, 0x3}]) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYRES8], 0x0) 754.791514ms ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r1, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f00000002c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$ttys(0xc, 0x2, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) vmsplice(r4, 0x0, 0x0, 0x0) 739.359056ms ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000402f17320000000000000109022400010000b415090400000103000000092100000001220b0009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000240)={0x0, 0x22, 0xc, {[@global=@item_012={0x1, 0x1, 0x7, "f2"}, @global=@item_4={0x3, 0x1, 0x0, "0bea29b3"}, @local=@item_4={0x3, 0x2, 0x0, "a40800a5"}]}}, 0x0}, 0x0) 687.698444ms ago: executing program 2: socket$inet6(0xa, 0x800000000000002, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0x7, 0x3, 0x2, 0x820, r0, 0x4, '\x00', 0x0, r0, 0x3, 0x81, 0x0, 0xc}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0x2004, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x3, 0x0) creat(0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{}]}, 0x10) 615.072785ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_open_procfs(0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB], 0x0}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setresgid(0xee00, 0xee01, 0x0) setresgid(0xee01, 0xffffffffffffffff, 0xffffffffffffffff) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000001c0)='sched_kthread_work_queue_work\x00', r5}, 0x10) fdatasync(0xffffffffffffffff) socketpair(0x11, 0xa, 0x0, &(0x7f0000001080)) 361.306435ms ago: executing program 0: syz_mount_image$f2fs(&(0x7f0000000180), &(0x7f0000000040)='./bus\x00', 0x2008410, &(0x7f0000000f40)=ANY=[@ANYRESOCT, @ANYRES16=0xffffffffffffffff], 0x3, 0x553b, &(0x7f000000ac00)="$eJzs3EtvG1UUAOA7TtPSJxFiwa4jVUiJVFt12lSwC9CKh0gV8ViwAsd2LLe2J4odJ2SFBEvEgn+CQGLFkt/AgjU7xALEDgnkuWNKKI9WduKk/T5pfGbujM+cO7ISnRnLAXhiLaS//pyES+FsCGEuhHAhCfl6Uiy51RieCyFcDiGU/rIkxfifA6dDCOdCCJdGyWPOpNj1+dXhlZWf3vjlm+/OnDr/xdffz27WwKw9H0LobsX13W6MWSvGu8V4bdjOY/fGsIhxR/desZ3FuNvcyDPs1sbH1fJ4vRWPz7Z2+qO42anVR7HV3szHt3rxhP1ha5wnf8Pd2na+3Whu5LHdz/LY2o917e3Hv237/UHM0yjyfZinD4PBOMbx5l4zzmfrXh7rvUExHvNmjebeKA6LWJwu1LNOI69jY5Irfby92e7t7KXD5na/nfXSlUr1hUr1Zrm6nTWag+aNcq3buHkjXWx1RoeVB81ad7WVZa1Os1LPukvpYqteL1er6eKt5ka71kur1cr1yrXyylKxdjV99c67aaeRLo7iy+3ezul2p59uZttpfMdSuly5/uJSeqWavr22nq6/dfv22vo77996785La6+/Uhz0QFnp4vK15eVy9Vp5ubp0DOY/+r/7kPMfTDL/T4qiH2H+yWSXB/6bDxjAI3ug/w/6f+DwnfT+P0yz/x+1VPr//+9/S5P3/xP1v8e1/z/B84eJ6P8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5YP8x/+Vq+shC3zxfjF4uhZ4rtJIRQCiH8/g/mwukDOeeKPPP/cvz832r4Ngl5htE5zhTLuRDCarH89vRhXwUAAAB4fH310eXPYrceXxZmXRBHKd60KV34YEr5khDC/MKPU8pWGr08O6Vk+ef7VNibUrb8BtZTU0oWb7mdmla2hzI3Dh9fvD+YTyiJoXSk5QAAAEdi7kA42i4EAACAo/TprAtgNpIwfpQ5fhacf/P+/qPNswf2AQAAACdQMusCAAAAgEOX9/9+/w8AAAAeb/H3/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4g537uU0ciOIA/GwwsP+0aLX3bWVvUEZKyDHHQAFpghJIC2mAGsgtJUQQYY+QHIEUiXGsoO+TPM7Y0W9mgMsbSwYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NJztZ4/3v97uDRnt79MntUAAAAAp2yr9bz+Y9r0f6Trv9KlP6lfREQZEadq90GMWpmDlFOd+f/q3RyeIuqEwxjjdHyPiP/peP3d9acAAAAA12uzXM2aar1ppn1PiM/UbNqUP28y5RURUU1fMqWVh+ZvprD69z2Mu0xp9QbWJFNYs+U2PH1vlGuQtkHrlFYyWdRfYt0ruxkXAADoU7sSOFOFAAAAcAVu+54A/SiOzfE547g5pQeC31o9AAAA4Asq+p4AAAAA0Lm6/vf+PwAAALhuzfv/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6NK2Ws83y9Xs3P3FB3N2+8vkWxEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwBv7844CIRAGYbB3fWcy9z+sNGhobFIFwsffGAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAm9/95f/E1DiTzL02lp5HkrVTY+vU2Ds3jv4wvn4NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzPSwqEQBBEwZzxv5O+/2ElQc8gQgQ0PKqoRQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBFv/vl/8TUOJPMnTaWjkeStavG1lVj70Hj6MF4+zcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAXOzcP28cRRQA8Hd7t5c/gDAGuTCgIFFAQ+xLSEgJBcii4CMgWc45GC4EEhckskBuoEKu0yAoEUICmS7fIXUspQldChdGogbt3u5lkxhyiszuEv9+0uy8Pa9m3uydLD/P2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAafedeCkp4m52mBnH5Wu39jZWsn7ngT5zY+v2fNayuPOoib55++CTb7eXqycn5ionX9WfDAAAAIdDt6zvI+JOur2U9clMXv+n5TVZzf/9M+O4rOcfrPt39jaOFl+aL+v/3369+8JkopnxPNmgq2uj4eLDqfT+oyW23rOPvKKX3/n8dy/d/A1J3t98fjfN72fn25s33+3n4ZE6sgUAHsfJsi+C8uehrB80mRgAh0avUniX9X93ptmcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOqwuxlPlXEnIuZ79+LMzt7Gyn79ja3b82U7e/36VnXMbIg0IlbXRsO0xrW03ZWr1z5ZHo2Gl+sPTkREc7MXwYdTXBPx79cUH89obhX/HHTakUajQVK8P23J5yCD8rN38CM39A0JAIAnVlq0rK6/k24vZa91ZiP++uH++v+1ShxT1v93Pzp7qzpXtf4f1LbC9ltYv/jZwpWr195Yu7h8YXhh+OmbpwZvDU6fO3Pm3EJ2rxYXViMZLjadJgAAAP9j/aJV6/9k9uH9/+OVOKas/z//bvBlda6u+n9f9zb9ms4EAADgMOpPoude+fOPzj5XdPr9+GJ5ff3yYHycnJ8aH2tN9zEdKVq1/u/ONp0VAAAAUIfdzc59+//nK3FMuf//9I8v/lwdsxsRxyIuRcTw5Mql0fn6ltNqdfyhcj5Rv+mVAgAA0JRjRavu/6f58//J5JGHJCJef3Ucl//rapr6v/ve1z9V56o+/3+6viW2UjI3vh95PxfRm2s6IwAAAJ5kR4uWFfu/p9tLH/9y/IO+5/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA6vZ3AAAA//+pzDYD") r1 = open(&(0x7f0000000100)='./bus\x00', 0x143142, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRESDEC=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./bus\x00', 0x0) (async) r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r4, 0x800c6613, &(0x7f0000000100)=@v1={0x0, @adiantum, 0x0, @desc1}) chdir(&(0x7f0000000300)='./bus\x00') r5 = add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000140)={'fscrypt:', @desc1}, &(0x7f00000001c0)={0x0, "28d7b07d54891881fe02c1203fe49696b9f26f2da4149683f065714f8a61d1f32c99064bbd27b2aa77459cff33a3a98350f1af9d51ed5bef3d63520d260804d0"}, 0x48, 0xfffffffffffffffd) keyctl$revoke(0x3, r5) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000007b00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r6}, 0x10) (async) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@o_path={&(0x7f0000000380)='./file1\x00', 0x0, 0x8, r1}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='9p_client_req\x00', r3}, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r8, &(0x7f0000000300)=ANY=[], 0x15) r9 = dup(r8) write$FUSE_BMAP(r9, &(0x7f0000000000)={0x18}, 0x18) (async) write$FUSE_DIRENTPLUS(r9, &(0x7f0000000400)=ANY=[@ANYRES8=r0, @ANYRES8=r2], 0xb0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="7472616e733d66642c7266646e6f3d5805493b9c744ea8d0e7a63a698af0ec6f52d1ccc2e138c714f302f5a964db4f18aa54868fe43cd7231577328b6ebb9f9c4cee147c99d099edcfad61078027ffffa8f69c4f9c84a9508d28f40d51473f465a88c138c6aa6f24ba1b0eef9140e9647c0997de1618d57c87ed07cb09d16e", @ANYRESHEX=r7, @ANYBLOB=',wfdno=', @ANYRESDEC=r7, @ANYRESOCT=r10]) mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) (async) r11 = open(&(0x7f0000000080)='./bus\x00', 0x0, 0x0) fcntl$setstatus(r11, 0x4, 0x4000) ioctl$BLKROSET(r11, 0x125d, &(0x7f00000000c0)=0x3) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r2}, 0x10) r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r3, 0x4c80, 0xffffffffffffffb6) kernel console output (not intermixed with test programs): usb 2-1: Using ep0 maxpacket: 16 [ 760.175803][T10504] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 760.285839][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.296768][T10506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 760.309457][T10506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.318312][T10506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.326686][T10506] usb 2-1: config 0 descriptor?? [ 760.426135][T18069] UDC core: couldn't find an available UDC or it's busy: -16 [ 760.433462][T18069] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 760.506046][T17157] hid (null): report_id 0 is invalid [ 760.511969][T17157] logitech-hidpp-device 0003:046D:C086.0106: report_id 0 is invalid [ 760.519875][T17157] logitech-hidpp-device 0003:046D:C086.0106: item 0 0 1 8 parsing failed [ 760.528214][T17157] logitech-hidpp-device 0003:046D:C086.0106: hidpp_probe:parse failed [ 760.536211][T17157] logitech-hidpp-device: probe of 0003:046D:C086.0106 failed with error -22 [ 760.555846][T10504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 760.566604][T10504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 760.576195][ T60] usb 1-1: string descriptor 0 read error: -71 [ 760.582880][T10504] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 760.591809][ T60] usb 1-1: USB disconnect, device number 39 [ 760.597704][T10504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.609816][T10504] usb 5-1: config 0 descriptor?? [ 760.610546][T17154] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0107/input/input74 [ 760.696796][T17154] microsoft 0003:045E:07DA.0107: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 760.707602][ T330] usb 4-1: USB disconnect, device number 17 [ 760.790452][T10506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0108/input/input75 [ 760.867364][T10506] microsoft 0003:045E:07DA.0108: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 761.008988][T10506] usb 3-1: USB disconnect, device number 34 [ 761.076739][T10504] waltop 0003:172F:0032.0109: item fetching failed at offset 7/11 [ 761.084465][T10504] waltop: probe of 0003:172F:0032.0109 failed with error -22 [ 761.192669][T17154] usb 2-1: USB disconnect, device number 26 [ 761.276788][T10506] usb 5-1: USB disconnect, device number 30 [ 761.665960][T10504] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 761.714050][T18096] syz-executor.1[18096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 761.714099][T18096] syz-executor.1[18096] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 761.790620][T18098] loop4: detected capacity change from 0 to 256 [ 761.810742][T18100] incfs: ino conflict with backing FS 1 [ 761.816842][T18098] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 761.825998][T18100] incfs: ino conflict with backing FS 2 [ 761.827273][T18098] exFAT-fs (loop4): Medium has reported failures. Some data may be lost. [ 761.832836][T18100] incfs: ino conflict with backing FS 5 [ 761.848817][T18098] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 761.849070][T18100] incfs: ino conflict with backing FS 6 [ 761.872643][ T30] audit: type=1400 audit(1717392952.628:25781): avc: denied { rename } for pid=18099 comm="syz-executor.1" name=131377C5FC35D41454D5D41D29AD1A6029598146E6BE166E41AD0DBD4054033C9F33BBDA8224A2F3D772E7636E48B33CBF708372E8F1B9933EC5127743BE2206209EF02DF9CBF2F6E880D338 dev="incremental-fs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 761.945812][T10504] usb 4-1: Using ep0 maxpacket: 16 [ 762.069315][T18100] loop1: detected capacity change from 0 to 40427 [ 762.075848][T10504] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 762.086819][T18115] Invalid ELF header magic: != ELF [ 762.091890][ T30] audit: type=1400 audit(1717392952.848:25782): avc: denied { module_load } for pid=18114 comm="syz-executor.4" path="/sys/kernel/notes" dev="sysfs" ino=1140 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=system permissive=1 [ 762.123919][T18100] F2FS-fs (loop1): Unrecognized mount option "background_g†^on" or missing value [ 762.143163][T18116] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.150202][T18116] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.157326][T18116] device bridge_slave_0 entered promiscuous mode [ 762.165475][T18116] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.172362][T18116] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.179607][T18116] device bridge_slave_1 entered promiscuous mode [ 762.205858][T10504] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 762.218104][T10504] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 762.234727][T10504] usb 4-1: SerialNumber: syz [ 762.261842][T18116] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.268687][T18116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.275790][T18116] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.276197][T10504] usb-storage 4-1:1.0: USB Mass Storage device detected [ 762.282569][T18116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.298025][T18123] device pim6reg1 entered promiscuous mode [ 762.304244][T10504] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 762.321220][T10506] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 762.328627][T10506] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.335608][T10506] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.344635][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 762.352981][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 762.359842][T17154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 762.370207][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 762.378199][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 762.385038][T17154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 762.396021][ T330] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 762.404308][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 762.412281][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 762.425953][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 762.437401][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 762.445155][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 762.452430][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 762.460058][T18116] device veth0_vlan entered promiscuous mode [ 762.471581][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 762.480455][T18116] device veth1_macvtap entered promiscuous mode [ 762.490740][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 762.491243][T17154] usb 4-1: USB disconnect, device number 18 [ 762.507794][T10504] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 762.596440][T13402] device bridge_slave_1 left promiscuous mode [ 762.602454][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 762.609800][T13402] device bridge_slave_0 left promiscuous mode [ 762.615715][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 762.623515][T13402] device veth1_macvtap left promiscuous mode [ 762.629342][T13402] device veth0_vlan left promiscuous mode [ 762.645825][T10506] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 762.665856][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 762.796303][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 762.807143][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 762.819868][ T330] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 762.828803][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 762.837099][ T330] usb 5-1: config 0 descriptor?? [ 762.885804][T10506] usb 2-1: Using ep0 maxpacket: 16 [ 763.006527][T18133] loop3: detected capacity change from 0 to 512 [ 763.025835][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 763.036567][T10506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 763.049222][T10506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 763.050196][T18133] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 763.058092][T10506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 763.058747][T10506] usb 2-1: config 0 descriptor?? [ 763.067391][T18133] EXT4-fs (loop3): Journaled quota options ignored when QUOTA feature is enabled [ 763.088843][T18133] EXT4-fs (loop3): Unrecognized mount option "fowner=00000000000000000000" or missing value [ 763.238626][ T30] audit: type=1400 audit(1717392953.998:25783): avc: denied { setattr } for pid=18132 comm="syz-executor.3" name="PACKET" dev="sockfs" ino=107154 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 763.320387][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.010A/input/input76 [ 763.396705][ T330] microsoft 0003:045E:07DA.010A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 763.505823][T10504] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 763.550993][T10506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.010B/input/input77 [ 763.626708][T10506] microsoft 0003:045E:07DA.010B: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 763.705859][T17157] usb 1-1: new high-speed USB device number 40 using dummy_hcd [ 763.718319][ T60] usb 5-1: USB disconnect, device number 31 [ 763.785868][T10504] usb 4-1: device descriptor read/64, error -71 [ 763.954986][T17154] usb 2-1: USB disconnect, device number 27 [ 764.066555][T17157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 764.077296][T17157] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 764.086783][T17157] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 764.095605][T17157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 764.104006][T17157] usb 1-1: config 0 descriptor?? [ 764.215805][T10504] usb 4-1: device descriptor read/64, error -71 [ 764.495976][T10504] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 764.587032][T17157] waltop 0003:172F:0032.010C: item fetching failed at offset 7/11 [ 764.594792][T17157] waltop: probe of 0003:172F:0032.010C failed with error -22 [ 764.786049][T10504] usb 4-1: device descriptor read/64, error -71 [ 764.787435][T17157] usb 1-1: USB disconnect, device number 40 [ 764.809138][T18159] loop4: detected capacity change from 0 to 512 [ 764.820387][T18152] loop1: detected capacity change from 0 to 40427 [ 764.846591][T18159] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 764.859091][T18152] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 764.860132][T18159] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13 [ 764.866843][T18152] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 764.874814][T18159] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #13: comm syz-executor.4: invalid indirect mapped block 2683928664 (level 1) [ 764.885438][T18152] F2FS-fs (loop1): Found nat_bits in checkpoint [ 764.896932][T18159] EXT4-fs (loop4): Remounting filesystem read-only [ 764.909191][T18159] EXT4-fs (loop4): 1 truncate cleaned up [ 764.914634][T18159] EXT4-fs (loop4): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 764.934242][T18152] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 764.942240][T18159] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz-executor.4: Invalid block bitmap block 3 in block_group 0 [ 764.946454][T18152] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 764.956850][T18159] EXT4-fs (loop4): Remounting filesystem read-only [ 764.963579][T18152] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 765.002861][T18152] overlayfs: failed to resolve './file0': -2 [ 765.150959][T18170] device pim6reg1 entered promiscuous mode [ 765.195821][T10504] usb 4-1: device descriptor read/64, error -71 [ 765.315904][T10504] usb usb4-port1: attempt power cycle [ 765.495799][T10506] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 765.575835][T17154] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 765.715813][T17157] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 765.735802][T10504] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 765.765811][T10506] usb 2-1: Using ep0 maxpacket: 16 [ 765.815816][T17154] usb 1-1: Using ep0 maxpacket: 16 [ 765.915981][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 765.926713][T10506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 765.939317][T10504] usb 4-1: device descriptor read/8, error -71 [ 765.945259][T10506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 765.954089][T10506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 765.955875][T17157] usb 3-1: Using ep0 maxpacket: 16 [ 765.962597][T10506] usb 2-1: config 0 descriptor?? [ 765.975845][T17154] usb 1-1: unable to get BOS descriptor or descriptor too short [ 766.065935][T17154] usb 1-1: config 222 has an invalid interface number: 227 but max is 2 [ 766.074196][T17154] usb 1-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 766.082874][T17154] usb 1-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 766.092972][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.103765][T17154] usb 1-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 766.112820][T17157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 766.125478][T17154] usb 1-1: config 222 has no interface number 1 [ 766.131582][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 766.142779][T17157] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 766.151965][T17154] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 766.162627][T17157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.170396][T10504] usb 4-1: device descriptor read/8, error -71 [ 766.170757][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 766.187273][T17157] usb 3-1: config 0 descriptor?? [ 766.192129][T17154] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 766.202776][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 766.213767][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 766.224916][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 766.236450][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 766.247201][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 766.258123][T17154] usb 1-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 766.271311][T17154] usb 1-1: config 222 interface 227 has no altsetting 0 [ 766.450351][T10506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.010D/input/input78 [ 766.515905][T17154] usb 1-1: string descriptor 0 read error: -22 [ 766.522029][T17154] usb 1-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 766.530972][T17154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 766.547057][T10506] microsoft 0003:045E:07DA.010D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 766.681743][T17157] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.010E/input/input79 [ 766.699660][ T30] audit: type=1400 audit(1717392957.458:25784): avc: denied { setattr } for pid=18188 comm="syz-executor.3" name="map_files" dev="proc" ino=106329 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 766.789950][T17157] microsoft 0003:045E:07DA.010E: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 766.800712][ T330] usb 1-1: USB disconnect, device number 41 [ 766.945656][T10506] usb 2-1: USB disconnect, device number 28 [ 767.284432][T17157] usb 3-1: USB disconnect, device number 35 [ 767.526974][T18200] device pim6reg1 entered promiscuous mode [ 767.629704][T18210] loop0: detected capacity change from 0 to 512 [ 767.635876][ T30] audit: type=1400 audit(1717392958.388:25785): avc: denied { connect } for pid=18211 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 767.657657][T18210] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 767.672593][T18210] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 767.681331][T18210] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz-executor.0: invalid indirect mapped block 2683928664 (level 1) [ 767.695623][T18210] EXT4-fs (loop0): Remounting filesystem read-only [ 767.702138][T18210] EXT4-fs (loop0): 1 truncate cleaned up [ 767.707709][T18210] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,dioread_nolock,errors=remount-ro,minixdf,jqfmt=vfsv0,usrjquota=.,. Quota mode: writeback. [ 767.726946][T18210] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz-executor.0: Invalid block bitmap block 3 in block_group 0 [ 767.740712][T18210] EXT4-fs (loop0): Remounting filesystem read-only [ 768.035815][T10504] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 768.055811][T17155] usb 1-1: new high-speed USB device number 42 using dummy_hcd [ 768.085828][T10506] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 768.295808][T17155] usb 1-1: Using ep0 maxpacket: 16 [ 768.295808][T10504] usb 2-1: Using ep0 maxpacket: 16 [ 768.345811][T10506] usb 3-1: Using ep0 maxpacket: 16 [ 768.415897][T17155] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.426632][T17155] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.439187][T17155] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.445917][T10504] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 768.458710][T17155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.467173][T10504] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 768.471403][T17155] usb 1-1: config 0 descriptor?? [ 768.482024][T10504] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 768.493435][T10504] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.506100][T10504] usb 2-1: config 0 descriptor?? [ 768.515859][T10506] usb 3-1: unable to get BOS descriptor or descriptor too short [ 768.615853][T10506] usb 3-1: config 222 has an invalid interface number: 227 but max is 2 [ 768.624241][T10506] usb 3-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 768.632890][T10506] usb 3-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 768.642945][T10506] usb 3-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 768.651963][T10506] usb 3-1: config 222 has no interface number 1 [ 768.658076][T10506] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 768.669232][T10506] usb 3-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 768.679817][T10506] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 768.690480][T10506] usb 3-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 768.701175][T10506] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 768.725200][T10506] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 768.739329][T10506] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 768.750321][T10506] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 768.761371][T10506] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 768.778640][T10506] usb 3-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 768.792495][T10506] usb 3-1: config 222 interface 227 has no altsetting 0 [ 768.970217][T17155] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.010F/input/input80 [ 769.010105][T10504] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0110/input/input81 [ 769.046666][T17155] microsoft 0003:045E:07DA.010F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 769.115829][T10506] usb 3-1: string descriptor 0 read error: -22 [ 769.122227][T10506] usb 3-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 769.131511][T10506] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 769.135815][T17157] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 769.139416][T10504] microsoft 0003:045E:07DA.0110: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 769.369020][T10506] usb 1-1: USB disconnect, device number 42 [ 769.411473][T17154] usb 3-1: USB disconnect, device number 36 [ 769.425469][ T330] usb 2-1: USB disconnect, device number 29 [ 769.506120][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 769.516953][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 769.526530][T17157] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 769.535338][T17157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 769.543714][T17157] usb 5-1: config 0 descriptor?? [ 769.715808][ T60] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 769.887589][T18255] fuse: Bad value for 'fd' [ 769.975809][ T60] usb 4-1: Using ep0 maxpacket: 16 [ 770.026813][T17157] lg-g15 0003:046D:C222.0111: item fetching failed at offset 7/11 [ 770.034531][T17157] lg-g15: probe of 0003:046D:C222.0111 failed with error -22 [ 770.105822][ T60] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 770.165805][T17154] usb 1-1: new high-speed USB device number 43 using dummy_hcd [ 770.205874][ T60] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 770.214794][ T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 770.222624][T10506] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 770.235484][ T60] usb 4-1: SerialNumber: syz [ 770.241508][ T330] usb 5-1: USB disconnect, device number 32 [ 770.276159][ T60] usb-storage 4-1:1.0: USB Mass Storage device detected [ 770.283625][ T60] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 770.476819][T17155] usb 4-1: USB disconnect, device number 23 [ 770.505814][T10506] usb 2-1: Using ep0 maxpacket: 16 [ 770.525833][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.536617][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 770.547237][T17154] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 770.556112][T17154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.564439][T17154] usb 1-1: config 0 descriptor?? [ 770.645839][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 770.656563][T10506] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 770.669121][T10506] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 770.677962][T10506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 770.686357][T10506] usb 2-1: config 0 descriptor?? [ 771.197064][T17154] lg-g15 0003:046D:C222.0112: item fetching failed at offset 7/11 [ 771.204878][T17154] lg-g15: probe of 0003:046D:C222.0112 failed with error -22 [ 771.232395][T18285] device pim6reg1 entered promiscuous mode [ 771.232836][T10506] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0113/input/input82 [ 771.269931][ T60] usb 1-1: USB disconnect, device number 43 [ 771.317904][T18293] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 771.327050][T10506] microsoft 0003:045E:07DA.0113: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 771.585798][ T454] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 771.634771][T17157] usb 2-1: USB disconnect, device number 30 [ 771.845825][ T454] usb 3-1: Using ep0 maxpacket: 16 [ 771.986031][ T454] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 771.996755][ T454] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 772.009318][ T454] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 772.015848][T17154] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 772.018155][ T454] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.018868][ T454] usb 3-1: config 0 descriptor?? [ 772.065807][T17155] usb 1-1: new high-speed USB device number 44 using dummy_hcd [ 772.305913][T17155] usb 1-1: Using ep0 maxpacket: 16 [ 772.354071][T18314] device pim6reg1 entered promiscuous mode [ 772.375867][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 772.387098][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 772.396685][T17154] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 772.405963][T17154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 772.415659][T17154] usb 5-1: config 0 descriptor?? [ 772.425867][T17155] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.515951][T17155] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 772.523104][ T454] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.0114/input/input83 [ 772.524809][T17155] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 772.552074][T17155] usb 1-1: SerialNumber: syz [ 772.607180][T17155] usb-storage 1-1:1.0: USB Mass Storage device detected [ 772.610367][ T454] microsoft 0003:045E:07DA.0114: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 772.622248][T17155] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 772.804539][T17155] usb 1-1: USB disconnect, device number 44 [ 772.896810][T17154] lg-g15 0003:046D:C222.0115: item fetching failed at offset 7/11 [ 772.904593][T17154] lg-g15: probe of 0003:046D:C222.0115 failed with error -22 [ 772.945090][ T454] usb 3-1: USB disconnect, device number 37 [ 773.099281][T17154] usb 5-1: USB disconnect, device number 33 [ 773.399001][T18338] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 773.510141][T18343] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 773.595841][ T454] usb 1-1: new high-speed USB device number 45 using dummy_hcd [ 773.705784][ T60] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 773.821047][T18348] device pim6reg1 entered promiscuous mode [ 773.965790][ T60] usb 2-1: Using ep0 maxpacket: 16 [ 774.005972][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.025785][ T454] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 774.035325][ T454] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 774.044244][ T454] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.052626][ T454] usb 1-1: config 0 descriptor?? [ 774.095878][ T60] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 774.107476][ T60] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 774.120277][ T60] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 774.132149][ T60] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.140816][ T60] usb 2-1: config 0 descriptor?? [ 774.485821][T17154] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 774.536928][ T454] lg-g15 0003:046D:C222.0116: item fetching failed at offset 7/11 [ 774.544709][ T454] lg-g15: probe of 0003:046D:C222.0116 failed with error -22 [ 774.611920][ T60] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0117/input/input84 [ 774.686939][ T60] microsoft 0003:045E:07DA.0117: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 774.725815][T17154] usb 4-1: Using ep0 maxpacket: 16 [ 774.738409][ T60] usb 1-1: USB disconnect, device number 45 [ 774.845901][T17154] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 774.935882][T17154] usb 4-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 774.944858][T17154] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 774.952737][T17154] usb 4-1: SerialNumber: syz [ 774.996124][T17154] usb-storage 4-1:1.0: USB Mass Storage device detected [ 775.003519][T17154] usb-storage 4-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 775.013839][T17157] usb 2-1: USB disconnect, device number 31 [ 775.065806][ T330] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 775.196647][ T454] usb 4-1: USB disconnect, device number 24 [ 775.253869][T18380] device pim6reg1 entered promiscuous mode [ 775.295265][T18382] fuse: Unknown parameter 'grouid?00000000000000000000' [ 775.345805][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 775.485863][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 775.496565][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 775.509151][ T330] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 775.520981][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 775.531974][ T330] usb 5-1: config 0 descriptor?? [ 775.565825][T17155] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 775.595062][T18390] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 775.625814][T17154] usb 1-1: new high-speed USB device number 46 using dummy_hcd [ 775.865860][T17154] usb 1-1: Using ep0 maxpacket: 16 [ 775.925907][T17155] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 775.936033][T17155] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 776.015894][T17155] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 776.025080][T17155] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 776.033109][T17154] usb 1-1: unable to get BOS descriptor or descriptor too short [ 776.040939][T17155] usb 3-1: SerialNumber: syz [ 776.050810][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0118/input/input85 [ 776.115843][T17154] usb 1-1: config 222 has an invalid interface number: 227 but max is 2 [ 776.124231][T17154] usb 1-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 776.133045][T17154] usb 1-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 776.143786][T17154] usb 1-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 776.143800][ T330] microsoft 0003:045E:07DA.0118: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 776.152899][T17154] usb 1-1: config 222 has no interface number 1 [ 776.170657][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 776.181934][T17154] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 776.192738][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 776.203542][T17154] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 776.214402][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 776.225498][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 776.236609][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 776.254335][T17154] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 776.265294][T17154] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 776.276312][T17154] usb 1-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 776.289520][T17154] usb 1-1: config 222 interface 227 has no altsetting 0 [ 776.316504][T17155] usb 3-1: 0:2 : does not exist [ 776.321452][T17155] usb 3-1: unit 5: unexpected type 0x09 [ 776.458898][T18402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 776.703705][T17157] usb 5-1: USB disconnect, device number 34 [ 776.816091][T17154] usb 1-1: string descriptor 0 read error: -22 [ 776.822272][T17154] usb 1-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 776.831277][T17154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 777.005803][ T454] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 777.078931][ T330] usb 1-1: USB disconnect, device number 46 [ 777.395832][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.406658][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.416198][ T454] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 777.425017][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.433352][ T454] usb 2-1: config 0 descriptor?? [ 777.475822][T17154] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 777.515840][T17157] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 777.668464][T18413] device pim6reg1 entered promiscuous mode [ 777.755950][T17157] usb 4-1: Using ep0 maxpacket: 16 [ 777.835899][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.846634][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 777.856139][T17154] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 777.864965][T17154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.873284][T17154] usb 5-1: config 0 descriptor?? [ 777.885846][T17157] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 777.896565][T17157] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 777.909145][T17157] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 777.917201][ T454] waltop 0003:172F:0032.0119: item fetching failed at offset 7/11 [ 777.918644][T17157] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 777.925742][ T454] waltop: probe of 0003:172F:0032.0119 failed with error -22 [ 777.934021][T17157] usb 4-1: config 0 descriptor?? [ 777.985801][ T330] usb 1-1: new high-speed USB device number 47 using dummy_hcd [ 778.127897][T17153] usb 2-1: USB disconnect, device number 32 [ 778.294722][ T454] usb 3-1: USB disconnect, device number 38 [ 778.356923][T17154] lg-g15 0003:046D:C222.011A: item fetching failed at offset 7/11 [ 778.364737][T17154] lg-g15: probe of 0003:046D:C222.011A failed with error -22 [ 778.375840][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 778.386666][ T330] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 778.396333][ T330] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 778.405247][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 778.413589][ T330] usb 1-1: config 0 descriptor?? [ 778.420925][T17157] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.011B/input/input86 [ 778.497213][T17157] microsoft 0003:045E:07DA.011B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 778.559349][ T454] usb 5-1: USB disconnect, device number 35 [ 778.642954][T18427] fuse: Bad value for 'fd' [ 778.725988][T18431] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 778.830117][ T454] usb 4-1: USB disconnect, device number 25 [ 778.896835][ T330] waltop 0003:172F:0032.011C: item fetching failed at offset 7/11 [ 778.904716][ T330] waltop: probe of 0003:172F:0032.011C failed with error -22 [ 779.098315][T10506] usb 1-1: USB disconnect, device number 47 [ 779.185924][ T330] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 779.339096][ T454] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 779.575925][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.596185][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.605797][ T330] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 779.614727][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.646019][ T330] usb 3-1: config 0 descriptor?? [ 779.735818][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 779.746524][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 779.756043][ T454] usb 5-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 779.764908][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 779.773334][ T454] usb 5-1: config 0 descriptor?? [ 779.875807][T17157] usb 1-1: new high-speed USB device number 48 using dummy_hcd [ 779.925776][T10506] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 780.115814][T17157] usb 1-1: Using ep0 maxpacket: 16 [ 780.116076][ T330] hid (null): bogus close delimiter [ 780.235824][T17157] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 780.276726][ T454] lg-g15 0003:046D:C222.011E: item fetching failed at offset 7/11 [ 780.284462][ T454] lg-g15: probe of 0003:046D:C222.011E failed with error -22 [ 780.325862][T17157] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 780.334742][T17157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 780.335846][ T330] usb 3-1: language id specifier not provided by device, defaulting to English [ 780.342613][T17157] usb 1-1: SerialNumber: syz [ 780.355818][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 780.366590][T10506] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 780.376087][T10506] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 780.384909][T10506] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 780.393188][T10506] usb 2-1: config 0 descriptor?? [ 780.396259][T17157] usb-storage 1-1:1.0: USB Mass Storage device detected [ 780.405296][T17157] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 780.476871][T17157] usb 5-1: USB disconnect, device number 36 [ 780.597862][ T454] usb 1-1: USB disconnect, device number 48 [ 780.787103][ T330] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.011D/input/input87 [ 780.799787][ T330] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.011D/input/input88 [ 780.812187][ T330] uclogic 0003:256C:006D.011D: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0 [ 780.866868][T10506] waltop 0003:172F:0032.011F: item fetching failed at offset 7/11 [ 780.874660][T10506] waltop: probe of 0003:172F:0032.011F failed with error -22 [ 780.998803][T17157] usb 3-1: USB disconnect, device number 39 [ 781.058942][T18461] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 781.068894][T10506] usb 2-1: USB disconnect, device number 33 [ 781.124010][T18463] device pim6reg1 entered promiscuous mode [ 781.426329][T18476] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 781.865799][ T454] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 781.895828][T10506] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 782.165827][ T330] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 782.275831][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.286592][T10506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.297301][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.306846][T10506] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 782.316415][ T454] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 782.325243][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.333083][T10506] usb 3-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 782.341917][T10506] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.354492][ T454] usb 2-1: config 0 descriptor?? [ 782.360030][T10506] usb 3-1: config 0 descriptor?? [ 782.425813][ T330] usb 5-1: Using ep0 maxpacket: 16 [ 782.442317][T18500] binder: 18499:18500 ioctl 4b47 200004c0 returned -22 [ 782.485791][T17153] usb 1-1: new high-speed USB device number 49 using dummy_hcd [ 782.575871][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 782.586712][ T330] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 782.599258][ T330] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 782.608121][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 782.616695][ T330] usb 5-1: config 0 descriptor?? [ 782.725786][T17153] usb 1-1: Using ep0 maxpacket: 16 [ 782.836817][ T454] waltop 0003:172F:0032.0120: item fetching failed at offset 7/11 [ 782.844544][ T454] waltop: probe of 0003:172F:0032.0120 failed with error -22 [ 782.845871][T17153] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 782.866873][T10506] lg-g15 0003:046D:C222.0121: item fetching failed at offset 7/11 [ 782.874593][T10506] lg-g15: probe of 0003:046D:C222.0121 failed with error -22 [ 782.935852][T17153] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 782.944722][T17153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 782.952530][T17153] usb 1-1: SerialNumber: syz [ 782.996250][T17153] usb-storage 1-1:1.0: USB Mass Storage device detected [ 783.003601][T17153] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 783.045303][T10506] usb 2-1: USB disconnect, device number 34 [ 783.066877][T10504] usb 3-1: USB disconnect, device number 40 [ 783.120341][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0122/input/input89 [ 783.197714][ T454] usb 1-1: USB disconnect, device number 49 [ 783.204555][ T330] microsoft 0003:045E:07DA.0122: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 783.528075][T17157] usb 5-1: USB disconnect, device number 37 [ 783.715844][T17153] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 783.771728][ T30] audit: type=1400 audit(1717392974.528:25786): avc: denied { lock } for pid=18532 comm="syz-executor.0" path="socket:[109450]" dev="sockfs" ino=109450 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1 [ 784.075883][T17153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.086698][T17153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.098826][T17153] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 784.107768][T17153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.116614][T17153] usb 4-1: config 0 descriptor?? [ 784.385800][T17154] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 784.500828][T18551] xt_bpf: check failed: parse error [ 784.597434][T17153] waltop 0003:172F:0032.0123: item fetching failed at offset 7/11 [ 784.605395][T17153] waltop: probe of 0003:172F:0032.0123 failed with error -22 [ 784.696406][T18557] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 784.759936][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 784.770812][T17154] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 784.780463][T17154] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 784.789234][T17154] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 784.798232][T17154] usb 5-1: config 0 descriptor?? [ 784.803262][T17153] usb 4-1: USB disconnect, device number 26 [ 785.055796][T10504] usb 1-1: new high-speed USB device number 50 using dummy_hcd [ 785.276809][T17154] waltop 0003:172F:0032.0124: item fetching failed at offset 7/11 [ 785.284536][T17154] waltop: probe of 0003:172F:0032.0124 failed with error -22 [ 785.295814][T10504] usb 1-1: Using ep0 maxpacket: 16 [ 785.454903][T18574] device syzkaller0 entered promiscuous mode [ 785.465848][T10504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.479865][ T454] usb 5-1: USB disconnect, device number 38 [ 785.555867][T10504] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 785.566293][T10504] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 785.585863][T10504] usb 1-1: SerialNumber: syz [ 785.646209][T10504] usb-storage 1-1:1.0: USB Mass Storage device detected [ 785.655845][T10504] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 785.846770][T17153] usb 1-1: USB disconnect, device number 50 [ 786.360449][T18614] EXT4-fs warning (device sda1): ext4_group_extend:1830: need to use ext2online to resize further [ 786.411545][T18615] loop0: detected capacity change from 0 to 16 [ 786.456615][T18617] fuse: Bad value for 'user_id' [ 786.505850][ T454] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 786.664859][T18635] loop0: detected capacity change from 0 to 512 [ 786.690058][T18639] syz-executor.1[18639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.690102][T18638] syz-executor.1[18638] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.690112][T18639] syz-executor.1[18639] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 786.714412][T18635] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 786.748797][T18639] loop1: detected capacity change from 0 to 2048 [ 786.772331][T18635] EXT4-fs (loop0): mounted filesystem without journal. Opts: noauto_da_alloc,jqfmt=vfsold,noquota,norecovery,delalloc,,errors=continue. Quota mode: writeback. [ 786.788720][T18635] ext4 filesystem being mounted at /root/syzkaller-testdir2900124336/syzkaller.qu86F0/36/file0 supports timestamps until 2038 (0x7fffffff) [ 786.816868][T18639] EXT4-fs error (device loop1): ext4_orphan_get:1423: comm syz-executor.1: bad orphan inode 8192 [ 786.827621][T18639] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 786.911509][T18635] fuse: Unknown parameter '$ÄYkèÿ0x0000000000000009' [ 786.925947][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 786.942438][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 786.966456][ T454] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 786.976385][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 786.985467][ T454] usb 5-1: config 0 descriptor?? [ 787.037124][T18656] device pim6reg1 entered promiscuous mode [ 787.185823][ T330] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 787.195587][T18662] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 787.435842][ T330] usb 2-1: Using ep0 maxpacket: 16 [ 787.612375][ T454] waltop 0003:172F:0032.0125: item fetching failed at offset 7/11 [ 787.622683][ T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 787.652688][ T454] waltop: probe of 0003:172F:0032.0125 failed with error -22 [ 787.745883][ T330] usb 2-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 787.754777][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 787.762591][ T330] usb 2-1: SerialNumber: syz [ 787.806164][ T330] usb-storage 2-1:1.0: USB Mass Storage device detected [ 787.816093][T17153] usb 5-1: USB disconnect, device number 39 [ 787.823164][ T330] usb-storage 2-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 787.978535][T18670] 9p: Unknown uid 18446744073709551615 [ 788.006830][ T330] usb 2-1: USB disconnect, device number 35 [ 788.052376][T18679] loop3: detected capacity change from 0 to 16 [ 788.339174][T18689] device pim6reg1 entered promiscuous mode [ 789.955748][ C1] sched: RT throttling activated [ 790.085388][T18701] 9p: Unknown uid 18446744073709551615 [ 790.144923][T18713] loop0: detected capacity change from 0 to 256 [ 790.243757][T18720] loop4: detected capacity change from 0 to 1024 [ 790.254090][T18720] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000008,norecovery,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 790.870169][T18733] device pim6reg1 entered promiscuous mode [ 790.999940][T18743] syz-executor.2[18743] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 791.046800][T18741] 9p: Unknown uid 18446744073709551615 [ 791.156851][T18773] loop2: detected capacity change from 0 to 1024 [ 791.189312][T18773] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,debug_want_extra_isize=0x0000000000000008,norecovery,max_batch_time=0x0000000000000003,lazytime,usrquota,data_err=abort,data_err=abort,,errors=continue. Quota mode: writeback. [ 791.335797][ T330] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 791.607793][T18783] device pim6reg1 entered promiscuous mode [ 791.755835][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 791.766623][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 791.776289][ T330] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 791.786359][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.800778][ T330] usb 4-1: config 0 descriptor?? [ 792.004216][T18798] device pim6reg1 entered promiscuous mode [ 792.195141][T18810] 9p: Unknown uid 18446744073709551615 [ 792.242545][T18816] device pim6reg1 entered promiscuous mode [ 792.286888][ T330] lg-g15 0003:046D:C222.0126: item fetching failed at offset 7/11 [ 792.294860][ T330] lg-g15: probe of 0003:046D:C222.0126 failed with error -22 [ 792.487104][T17154] usb 4-1: USB disconnect, device number 27 [ 792.501198][T18829] loop4: detected capacity change from 0 to 512 [ 792.537190][T18829] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz-executor.4: invalid block [ 792.550088][T18829] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 792.564691][T18829] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #11: comm syz-executor.4: invalid indirect mapped block 4294967295 (level 1) [ 792.579040][T18829] EXT4-fs (loop4): 2 truncates cleaned up [ 792.584581][T18829] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 792.602645][T18833] device pim6reg1 entered promiscuous mode [ 792.713978][T18842] loop2: detected capacity change from 0 to 512 [ 792.770094][T18842] EXT4-fs (loop2): orphan cleanup on readonly fs [ 792.786658][T18842] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 792.795400][T18842] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 792.823074][T18842] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 792.841174][T18842] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 792.851017][T18842] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz-executor.2: bg 0: block 64: padding at end of block bitmap is not set [ 792.865720][T18842] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6150: Corrupt filesystem [ 792.875068][T18842] Quota error (device loop2): dq_insert_tree: Quota tree root isn't allocated! [ 792.884129][T18842] Quota error (device loop2): qtree_write_dquot: Error -5 occurred while creating quota [ 792.893794][T18842] EXT4-fs (loop2): 1 orphan inode deleted [ 792.905979][T18842] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 793.005791][ T330] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 793.095801][T17154] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 793.335828][T17154] usb 2-1: Using ep0 maxpacket: 8 [ 793.435853][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 793.446676][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 793.455847][T17154] usb 2-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 793.456406][ T330] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 793.464737][T17154] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 793.464758][T17154] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 793.492193][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 793.500665][ T330] usb 5-1: config 0 descriptor?? [ 793.615861][T17154] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 793.624745][T17154] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 793.632556][T17154] usb 2-1: Product: syz [ 793.636530][T17154] usb 2-1: Manufacturer: syz [ 793.640923][T17154] usb 2-1: SerialNumber: syz [ 793.873696][T18870] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 793.895428][T18870] bridge0: port 2(bridge_slave_1) entered disabled state [ 793.902386][T18870] bridge0: port 1(bridge_slave_0) entered disabled state [ 793.937429][T18875] device pim6reg1 entered promiscuous mode [ 793.976296][ T330] hid (null): bogus close delimiter [ 794.088247][T18887] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 794.146018][T17154] usb 2-1: 0:2 : does not exist [ 794.152008][T17154] usb 2-1: USB disconnect, device number 36 [ 794.189131][ T330] usb 5-1: language id specifier not provided by device, defaulting to English [ 794.387968][ T30] audit: type=1326 audit(1717392985.148:25787): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab27eee9 code=0x7ffc0000 [ 794.412465][ T30] audit: type=1326 audit(1717392985.148:25788): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=114 compat=0 ip=0x7f7aab27eee9 code=0x7ffc0000 [ 794.436483][ T30] audit: type=1326 audit(1717392985.148:25789): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aab27eee9 code=0x7ffc0000 [ 794.460598][ T30] audit: type=1326 audit(1717392985.178:25790): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18845 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f7aab27ec4b code=0x7ffc0000 [ 794.647207][ T330] input: HID 256c:006d Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0127/input/input90 [ 794.659547][ T330] input: HID 256c:006d Pad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.0127/input/input91 [ 794.672216][ T330] uclogic 0003:256C:006D.0127: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 794.684974][T18904] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 794.776500][T18916] input: syz0 as /devices/virtual/input/input92 [ 794.839730][T18920] 9p: Unknown uid 18446744073709551615 [ 794.848809][T17155] usb 5-1: USB disconnect, device number 40 [ 795.045789][T17154] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 795.405958][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 795.419045][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 795.436273][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 795.605932][T17154] usb 1-1: New USB device found, idVendor=05cc, idProduct=3350, bcdDevice=16.9c [ 795.618197][T17154] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 795.633652][T17154] usb 1-1: Product: syz [ 795.642018][T17154] usb 1-1: Manufacturer: syz [ 795.650941][T17154] usb 1-1: SerialNumber: syz [ 795.666600][T17154] usb 1-1: config 0 descriptor?? [ 795.706253][T17154] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 795.795086][T18945] loop3: detected capacity change from 0 to 128 [ 795.805780][ T454] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 795.907790][T17153] usb 1-1: USB disconnect, device number 51 [ 796.005803][T17154] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 796.045783][ T454] usb 2-1: Using ep0 maxpacket: 8 [ 796.185827][ T454] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 796.196883][ T454] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 796.208260][ T454] usb 2-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00 [ 796.217191][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 796.245827][T17154] usb 3-1: Using ep0 maxpacket: 16 [ 796.285852][T18934] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 796.405830][T17154] usb 3-1: unable to get BOS descriptor or descriptor too short [ 796.515803][T17154] usb 3-1: config 222 has an invalid interface number: 227 but max is 2 [ 796.524074][T17154] usb 3-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 796.629676][T17154] usb 3-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 796.705994][T17154] usb 3-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 796.776495][T17154] usb 3-1: config 222 has no interface number 1 [ 796.822271][T17154] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 796.914709][T17154] usb 3-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 796.979854][T17154] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 797.049547][T17154] usb 3-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 797.130904][T17154] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 797.213266][T17154] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 797.275935][T17154] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 797.297071][ T454] uclogic 0003:28BD:0075.0128: unknown main item tag 0x0 [ 797.303919][ T454] uclogic 0003:28BD:0075.0128: unknown main item tag 0x0 [ 797.346639][T17154] usb 3-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 797.374769][ T454] uclogic 0003:28BD:0075.0128: unknown main item tag 0x4 [ 797.425067][T17154] usb 3-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 797.436885][ T454] uclogic 0003:28BD:0075.0128: item fetching failed at offset 3/7 [ 797.460307][T18960] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 797.499151][ T454] uclogic 0003:28BD:0075.0128: parse failed [ 797.507903][T17154] usb 3-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 797.542638][ T454] uclogic: probe of 0003:28BD:0075.0128 failed with error -22 [ 797.611366][T17154] usb 3-1: config 222 interface 227 has no altsetting 0 [ 797.661786][T17155] usb 2-1: USB disconnect, device number 37 [ 797.788857][T18970] overlayfs: overlapping lowerdir path [ 797.895868][T17154] usb 3-1: string descriptor 0 read error: -22 [ 797.901878][T17154] usb 3-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 797.910890][T17154] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 797.975799][T17157] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 798.157187][T17154] usb 3-1: USB disconnect, device number 41 [ 798.335875][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 798.346688][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 798.356533][T17157] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00 [ 798.365486][T17157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.374048][T17157] usb 5-1: config 0 descriptor?? [ 798.453920][T18980] device pim6reg1 entered promiscuous mode [ 798.671902][T18993] 9p: Unknown uid 18446744073709551615 [ 798.780021][T19001] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 798.865823][T17154] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 798.920656][T19006] overlayfs: statfs failed on './file0' [ 798.957235][T17157] logitech-hidpp-device 0003:046D:C086.0129: hidraw0: USB HID v0.00 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0 [ 798.995937][T19011] loop1: detected capacity change from 0 to 512 [ 799.046616][T19011] EXT4-fs (loop1): feature flags set on rev 0 fs, running e2fsck is recommended [ 799.066750][T19011] EXT4-fs (loop1): failed to initialize system zone (-117) [ 799.073866][T19011] EXT4-fs (loop1): mount failed [ 799.172580][ T454] usb 5-1: USB disconnect, device number 41 [ 799.193554][T19015] device pim6reg1 entered promiscuous mode [ 799.199309][ T330] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 799.225852][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.236739][T17154] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.246437][T17154] usb 1-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 799.256213][T17154] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 799.264814][T17154] usb 1-1: config 0 descriptor?? [ 799.465784][ T330] usb 4-1: Using ep0 maxpacket: 16 [ 799.535785][T17157] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 799.626070][ T330] usb 4-1: unable to get BOS descriptor or descriptor too short [ 799.705801][ T330] usb 4-1: config 222 has an invalid interface number: 227 but max is 2 [ 799.713997][ T330] usb 4-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 799.722661][ T330] usb 4-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 799.732757][ T330] usb 4-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 799.741637][ T330] usb 4-1: config 222 has no interface number 1 [ 799.747265][T17154] waltop 0003:172F:0032.012A: item fetching failed at offset 7/11 [ 799.752787][ T330] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 799.755537][T17154] waltop: probe of 0003:172F:0032.012A failed with error -22 [ 799.766605][ T330] usb 4-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 799.775830][T17157] usb 2-1: Using ep0 maxpacket: 32 [ 799.784324][ T330] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 799.801238][ T330] usb 4-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 799.812330][ T330] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 799.823302][ T330] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 799.834040][ T330] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 799.844740][ T330] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 799.858687][ T330] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 799.869709][ T330] usb 4-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 799.883018][ T330] usb 4-1: config 222 interface 227 has no altsetting 0 [ 799.892013][T19029] loop4: detected capacity change from 0 to 128 [ 799.915874][T17157] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 799.916471][T19029] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 799.926649][T17157] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 799.941692][T19029] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 799.968617][T17154] usb 1-1: USB disconnect, device number 52 [ 800.065859][T17157] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 800.074899][T17157] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 800.083029][T17157] usb 2-1: Product: syz [ 800.086974][T17157] usb 2-1: Manufacturer: syz [ 800.126230][T17157] hub 2-1:4.0: USB hub found [ 800.195803][ T330] usb 4-1: string descriptor 0 read error: -22 [ 800.201871][ T330] usb 4-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 800.210699][ T330] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 800.275783][T17153] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 800.345870][T17157] hub 2-1:4.0: 2 ports detected [ 800.462825][T17154] usb 4-1: USB disconnect, device number 28 [ 800.515854][T17153] usb 5-1: Using ep0 maxpacket: 16 [ 800.675884][T17153] usb 5-1: unable to get BOS descriptor or descriptor too short [ 800.755827][T17153] usb 5-1: config 222 has an invalid interface number: 227 but max is 2 [ 800.764041][T17153] usb 5-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 800.772915][T17153] usb 5-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 800.783004][T17153] usb 5-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 800.791947][T17153] usb 5-1: config 222 has no interface number 1 [ 800.795800][ T330] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 800.798023][T17153] usb 5-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 800.816503][T17153] usb 5-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 800.827084][T17153] usb 5-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 800.837763][T17153] usb 5-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 800.848431][T17153] usb 5-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 800.859390][T17153] usb 5-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 800.870048][T17153] usb 5-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 800.880744][T17153] usb 5-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 800.891397][T17153] usb 5-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 800.902331][T17153] usb 5-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 800.915522][T17153] usb 5-1: config 222 interface 227 has no altsetting 0 [ 801.046937][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 801.046950][ T30] audit: type=1326 audit(1717392991.808:25801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19042 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f31454aaee9 code=0x0 [ 801.085797][ T330] usb 3-1: Using ep0 maxpacket: 16 [ 801.175820][T17153] usb 5-1: string descriptor 0 read error: -22 [ 801.181967][T17153] usb 5-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 801.190917][T17153] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.225812][ T330] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 801.236669][ T330] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 801.249250][ T330] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 801.258052][ T330] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 801.266282][ T330] usb 3-1: config 0 descriptor?? [ 801.437627][T10504] usb 5-1: USB disconnect, device number 42 [ 801.625824][T17153] hub 2-1:4.0: activate --> -90 [ 801.730091][ T330] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.012B/input/input93 [ 801.816824][ T330] microsoft 0003:045E:07DA.012B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 801.905951][T19017] UDC core: couldn't find an available UDC or it's busy: -16 [ 801.913148][T19017] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 801.934933][T19053] loop3: detected capacity change from 0 to 512 [ 801.986240][T17157] usb 2-1: USB disconnect, device number 38 [ 801.986741][T19053] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 801.999118][T19053] EXT4-fs (loop3): Test dummy encryption mode enabled [ 802.005686][T19053] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 802.005842][T17153] hub 2-1:4.0: hub_ext_port_status failed (err = -71) [ 802.024926][T19053] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a064e01c, mo2=0002] [ 802.032711][T19053] System zones: 1-12 [ 802.037204][T19053] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz-executor.3: casefold flag without casefold feature [ 802.050384][T19053] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: inode #12: comm syz-executor.3: missing EA_INODE flag [ 802.062403][T19053] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz-executor.3: error while reading EA inode 12 err=-117 [ 802.075383][T19053] EXT4-fs (loop3): 1 orphan inode deleted [ 802.081893][T19053] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,abort,max_dir_size_kb=0x0000000000009c7c,debug,mblk_io_submit,errors=continue,test_dummy_encryption,prjquota,nodiscard,,errors=continue. Quota mode: writeback. [ 802.128619][T17154] usb 3-1: USB disconnect, device number 42 [ 802.355835][ T330] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 802.755838][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 802.798813][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 802.845806][ T454] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 802.890091][ T330] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 802.954588][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.028819][ T330] usb 5-1: config 0 descriptor?? [ 803.245855][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 803.258731][ T2303] tipc: Disabling bearer [ 803.263503][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 803.265868][ T2303] tipc: Left network mode [ 803.283230][ T454] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 803.302071][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 803.319571][ T454] usb 2-1: config 0 descriptor?? [ 803.386218][T19077] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.393129][T19077] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.400797][T19077] device bridge_slave_0 entered promiscuous mode [ 803.410801][T19077] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.417698][T19077] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.424911][T19077] device bridge_slave_1 entered promiscuous mode [ 803.492745][T19077] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.499611][T19077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.506704][T19077] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.513478][T19077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.537113][ T330] waltop 0003:172F:0032.012C: item fetching failed at offset 7/11 [ 803.544926][ T330] waltop: probe of 0003:172F:0032.012C failed with error -22 [ 803.553216][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 803.565820][T17154] bridge0: port 1(bridge_slave_0) entered disabled state [ 803.586010][T17154] bridge0: port 2(bridge_slave_1) entered disabled state [ 803.606856][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 803.614813][T17154] bridge0: port 1(bridge_slave_0) entered blocking state [ 803.621657][T17154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 803.646100][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 803.659248][T17154] bridge0: port 2(bridge_slave_1) entered blocking state [ 803.666198][T17154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 803.673490][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 803.688148][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 803.716147][T17157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 803.739294][ T330] usb 5-1: USB disconnect, device number 43 [ 803.740989][T19077] device veth0_vlan entered promiscuous mode [ 803.767096][T17157] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 803.780551][T17157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 803.796025][T17157] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 803.797160][ T454] waltop 0003:172F:0032.012D: item fetching failed at offset 7/11 [ 803.807816][T19077] device veth1_macvtap entered promiscuous mode [ 803.811232][ T454] waltop: probe of 0003:172F:0032.012D failed with error -22 [ 803.825467][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 803.843842][ T454] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 803.883390][T17154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 804.006926][ T2303] device veth1_macvtap left promiscuous mode [ 804.028410][ T330] usb 2-1: USB disconnect, device number 39 [ 804.546377][T17157] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 804.563908][T19116] loop1: detected capacity change from 0 to 512 [ 804.607866][T19116] EXT4-fs (loop1): orphan cleanup on readonly fs [ 804.614208][T19116] EXT4-fs error (device loop1): ext4_ext_check_inode:501: inode #4: comm syz-executor.1: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 2048(2048) [ 804.633228][T19116] EXT4-fs error (device loop1): ext4_quota_enable:6369: comm syz-executor.1: Bad quota inode: 4, type: 1 [ 804.644409][T19116] EXT4-fs warning (device loop1): ext4_enable_quotas:6410: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 804.665832][T19116] EXT4-fs (loop1): Cannot turn on quotas: error -117 [ 804.672395][T19116] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 804.759083][T19121] loop2: detected capacity change from 0 to 512 [ 804.789363][T19121] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 804.801554][T17157] usb 5-1: Using ep0 maxpacket: 16 [ 804.806736][T19121] EXT4-fs error (device loop2): ext4_orphan_get:1402: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 804.821048][T19121] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,delalloc,data_err=abort,,errors=continue. Quota mode: none. [ 804.925840][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 804.936562][T17157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 804.949169][T17157] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 804.958241][T17157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 804.967487][T17157] usb 5-1: config 0 descriptor?? [ 805.451700][T17157] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.012E/input/input94 [ 805.527521][T17157] microsoft 0003:045E:07DA.012E: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 805.593034][T19149] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 805.848186][T17157] usb 5-1: USB disconnect, device number 44 [ 805.965778][T17155] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 806.325828][T17155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 806.336739][T17155] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 806.346338][T17155] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 806.358066][T17155] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 806.367054][T17155] usb 4-1: config 0 descriptor?? [ 806.383520][T19156] loop2: detected capacity change from 0 to 256 [ 806.645831][ T330] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 806.846984][T17155] waltop 0003:172F:0032.012F: item fetching failed at offset 7/11 [ 806.855717][T17155] waltop: probe of 0003:172F:0032.012F failed with error -22 [ 807.025814][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 807.036546][ T330] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 807.046093][ T330] usb 5-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 807.050314][T17153] usb 4-1: USB disconnect, device number 29 [ 807.054926][ T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 807.069239][ T330] usb 5-1: config 0 descriptor?? [ 807.536772][ T330] waltop 0003:172F:0032.0130: item fetching failed at offset 7/11 [ 807.544552][ T330] waltop: probe of 0003:172F:0032.0130 failed with error -22 [ 807.738154][T17153] usb 5-1: USB disconnect, device number 45 [ 808.498354][T17153] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 808.514145][T19197] device pim6reg1 entered promiscuous mode [ 808.905767][T17153] usb 1-1: Using ep0 maxpacket: 16 [ 808.935823][T17157] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 809.025899][T17153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 809.038722][T17153] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 809.051681][T17153] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 809.061108][T17153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 809.069607][T17153] usb 1-1: config 0 descriptor?? [ 809.122126][T19217] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 809.175783][T17157] usb 3-1: Using ep0 maxpacket: 16 [ 809.307222][T17157] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 809.395825][T17157] usb 3-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 809.404705][T17157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 809.412513][T17157] usb 3-1: SerialNumber: syz [ 809.456170][T17157] usb-storage 3-1:1.0: USB Mass Storage device detected [ 809.463502][T17157] usb-storage 3-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 809.550237][T17153] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0131/input/input95 [ 809.595785][ T330] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 809.626831][T17153] microsoft 0003:045E:07DA.0131: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 809.658127][T17153] usb 3-1: USB disconnect, device number 43 [ 809.948148][T17155] usb 1-1: USB disconnect, device number 53 [ 810.015830][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 810.026686][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 810.036227][ T330] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 810.045059][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 810.053564][ T330] usb 4-1: config 0 descriptor?? [ 810.174301][T19229] loop2: detected capacity change from 0 to 2048 [ 810.237874][T19229] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 810.543931][ T330] waltop 0003:172F:0032.0132: item fetching failed at offset 7/11 [ 810.578589][ T330] waltop: probe of 0003:172F:0032.0132 failed with error -22 [ 810.605249][T19238] device pim6reg1 entered promiscuous mode [ 810.678017][T19240] 9p: Unknown uid 18446744073709551615 [ 810.750161][ T454] usb 4-1: USB disconnect, device number 30 [ 811.385824][ T454] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 811.629190][T19257] loop0: detected capacity change from 0 to 2048 [ 811.635793][ T454] usb 2-1: Using ep0 maxpacket: 16 [ 811.657612][T19257] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 811.705800][T17155] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 811.855849][ T454] usb 2-1: unable to get BOS descriptor or descriptor too short [ 812.012857][ T454] usb 2-1: config 222 has an invalid interface number: 227 but max is 2 [ 812.024608][ T454] usb 2-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 812.039824][ T454] usb 2-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 812.053304][ T454] usb 2-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 812.062294][ T454] usb 2-1: config 222 has no interface number 1 [ 812.068416][ T454] usb 2-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 812.079556][ T454] usb 2-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 812.090160][ T454] usb 2-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 812.100846][ T454] usb 2-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 812.111550][ T454] usb 2-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 812.115807][T17155] usb 4-1: Using ep0 maxpacket: 16 [ 812.122453][ T454] usb 2-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 812.138099][ T454] usb 2-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 812.148768][ T454] usb 2-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 812.163191][ T454] usb 2-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 812.174204][ T454] usb 2-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 812.187656][ T454] usb 2-1: config 222 interface 227 has no altsetting 0 [ 812.251273][T19270] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 812.285832][T17155] usb 4-1: unable to get BOS descriptor or descriptor too short [ 812.335793][T17157] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 812.365828][T17155] usb 4-1: config 222 has an invalid interface number: 227 but max is 2 [ 812.374061][T17155] usb 4-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 812.382830][T17155] usb 4-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 812.393013][T17155] usb 4-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 812.401964][T17155] usb 4-1: config 222 has no interface number 1 [ 812.408027][T17155] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 812.419123][T17155] usb 4-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 812.429712][T17155] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 812.440377][T17155] usb 4-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 812.451065][T17155] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 812.462121][T17155] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 812.473278][T17155] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 812.483976][T17155] usb 4-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 812.494723][T17155] usb 4-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 812.505641][T17155] usb 4-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 812.519153][ T454] usb 2-1: string descriptor 0 read error: -22 [ 812.520417][T17155] usb 4-1: config 222 interface 227 has no altsetting 0 [ 812.532173][ T454] usb 2-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 812.541094][ T454] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.575779][T17157] usb 5-1: Using ep0 maxpacket: 16 [ 812.695846][T17157] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 812.706598][T17157] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 812.719152][T17157] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 812.728037][T17157] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 812.736307][T17157] usb 5-1: config 0 descriptor?? [ 812.765802][T17155] usb 4-1: string descriptor 0 read error: -22 [ 812.771922][T17155] usb 4-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 812.781261][T17155] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 812.801121][T17153] usb 2-1: USB disconnect, device number 40 [ 812.835787][T17156] usb 1-1: new high-speed USB device number 54 using dummy_hcd [ 813.016646][T19274] 9p: Unknown uid 18446744073709551615 [ 813.029795][ T454] usb 4-1: USB disconnect, device number 31 [ 813.195820][T17156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 813.206532][T17156] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 813.220324][T17157] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0133/input/input96 [ 813.231514][T17156] usb 1-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 813.240351][T17156] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 813.248723][T17156] usb 1-1: config 0 descriptor?? [ 813.316860][T17157] microsoft 0003:045E:07DA.0133: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 813.619094][T17157] usb 5-1: USB disconnect, device number 46 [ 813.726724][T17156] lg-g15 0003:046D:C222.0134: item fetching failed at offset 7/11 [ 813.734530][T17156] lg-g15: probe of 0003:046D:C222.0134 failed with error -22 [ 813.748254][T19285] 9p: Unknown uid 18446744073709551615 [ 814.045390][T10506] usb 1-1: USB disconnect, device number 54 [ 814.635842][T17155] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 814.712364][T19305] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 814.845832][T17157] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 814.995842][T17155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 815.006581][T17155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 815.016111][T17155] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 815.027078][T17155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.055520][T17155] usb 2-1: config 0 descriptor?? [ 815.085791][T17157] usb 1-1: Using ep0 maxpacket: 16 [ 815.245813][T17157] usb 1-1: unable to get BOS descriptor or descriptor too short [ 815.325821][T17157] usb 1-1: config 222 has an invalid interface number: 227 but max is 2 [ 815.334116][T17157] usb 1-1: config 222 contains an unexpected descriptor of type 0x2, skipping [ 815.342803][T17157] usb 1-1: config 222 has an invalid descriptor of length 0, skipping remainder of the config [ 815.352823][T17157] usb 1-1: config 222 has 2 interfaces, different from the descriptor's value: 3 [ 815.361753][T17157] usb 1-1: config 222 has no interface number 1 [ 815.367832][T17157] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xF has an invalid bInterval 196, changing to 7 [ 815.378940][T17157] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x0, skipping [ 815.389528][T17157] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 815.400212][T17157] usb 1-1: config 222 interface 227 altsetting 8 has an invalid endpoint with address 0x80, skipping [ 815.410888][T17157] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xE has invalid maxpacket 1024, setting to 64 [ 815.421816][T17157] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 815.432482][T17157] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0xF, skipping [ 815.443162][T17157] usb 1-1: config 222 interface 227 altsetting 8 has a duplicate endpoint with address 0x8, skipping [ 815.453842][T17157] usb 1-1: config 222 interface 227 altsetting 8 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 815.464773][T17157] usb 1-1: config 222 interface 227 altsetting 8 has 12 endpoint descriptors, different from the interface descriptor's value: 14 [ 815.478070][T17157] usb 1-1: config 222 interface 227 has no altsetting 0 [ 815.536845][T17155] waltop 0003:172F:0032.0135: item fetching failed at offset 7/11 [ 815.544545][T17155] waltop: probe of 0003:172F:0032.0135 failed with error -22 [ 815.715813][T17157] usb 1-1: string descriptor 0 read error: -22 [ 815.722031][T17157] usb 1-1: New USB device found, idVendor=1608, idProduct=000c, bcdDevice=20.09 [ 815.723309][T19321] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 815.730961][T17157] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 815.751405][T17153] usb 2-1: USB disconnect, device number 41 [ 816.001845][ T330] usb 1-1: USB disconnect, device number 55 [ 816.535781][ T330] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 816.659189][T19338] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 816.905801][ T454] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 816.925836][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 816.936573][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 816.946229][ T330] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 816.955260][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.963836][ T330] usb 2-1: config 0 descriptor?? [ 817.295832][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 817.306780][ T454] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 817.316338][ T454] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 817.325166][ T454] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 817.333520][ T454] usb 4-1: config 0 descriptor?? [ 817.466771][ T330] lg-g15 0003:046D:C222.0136: item fetching failed at offset 7/11 [ 817.474605][ T330] lg-g15: probe of 0003:046D:C222.0136 failed with error -22 [ 817.678263][ T330] usb 2-1: USB disconnect, device number 42 [ 817.806899][ T454] lg-g15 0003:046D:C222.0137: item fetching failed at offset 7/11 [ 817.814773][ T454] lg-g15: probe of 0003:046D:C222.0137 failed with error -22 [ 817.917050][T19352] input: syz1 as /devices/virtual/input/input97 [ 818.025238][T17153] usb 4-1: USB disconnect, device number 32 [ 818.257881][T19365] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 818.305780][T17157] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 818.882994][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 818.893780][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 818.903332][T17157] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 818.912165][T17157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 818.920479][T17157] usb 3-1: config 0 descriptor?? [ 819.164368][ T30] audit: type=1400 audit(1717393009.918:25802): avc: denied { create } for pid=19385 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 819.185692][ T30] audit: type=1400 audit(1717393009.928:25803): avc: denied { map } for pid=19385 comm="syz-executor.1" path="socket:[113724]" dev="sockfs" ino=113724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.209244][ T30] audit: type=1400 audit(1717393009.928:25804): avc: denied { read } for pid=19385 comm="syz-executor.1" path="socket:[113724]" dev="sockfs" ino=113724 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 819.397113][T17157] waltop 0003:172F:0032.0138: item fetching failed at offset 7/11 [ 819.404893][T17157] waltop: probe of 0003:172F:0032.0138 failed with error -22 [ 819.599589][ T454] usb 3-1: USB disconnect, device number 44 [ 819.705792][ T330] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 820.100956][T19411] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 820.115810][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.126554][ T330] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.136091][ T330] usb 4-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 820.144916][ T330] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.156114][ T330] usb 4-1: config 0 descriptor?? [ 820.215804][T17155] usb 2-1: new high-speed USB device number 43 using dummy_hcd [ 820.515851][T17157] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 820.575839][T17155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.586571][T17155] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 820.596101][T17155] usb 2-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 820.604935][T17155] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.613214][T17155] usb 2-1: config 0 descriptor?? [ 820.626764][ T330] waltop 0003:172F:0032.0139: item fetching failed at offset 7/11 [ 820.634606][ T330] waltop: probe of 0003:172F:0032.0139 failed with error -22 [ 820.755796][T17157] usb 3-1: Using ep0 maxpacket: 16 [ 820.836987][T10504] usb 4-1: USB disconnect, device number 33 [ 820.875875][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 820.886685][T17157] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 820.899358][T17157] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 820.908156][T17157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 820.917426][T17157] usb 3-1: config 0 descriptor?? [ 821.086670][T17155] waltop 0003:172F:0032.013A: item fetching failed at offset 7/11 [ 821.094416][T17155] waltop: probe of 0003:172F:0032.013A failed with error -22 [ 821.288756][T17156] usb 2-1: USB disconnect, device number 43 [ 821.375801][T10504] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 821.400307][T17157] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.013B/input/input98 [ 821.476743][T17157] microsoft 0003:045E:07DA.013B: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 821.675808][T10504] usb 5-1: Using ep0 maxpacket: 16 [ 821.825858][T10504] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 821.836610][T10504] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 821.849291][T10504] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 821.858165][T10504] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 821.866454][T10504] usb 5-1: config 0 descriptor?? [ 821.925872][T17156] usb 3-1: USB disconnect, device number 45 [ 822.085782][ T454] usb 2-1: new high-speed USB device number 44 using dummy_hcd [ 822.355794][ T454] usb 2-1: Using ep0 maxpacket: 16 [ 822.366715][T10504] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.013C/input/input99 [ 822.446547][T10504] microsoft 0003:045E:07DA.013C: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 822.490537][T19459] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 822.505823][ T454] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 822.516537][ T454] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 822.529115][ T454] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 822.537935][ T454] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 822.546231][ T454] usb 2-1: config 0 descriptor?? [ 822.769033][ T330] usb 5-1: USB disconnect, device number 47 [ 823.021175][ T454] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.013D/input/input100 [ 823.096580][ T454] microsoft 0003:045E:07DA.013D: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 823.418551][T10504] usb 2-1: USB disconnect, device number 44 [ 823.555781][T17157] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 823.915881][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 823.926608][T17157] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 823.936145][T17157] usb 3-1: New USB device found, idVendor=172f, idProduct=0032, bcdDevice= 0.00 [ 823.945292][T17157] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 823.953839][T17157] usb 3-1: config 0 descriptor?? [ 824.145794][ T454] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 824.395780][ T454] usb 5-1: Using ep0 maxpacket: 16 [ 824.436851][T17157] waltop 0003:172F:0032.013E: item fetching failed at offset 7/11 [ 824.444559][T17157] waltop: probe of 0003:172F:0032.013E failed with error -22 [ 824.535890][ T454] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.546631][ T454] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.559206][ T454] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 824.568050][ T454] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 824.576344][ T454] usb 5-1: config 0 descriptor?? [ 824.636911][T17156] usb 3-1: USB disconnect, device number 46 [ 825.080408][ T454] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.013F/input/input101 [ 825.193897][ T454] microsoft 0003:045E:07DA.013F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 825.502336][ T454] usb 5-1: USB disconnect, device number 48 [ 825.795777][T10506] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 825.935770][T17157] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 826.085788][T10506] usb 4-1: Using ep0 maxpacket: 16 [ 826.175760][T17157] usb 1-1: Using ep0 maxpacket: 16 [ 826.215820][T10506] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 826.226661][T10506] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 826.239233][T10506] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 826.248069][T10506] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 826.256414][T10506] usb 4-1: config 0 descriptor?? [ 826.295808][T17157] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 826.385837][T17157] usb 1-1: New USB device found, idVendor=04e6, idProduct=0007, bcdDevice= 1.75 [ 826.394882][T17157] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=5 [ 826.402646][T17157] usb 1-1: SerialNumber: syz [ 826.446071][T17157] usb-storage 1-1:1.0: USB Mass Storage device detected [ 826.453564][T17157] usb-storage 1-1:1.0: Quirks match for vid 04e6 pid 0007: 1 [ 826.647949][T17157] usb 1-1: USB disconnect, device number 56 [ 826.730220][T10506] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0140/input/input102 [ 826.816511][T10506] microsoft 0003:045E:07DA.0140: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 827.143132][ T454] usb 4-1: USB disconnect, device number 34 [ 827.345763][T17156] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 827.435469][T19534] loop0: detected capacity change from 0 to 40427 [ 827.486443][T19534] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 827.494031][T19534] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 827.502182][T19534] F2FS-fs (loop0): Unrecognized mount option "01777777777777777777777ÿÿ" or missing value [ 827.607964][T19534] 9pnet: Insufficient options for proto=fd [ 927.625844][ C1] rcu: INFO: rcu_preempt self-detected stall on CPU [ 927.632278][ C1] rcu: 1-...!: (1 GPs behind) idle=d27/1/0x4000000000000000 softirq=109488/109489 fqs=1 last_accelerate: cdd4/f4e4 dyntick_enabled: 1 [ 927.645882][ C1] (t=10002 jiffies g=116445 q=137) [ 927.650913][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 9999 jiffies! g116445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 927.663061][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=46488 [ 927.670786][ C1] rcu: rcu_preempt kthread starved for 10002 jiffies! g116445 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 927.682069][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 927.691876][ C1] rcu: RCU grace-period kthread stack dump: [ 927.697624][ C1] task:rcu_preempt state:I stack:28248 pid: 14 ppid: 2 flags:0x00004000 [ 927.706634][ C1] Call Trace: [ 927.709757][ C1] [ 927.712538][ C1] __schedule+0xccc/0x1590 [ 927.716791][ C1] ? __sched_text_start+0x8/0x8 [ 927.721474][ C1] ? del_timer_sync+0x1bc/0x230 [ 927.726164][ C1] ? __kasan_check_write+0x14/0x20 [ 927.731108][ C1] schedule+0x11f/0x1e0 [ 927.735102][ C1] schedule_timeout+0x18c/0x370 [ 927.739787][ C1] ? __kasan_check_write+0x14/0x20 [ 927.744734][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 927.750029][ C1] ? console_conditional_schedule+0x30/0x30 [ 927.755759][ C1] ? update_process_times+0x200/0x200 [ 927.760965][ C1] ? prepare_to_swait_event+0x308/0x320 [ 927.766365][ C1] rcu_gp_fqs_loop+0x2af/0xf80 [ 927.770946][ C1] ? dump_blkd_tasks+0x7e0/0x7e0 [ 927.775726][ C1] ? rcu_gp_init+0xc30/0xc30 [ 927.780149][ C1] ? _raw_spin_unlock_irq+0x4e/0x70 [ 927.785180][ C1] ? rcu_gp_init+0x9cf/0xc30 [ 927.789608][ C1] rcu_gp_kthread+0xa4/0x350 [ 927.794034][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 927.798720][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 927.803233][ C1] ? __kasan_check_read+0x11/0x20 [ 927.808095][ C1] ? __kthread_parkme+0xb2/0x200 [ 927.812867][ C1] kthread+0x421/0x510 [ 927.816774][ C1] ? wake_nocb_gp+0x1e0/0x1e0 [ 927.821287][ C1] ? kthread_blkcg+0xd0/0xd0 [ 927.825719][ C1] ret_from_fork+0x1f/0x30 [ 927.829967][ C1] [ 927.832830][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 927.838999][ C1] Sending NMI from CPU 1 to CPUs 0: [ 927.844056][ C0] NMI backtrace for cpu 0 [ 927.844068][ C0] CPU: 0 PID: 19501 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00055-g424f92bcbe8f #0 [ 927.844087][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 927.844097][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 927.844118][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 927.844132][ C0] RSP: 0018:ffffc90000cd6f20 EFLAGS: 00000246 [ 927.844151][ C0] RAX: 0000000000000001 RBX: 1ffff9200019ade8 RCX: 1ffffffff0d1aa9c [ 927.844164][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 927.844175][ C0] RBP: ffffc90000cd6fd0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 927.844188][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 927.844201][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff9200019adec [ 927.844213][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 927.844228][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 927.844241][ C0] CR2: 0000001b2fb28000 CR3: 0000000113347000 CR4: 00000000003506b0 [ 927.844256][ C0] DR0: 0000000000000000 DR1: 0000000000000101 DR2: 0000000000000000 [ 927.844267][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 927.844277][ C0] Call Trace: [ 927.844282][ C0] [ 927.844289][ C0] ? show_regs+0x58/0x60 [ 927.844306][ C0] ? nmi_cpu_backtrace+0x29f/0x300 [ 927.844326][ C0] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 927.844347][ C0] ? kvm_wait+0x147/0x180 [ 927.844362][ C0] ? kvm_wait+0x147/0x180 [ 927.844377][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 927.844396][ C0] ? nmi_handle+0xa8/0x280 [ 927.844413][ C0] ? kvm_wait+0x147/0x180 [ 927.844428][ C0] ? default_do_nmi+0x69/0x160 [ 927.844446][ C0] ? exc_nmi+0xaf/0x120 [ 927.844462][ C0] ? end_repeat_nmi+0x16/0x31 [ 927.844482][ C0] ? kvm_wait+0x147/0x180 [ 927.844497][ C0] ? kvm_wait+0x147/0x180 [ 927.844512][ C0] ? kvm_wait+0x147/0x180 [ 927.844528][ C0] [ 927.844533][ C0] [ 927.844539][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 927.844556][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 927.844574][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 927.844595][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 927.844615][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 927.844637][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 927.844656][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 927.844675][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 927.844697][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 927.844716][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 927.844731][ C0] bpf_trace_run4+0x13f/0x270 [ 927.844751][ C0] ? bpf_trace_run3+0x250/0x250 [ 927.844771][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 927.844790][ C0] __alloc_pages+0x3cb/0x8f0 [ 927.844807][ C0] ? page_remove_rmap+0xe36/0x1420 [ 927.844824][ C0] ? prep_new_page+0x110/0x110 [ 927.844840][ C0] ? page_remove_rmap+0xebe/0x1420 [ 927.844857][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 927.844873][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 927.844891][ C0] __get_free_pages+0x10/0x30 [ 927.844908][ C0] __tlb_remove_page_size+0x178/0x300 [ 927.844929][ C0] unmap_page_range+0x1226/0x1ed0 [ 927.844952][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 927.844970][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 927.844997][ C0] ? uprobe_munmap+0x18d/0x450 [ 927.845016][ C0] ? lru_cache_add+0x540/0x540 [ 927.845033][ C0] unmap_vmas+0x389/0x560 [ 927.845049][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 927.845067][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 927.845087][ C0] exit_mmap+0x3e4/0x940 [ 927.845104][ C0] ? exit_aio+0x25e/0x3c0 [ 927.845119][ C0] ? vm_brk+0x30/0x30 [ 927.845135][ C0] ? mutex_unlock+0xb2/0x260 [ 927.845155][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 927.845175][ C0] __mmput+0x95/0x310 [ 927.845193][ C0] mmput+0x5b/0x170 [ 927.845209][ C0] do_exit+0xb9c/0x2ca0 [ 927.845228][ C0] ? put_task_struct+0x80/0x80 [ 927.845245][ C0] ? __schedule+0xcd4/0x1590 [ 927.845262][ C0] ? __kasan_check_write+0x14/0x20 [ 927.845280][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 927.845298][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 927.845319][ C0] do_group_exit+0x141/0x310 [ 927.845349][ C0] get_signal+0x7a3/0x1630 [ 927.845365][ C0] ? __switch_to+0x62a/0x1190 [ 927.845381][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 927.845397][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 927.845414][ C0] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 927.845435][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 927.845452][ C0] ? finish_task_switch+0x167/0x7b0 [ 927.845471][ C0] ? get_sigframe_size+0x10/0x10 [ 927.845486][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 927.845505][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 927.845522][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 927.845538][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 927.845554][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 927.845571][ C0] do_syscall_64+0x49/0xb0 [ 927.845586][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 927.845602][ C0] RIP: 0033:0x7f31454aaee9 [ 927.845613][ C0] Code: Unable to access opcode bytes at RIP 0x7f31454aaebf. [ 927.845621][ C0] RSP: 002b:00007f314421f178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 927.845636][ C0] RAX: fffffffffffffe00 RBX: 00007f31455e1fa8 RCX: 00007f31454aaee9 [ 927.845648][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31455e1fa8 [ 927.845658][ C0] RBP: 00007f31455e1fa0 R08: 00007f314421f6c0 R09: 00007f314421f6c0 [ 927.845669][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31455e1fac [ 927.845680][ C0] R13: 000000000000000b R14: 00007ffdab422c90 R15: 00007ffdab422d78 [ 927.845698][ C0] [ 927.846064][ C1] NMI backtrace for cpu 1 [ 928.403862][ C1] CPU: 1 PID: 19538 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-00055-g424f92bcbe8f #0 [ 928.415401][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 928.425300][ C1] Call Trace: [ 928.428421][ C1] [ 928.431115][ C1] dump_stack_lvl+0x151/0x1b7 [ 928.435625][ C1] ? io_uring_drop_tctx_refs+0x190/0x190 [ 928.441105][ C1] ? ttwu_do_wakeup+0x187/0x430 [ 928.445783][ C1] dump_stack+0x15/0x17 [ 928.449773][ C1] nmi_cpu_backtrace+0x2f7/0x300 [ 928.454546][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 928.460533][ C1] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 928.465828][ C1] ? _raw_spin_lock+0x1b0/0x1b0 [ 928.470515][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 928.476418][ C1] nmi_trigger_cpumask_backtrace+0x15d/0x270 [ 928.482233][ C1] ? arch_trigger_cpumask_backtrace+0x20/0x20 [ 928.488135][ C1] arch_trigger_cpumask_backtrace+0x10/0x20 [ 928.493865][ C1] rcu_dump_cpu_stacks+0x1d8/0x330 [ 928.498810][ C1] print_cpu_stall+0x315/0x5f0 [ 928.503410][ C1] rcu_sched_clock_irq+0x989/0x12f0 [ 928.508449][ C1] ? rcu_boost_kthread_setaffinity+0x340/0x340 [ 928.514434][ C1] ? hrtimer_run_queues+0x15f/0x440 [ 928.519476][ C1] update_process_times+0x198/0x200 [ 928.524501][ C1] tick_sched_timer+0x188/0x240 [ 928.529187][ C1] ? tick_setup_sched_timer+0x480/0x480 [ 928.534714][ C1] __hrtimer_run_queues+0x41a/0xad0 [ 928.539751][ C1] ? hrtimer_interrupt+0xaa0/0xaa0 [ 928.544692][ C1] ? clockevents_program_event+0x22f/0x300 [ 928.550332][ C1] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 928.556240][ C1] hrtimer_interrupt+0x40c/0xaa0 [ 928.561014][ C1] __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 928.566737][ C1] sysvec_apic_timer_interrupt+0x95/0xc0 [ 928.572208][ C1] [ 928.574985][ C1] [ 928.577760][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 928.583575][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 928.588350][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 928.607926][ C1] RSP: 0018:ffffc90000cc6740 EFLAGS: 00000246 [ 928.613822][ C1] RAX: 0000000000000003 RBX: 1ffff92000198cec RCX: ffffffff8154fa7f [ 928.621635][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114ae8658 [ 928.629449][ C1] RBP: ffffc90000cc67f0 R08: dffffc0000000000 R09: ffffed102295d0cc [ 928.637442][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 928.645250][ C1] R13: ffff888114ae8658 R14: 0000000000000003 R15: 1ffff92000198cf0 [ 928.653066][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 928.659140][ C1] ? asm_common_interrupt+0x27/0x40 [ 928.664176][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 928.669119][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 928.675194][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 928.681099][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 928.687346][ C1] ? check_stack_access_within_bounds+0x48b/0x5a0 [ 928.693594][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 928.698368][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 928.703401][ C1] ? 0xffffffffa002aa40 [ 928.707397][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 928.712689][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 928.717728][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 928.723108][ C1] bpf_trace_run4+0x13f/0x270 [ 928.727620][ C1] ? bpf_trace_run3+0x250/0x250 [ 928.732309][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 928.737602][ C1] __alloc_pages+0x3cb/0x8f0 [ 928.742025][ C1] ? prep_new_page+0x110/0x110 [ 928.746627][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 928.752095][ C1] ? stack_trace_save+0x113/0x1c0 [ 928.756955][ C1] __stack_depot_save+0x38d/0x470 [ 928.761815][ C1] stack_depot_save+0xe/0x10 [ 928.766240][ C1] save_stack+0x104/0x1e0 [ 928.770408][ C1] ? __reset_page_owner+0x190/0x190 [ 928.775443][ C1] ? arch_stack_walk+0x101/0x140 [ 928.780220][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 928.784987][ C1] ? prep_new_page+0x1b/0x110 [ 928.789499][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 928.795055][ C1] ? __alloc_pages+0x27e/0x8f0 [ 928.799654][ C1] ? __stack_depot_save+0x38d/0x470 [ 928.804688][ C1] ? kasan_set_track+0x5d/0x70 [ 928.809289][ C1] ? kasan_set_free_info+0x23/0x40 [ 928.814236][ C1] ? ____kasan_slab_free+0x126/0x160 [ 928.819357][ C1] ? __kasan_slab_free+0x11/0x20 [ 928.824130][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 928.829512][ C1] ? kfree+0xc8/0x220 [ 928.833334][ C1] ? sock_map_unref+0x352/0x4d0 [ 928.838019][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 928.843313][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 928.848867][ C1] ? bpf_trace_run4+0x13f/0x270 [ 928.853554][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 928.859023][ C1] ? __kasan_check_write+0x14/0x20 [ 928.863970][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 928.868573][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 928.873776][ C1] ? static_protections+0x5bc/0x6f0 [ 928.878811][ C1] __set_page_owner+0x28/0x2e0 [ 928.883413][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 928.888619][ C1] post_alloc_hook+0x1a3/0x1b0 [ 928.893219][ C1] prep_new_page+0x1b/0x110 [ 928.897559][ C1] get_page_from_freelist+0x3550/0x35d0 [ 928.902942][ C1] ? unwind_next_frame+0x3cb/0x700 [ 928.907889][ C1] ? lruvec_init+0x150/0x150 [ 928.912314][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 928.916916][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 928.921948][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 928.926808][ C1] __alloc_pages+0x27e/0x8f0 [ 928.931235][ C1] ? prep_new_page+0x110/0x110 [ 928.935835][ C1] ? stack_trace_save+0x113/0x1c0 [ 928.940694][ C1] ? __x64_sys_ioctl+0x7b/0x90 [ 928.945305][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 928.950242][ C1] __stack_depot_save+0x38d/0x470 [ 928.955103][ C1] ? kfree+0xc8/0x220 [ 928.958923][ C1] kasan_set_track+0x5d/0x70 [ 928.963348][ C1] ? kasan_set_track+0x4b/0x70 [ 928.967947][ C1] ? kasan_set_free_info+0x23/0x40 [ 928.972897][ C1] ? ____kasan_slab_free+0x126/0x160 [ 928.978024][ C1] ? __kasan_slab_free+0x11/0x20 [ 928.982794][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 928.988173][ C1] ? kfree+0xc8/0x220 [ 928.991991][ C1] ? sock_map_unref+0x352/0x4d0 [ 928.996676][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 929.001973][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 929.007524][ C1] ? bpf_trace_run4+0x13f/0x270 [ 929.012217][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 929.017683][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 929.022368][ C1] ? new_slab+0x9a/0x4e0 [ 929.026447][ C1] ? ___slab_alloc+0x39e/0x830 [ 929.031045][ C1] ? __slab_alloc+0x4a/0x90 [ 929.035391][ C1] ? __kmalloc+0x16d/0x270 [ 929.039638][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 929.044674][ C1] ? __blk_mq_alloc_map_and_request+0x93/0x2f0 [ 929.050661][ C1] ? blk_mq_alloc_map_and_requests+0xbf/0x520 [ 929.056565][ C1] ? blk_mq_alloc_tag_set+0x648/0xcf0 [ 929.061771][ C1] ? loop_add+0x275/0x920 [ 929.065939][ C1] ? loop_control_ioctl+0x109/0x6f0 [ 929.070970][ C1] ? __se_sys_ioctl+0x114/0x190 [ 929.075660][ C1] ? __x64_sys_ioctl+0x7b/0x90 [ 929.080258][ C1] ? do_syscall_64+0x3d/0xb0 [ 929.084687][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 929.090594][ C1] ? prep_compound_page+0x271/0x4a0 [ 929.095620][ C1] kasan_set_free_info+0x23/0x40 [ 929.100396][ C1] ____kasan_slab_free+0x126/0x160 [ 929.105343][ C1] __kasan_slab_free+0x11/0x20 [ 929.109944][ C1] slab_free_freelist_hook+0xbd/0x190 [ 929.115151][ C1] ? sock_map_unref+0x352/0x4d0 [ 929.119837][ C1] kfree+0xc8/0x220 [ 929.123482][ C1] sock_map_unref+0x352/0x4d0 [ 929.127998][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 929.133117][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 929.138498][ C1] bpf_trace_run4+0x13f/0x270 [ 929.143009][ C1] ? bpf_trace_run3+0x250/0x250 [ 929.147698][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 929.152994][ C1] __alloc_pages+0x3cb/0x8f0 [ 929.157419][ C1] ? ____kasan_kmalloc+0xdb/0x110 [ 929.162277][ C1] ? prep_new_page+0x110/0x110 [ 929.166880][ C1] ? loop_add+0x275/0x920 [ 929.171047][ C1] ? __se_sys_ioctl+0x114/0x190 [ 929.175733][ C1] ? do_syscall_64+0x3d/0xb0 [ 929.180161][ C1] new_slab+0x9a/0x4e0 [ 929.184066][ C1] ___slab_alloc+0x39e/0x830 [ 929.188491][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 929.193526][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 929.198559][ C1] __slab_alloc+0x4a/0x90 [ 929.202724][ C1] __kmalloc+0x16d/0x270 [ 929.206802][ C1] ? blk_mq_init_tags+0x28f/0x350 [ 929.211663][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 929.216697][ C1] blk_mq_alloc_rq_map+0xe3/0x190 [ 929.221560][ C1] __blk_mq_alloc_map_and_request+0x93/0x2f0 [ 929.227374][ C1] blk_mq_alloc_map_and_requests+0xbf/0x520 [ 929.233103][ C1] blk_mq_alloc_tag_set+0x648/0xcf0 [ 929.238137][ C1] loop_add+0x275/0x920 [ 929.242129][ C1] loop_control_ioctl+0x109/0x6f0 [ 929.246988][ C1] ? xor_init+0x70/0x70 [ 929.250983][ C1] ? security_file_ioctl+0x84/0xb0 [ 929.255928][ C1] ? xor_init+0x70/0x70 [ 929.259944][ C1] __se_sys_ioctl+0x114/0x190 [ 929.264434][ C1] __x64_sys_ioctl+0x7b/0x90 [ 929.268862][ C1] do_syscall_64+0x3d/0xb0 [ 929.273118][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 929.278842][ C1] RIP: 0033:0x7f11c815eee9 [ 929.283098][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 929.302538][ C1] RSP: 002b:00007f11c6ed30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 929.310782][ C1] RAX: ffffffffffffffda RBX: 00007f11c8295fa0 RCX: 00007f11c815eee9 [ 929.318593][ C1] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000008 [ 929.326404][ C1] RBP: 00007f11c81ab47f R08: 0000000000000000 R09: 0000000000000000 [ 929.334216][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 929.342030][ C1] R13: 000000000000000b R14: 00007f11c8295fa0 R15: 00007fffdce9b838 [ 929.349843][ C1] [ 1078.987890][ C0] watchdog: BUG: soft lockup - CPU#0 stuck for 245s! [syz-executor.3:19501] [ 1078.996511][ C0] Modules linked in: [ 1079.000243][ C0] CPU: 0 PID: 19501 Comm: syz-executor.3 Tainted: G W 5.15.149-syzkaller-00055-g424f92bcbe8f #0 [ 1079.011784][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1079.021840][ C0] RIP: 0010:kvm_wait+0x147/0x180 [ 1079.026613][ C0] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1079.046400][ C0] RSP: 0018:ffffc90000cd6f20 EFLAGS: 00000246 [ 1079.052300][ C0] RAX: 0000000000000001 RBX: 1ffff9200019ade8 RCX: 1ffffffff0d1aa9c [ 1079.060115][ C0] RDX: 0000000000000001 RSI: 0000000000000001 RDI: ffff8881f7037ed4 [ 1079.067923][ C0] RBP: ffffc90000cd6fd0 R08: dffffc0000000000 R09: ffffed103ee06fdb [ 1079.075736][ C0] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1079.083547][ C0] R13: ffff8881f7037ed4 R14: 0000000000000001 R15: 1ffff9200019adec [ 1079.091358][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 1079.100124][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.106549][ C0] CR2: 0000001b2fb28000 CR3: 0000000113347000 CR4: 00000000003506b0 [ 1079.114361][ C0] DR0: 0000000000000000 DR1: 0000000000000101 DR2: 0000000000000000 [ 1079.122170][ C0] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1079.129980][ C0] Call Trace: [ 1079.133107][ C0] [ 1079.135802][ C0] ? show_regs+0x58/0x60 [ 1079.139876][ C0] ? watchdog_timer_fn+0x4b1/0x5f0 [ 1079.144824][ C0] ? proc_watchdog_cpumask+0xd0/0xd0 [ 1079.149944][ C0] ? __hrtimer_run_queues+0x41a/0xad0 [ 1079.155154][ C0] ? hrtimer_interrupt+0xaa0/0xaa0 [ 1079.160099][ C0] ? clockevents_program_event+0x22f/0x300 [ 1079.165741][ C0] ? ktime_get_update_offsets_now+0x2ba/0x2d0 [ 1079.171643][ C0] ? hrtimer_interrupt+0x40c/0xaa0 [ 1079.176595][ C0] ? __sysvec_apic_timer_interrupt+0xfd/0x3c0 [ 1079.182492][ C0] ? sysvec_apic_timer_interrupt+0x95/0xc0 [ 1079.188133][ C0] [ 1079.190911][ C0] [ 1079.193689][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1079.199684][ C0] ? kvm_wait+0x147/0x180 [ 1079.203844][ C0] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1079.209831][ C0] ? kvm_arch_para_hints+0x30/0x30 [ 1079.214781][ C0] __pv_queued_spin_lock_slowpath+0x41b/0xc40 [ 1079.220682][ C0] ? get_page_from_freelist+0x3550/0x35d0 [ 1079.226238][ C0] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1079.232485][ C0] _raw_spin_lock_bh+0x139/0x1b0 [ 1079.237260][ C0] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1079.242292][ C0] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 1079.247587][ C0] sock_hash_delete_elem+0xb1/0x2f0 [ 1079.252622][ C0] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 1079.258003][ C0] bpf_trace_run4+0x13f/0x270 [ 1079.262713][ C0] ? bpf_trace_run3+0x250/0x250 [ 1079.267403][ C0] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.272694][ C0] __alloc_pages+0x3cb/0x8f0 [ 1079.277120][ C0] ? page_remove_rmap+0xe36/0x1420 [ 1079.282066][ C0] ? prep_new_page+0x110/0x110 [ 1079.286668][ C0] ? page_remove_rmap+0xebe/0x1420 [ 1079.291616][ C0] ? page_add_file_rmap+0x8e0/0x8e0 [ 1079.296649][ C0] ? mark_page_accessed+0x56b/0xbf0 [ 1079.301683][ C0] __get_free_pages+0x10/0x30 [ 1079.306194][ C0] __tlb_remove_page_size+0x178/0x300 [ 1079.311403][ C0] unmap_page_range+0x1226/0x1ed0 [ 1079.316270][ C0] ? mmu_notifier_invalidate_range_end+0xe0/0xe0 [ 1079.322426][ C0] ? __pagevec_lru_add+0xcde/0xd70 [ 1079.327373][ C0] ? uprobe_munmap+0x18d/0x450 [ 1079.331970][ C0] ? lru_cache_add+0x540/0x540 [ 1079.336575][ C0] unmap_vmas+0x389/0x560 [ 1079.340739][ C0] ? unmap_page_range+0x1ed0/0x1ed0 [ 1079.345778][ C0] ? tlb_gather_mmu_fullmm+0x165/0x210 [ 1079.351067][ C0] exit_mmap+0x3e4/0x940 [ 1079.355146][ C0] ? exit_aio+0x25e/0x3c0 [ 1079.359312][ C0] ? vm_brk+0x30/0x30 [ 1079.363129][ C0] ? mutex_unlock+0xb2/0x260 [ 1079.367563][ C0] ? uprobe_clear_state+0x2cd/0x320 [ 1079.372591][ C0] __mmput+0x95/0x310 [ 1079.376415][ C0] mmput+0x5b/0x170 [ 1079.380057][ C0] do_exit+0xb9c/0x2ca0 [ 1079.384049][ C0] ? put_task_struct+0x80/0x80 [ 1079.388648][ C0] ? __schedule+0xcd4/0x1590 [ 1079.393075][ C0] ? __kasan_check_write+0x14/0x20 [ 1079.398023][ C0] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 1079.402970][ C0] ? _raw_spin_lock_irqsave+0x210/0x210 [ 1079.408351][ C0] do_group_exit+0x141/0x310 [ 1079.412776][ C0] get_signal+0x7a3/0x1630 [ 1079.417033][ C0] ? __switch_to+0x62a/0x1190 [ 1079.421546][ C0] arch_do_signal_or_restart+0xbd/0x1680 [ 1079.427011][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 1079.432391][ C0] ? tracing_record_taskinfo_sched_switch+0x84/0x390 [ 1079.438903][ C0] ? _raw_spin_unlock+0x4d/0x70 [ 1079.443588][ C0] ? finish_task_switch+0x167/0x7b0 [ 1079.448623][ C0] ? get_sigframe_size+0x10/0x10 [ 1079.453395][ C0] ? __se_sys_futex+0x37b/0x3e0 [ 1079.458088][ C0] ? fpu_flush_thread+0xf0/0xf0 [ 1079.462770][ C0] exit_to_user_mode_loop+0xa0/0xe0 [ 1079.467803][ C0] exit_to_user_mode_prepare+0x5a/0xa0 [ 1079.473099][ C0] syscall_exit_to_user_mode+0x26/0x160 [ 1079.478480][ C0] do_syscall_64+0x49/0xb0 [ 1079.482732][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1079.488459][ C0] RIP: 0033:0x7f31454aaee9 [ 1079.492716][ C0] Code: Unable to access opcode bytes at RIP 0x7f31454aaebf. [ 1079.499917][ C0] RSP: 002b:00007f314421f178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1079.508183][ C0] RAX: fffffffffffffe00 RBX: 00007f31455e1fa8 RCX: 00007f31454aaee9 [ 1079.515975][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f31455e1fa8 [ 1079.523784][ C0] RBP: 00007f31455e1fa0 R08: 00007f314421f6c0 R09: 00007f314421f6c0 [ 1079.531597][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f31455e1fac [ 1079.539407][ C0] R13: 000000000000000b R14: 00007ffdab422c90 R15: 00007ffdab422d78 [ 1079.547224][ C0] [ 1079.550086][ C0] Sending NMI from CPU 0 to CPUs 1: [ 1079.555141][ C1] NMI backtrace for cpu 1 [ 1079.555151][ C1] CPU: 1 PID: 19538 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-00055-g424f92bcbe8f #0 [ 1079.555169][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1079.555179][ C1] RIP: 0010:kvm_wait+0x147/0x180 [ 1079.555197][ C1] Code: 4c 89 e8 48 c1 e8 03 42 0f b6 04 20 84 c0 44 8b 74 24 1c 75 34 41 0f b6 45 00 44 38 f0 75 10 66 90 0f 00 2d 5b 03 f3 03 fb f4 24 ff ff ff fb e9 1e ff ff ff 44 89 e9 80 e1 07 38 c1 7c a3 4c [ 1079.555210][ C1] RSP: 0018:ffffc90000cc6740 EFLAGS: 00000246 [ 1079.555223][ C1] RAX: 0000000000000003 RBX: 1ffff92000198cec RCX: ffffffff8154fa7f [ 1079.555235][ C1] RDX: dffffc0000000000 RSI: 0000000000000003 RDI: ffff888114ae8658 [ 1079.555246][ C1] RBP: ffffc90000cc67f0 R08: dffffc0000000000 R09: ffffed102295d0cc [ 1079.555259][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 1079.555270][ C1] R13: ffff888114ae8658 R14: 0000000000000003 R15: 1ffff92000198cf0 [ 1079.555282][ C1] FS: 00007f11c6ed36c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 1079.555297][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1079.555308][ C1] CR2: 0000000000000000 CR3: 0000000116cc6000 CR4: 00000000003506a0 [ 1079.555322][ C1] DR0: 0000000000002800 DR1: 0000000000000000 DR2: 0000000000000000 [ 1079.555331][ C1] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 1079.555342][ C1] Call Trace: [ 1079.555347][ C1] [ 1079.555353][ C1] ? show_regs+0x58/0x60 [ 1079.555369][ C1] ? nmi_cpu_backtrace+0x29f/0x300 [ 1079.555388][ C1] ? nmi_trigger_cpumask_backtrace+0x270/0x270 [ 1079.555407][ C1] ? kvm_wait+0x147/0x180 [ 1079.555421][ C1] ? kvm_wait+0x147/0x180 [ 1079.555435][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1079.555463][ C1] ? nmi_handle+0xa8/0x280 [ 1079.555478][ C1] ? kvm_wait+0x147/0x180 [ 1079.555491][ C1] ? default_do_nmi+0x69/0x160 [ 1079.555524][ C1] ? exc_nmi+0xaf/0x120 [ 1079.555539][ C1] ? end_repeat_nmi+0x16/0x31 [ 1079.555556][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1079.555575][ C1] ? kvm_wait+0x147/0x180 [ 1079.555590][ C1] ? kvm_wait+0x147/0x180 [ 1079.555604][ C1] ? kvm_wait+0x147/0x180 [ 1079.555618][ C1] [ 1079.555623][ C1] [ 1079.555628][ C1] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 1079.555648][ C1] ? kvm_arch_para_hints+0x30/0x30 [ 1079.555664][ C1] ? __pv_queued_spin_lock_slowpath+0x65f/0xc40 [ 1079.555684][ C1] __pv_queued_spin_lock_slowpath+0x6bc/0xc40 [ 1079.555703][ C1] ? __pv_queued_spin_unlock_slowpath+0x310/0x310 [ 1079.555722][ C1] ? check_stack_access_within_bounds+0x48b/0x5a0 [ 1079.555743][ C1] _raw_spin_lock_bh+0x139/0x1b0 [ 1079.555760][ C1] ? _raw_spin_lock_irq+0x1b0/0x1b0 [ 1079.555777][ C1] ? 0xffffffffa002aa40 [ 1079.555789][ C1] ? sock_hash_bucket_hash+0x31c/0x7e0 [ 1079.555814][ C1] sock_hash_delete_elem+0xb1/0x2f0 [ 1079.555832][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 1079.555845][ C1] bpf_trace_run4+0x13f/0x270 [ 1079.555862][ C1] ? bpf_trace_run3+0x250/0x250 [ 1079.555881][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.555898][ C1] __alloc_pages+0x3cb/0x8f0 [ 1079.555916][ C1] ? prep_new_page+0x110/0x110 [ 1079.555932][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.555949][ C1] ? stack_trace_save+0x113/0x1c0 [ 1079.555977][ C1] __stack_depot_save+0x38d/0x470 [ 1079.555997][ C1] stack_depot_save+0xe/0x10 [ 1079.556010][ C1] save_stack+0x104/0x1e0 [ 1079.556024][ C1] ? __reset_page_owner+0x190/0x190 [ 1079.556038][ C1] ? arch_stack_walk+0x101/0x140 [ 1079.556054][ C1] ? post_alloc_hook+0x1a3/0x1b0 [ 1079.556069][ C1] ? prep_new_page+0x1b/0x110 [ 1079.556083][ C1] ? get_page_from_freelist+0x3550/0x35d0 [ 1079.556099][ C1] ? __alloc_pages+0x27e/0x8f0 [ 1079.556114][ C1] ? __stack_depot_save+0x38d/0x470 [ 1079.556130][ C1] ? kasan_set_track+0x5d/0x70 [ 1079.556143][ C1] ? kasan_set_free_info+0x23/0x40 [ 1079.556158][ C1] ? ____kasan_slab_free+0x126/0x160 [ 1079.556172][ C1] ? __kasan_slab_free+0x11/0x20 [ 1079.556185][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 1079.556202][ C1] ? kfree+0xc8/0x220 [ 1079.556216][ C1] ? sock_map_unref+0x352/0x4d0 [ 1079.556231][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 1079.556246][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 1079.556257][ C1] ? bpf_trace_run4+0x13f/0x270 [ 1079.556273][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.556287][ C1] ? __kasan_check_write+0x14/0x20 [ 1079.556302][ C1] ? _raw_spin_lock+0xa4/0x1b0 [ 1079.556317][ C1] ? _raw_spin_trylock_bh+0x190/0x190 [ 1079.556334][ C1] ? static_protections+0x5bc/0x6f0 [ 1079.556350][ C1] __set_page_owner+0x28/0x2e0 [ 1079.556363][ C1] ? kernel_init_free_pages+0xda/0xf0 [ 1079.556380][ C1] post_alloc_hook+0x1a3/0x1b0 [ 1079.556395][ C1] prep_new_page+0x1b/0x110 [ 1079.556411][ C1] get_page_from_freelist+0x3550/0x35d0 [ 1079.556431][ C1] ? unwind_next_frame+0x3cb/0x700 [ 1079.556450][ C1] ? lruvec_init+0x150/0x150 [ 1079.556466][ C1] ? __alloc_pages+0x8f0/0x8f0 [ 1079.556483][ C1] ? __alloc_pages_bulk+0xe40/0xe40 [ 1079.556498][ C1] ? stack_trace_save+0x1c0/0x1c0 [ 1079.556515][ C1] __alloc_pages+0x27e/0x8f0 [ 1079.556530][ C1] ? prep_new_page+0x110/0x110 [ 1079.556547][ C1] ? stack_trace_save+0x113/0x1c0 [ 1079.556562][ C1] ? __x64_sys_ioctl+0x7b/0x90 [ 1079.556575][ C1] ? stack_trace_snprint+0xf0/0xf0 [ 1079.556591][ C1] __stack_depot_save+0x38d/0x470 [ 1079.556608][ C1] ? kfree+0xc8/0x220 [ 1079.556622][ C1] kasan_set_track+0x5d/0x70 [ 1079.556635][ C1] ? kasan_set_track+0x4b/0x70 [ 1079.556648][ C1] ? kasan_set_free_info+0x23/0x40 [ 1079.556662][ C1] ? ____kasan_slab_free+0x126/0x160 [ 1079.556676][ C1] ? __kasan_slab_free+0x11/0x20 [ 1079.556689][ C1] ? slab_free_freelist_hook+0xbd/0x190 [ 1079.556706][ C1] ? kfree+0xc8/0x220 [ 1079.556720][ C1] ? sock_map_unref+0x352/0x4d0 [ 1079.556734][ C1] ? sock_hash_delete_elem+0x274/0x2f0 [ 1079.556750][ C1] ? bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 1079.556761][ C1] ? bpf_trace_run4+0x13f/0x270 [ 1079.556776][ C1] ? __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.556791][ C1] ? __alloc_pages+0x3cb/0x8f0 [ 1079.556809][ C1] ? new_slab+0x9a/0x4e0 [ 1079.556820][ C1] ? ___slab_alloc+0x39e/0x830 [ 1079.556835][ C1] ? __slab_alloc+0x4a/0x90 [ 1079.556850][ C1] ? __kmalloc+0x16d/0x270 [ 1079.556864][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 1079.556878][ C1] ? __blk_mq_alloc_map_and_request+0x93/0x2f0 [ 1079.556893][ C1] ? blk_mq_alloc_map_and_requests+0xbf/0x520 [ 1079.556908][ C1] ? blk_mq_alloc_tag_set+0x648/0xcf0 [ 1079.556921][ C1] ? loop_add+0x275/0x920 [ 1079.556935][ C1] ? loop_control_ioctl+0x109/0x6f0 [ 1079.556949][ C1] ? __se_sys_ioctl+0x114/0x190 [ 1079.556961][ C1] ? __x64_sys_ioctl+0x7b/0x90 [ 1079.556974][ C1] ? do_syscall_64+0x3d/0xb0 [ 1079.556987][ C1] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1079.557007][ C1] ? prep_compound_page+0x271/0x4a0 [ 1079.557023][ C1] kasan_set_free_info+0x23/0x40 [ 1079.557037][ C1] ____kasan_slab_free+0x126/0x160 [ 1079.557052][ C1] __kasan_slab_free+0x11/0x20 [ 1079.557066][ C1] slab_free_freelist_hook+0xbd/0x190 [ 1079.557083][ C1] ? sock_map_unref+0x352/0x4d0 [ 1079.557098][ C1] kfree+0xc8/0x220 [ 1079.557114][ C1] sock_map_unref+0x352/0x4d0 [ 1079.557131][ C1] sock_hash_delete_elem+0x274/0x2f0 [ 1079.557148][ C1] bpf_prog_2c29ac5cdc6b1842+0x3a/0x7e0 [ 1079.557159][ C1] bpf_trace_run4+0x13f/0x270 [ 1079.557176][ C1] ? bpf_trace_run3+0x250/0x250 [ 1079.557194][ C1] __bpf_trace_mm_page_alloc+0xbf/0xf0 [ 1079.557209][ C1] __alloc_pages+0x3cb/0x8f0 [ 1079.557224][ C1] ? ____kasan_kmalloc+0xdb/0x110 [ 1079.557238][ C1] ? prep_new_page+0x110/0x110 [ 1079.557253][ C1] ? loop_add+0x275/0x920 [ 1079.557266][ C1] ? __se_sys_ioctl+0x114/0x190 [ 1079.557278][ C1] ? do_syscall_64+0x3d/0xb0 [ 1079.557295][ C1] new_slab+0x9a/0x4e0 [ 1079.557308][ C1] ___slab_alloc+0x39e/0x830 [ 1079.557323][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 1079.557338][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 1079.557351][ C1] __slab_alloc+0x4a/0x90 [ 1079.557367][ C1] __kmalloc+0x16d/0x270 [ 1079.557381][ C1] ? blk_mq_init_tags+0x28f/0x350 [ 1079.557395][ C1] ? blk_mq_alloc_rq_map+0xe3/0x190 [ 1079.557409][ C1] blk_mq_alloc_rq_map+0xe3/0x190 [ 1079.557423][ C1] __blk_mq_alloc_map_and_request+0x93/0x2f0 [ 1079.557440][ C1] blk_mq_alloc_map_and_requests+0xbf/0x520 [ 1079.557457][ C1] blk_mq_alloc_tag_set+0x648/0xcf0 [ 1079.557472][ C1] loop_add+0x275/0x920 [ 1079.557486][ C1] loop_control_ioctl+0x109/0x6f0 [ 1079.557501][ C1] ? xor_init+0x70/0x70 [ 1079.557515][ C1] ? security_file_ioctl+0x84/0xb0 [ 1079.557531][ C1] ? xor_init+0x70/0x70 [ 1079.557545][ C1] __se_sys_ioctl+0x114/0x190 [ 1079.557560][ C1] __x64_sys_ioctl+0x7b/0x90 [ 1079.557573][ C1] do_syscall_64+0x3d/0xb0 [ 1079.557587][ C1] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1079.557601][ C1] RIP: 0033:0x7f11c815eee9 [ 1079.557616][ C1] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1079.557628][ C1] RSP: 002b:00007f11c6ed30c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1079.557643][ C1] RAX: ffffffffffffffda RBX: 00007f11c8295fa0 RCX: 00007f11c815eee9 [ 1079.557654][ C1] RDX: ffffffffffffffb6 RSI: 0000000000004c80 RDI: 0000000000000008 [ 1079.557664][ C1] RBP: 00007f11c81ab47f R08: 0000000000000000 R09: 0000000000000000 [ 1079.557674][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1079.557683][ C1] R13: 000000000000000b R14: 00007f11c8295fa0 R15: 00007fffdce9b838 [ 1079.557696][ C1]