last executing test programs: 7.118950947s ago: executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x319c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000008c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x7, {[@main=@item_4={0x3, 0x0, 0x8, "55114bd8"}, @main=@item_012={0x1, 0x0, 0x0, "b6"}]}}, 0x0}, 0x0) 6.295219615s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB='+pids'], 0x6) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2d, 'pids'}]}, 0x6) 6.176545853s ago: executing program 0: r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r1, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e926d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 5.012859003s ago: executing program 3: r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f00000001c0)={0x0, 0x4f424752}) 4.893516702s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='kfree\x00', r0}, 0x10) syz_mount_image$ext4(&(0x7f0000000880)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x0, &(0x7f00000003c0), 0xfe, 0x521, &(0x7f00000008c0)="$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") mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) fchmodat(r1, &(0x7f00000000c0)='./file1\x00', 0x0) 4.892113082s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f00006cd000/0x3000)=nil, 0x3000, 0xb, 0x12, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x5, 0x4000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001e80)={0x0, 0x0, "ca21812c212dc4405545848c85192942c5af76d6642e503fbf18c5037c3cee23b0912de577bf4d234294626e19f660cfcbd297a5ec266ff6f9d24c16145167d58ad77434f933c860de7f9c6924b77d1117cf7cefb222fb2cc07287d21ecd2e2d420b8d81cb6e5adcfe30ed85b511a0d1a327fda919f3fd58636129d6aa443f8ea154afc8e5c5bda80b42bca46dcf6e94eea752ee566f385505257360ca9235728e99af0800c0878ac64da0ab3707c9e059ebe77ad19e101d854f40a4d13ab2fc1fdd6525dc9b50b1a7fde029fac228cb34422c6ec147a88b5f254446461afcae1c9c21507effbf00", "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"}) ioctl$KVM_RUN(r1, 0xae80, 0x0) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYRES16=r2, @ANYRES8, @ANYRES8=0x0, @ANYBLOB="547f0fad10516acd4f1400000000f093d3484e331eea254509fa5c7dd7ed63292c058f9861f2578a6137b95a5a2814492cab90e0e4dd9f093937aec2da4d74802b0bda7b0ead4d510f84ff82547aae25e0c9bf557ba4066416c13ed7d90735d62a0ff5fec96d35ffcda1f9ba427d2fd0e974b56573b8271907e1cdb3467ca8e015", @ANYRES8], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x5}, 0x1c) syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./bus\x00', 0x2000010, &(0x7f00000000c0)=ANY=[], 0xf, 0x6ca, &(0x7f0000000780)="$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") r3 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r3, 0x89f4, &(0x7f00000001c0)={'syztnl0\x00', &(0x7f0000000000)={'ip_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14}}}}) listen(0xffffffffffffffff, 0xfff) socket$inet_icmp_raw(0x2, 0x3, 0x1) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000300)='devices.allow\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) write$cgroup_devices(r5, 0x0, 0xa) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', &(0x7f00000002c0), 0x18) writev(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) clock_adjtime(0x0, &(0x7f0000000280)={0xae, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}) clock_adjtime(0x0, 0x0) 4.638882681s ago: executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r0, 0x40045542, &(0x7f0000000040)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x0) syz_open_dev$midi(&(0x7f0000000180), 0x20000, 0x820) 4.430311014s ago: executing program 2: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125c7ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb32bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bd6c108fab3591bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2034fae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b8b74e26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1158f334e7afda0e11c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c6692abb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b29674bfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d672250658bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb15ac56438ea331820ae59c8c474e36fc73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4659698549646bd63175adf77b5cdcfe676e1b1a9af15102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4b9f6e46a8ce73eb22ebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f842629049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21bbfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e00686a3ed499cfb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9f058cc048f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002af6a6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b42e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae6644493f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 4.376487042s ago: executing program 3: syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@data_err_abort}, {@debug}, {@noload}, {@mblk_io_submit}, {@nouid32}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@grpquota}]}, 0xfe, 0x45a, &(0x7f0000000940)="$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") r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x6000) lseek(r0, 0x5, 0x0) ftruncate(r0, 0x2) write$binfmt_misc(r0, &(0x7f00000001c0)={'syz0'}, 0x4) 4.126624031s ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB='\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000480)={[{@nodiscard}, {}, {@acl}, {@alloc_mode_reuse}, {@inline_xattr}, {@noinline_xattr}, {@background_gc_on}, {@nouser_xattr}, {@noflush_merge}, {@user_xattr}, {@fsync_mode_strict}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") bpf$MAP_CREATE(0x0, 0x0, 0x0) open$dir(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = open(&(0x7f0000000100)='.\x00', 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) getresgid(&(0x7f0000000280), &(0x7f00000003c0), &(0x7f0000000640)=0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000240)='./file0\x00', 0x10, &(0x7f00000007c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {'group_id', 0x3d, r5}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x2200}}, {@allow_other}], [{@obj_type={'obj_type', 0x3d, 'sched_switch\x00'}}, {@appraise_type}, {@permit_directio}, {@smackfstransmute={'smackfstransmute', 0x3d, 'nodiscard'}}, {@fsmagic={'fsmagic', 0x3d, 0x7dd9}}, {@context={'context', 0x3d, 'user_u'}}]}}, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095000000000000008c04582bdc2acd1815d2b1e79f"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x2d) write$9p(0xffffffffffffffff, &(0x7f0000001400), 0x0) r7 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs2/binder-control\x00', 0x800, 0x0) readv(r7, &(0x7f00000001c0)=[{&(0x7f00000006c0)=""/215, 0xd7}, {&(0x7f0000000580)=""/137, 0x89}], 0x2) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 3.93804515s ago: executing program 1: mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$bt_hci(r0, 0x84, 0xd, &(0x7f0000003140)=""/4111, &(0x7f0000000000)=0x4) 3.870288071s ago: executing program 0: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_read_part_table(0x1084, &(0x7f0000000840)="$eJzs0MFNw0AQBdAfhzhJAxRADdxBUAllcMKUgkQTUAtcqMKcFq29MT4joVzeO6xmVn/WI4fzKn0OuV26lM3jtlaHHDN0SZ7z+X1c5Usrtrl8HU6Xw1hKSrl6qYE5Ml73tf5K+tp2c3I/nZs2tmvz3e/z9eP3mTdY7Hc1c9O6h2QaHOtDd8tepV2vl0w+3uv5dnHqp+Lpjz8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HTwAAAP//nycmYQ==") 3.823627068s ago: executing program 3: syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f00000008c0)='./file1\x00', 0x2000000, &(0x7f0000000040)=ANY=[], 0x3, 0x7c9, &(0x7f0000001f80)="$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") r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008380)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000008dceba394fc9d73b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e7ffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea2105600000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8ffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000f87c00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x0, {0x0, 0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0, 0x4002011, r2, 0x0) 3.627074799s ago: executing program 1: set_mempolicy(0x3, &(0x7f0000000080)=0x53, 0x9) r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000000)={0x0, 0xfff}) 3.507563147s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) epoll_create(0x8) syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x400) mmap$dsp(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000002, 0x8012, r0, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0x5008, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 3.449632456s ago: executing program 1: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="f8", 0x1}, {0x0, 0x2}], 0x2, 0x0, 0x0) 3.243447578s ago: executing program 1: r0 = socket(0x11, 0x3, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000000)={0xe000202b}) epoll_pwait(r2, &(0x7f0000000140)=[{}], 0x1, 0xfffffff9, 0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000000c0)={0xe0002003}) r4 = dup3(r0, r2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r4, &(0x7f0000000300)={0x200f}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000080)) 3.22884505s ago: executing program 0: syz_mount_image$msdos(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f0000000480)={[{@fat=@flush}, {@fat=@umask={'umask', 0x3d, 0xbb}}, {@dots}, {@dots}, {@fat=@dmask={'dmask', 0x3d, 0x7f}}, {@dots}, {@nodots}, {@nodots}, {@dots}]}, 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000440)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) syz_mount_image$vfat(&(0x7f0000000440), &(0x7f0000000080)='./file0\x00', 0x800090, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x6, 0x2d1, &(0x7f0000000740)="$eJzs3T9rJGUcB/DfbGb/qMVuYSWCA1pYHZdrbTbIHYipPLY4LTR4dyDZRUgg4h9cU4mdjaWvQBB8ITZ2loKtYGeEwMjMzmR3k3GzkWxE8/kUyZOZ5zvP73lmkkyTJ++9ONl/nMXT489+iV4vidawG3GSxCBaUfsilgy/DgDgv+wkz+P3fKbh9M9frcj2NlgXALA5l/z+r6Tlx0dFjx9urjYAYDMePnr7zZ3d3ftvZVkvHky+PBolEVF8np3feRofxDiexN3ox2lE+aLQjvJtoWg+yPN8mmaFQbwymR6NiuTk3R+r6+/8FlHmt6Mfg/LQ2dtGmX9j9/52NrOQnxZ1PFuNPyzy96Ifz5+Fl/L3GvIx6sSrLy/Ufyf68dP78WGM43FZxDz/+XaWvZ5/88en7xTlFflkejTqlv3m8q168OkN3yMAAAAAAAAAAAAAAAAAAAAAAP5/7lR753Sj3L+nOFTtv7N1WnzRjqw2WN6fZ5ZP6gvN9weKVp7n0zy+rffXuZtlWV51nOfTeCGtNhYEAAAAAAAAAAAAAAAAAACAW+7w40/298bjJwfX0qh3A0gj4s+HEf/0OsOFIy/F6s7dasy98bhVNZf7pItHYqvuk0SsLKOYxDUty2WNZy7UXDW++74xVczoMI2mU73LB203j3XFxkft2To29qmfrv29pHkNu2fF94obF+dvXCeaR2/HuSOdv6uwfhTXm06n8VT/ysvSea5sTFf0iWTV98Vrv87KXpjFUp9OuaqN8XbVWIifezbWep6jN4tf/FmR2K0DAAAAAAAAAAAAAAAAAAA2av7Xvw0nj1dGW3l3Y2UBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwI2a////dRrpcniNVCcODv+tuQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHB7/BUAAP//vaZV2Q==") write$binfmt_script(r0, &(0x7f00000008c0), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) creat(&(0x7f0000000040)='./bus\x00', 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) 3.144762123s ago: executing program 4: syz_mount_image$udf(&(0x7f0000000080), &(0x7f0000000180)='./file1\x00', 0x4000, &(0x7f0000000740)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000011,fileset=00000000000000000011,uid=', @ANYRESDEC, @ANYBLOB=',session=0000\x00000000000000005,\x00'], 0x12, 0xc38, &(0x7f0000001080)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) mkdir(&(0x7f0000000080)='./file1\x00', 0x0) 2.8424456s ago: executing program 4: syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="05"], 0x4) 2.737478636s ago: executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x244, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x2, 0x0, {0x9}}}]}}]}}, 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000040), 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.627414313s ago: executing program 4: syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3000080, &(0x7f0000000200)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRES8], 0x11, 0x2cc, &(0x7f0000000d40)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0x1000}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000001, 0x10012, r0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/fs/bpf', 0x0, 0x0) 2.599268468s ago: executing program 0: r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000000)='kmem_cache_free\x00', r1}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000080)=0x2476, 0x4) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000001300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x3002, 0x0) 2.474929037s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) gettid() syz_mount_image$udf(&(0x7f0000000f00), &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xa00010, &(0x7f0000001040)=ANY=[@ANYRES8], 0x1, 0xc43, &(0x7f00000001c0)="$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") prlimit64(0x0, 0x0, 0x0, 0x0) r1 = fanotify_init(0x4, 0x2) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000480)=""/4096, 0x34}], 0x1) fanotify_mark(0xffffffffffffffff, 0x101, 0x48001051, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x10, 0x0, 0x0) socket$inet(0x2, 0x0, 0x0) 2.409598767s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000000c00)=ANY=[@ANYBLOB="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", @ANYRESDEC=0x0], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x90) openat(0xffffffffffffffff, 0x0, 0x0, 0x0) rename(0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x12, &(0x7f0000001240)={[{@data_journal}, {@stripe={'stripe', 0x3d, 0x2}}, {@norecovery}, {@nolazytime}, {@acl}]}, 0x1, 0x60b, &(0x7f0000001b40)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@link_local={0x1, 0x80, 0xc2, 0x5}, @link_local, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, "010700", 0x10, 0x11, 0x0, @private1, @mcast2, {[], {0x0, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}}, 0x0) r3 = syz_usb_connect(0x0, 0x36, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) ioctl$EVIOCSCLOCKID(0xffffffffffffffff, 0x400445a0, &(0x7f0000000080)=0xb309) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000cab000)) setresuid(0x0, 0x0, 0xee00) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000080)=ANY=[]) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000240)={@mcast1, @local, @private1}) syz_usb_ep_write$ath9k_ep2(r3, 0x83, 0x8, &(0x7f0000000240)=ANY=[]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='mm_page_alloc\x00', r0}, 0x10) syz_open_procfs(0x0, &(0x7f00000000c0)='environ\x00') r4 = creat(&(0x7f00000000c0)='./bus\x00', 0x0) lseek(r4, 0x7ffffb, 0x0) write$binfmt_elf64(r4, &(0x7f0000000140)=ANY=[], 0xfd14) syz_open_pts(r4, 0x464ec0) 1.68261469s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f00000007c0)={0xafff, 0x0, 0x0, 0x20040006}) 832.559822ms ago: executing program 4: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x5, &(0x7f0000005840)=ANY=[@ANYBLOB="000020d50f80e302da4bb42df00320ffbf53f2abe301fc4368c5bfdcc1acf9966c6112acbe9d429df07e852d8fcc003244e4db9f6628525589b10d5ed9438d333bd2ccc9f144956033d25d91e27eaef43f3ca65a857ab036228ce36fbd31825a98bbb41fc432a26393e0553e7bd9eded25450cbb9ee8ec0d1de81f6da2e8b9974b", @ANYRESDEC, @ANYRESHEX, @ANYRESDEC, @ANYBLOB="30ba448d53c7bf34bf28"], 0x1, 0x552f, &(0x7f0000000300)="$eJzs3L1vW1UUAPDjpOl3S4QY2PqkCimRaqtOPwRbgVZ8iFZVgYEJHNu13Np+Uew4IRMDI2LgP0GAmBj5GxiY2RADiA0J5HdfaFNggCQ2aX4/6fm8e3193rlWZOn4RQ7gyFrMfv25EufjVETMR8TZiOK8Uh6FGyk8HxEXImLusaNSzv85cTwiTkfE+UnylLNSPvXZpfHFaz+9+cs33504dubzr7+f3a6BWXshIvpr6Xyzn2LeSfFBOd8Yd4vYvzouY3qi/7Ac5ylutleLDJuNnXWNIl7ppPX52sZwEu/3Gs1J7HTvF/Nrg3TB4bizk6d4wYPGejFutVeL2B3mRexsp7q2ttNn2/ZwlPK0ynwfFuljNNqJab691U77WXtYxOZgVM6nvHmrvTWJ4zKWl4tm3msVdazu5Z3+f3urO9jYysbt9WE3H2TXavUXa/Xr1fp63mqP2lerjX7r+tVsqdP76lxa37/RyfNOr11r5v3lbKnTbFbr9WzpZnu12xhk9XrtSu1y9dpyeXYpe+3Ou1mvlS1N4ivdwcao2xtm9/P1LL1iOVupXXlpObtYz96+fTe7e+/Wrdt333n/5nt3Xr79xqvlor+UlS2tXF5ZqdYvV1fqy9PZ/2RZddRuzHT/H5dF7+P+YU8qsy4A4PD5t/1/9kT/H/p/4D84uP5//V5EI33wHGD/H/r/fXGo+t+j0P9fmO7+YU/0/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAR9YPC1+8XpwspvGZcv5cOfVsOa5ExFxE/P435uP4rpzzZZ6Ff1i/8EQN31aiyDC5xonyOB0RN8rjt2cO+l0AAACAp9eXH134NHXr6WFx1gUxTelLm7mzH+xTvkpELCz+uE/Z5iYPz+1TsuLv+1hs7TnPseKx+ALr5N6rSs48Sjwt87vCycdCJYW5qZYDAABMxe5OYLpdCAAAANP0yawLYDYqsXMrc+decPGf949uCJ7aNQIAAAAOocqsCwAAAAAOXNH/+/0/AAAAeLql3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgD3buJzdtIIoD8LPBhf5TUdU9V+kObtBtj9BllxUH6CU4Ar1CL8AZyC5HiCDC46CASBTJY5yg75OcyVjw440Fi5mRBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoEs31Wr+78/0b9uc7a6dPKMBAAAAztlUq3n9zyT1Pzb3Pze3vjb9IiLKiDg3dx/Eu6PMQZNTPfH66qSG/xF1wv4zRs31ISK+N9fdlx9dPwYAAAC4WuvFcpZm6+nPpO+CuKS0aFN++pkpr4iIanKbKa3c533LFFZ/v4fxO1NavYA1zhSWltyGudJepP65H1btxo+aIjXl8+/PNnYAAOCCBkfN6SxkevF6AAAA6MqvvgugH0U8bGUetgJHqWm2994f9QAAAIA3qOi7AAAAAKBz9fz/lZ//V6Tz/zp+EgAAAHDF0vl/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAdGlTrebrxXLWNme7ayfPaAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAO7Zn3cUCIEwCIO96zuTuf9hpUFTU5MqED7+xmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADe/O4v/yemxplk7rWx9DySrJ0aW6fG3rlx9Ifx9WsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GJ/XlIgBIIgCuaM/530/Q8rCXoGESKg4VFFLRoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgC/63S//J6bGmWTutLF0PJKsXTW2rhp7DxpHD8bbvwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4GLn/n3bqOIAgH/ts90fgAgBZQhCIDHAQlO3tHRDDKCIgT8BKUrdEuryI81AqwopCxvK3AXBiBASKGz9Hzq3UpeydchQJBaWone+a65pUAwkd079+Ujv3tfny933naUo33svBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEpb723HWdrMjOJ2se/2g+vLqb+zo09ubtydTy3FrTqTPhxeqb5ozTWXCAAAANMjK+v7iLjX3VxMfXsmr/+75TGp5v/+uVFc1vM76/6yL2v/1H779f5L6Uc6MXp+kK6TTnphZTg4+WQqnQMe6sR6fs8jOvmdz5+9ZPkH0v5w/cWtbn4/W9/euvV+Lw+P1JEtAPBfnCj7Iij/Hkp9v8nEAJganUrhXdb/2UyzOQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADUYWs9ninjVkTMd7bj5M6D68u79Tc37s6X7eyNGxvVc6ZTdCPiwspwcLLGsUy6K1evXVoaDgeruwR/PfzHt/YjeDUiDubMewfvFsO/9PEYB0c0kKFg34J28WFPSj6HI2jwlxIAAE+lbtFSXX+vu7mY9rVmIx7+8Hj9/0YljjHr//ufnL1dvVa1/u/XNsLJt7B2+YuFK1evvbVyeeni4OLgs7dP9d/pnz535sy5hfxZyYInJgAAAPw/vaJV6//27JPz/8crcYxZ/3/5Xf/r6rUy9f+utif9ms4EAABgur3w2p9/tHbZ3+r14qultbXV/mj76PWp0baBVP+1I0Wr1v/ZbNNZAQAAAHXYWm89Nv9/vhLHmPP/z/748s/Vc2YRcayY/z+x/PnwfH3DmWgH8s/DcTRi1coCAACAaZHt8f6xolXn/7v5+v/2oyUP7Yh48/VRXHwN4Fj1f/bBNz/tzKVc/396f4d56LTnRvcj7+ciOnNNZwQAAMDT7GjRUrH/e3dz8dNfjn/Us/4fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoG5/BwAA//90sjuQ") r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f0000000080)='ro\x00', 0x0, 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0) 113.777643ms ago: executing program 4: r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pwritev(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)="f8", 0x1}, {0x0, 0x2}], 0x2, 0x0, 0x0) 26.960757ms ago: executing program 1: ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) syz_read_part_table(0x1084, &(0x7f0000000840)="$eJzs0MFNw0AQBdAfhzhJAxRADdxBUAllcMKUgkQTUAtcqMKcFq29MT4joVzeO6xmVn/WI4fzKn0OuV26lM3jtlaHHDN0SZ7z+X1c5Usrtrl8HU6Xw1hKSrl6qYE5Ml73tf5K+tp2c3I/nZs2tmvz3e/z9eP3mTdY7Hc1c9O6h2QaHOtDd8tepV2vl0w+3uv5dnHqp+Lpjz8LAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAP7HTwAAAP//nycmYQ==") 0s ago: executing program 2: syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000840), 0x1, 0x46a, &(0x7f0000000980)="$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") chdir(&(0x7f0000000000)='./file0\x00') open(&(0x7f0000000000)='./bus\x00', 0x60142, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000400)='./bus\x00', 0x0, &(0x7f0000000840)=ANY=[], 0x1, 0x37f, &(0x7f0000000440)="$eJzs3c9rI2UYwPFn0jQ/umyTgygK0ge96GVoq2e1SBeEgkt3I+4Kwux2oiFjUmZCJCK2nryKN/8BwWUPHhY8LKj/QC/e1osXT9vLgqCLiCPzK8l0p0mTZmm6+/3Abt7kfZ/M+04m5XkCeXP4/tefNOueWbc6kivdF0NE5KFIVXKSMKKbgmTYl1cv/HnvxSvXrhdFZHNb9dLG1dfWVXV55adPPy/Hw+4W5aD64eGD9T8Onj14/vC/qx83PG142mp31NIb7d871g3H1p2G1zRVLzu25dnaaHm2G/W3o/66097d7anV2rm4tOvanqdWq6dNu6edtnbcnlofWY2WmqapF5eyphsrjug7r0pTxNRubW9bG1Me8OaUcZi1f3zfH9HtuhvWgohZDt+vw2q3HvvcAADA3Enn//ptkrBXJddPKI24FiiE7XQZEOT/SXtra3Nbg2JhkP/ffumXzoX37izH+f/dQlb+//pvUXwq/w+OPvP8//sj98uzO5HzYm+SwafK/zEfVtLvyPuDij0W5P/Bu6Ff0X/5we3VsEH+DwAAAAAAAAAAAAAAAAAAAADAefDQ9yu+71eS2+Tf4CsE8f2QsT/yi8Y4d3KS/foX4x0F+tcDnkhXrl2XUvjFvfyyiPNVt9atRbdxfzJwVSryb3g9xKINJ6L9BDRQlZ+dvW5tMQ5YCP/fKIiKI7asSUWqqfiwfemdrc01jUTx4fH3ujUjvxTE16URxq9LRZ7Jjl/PjC/IKy8PxZtSkV9vSlsc2Qmv60H8F2uqb7+7dSS+HI7L8ubjfUkAAAAAAJg5U7UUl8/VdP0b1e+mqZrVH9TyMlyfP/r5QL++Xs2sz/OVF/Jnu3YAAAAAAJ4WXuGzpuU4tuv1jm2UZdyY5Pc0Rj9PdiM/yeCgcS9sLI4aszC0wpM+cyH+BY0JJi+TrdRynL+Kknkyky1cU12lU5xVy0nWf4LBpUlfAtfLTb522/VWgvnoVMsZaiQfG0WPLDxy6uTyceE/GEnUZAdNds4dN/i5b777e7p1GfGuvcNdb9wppVZ6TLhx5JH9MRftA98fO5/F7L8WP07zIzMAAAAA5kSS9Je95JG3znZCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA8hU63E9vJGme9RgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGBe/B8AAP//Tuzx8g==") creat(&(0x7f0000000d00)='./file0\x00', 0x0) kernel console output (not intermixed with test programs): ready [ 149.504371][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.533931][ T4680] device veth1_macvtap entered promiscuous mode [ 149.578657][ T33] hfsplus: b-tree write err: -5, ino 4 [ 149.599186][ T4786] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 149.640826][ T3592] Bluetooth: hci3: command tx timeout [ 149.733408][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.939760][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 149.971399][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.020268][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.051078][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.061222][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.074274][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.085157][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.097117][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.107517][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.123191][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.148954][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.188253][ T4831] team0: Port device team_slave_0 added [ 150.217207][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 150.242398][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 150.276169][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 150.322264][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.334239][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.344218][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.361178][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.390732][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.411015][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.441001][ T3576] Bluetooth: hci4: command tx timeout [ 150.447006][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.460920][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.471075][ T4680] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.481642][ T4680] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.512103][ T4680] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.534117][ T4831] team0: Port device team_slave_1 added [ 150.572286][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 150.586914][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 150.648030][ T4895] loop1: detected capacity change from 0 to 40427 [ 150.662672][ T4895] F2FS-fs (loop1): Invalid log sectors per block(3) log sectorsize(10) [ 150.671324][ T4895] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 150.698470][ T4680] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.726102][ T4680] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.738524][ T4680] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.747739][ T4680] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.751825][ T4895] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241045589454292453) [ 150.776041][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 150.784393][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.812568][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 150.836921][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 150.870811][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.897875][ T4895] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 150.915100][ T4915] loop4: detected capacity change from 0 to 64 [ 150.922028][ T4895] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 150.922642][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.971871][ T4915] hfs: unable to locate alternate MDB [ 150.977313][ T4915] hfs: continuing without an alternate MDB [ 151.119204][ T26] audit: type=1800 audit(1718905754.103:20): pid=4915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="file1" dev="loop4" ino=18 res=0 errno=0 [ 151.197485][ T4831] device hsr_slave_0 entered promiscuous mode [ 151.207398][ T4831] device hsr_slave_1 entered promiscuous mode [ 151.226992][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.241323][ T4831] Cannot create hsr debugfs directory [ 151.354519][ T4786] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.451072][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.459390][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.545172][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 151.581329][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 151.604049][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 151.665723][ T4786] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.824191][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 151.858512][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 151.878472][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.885767][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.983982][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.019880][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 152.035928][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 152.061361][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.069791][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 152.100391][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.101342][ T4941] loop4: detected capacity change from 0 to 256 [ 152.107719][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 152.165367][ T4941] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 152.216152][ T9] device hsr_slave_0 left promiscuous mode [ 152.233238][ T9] device hsr_slave_1 left promiscuous mode [ 152.257211][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.268608][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.283386][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.346559][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.368179][ T9] device bridge_slave_0 left promiscuous mode [ 152.381041][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.410486][ T4948] loop1: detected capacity change from 0 to 128 [ 152.417569][ T9] device hsr_slave_0 left promiscuous mode [ 152.438094][ T9] device hsr_slave_1 left promiscuous mode [ 152.440409][ T4948] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 152.461737][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.480855][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.504913][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.514289][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.521601][ T3576] Bluetooth: hci4: command tx timeout [ 152.559405][ T11] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1) [ 152.573575][ T9] device bridge_slave_1 left promiscuous mode [ 152.590128][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.590817][ T11] kworker/u4:1: attempt to access beyond end of device [ 152.590817][ T11] loop1: rw=1, sector=144, nr_sectors = 1 limit=128 [ 152.621710][ T9] device bridge_slave_0 left promiscuous mode [ 152.628003][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.630774][ T11] Buffer I/O error on dev loop1, logical block 144, lost async page write [ 152.678972][ T9] device hsr_slave_0 left promiscuous mode [ 152.696468][ T9] device hsr_slave_1 left promiscuous mode [ 152.706917][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.725207][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.754959][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.783052][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.803847][ T9] device bridge_slave_1 left promiscuous mode [ 152.810200][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.821497][ T4952] loop1: detected capacity change from 0 to 1024 [ 152.841441][ T9] device bridge_slave_0 left promiscuous mode [ 152.847789][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.913894][ T9] device veth1_macvtap left promiscuous mode [ 152.920024][ T9] device veth0_macvtap left promiscuous mode [ 152.938203][ T9] device veth1_vlan left promiscuous mode [ 152.944267][ T9] device veth0_vlan left promiscuous mode [ 152.970059][ T9] device veth1_macvtap left promiscuous mode [ 152.977630][ T4946] loop4: detected capacity change from 0 to 32768 [ 152.984234][ T9] device veth0_macvtap left promiscuous mode [ 152.990386][ T9] device veth1_vlan left promiscuous mode [ 153.012159][ T9] device veth0_vlan left promiscuous mode [ 153.023077][ T9] device veth1_macvtap left promiscuous mode [ 153.029168][ T9] device veth0_macvtap left promiscuous mode [ 153.035851][ T9] device veth1_vlan left promiscuous mode [ 153.042142][ T9] device veth0_vlan left promiscuous mode [ 153.053607][ T4946] XFS (loop4): Mounting V5 Filesystem [ 153.141942][ T4946] XFS (loop4): Ending clean mount [ 153.214061][ T4946] XFS (loop4): Quotacheck needed: Please wait. [ 153.377800][ T4946] XFS (loop4): Quotacheck: Done. [ 153.462197][ T4582] XFS (loop4): Unmounting Filesystem [ 153.834321][ T4968] loop4: detected capacity change from 0 to 128 [ 153.881627][ T4970] loop1: detected capacity change from 0 to 64 [ 153.900968][ T4970] hfs: unable to locate alternate MDB [ 153.916312][ T4970] hfs: continuing without an alternate MDB [ 153.987266][ T26] audit: type=1800 audit(1718905756.973:21): pid=4970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 154.304186][ T9] team0 (unregistering): Port device team_slave_1 removed [ 154.329956][ T9] team0 (unregistering): Port device team_slave_0 removed [ 154.380441][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.433214][ T4983] loop1: detected capacity change from 0 to 256 [ 154.533956][ T4983] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 154.602855][ T3576] Bluetooth: hci4: command tx timeout [ 154.619646][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.279539][ T9] bond0 (unregistering): Released all slaves [ 155.343128][ T4991] loop4: detected capacity change from 0 to 1024 [ 155.607287][ T9] team0 (unregistering): Port device team_slave_1 removed [ 155.625599][ T9] team0 (unregistering): Port device team_slave_0 removed [ 155.684253][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.708648][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.860332][ T9] bond0 (unregistering): Released all slaves [ 155.979986][ T4993] loop4: detected capacity change from 0 to 32768 [ 156.074221][ T4993] ERROR: (device loop4): diNewExt: no free extents [ 156.074221][ T4993] [ 156.099386][ T4993] ERROR: (device loop4): remounting filesystem as read-only [ 156.114630][ T4993] ialloc: diAlloc returned -5! [ 156.168179][ T9] team0 (unregistering): Port device team_slave_1 removed [ 156.188761][ T9] team0 (unregistering): Port device team_slave_0 removed [ 156.254541][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.292173][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.355877][ T4995] loop1: detected capacity change from 0 to 32768 [ 156.461523][ T4995] XFS (loop1): Mounting V5 Filesystem [ 156.566262][ T9] bond0 (unregistering): Released all slaves [ 156.597339][ T4995] XFS (loop1): Ending clean mount [ 156.639522][ T4995] XFS (loop1): Quotacheck needed: Please wait. [ 156.703339][ T4995] XFS (loop1): Quotacheck: Done. [ 156.758758][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.381162][ T4645] XFS (loop1): Unmounting Filesystem [ 157.401599][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 157.590424][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 157.756873][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 157.773484][ T3779] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 157.899176][ T5015] loop4: detected capacity change from 0 to 512 [ 158.024891][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 158.045660][ T5015] EXT4-fs (loop4): 1 orphan inode deleted [ 158.051577][ T5015] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 158.061141][ T5015] ext4 filesystem being mounted at /root/syzkaller-testdir1620786901/syzkaller.V2y5mW/28/file1 supports timestamps until 2038 (0x7fffffff) [ 158.064462][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 158.179635][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 158.188668][ T5023] loop1: detected capacity change from 0 to 64 [ 158.221013][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 158.239989][ T5023] hfs: unable to locate alternate MDB [ 158.247302][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 158.251499][ T5023] hfs: continuing without an alternate MDB [ 158.291446][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 158.346959][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 158.359231][ T26] audit: type=1800 audit(1718905761.353:22): pid=5023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file1" dev="loop1" ino=18 res=0 errno=0 [ 158.407901][ T4786] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 158.441083][ T4582] EXT4-fs (loop4): unmounting filesystem. [ 158.575330][ T5032] loop1: detected capacity change from 0 to 256 [ 158.643351][ T5032] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x0b0ca5f0, utbl_chksum : 0xe619d30d) [ 158.701790][ T5037] capability: warning: `syz-executor.4' uses 32-bit capabilities (legacy support in use) [ 159.050791][ T5037] loop4: detected capacity change from 0 to 8192 [ 159.108706][ T5046] loop1: detected capacity change from 0 to 1024 [ 159.115600][ T5037] loop4: p1 p2 p4[EZD] [ 159.121543][ T5037] loop4: p1 size 16128 extends beyond EOD, truncated [ 159.179340][ T5037] loop4: p2 size 2130728454 extends beyond EOD, truncated [ 159.214640][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 159.224721][ T5037] loop4: p4 size 65536 extends beyond EOD, truncated [ 159.254406][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 159.290640][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 159.330233][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 159.583825][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 159.599157][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 159.634509][ T4786] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.762030][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 159.782668][ T3766] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 159.854528][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.890776][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 159.902824][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 159.924210][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 159.942505][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 159.970074][ T4786] device veth0_vlan entered promiscuous mode [ 160.017324][ T4831] 8021q: adding VLAN 0 to HW filter on device team0 [ 160.066282][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 160.093011][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 160.147374][ T4786] device veth1_vlan entered promiscuous mode [ 160.297751][ T4831] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 160.356048][ T4831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 160.375165][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 161.283477][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 161.292474][ T3620] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.299687][ T3620] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.310248][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 161.319473][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 161.328873][ T3620] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.336243][ T3620] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.391354][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 161.420314][ T5067] loop1: detected capacity change from 0 to 512 [ 161.421533][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 161.461797][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 161.501762][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 161.510550][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 161.539441][ T5067] EXT4-fs (loop1): 1 orphan inode deleted [ 161.547654][ T5067] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 161.552611][ T5058] loop4: detected capacity change from 0 to 32768 [ 161.571703][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 161.579997][ T5067] ext4 filesystem being mounted at /root/syzkaller-testdir2861345029/syzkaller.VW89PC/26/file1 supports timestamps until 2038 (0x7fffffff) [ 161.580513][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 161.678616][ T5058] ERROR: (device loop4): diNewExt: no free extents [ 161.678616][ T5058] [ 161.681660][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 161.725822][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 161.742860][ T5059] loop3: detected capacity change from 0 to 32768 [ 161.753630][ T5058] ERROR: (device loop4): remounting filesystem as read-only [ 161.756096][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 161.822246][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 161.837571][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 161.854700][ T4645] EXT4-fs (loop1): unmounting filesystem. [ 161.867481][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 161.875762][ T5058] ialloc: diAlloc returned -5! [ 161.970590][ T5059] XFS (loop3): Mounting V5 Filesystem [ 161.983886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 161.994241][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 162.025478][ T4786] device veth0_macvtap entered promiscuous mode [ 162.140220][ T4786] device veth1_macvtap entered promiscuous mode [ 162.300029][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.315594][ T5059] XFS (loop3): Ending clean mount [ 162.344388][ T5059] XFS (loop3): Quotacheck needed: Please wait. [ 162.373200][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.421012][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.452219][ T5059] XFS (loop3): Quotacheck: Done. [ 162.490871][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.527508][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.544961][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.558299][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.575281][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 162.601197][ T5086] loop1: detected capacity change from 0 to 8192 [ 162.605090][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 162.656949][ T5086] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.681670][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 162.751671][ T3630] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 162.763023][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.822966][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.845733][ T5101] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 162.857271][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.928999][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.961308][ T4786] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.977906][ T4786] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.988458][ T4680] XFS (loop3): Unmounting Filesystem [ 163.019401][ T5104] loop4: detected capacity change from 0 to 1024 [ 163.042048][ T4786] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.127149][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 163.174258][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 163.199460][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 163.222771][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 163.264198][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 163.308584][ T4786] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.340918][ T4786] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.349708][ T4786] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.384849][ T4786] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.490984][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 163.499894][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 163.625305][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 163.647035][ T3765] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 163.686505][ T4831] device veth0_vlan entered promiscuous mode [ 163.708820][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 163.723449][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 163.779829][ T4831] device veth1_vlan entered promiscuous mode [ 163.809347][ T4333] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.848285][ T4333] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.904734][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 163.922472][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 163.944245][ T5119] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 163.958406][ T3764] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.984028][ T4333] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.990235][ T4831] device veth0_macvtap entered promiscuous mode [ 164.008287][ T4333] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.023937][ T5119] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.051135][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 164.059297][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 164.082993][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 164.109994][ T4831] device veth1_macvtap entered promiscuous mode [ 164.130468][ T5122] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 164.159290][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 164.186528][ T3624] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 164.217372][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.255341][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.337933][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.386510][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.396671][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.407378][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.417885][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.429320][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.442450][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.450187][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 165.222775][ T5131] loop3: detected capacity change from 0 to 512 [ 165.352649][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 165.370424][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.441818][ T5131] EXT4-fs (loop3): 1 orphan inode deleted [ 165.447666][ T5131] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 165.462155][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.491568][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.522349][ T5131] ext4 filesystem being mounted at /root/syzkaller-testdir4136382445/syzkaller.EieOuu/5/file1 supports timestamps until 2038 (0x7fffffff) [ 165.538345][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.551110][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.583800][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.655901][ T4831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.696497][ T4831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.760328][ T4680] EXT4-fs (loop3): unmounting filesystem. [ 165.771131][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.791055][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 165.800511][ T3620] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 165.850632][ T4831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.915580][ T4831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.940818][ T4831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.949585][ T4831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.298847][ T3656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.335289][ T3656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.401154][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 166.452546][ T4334] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.481888][ T4334] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.502800][ T4386] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 166.522172][ T5157] loop3: detected capacity change from 0 to 1024 [ 166.781397][ T5155] loop2: detected capacity change from 0 to 8192 [ 166.853444][ T5155] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 167.099060][ T5139] loop4: detected capacity change from 0 to 32768 [ 167.168563][ T5139] ERROR: (device loop4): diNewExt: no free extents [ 167.168563][ T5139] [ 167.238370][ T5139] ERROR: (device loop4): remounting filesystem as read-only [ 167.277117][ T5139] ialloc: diAlloc returned -5! [ 167.343572][ T5144] loop1: detected capacity change from 0 to 32768 [ 167.547092][ T5144] XFS (loop1): Mounting V5 Filesystem [ 167.748607][ T5144] XFS (loop1): Ending clean mount [ 167.772473][ T5144] XFS (loop1): Quotacheck needed: Please wait. [ 167.951063][ T5144] XFS (loop1): Quotacheck: Done. [ 168.791251][ T4645] XFS (loop1): Unmounting Filesystem [ 169.506219][ T5193] loop0: detected capacity change from 0 to 32768 [ 169.590196][ T5193] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5193) [ 169.602255][ T5210] loop2: detected capacity change from 0 to 8192 [ 169.660112][ T5193] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 169.664341][ T5176] loop3: detected capacity change from 0 to 32768 [ 169.697408][ T5210] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.703619][ T5193] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 169.718236][ T5217] loop1: detected capacity change from 0 to 512 [ 169.743474][ T5193] BTRFS info (device loop0): setting nodatacow, compression disabled [ 169.790885][ T5193] BTRFS info (device loop0): force clearing of disk cache [ 169.827716][ T5193] BTRFS info (device loop0): using free space tree [ 169.835176][ T5210] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 169.899534][ T5176] XFS (loop3): Mounting V5 Filesystem [ 169.932707][ T5217] EXT4-fs (loop1): 1 orphan inode deleted [ 169.955237][ T5217] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 169.992087][ T5217] ext4 filesystem being mounted at /root/syzkaller-testdir2861345029/syzkaller.VW89PC/34/file1 supports timestamps until 2038 (0x7fffffff) [ 170.103091][ T5176] XFS (loop3): Ending clean mount [ 170.153171][ T5176] XFS (loop3): Quotacheck needed: Please wait. [ 170.229355][ T5176] XFS (loop3): Quotacheck: Done. [ 170.324837][ T5193] BTRFS info (device loop0): enabling ssd optimizations [ 170.333833][ T5218] loop4: detected capacity change from 0 to 32768 [ 170.349693][ T5218] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (5218) [ 170.351528][ T5193] BTRFS info (device loop0): rebuilding free space tree [ 170.385590][ T4645] EXT4-fs (loop1): unmounting filesystem. [ 170.397420][ T5218] BTRFS info (device loop4): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 170.428227][ T5218] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 170.448532][ T5218] BTRFS info (device loop4): using free space tree [ 171.101442][ T4831] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.399408][ T5256] loop2: detected capacity change from 0 to 32768 [ 171.429062][ T4680] XFS (loop3): Unmounting Filesystem [ 171.535866][ T5256] ERROR: (device loop2): diNewExt: no free extents [ 171.535866][ T5256] [ 171.565741][ T5218] BTRFS info (device loop4): enabling ssd optimizations [ 171.600080][ T5256] ERROR: (device loop2): remounting filesystem as read-only [ 171.620835][ T5256] ialloc: diAlloc returned -5! [ 171.823049][ T5218] loop4: detected capacity change from 32768 to 11 [ 171.937151][ T5289] syz-executor.4: attempt to access beyond end of device [ 171.937151][ T5289] loop4: rw=2049, sector=10456, nr_sectors = 8 limit=11 [ 172.038658][ T5289] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0 [ 172.088439][ T5289] syz-executor.4: attempt to access beyond end of device [ 172.088439][ T5289] loop4: rw=2049, sector=10240, nr_sectors = 16 limit=11 [ 172.148656][ T5289] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0 [ 173.364094][ T3576] kworker/u5:1: attempt to access beyond end of device [ 173.364094][ T3576] loop4: rw=6145, sector=10440, nr_sectors = 8 limit=11 [ 173.378328][ T3576] BTRFS error (device loop4): bdev /dev/loop4 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0 [ 173.398990][ T4582] BTRFS: error (device loop4: state A) in __btrfs_run_delayed_items:1158: errno=-5 IO failure [ 173.458321][ T4582] BTRFS info (device loop4: state EA): forced readonly [ 173.479203][ T4582] BTRFS warning (device loop4: state EA): Skipping commit of aborted transaction. [ 173.531014][ T4582] BTRFS: error (device loop4: state EA) in cleanup_transaction:1991: errno=-5 IO failure [ 173.574429][ T4582] BTRFS info (device loop4: state EA): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 174.285776][ T5293] loop0: detected capacity change from 0 to 32768 [ 174.316808][ T5293] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5293) [ 174.349841][ T5324] loop2: detected capacity change from 0 to 8192 [ 174.406338][ T5293] BTRFS info (device loop0): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 174.424640][ T5324] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.467914][ T5293] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 174.502022][ T5293] BTRFS info (device loop0): using free space tree [ 174.547562][ T5324] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 174.615938][ T5306] loop3: detected capacity change from 0 to 32768 [ 174.667106][ T5347] loop1: detected capacity change from 0 to 512 [ 174.764942][ T5306] XFS (loop3): Mounting V5 Filesystem [ 174.796917][ T5347] EXT4-fs (loop1): 1 orphan inode deleted [ 174.813573][ T5347] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 174.837288][ T5293] BTRFS info (device loop0): enabling ssd optimizations [ 174.877382][ T5347] ext4 filesystem being mounted at /root/syzkaller-testdir2861345029/syzkaller.VW89PC/38/file1 supports timestamps until 2038 (0x7fffffff) [ 174.888880][ T5306] XFS (loop3): Ending clean mount [ 174.959983][ T5306] XFS (loop3): Quotacheck needed: Please wait. [ 175.033687][ T5306] XFS (loop3): Quotacheck: Done. [ 175.044546][ T4831] BTRFS info (device loop0): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 175.134640][ T4645] EXT4-fs (loop1): unmounting filesystem. [ 175.337294][ T5376] loop4: detected capacity change from 0 to 164 [ 175.435281][ T4680] XFS (loop3): Unmounting Filesystem [ 176.221818][ T5372] loop2: detected capacity change from 0 to 32768 [ 176.279886][ T5372] ERROR: (device loop2): diNewExt: no free extents [ 176.279886][ T5372] [ 176.300263][ T5372] ERROR: (device loop2): remounting filesystem as read-only [ 176.320542][ T5372] ialloc: diAlloc returned -5! [ 176.530359][ T3777] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 176.588468][ T5403] loop1: detected capacity change from 0 to 8192 [ 176.623972][ T5403] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.747913][ T5403] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 176.800769][ T3777] usb 4-1: Using ep0 maxpacket: 16 [ 176.887235][ T5394] loop4: detected capacity change from 0 to 32768 [ 176.921316][ T3777] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 176.952728][ T3777] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 176.975645][ T5396] loop0: detected capacity change from 0 to 32768 [ 177.048039][ T3777] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 177.095021][ T5396] XFS (loop0): Mounting V5 Filesystem [ 177.119113][ T3777] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 177.127860][ T5420] loop1: detected capacity change from 0 to 1024 [ 177.137256][ T5420] hfsplus: part requires an argument [ 177.144062][ T5420] hfsplus: unable to parse mount options [ 177.166099][ T3777] usb 4-1: config 0 descriptor?? [ 177.188457][ T5394] XFS (loop4): Mounting V5 Filesystem [ 177.277493][ T5396] XFS (loop0): Ending clean mount [ 177.317699][ T5396] XFS (loop0): Quotacheck needed: Please wait. [ 177.357383][ T5394] XFS (loop4): Ending clean mount [ 177.374542][ T5396] XFS (loop0): Quotacheck: Done. [ 177.379414][ T5394] XFS (loop4): Quotacheck needed: Please wait. [ 177.441915][ T5394] XFS (loop4): Quotacheck: Done. [ 177.476992][ T5405] loop2: detected capacity change from 0 to 32768 [ 177.485376][ T5405] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5405) [ 177.534959][ T4582] XFS (loop4): Unmounting Filesystem [ 177.703252][ T5405] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 177.740879][ T5405] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 177.747252][ T3777] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 177.749573][ T5405] BTRFS info (device loop2): using free space tree [ 178.249414][ T5401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 178.338016][ T5401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 178.432075][ T3777] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 178.446905][ T3777] microsoft 0003:045E:07DA.0001: no inputs found [ 178.454593][ T3777] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 178.468635][ T4831] XFS (loop0): Unmounting Filesystem [ 178.604480][ T5381] usb 4-1: USB disconnect, device number 5 [ 178.653614][ T5443] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.725941][ T5405] BTRFS info (device loop2): enabling ssd optimizations [ 178.876788][ T4786] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 178.952077][ T5459] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 179.330961][ T5383] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 179.591002][ T5383] usb 1-1: Using ep0 maxpacket: 8 [ 179.767154][ T5465] loop2: detected capacity change from 0 to 40427 [ 179.861879][ T5465] F2FS-fs (loop2): Found nat_bits in checkpoint [ 179.925513][ T5383] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f7.cd [ 179.950763][ T5383] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 179.971307][ T5383] usb 1-1: Product: syz [ 179.975545][ T5383] usb 1-1: Manufacturer: syz [ 180.000949][ T5383] usb 1-1: SerialNumber: syz [ 180.003166][ T5465] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 180.022120][ T5383] usb 1-1: config 0 descriptor?? [ 180.062332][ T5383] cytherm 1-1:0.0: Cypress thermometer device now attached [ 180.099276][ T26] audit: type=1800 audit(1718905783.083:23): pid=5465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=14 res=0 errno=0 [ 180.150520][ T4786] syz-executor.2: attempt to access beyond end of device [ 180.150520][ T4786] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 180.267405][ T3630] usb 1-1: USB disconnect, device number 3 [ 180.277762][ T3630] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 180.425696][ T5475] loop4: detected capacity change from 0 to 32768 [ 180.552830][ T5475] XFS (loop4): Mounting V5 Filesystem [ 180.588838][ T5484] loop1: detected capacity change from 0 to 32768 [ 180.678105][ T5484] XFS (loop1): Mounting V5 Filesystem [ 180.689814][ T5475] XFS (loop4): Ending clean mount [ 180.719242][ T5475] XFS (loop4): Quotacheck needed: Please wait. [ 180.807582][ T5475] XFS (loop4): Quotacheck: Done. [ 180.863707][ T5484] XFS (loop1): Ending clean mount [ 180.881503][ T5484] XFS (loop1): Quotacheck needed: Please wait. [ 180.958750][ T5505] Driver unsupported XDP return value 0 on prog (id 34) dev N/A, expect packet loss! [ 180.978525][ T5484] XFS (loop1): Quotacheck: Done. [ 181.009024][ T4582] XFS (loop4): Unmounting Filesystem [ 181.361442][ T3767] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 182.094714][ T4645] XFS (loop1): Unmounting Filesystem [ 182.216410][ T5507] loop2: detected capacity change from 0 to 32768 [ 182.280872][ T3767] usb 1-1: Using ep0 maxpacket: 16 [ 182.289061][ T5507] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5507) [ 182.358727][ T5507] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 182.400851][ T3767] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 182.428441][ T5507] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 182.441714][ T3767] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 182.462880][ T5507] BTRFS info (device loop2): using free space tree [ 182.497617][ T3767] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 182.526137][ T3767] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 182.572534][ T3767] usb 1-1: config 0 descriptor?? [ 182.754812][ T5539] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 182.802032][ T5507] BTRFS info (device loop2): enabling ssd optimizations [ 183.039986][ T4786] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 183.053777][ T3767] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 183.076022][ T3767] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 183.103477][ T3767] microsoft 0003:045E:07DA.0002: no inputs found [ 183.111229][ T3767] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 183.164614][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 183.389971][ T5549] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 183.421229][ T5549] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 183.733996][ T5383] usb 1-1: USB disconnect, device number 4 [ 183.820954][ T3770] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 183.879350][ T5548] loop1: detected capacity change from 0 to 40427 [ 183.979004][ T5548] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.070804][ T3770] usb 3-1: Using ep0 maxpacket: 8 [ 184.077007][ T5548] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.199173][ T5556] loop4: detected capacity change from 0 to 32768 [ 184.224703][ T26] audit: type=1800 audit(1718905787.213:24): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 184.296086][ T5556] XFS (loop4): Mounting V5 Filesystem [ 184.351053][ T3770] usb 3-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f7.cd [ 184.386215][ T3770] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 184.448675][ T3770] usb 3-1: Product: syz [ 184.464808][ T3770] usb 3-1: Manufacturer: syz [ 184.469565][ T3770] usb 3-1: SerialNumber: syz [ 184.488878][ T3770] usb 3-1: config 0 descriptor?? [ 184.511085][ T4645] syz-executor.1: attempt to access beyond end of device [ 184.511085][ T4645] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 184.530530][ T5556] XFS (loop4): Ending clean mount [ 184.537429][ T3770] cytherm 3-1:0.0: Cypress thermometer device now attached [ 184.567978][ T5556] XFS (loop4): Quotacheck needed: Please wait. [ 184.638404][ T5556] XFS (loop4): Quotacheck: Done. [ 184.757605][ T4582] XFS (loop4): Unmounting Filesystem [ 184.771984][ T3770] usb 3-1: USB disconnect, device number 3 [ 184.778383][ T3770] cytherm 3-1:0.0: Cypress thermometer now disconnected [ 186.450881][ T5381] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 186.691903][ T5381] usb 4-1: Using ep0 maxpacket: 16 [ 186.787230][ T5585] loop1: detected capacity change from 0 to 32768 [ 186.810999][ T5381] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 186.850887][ T5381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 186.918848][ T5381] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 186.928515][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 186.947936][ T5381] usb 4-1: config 0 descriptor?? [ 186.963154][ T5592] loop2: detected capacity change from 0 to 32768 [ 187.000218][ T5585] XFS (loop1): Mounting V5 Filesystem [ 187.011127][ T5592] BTRFS: device fsid 17bca515-437c-4bbd-9eb0-5eb74df1971f devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5592) [ 187.044809][ T5592] BTRFS info (device loop2): first mount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 187.110869][ T5592] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 187.119656][ T5592] BTRFS info (device loop2): using free space tree [ 187.358166][ T5603] loop4: detected capacity change from 0 to 40427 [ 187.371347][ T5592] BTRFS info (device loop2): enabling ssd optimizations [ 187.408851][ T5585] XFS (loop1): Ending clean mount [ 187.423720][ T5381] microsoft 0003:045E:07DA.0003: No inputs registered, leaving [ 187.441222][ T5585] XFS (loop1): Quotacheck needed: Please wait. [ 187.462551][ T5381] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 187.490831][ T5381] microsoft 0003:045E:07DA.0003: no inputs found [ 187.509839][ T5381] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 187.514652][ T5603] F2FS-fs (loop4): Found nat_bits in checkpoint [ 187.618573][ T5585] XFS (loop1): Quotacheck: Done. [ 187.676591][ T4786] BTRFS info (device loop2): last unmount of filesystem 17bca515-437c-4bbd-9eb0-5eb74df1971f [ 187.728640][ T5639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 187.753981][ T5639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 187.980824][ T5603] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 188.466176][ T26] audit: type=1800 audit(1718905791.453:25): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 188.506658][ T3621] usb 4-1: USB disconnect, device number 6 [ 188.719343][ T4582] syz-executor.4: attempt to access beyond end of device [ 188.719343][ T4582] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 188.775262][ T4645] XFS (loop1): Unmounting Filesystem [ 189.250883][ T3621] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 189.610746][ T3621] usb 1-1: Using ep0 maxpacket: 8 [ 190.051264][ T3621] usb 1-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f7.cd [ 190.147873][ T3621] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.435140][ T3621] usb 1-1: Product: syz [ 190.448244][ T3621] usb 1-1: Manufacturer: syz [ 190.454562][ T3621] usb 1-1: SerialNumber: syz [ 190.471766][ T3621] usb 1-1: config 0 descriptor?? [ 190.513033][ T3621] cytherm 1-1:0.0: Cypress thermometer device now attached [ 190.766110][ T5383] usb 1-1: USB disconnect, device number 5 [ 190.790927][ T5383] cytherm 1-1:0.0: Cypress thermometer now disconnected [ 191.049339][ T5650] loop2: detected capacity change from 0 to 32768 [ 191.119166][ T5650] XFS (loop2): Mounting V5 Filesystem [ 191.246328][ T5664] loop1: detected capacity change from 0 to 32768 [ 191.273508][ T5650] XFS (loop2): Ending clean mount [ 191.334635][ T5664] XFS (loop1): Mounting V5 Filesystem [ 191.443998][ T4786] XFS (loop2): Unmounting Filesystem [ 191.486126][ T5664] XFS (loop1): Ending clean mount [ 191.551343][ T5664] XFS (loop1): Quotacheck needed: Please wait. [ 191.605163][ T5664] XFS (loop1): Quotacheck: Done. [ 191.823888][ T4645] XFS (loop1): Unmounting Filesystem [ 192.222890][ T5674] loop3: detected capacity change from 0 to 40427 [ 192.364622][ T5674] F2FS-fs (loop3): Found nat_bits in checkpoint [ 192.609831][ T5674] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 192.619471][ T5691] loop0: detected capacity change from 0 to 32768 [ 192.670784][ T5382] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 192.756742][ T26] audit: type=1800 audit(1718905795.743:26): pid=5674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 192.784848][ T5691] XFS (loop0): Mounting V5 Filesystem [ 192.931014][ T5382] usb 3-1: Using ep0 maxpacket: 16 [ 193.061000][ T5382] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 193.100706][ T5382] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 193.121521][ T4680] syz-executor.3: attempt to access beyond end of device [ 193.121521][ T4680] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 193.193896][ T5382] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 194.027915][ T5382] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.059676][ T5382] usb 3-1: config 0 descriptor?? [ 194.069694][ T5691] XFS (loop0): Ending clean mount [ 194.082199][ T5691] XFS (loop0): Quotacheck needed: Please wait. [ 194.134596][ T5691] XFS (loop0): Quotacheck: Done. [ 194.371006][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.377430][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.566428][ T5382] microsoft 0003:045E:07DA.0004: No inputs registered, leaving [ 194.580223][ T5382] microsoft 0003:045E:07DA.0004: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 194.954473][ T5737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 195.000266][ T5737] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 195.321036][ T5381] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 195.328838][ T5382] microsoft 0003:045E:07DA.0004: no inputs found [ 195.333344][ T4831] XFS (loop0): Unmounting Filesystem [ 195.335321][ T5382] microsoft 0003:045E:07DA.0004: could not initialize ff, continuing anyway [ 195.607525][ T5381] usb 5-1: Using ep0 maxpacket: 8 [ 195.940911][ T5381] usb 5-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f7.cd [ 195.950491][ T5381] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.000715][ T5381] usb 5-1: Product: syz [ 196.004996][ T5381] usb 5-1: Manufacturer: syz [ 196.009739][ T5381] usb 5-1: SerialNumber: syz [ 196.043792][ T5381] usb 5-1: config 0 descriptor?? [ 196.082426][ T5381] cytherm 5-1:0.0: Cypress thermometer device now attached [ 196.303685][ T5381] usb 5-1: USB disconnect, device number 7 [ 196.310160][ T5381] cytherm 5-1:0.0: Cypress thermometer now disconnected [ 196.384576][ T5382] usb 3-1: USB disconnect, device number 4 [ 196.512414][ T5741] loop3: detected capacity change from 0 to 32768 [ 196.519226][ T5753] loop2: detected capacity change from 0 to 64 [ 196.600600][ T5741] XFS (loop3): Mounting V5 Filesystem [ 196.644416][ T5752] loop1: detected capacity change from 0 to 4096 [ 196.665796][ T5752] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 196.704791][ T5741] XFS (loop3): Ending clean mount [ 196.743764][ T5752] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 196.744886][ T5741] XFS (loop3): Quotacheck needed: Please wait. [ 196.797883][ T5765] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 196.886926][ T5741] XFS (loop3): Quotacheck: Done. [ 197.010044][ T4680] XFS (loop3): Unmounting Filesystem [ 197.042971][ T4046] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 197.109274][ T4645] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 197.698851][ T5786] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.007534][ T5794] loop2: detected capacity change from 0 to 512 [ 198.145764][ T5772] loop4: detected capacity change from 0 to 32768 [ 198.204794][ T3778] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 198.288734][ T5772] XFS (loop4): Mounting V5 Filesystem [ 198.450843][ T3778] usb 4-1: Using ep0 maxpacket: 8 [ 198.459103][ T5772] XFS (loop4): Ending clean mount [ 198.535053][ T4582] XFS (loop4): Unmounting Filesystem [ 198.731005][ T3778] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=f7.cd [ 198.772719][ T3778] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 198.781481][ T3778] usb 4-1: Product: syz [ 198.796115][ T3778] usb 4-1: Manufacturer: syz [ 198.828002][ T3778] usb 4-1: SerialNumber: syz [ 198.868447][ T3778] usb 4-1: config 0 descriptor?? [ 198.933478][ T3778] cytherm 4-1:0.0: Cypress thermometer device now attached [ 199.121565][ T5783] loop1: detected capacity change from 0 to 65536 [ 199.150188][ T5382] usb 4-1: USB disconnect, device number 7 [ 199.158184][ T5783] XFS: ikeep mount option is deprecated. [ 199.182047][ T5807] loop0: detected capacity change from 0 to 4096 [ 199.187444][ T5382] cytherm 4-1:0.0: Cypress thermometer now disconnected [ 199.213354][ T5807] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 199.283738][ T5783] XFS (loop1): Mounting V5 Filesystem [ 199.302497][ T5810] loop4: detected capacity change from 0 to 2048 [ 199.307296][ T5807] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 199.351652][ T5801] loop2: detected capacity change from 0 to 32768 [ 199.361174][ T5810] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 199.383866][ T5801] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (5801) [ 199.404064][ T5801] BTRFS info (device loop2): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 199.414903][ T5801] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm [ 199.425148][ T5801] BTRFS info (device loop2): force zlib compression, level 3 [ 199.432919][ T5801] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 199.433558][ T5783] XFS (loop1): Ending clean mount [ 199.442443][ T5801] BTRFS info (device loop2): use zstd compression, level 3 [ 199.442478][ T5801] BTRFS info (device loop2): enabling ssd optimizations [ 199.456770][ T5810] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 199.464520][ T5801] BTRFS info (device loop2): using free space tree [ 199.504202][ T5783] XFS (loop1): Quotacheck needed: Please wait. [ 199.637504][ T5783] XFS (loop1): Quotacheck: Done. [ 199.713249][ T26] audit: type=1800 audit(1718905802.703:27): pid=5810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 199.776708][ T9] ntfs3: loop0: ntfs3_write_inode r=5 failed, -22. [ 199.796261][ T4645] XFS (loop1): Unmounting Filesystem [ 199.810110][ T4831] ntfs3: loop0: ntfs_evict_inode r=5 failed, -22. [ 200.068806][ T5842] loop4: detected capacity change from 0 to 256 [ 200.098937][ T4786] BTRFS info (device loop2): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 200.241248][ T5842] FAT-fs (loop4): Directory bread(block 64) failed [ 200.276350][ T5842] FAT-fs (loop4): Directory bread(block 65) failed [ 200.300928][ T5842] FAT-fs (loop4): Directory bread(block 66) failed [ 200.307882][ T5842] FAT-fs (loop4): Directory bread(block 67) failed [ 200.336304][ T5842] FAT-fs (loop4): Directory bread(block 68) failed [ 200.373415][ T5842] FAT-fs (loop4): Directory bread(block 69) failed [ 200.406488][ T5842] FAT-fs (loop4): Directory bread(block 70) failed [ 200.426769][ T5842] FAT-fs (loop4): Directory bread(block 71) failed [ 200.483854][ T5842] FAT-fs (loop4): Directory bread(block 72) failed [ 200.506294][ T5842] FAT-fs (loop4): Directory bread(block 73) failed [ 201.319278][ T5857] loop2: detected capacity change from 0 to 1024 [ 201.638010][ T5848] loop0: detected capacity change from 0 to 32768 [ 201.645139][ T5864] loop1: detected capacity change from 0 to 4096 [ 201.745787][ T5848] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (5848) [ 202.151724][ T5864] ntfs3: loop1: Different NTFS' sector size (2048) and media sector size (512) [ 202.486455][ T5850] loop3: detected capacity change from 0 to 32768 [ 202.496410][ T4333] hfsplus: b-tree write err: -5, ino 4 [ 202.503151][ T5848] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 202.526242][ T5864] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 202.537644][ T5848] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 202.597879][ T5848] BTRFS info (device loop0): using free space tree [ 202.693396][ T5850] XFS (loop3): Mounting V5 Filesystem [ 202.699569][ T5882] loop2: detected capacity change from 0 to 512 [ 202.757328][ T4332] ntfs3: loop1: ntfs3_write_inode r=5 failed, -22. [ 202.787904][ T4645] ntfs3: loop1: ntfs_evict_inode r=5 failed, -22. [ 202.828092][ T5882] EXT4-fs error (device loop2): ext4_ext_check_inode:520: inode #16: comm syz-executor.2: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 19200(19200) [ 202.872155][ T5880] loop4: detected capacity change from 0 to 2048 [ 202.880108][ T5882] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 16 (err -117) [ 202.941082][ T5848] BTRFS info (device loop0): enabling ssd optimizations [ 202.956923][ T5850] XFS (loop3): Ending clean mount [ 202.962189][ T5880] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 202.972941][ T5882] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 202.982527][ T5882] ext4 filesystem being mounted at /root/syzkaller-testdir4077043468/syzkaller.l6tsTg/36/file1 supports timestamps until 2038 (0x7fffffff) [ 203.151906][ T26] audit: type=1804 audit(1718905806.133:28): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4077043468/syzkaller.l6tsTg/36/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 203.196293][ T5880] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 203.211453][ T4680] XFS (loop3): Unmounting Filesystem [ 203.255087][ T4831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 203.299411][ T26] audit: type=1800 audit(1718905806.283:29): pid=5880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=1367 res=0 errno=0 [ 203.364863][ T4786] EXT4-fs (loop2): unmounting filesystem. [ 203.937034][ T5918] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 204.232395][ T5902] loop1: detected capacity change from 0 to 32768 [ 204.251340][ T5902] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (5902) [ 204.312578][ T5902] BTRFS info (device loop1): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 204.353533][ T5902] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm [ 204.380987][ T5902] BTRFS info (device loop1): force zlib compression, level 3 [ 204.398799][ T5902] BTRFS info (device loop1): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 204.428551][ T5902] BTRFS info (device loop1): use zstd compression, level 3 [ 204.453767][ T5902] BTRFS info (device loop1): enabling ssd optimizations [ 204.475301][ T5902] BTRFS info (device loop1): using free space tree [ 204.614720][ T5913] loop4: detected capacity change from 0 to 40427 [ 204.792473][ T5913] F2FS-fs (loop4): Found nat_bits in checkpoint [ 204.999380][ T4645] BTRFS info (device loop1): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6 [ 205.040758][ T5913] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 205.125514][ T26] audit: type=1800 audit(1718905808.113:30): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=14 res=0 errno=0 [ 205.387508][ T5922] loop3: detected capacity change from 0 to 32768 [ 205.432384][ T4582] syz-executor.4: attempt to access beyond end of device [ 205.432384][ T4582] loop4: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 205.497933][ T5922] XFS (loop3): Mounting V5 Filesystem [ 205.702070][ T5922] XFS (loop3): Ending clean mount [ 205.764963][ T5922] XFS (loop3): Quotacheck needed: Please wait. [ 205.788120][ T5964] loop2: detected capacity change from 0 to 4096 [ 205.836904][ T5922] XFS (loop3): Quotacheck: Done. [ 207.490562][ T4680] XFS (loop3): Unmounting Filesystem [ 207.890491][ T5952] loop0: detected capacity change from 0 to 32768 [ 208.015413][ T5952] XFS (loop0): Mounting V5 Filesystem [ 208.087414][ T5981] loop2: detected capacity change from 0 to 128 [ 208.167833][ T5981] VFS: Found a Xenix FS (block size = 512) on device loop2 [ 208.418192][ T5952] XFS (loop0): Ending clean mount [ 208.419335][ T4786] sysv_free_block: trying to free block not in datazone [ 208.475631][ T4786] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 208.484963][ T4831] XFS (loop0): Unmounting Filesystem [ 208.683285][ T5995] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 208.691326][ T5995] IPv6: NLM_F_CREATE should be set when creating new route [ 208.698672][ T5995] IPv6: NLM_F_CREATE should be set when creating new route [ 209.157296][ T6003] loop4: detected capacity change from 0 to 512 [ 209.323339][ T26] audit: type=1804 audit(1718905812.313:31): pid=6003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1620786901/syzkaller.V2y5mW/71/bus" dev="sda1" ino=1965 res=1 errno=0 [ 210.137158][ T5996] loop3: detected capacity change from 0 to 40427 [ 210.202898][ T5996] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.422925][ T5996] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.508955][ T26] audit: type=1800 audit(1718905813.493:32): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=14 res=0 errno=0 [ 210.637808][ T4680] syz-executor.3: attempt to access beyond end of device [ 210.637808][ T4680] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 210.768740][ T6012] loop2: detected capacity change from 0 to 32768 [ 210.786860][ T6009] loop0: detected capacity change from 0 to 40427 [ 210.821217][ T6012] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6012) [ 210.872739][ T6009] F2FS-fs (loop0): Found nat_bits in checkpoint [ 210.930971][ T6012] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 210.989147][ T6012] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 211.015131][ T6012] BTRFS info (device loop2): using free space tree [ 211.075578][ T6009] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 211.155644][ T6009] syz-executor.0: attempt to access beyond end of device [ 211.155644][ T6009] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 211.298444][ T6012] BTRFS info (device loop2): enabling ssd optimizations [ 211.357628][ T4831] syz-executor.0: attempt to access beyond end of device [ 211.357628][ T4831] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 211.526890][ T4786] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 211.712943][ T6048] loop4: detected capacity change from 0 to 2048 [ 212.005984][ T6048] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 213.430651][ C0] sched: RT throttling activated [ 214.252693][ T6054] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 214.260002][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 214.267343][ T6054] IPv6: NLM_F_CREATE should be set when creating new route [ 214.728615][ T6065] loop0: detected capacity change from 0 to 512 [ 214.912742][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 214.918636][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 214.929467][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 214.940817][ T0] NOHZ tick-stop error: local softirq work is pending, handler #182!!! [ 215.009681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 215.050704][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 215.060672][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 215.080739][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 215.091922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 215.697078][ T6052] loop4: detected capacity change from 0 to 32768 [ 215.741518][ T6052] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6052) [ 215.795923][ T6052] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 215.841841][ T6052] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm [ 215.853220][ T6078] loop0: detected capacity change from 0 to 128 [ 215.880792][ T6052] BTRFS info (device loop4): using free space tree [ 215.918997][ T6078] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 215.995310][ T6057] loop2: detected capacity change from 0 to 32768 [ 216.050854][ T6057] ERROR: (device loop2): diRead: i_ino != di_number [ 216.050854][ T6057] [ 216.080696][ T6057] ERROR: (device loop2): remounting filesystem as read-only [ 216.143706][ T4831] sysv_free_block: trying to free block not in datazone [ 216.166765][ T4831] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 216.185153][ T6052] BTRFS info (device loop4): enabling ssd optimizations [ 216.232446][ T26] audit: type=1800 audit(1718905819.223:33): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 216.358161][ T6063] loop3: detected capacity change from 0 to 32768 [ 216.396400][ T6063] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6063) [ 216.460471][ T6063] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 216.500940][ T6063] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 216.539835][ T6063] BTRFS info (device loop3): setting nodatacow, compression disabled [ 216.582920][ T6063] BTRFS info (device loop3): setting datacow [ 216.628628][ T6063] BTRFS info (device loop3): doing ref verification [ 216.638742][ T6063] BTRFS info (device loop3): force clearing of disk cache [ 216.642595][ T4582] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663 [ 216.666656][ T6063] BTRFS info (device loop3): turning off barriers [ 216.684093][ T6063] BTRFS info (device loop3): enabling ssd optimizations [ 216.710922][ T6063] BTRFS info (device loop3): using spread ssd allocation scheme [ 216.738140][ T6063] BTRFS info (device loop3): not using ssd optimizations [ 216.755824][ T6063] BTRFS info (device loop3): not using spread ssd allocation scheme [ 216.786265][ T6063] BTRFS info (device loop3): using free space tree [ 216.998251][ T6074] loop1: detected capacity change from 0 to 40427 [ 217.010827][ T3592] Bluetooth: hci4: command tx timeout [ 217.090097][ T6063] BTRFS info (device loop3): rebuilding free space tree [ 217.168098][ T6074] F2FS-fs (loop1): Found nat_bits in checkpoint [ 217.311094][ T4680] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 217.337042][ T6098] loop0: detected capacity change from 0 to 32768 [ 217.367408][ T6098] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6098) [ 217.402552][ T6074] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 217.414301][ T6102] loop2: detected capacity change from 0 to 32768 [ 217.512376][ T6098] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 217.536072][ T6102] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz-executor.2 (6102) [ 217.569277][ T6098] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 217.584052][ T6074] syz-executor.1: attempt to access beyond end of device [ 217.584052][ T6074] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 217.609100][ T6098] BTRFS info (device loop0): using free space tree [ 217.713993][ T6102] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 217.796019][ T6102] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 217.840409][ T6102] BTRFS info (device loop2): using free space tree [ 217.865564][ T4645] syz-executor.1: attempt to access beyond end of device [ 217.865564][ T4645] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 217.917971][ T6098] BTRFS info (device loop0): enabling ssd optimizations [ 218.790037][ T6102] BTRFS info (device loop2): enabling ssd optimizations [ 219.087339][ T6167] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 219.094750][ T6167] IPv6: NLM_F_CREATE should be set when creating new route [ 219.102097][ T6167] IPv6: NLM_F_CREATE should be set when creating new route [ 219.969521][ T4786] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 220.167809][ T4831] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 220.498062][ T6171] loop3: detected capacity change from 0 to 512 [ 220.841278][ T3574] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 221.731999][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.778220][ T6189] loop3: detected capacity change from 0 to 512 [ 221.856995][ T6189] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 222.030587][ T6189] EXT4-fs (loop3): 1 truncate cleaned up [ 222.049236][ T6189] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 222.334075][ T6210] syz-executor.0[6210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.334192][ T6210] syz-executor.0[6210] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 222.388375][ T4680] EXT4-fs (loop3): unmounting filesystem. [ 223.951649][ T6220] loop3: detected capacity change from 0 to 512 [ 224.269718][ T6220] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 224.506852][ T6220] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 224.642953][ T6220] EXT4-fs (loop3): warning: checktime reached, running e2fsck is recommended [ 224.670283][ T6226] loop0: detected capacity change from 0 to 512 [ 224.730826][ T6220] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 224.770100][ T6220] System zones: 0-2, 18-18, 34-34 [ 224.822432][ T6220] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 224.832972][ T6201] loop4: detected capacity change from 0 to 32768 [ 224.851213][ T6201] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz-executor.4 (6201) [ 224.937678][ T6220] EXT4-fs (loop3): 1 truncate cleaned up [ 224.965976][ T6220] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 225.099051][ T6220] EXT4-fs error (device loop3): ext4_generic_delete_entry:2680: inode #12: block 13: comm syz-executor.3: bad entry in directory: rec_len is too small for name_len - offset=0, inode=12, rec_len=12, size=4096 fake=0 [ 225.124452][ T6230] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.178833][ T6220] EXT4-fs error (device loop3) in ext4_delete_entry:2751: Corrupt filesystem [ 225.230013][ T6220] EXT4-fs warning (device loop3): ext4_rename_delete:3735: inode #12: comm syz-executor.3: Deleting old file: nlink 2, error=-117 [ 225.370175][ T4680] EXT4-fs (loop3): unmounting filesystem. [ 225.420856][ T5900] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 226.154762][ T6242] loop2: detected capacity change from 0 to 512 [ 226.199263][ T6242] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 226.289306][ T6242] EXT4-fs (loop2): 1 truncate cleaned up [ 226.326259][ T6242] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 226.359049][ T6255] loop0: detected capacity change from 0 to 128 [ 226.371900][ T6255] VFS: Found a Xenix FS (block size = 512) on device loop0 [ 226.539733][ T4831] sysv_free_block: trying to free block not in datazone [ 226.569902][ T4786] EXT4-fs (loop2): unmounting filesystem. [ 226.569910][ T4831] sysv_free_inode: inode 0,1,2 or nonexistent inode [ 226.709822][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.983841][ T6275] loop3: detected capacity change from 0 to 512 [ 227.294747][ T5382] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 227.708827][ T6278] kvm: emulating exchange as write [ 227.854333][ T5382] usb 5-1: Using ep0 maxpacket: 32 [ 227.889690][ T6291] loop2: detected capacity change from 0 to 64 [ 227.977011][ T5382] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 228.090943][ T3641] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 228.157338][ T5382] usb 5-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 228.182693][ T5382] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.191083][ T5382] usb 5-1: Product: syz [ 228.195298][ T5382] usb 5-1: Manufacturer: syz [ 228.199922][ T5382] usb 5-1: SerialNumber: syz [ 228.234053][ T5382] usb 5-1: config 0 descriptor?? [ 228.251131][ T6270] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 228.275226][ T5382] hub 5-1:0.0: bad descriptor, ignoring hub [ 228.291879][ T5382] hub: probe of 5-1:0.0 failed with error -5 [ 228.307856][ T5382] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input10 [ 228.341059][ T3641] usb 4-1: Using ep0 maxpacket: 16 [ 228.387629][ T6296] loop0: detected capacity change from 0 to 1024 [ 228.490991][ T3641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 228.520675][ T3641] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 228.580265][ T3641] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 228.596485][ T3641] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 228.606060][ T3641] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 228.619497][ T3641] usb 4-1: config 0 descriptor?? [ 228.679715][ T6306] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.094922][ T3641] microsoft 0003:045E:07DA.0005: unknown main item tag 0x0 [ 229.113585][ T3641] microsoft 0003:045E:07DA.0005: item 0 0 0 9 parsing failed [ 229.140526][ T3641] microsoft 0003:045E:07DA.0005: parse failed [ 229.161429][ T3641] microsoft: probe of 0003:045E:07DA.0005 failed with error -22 [ 229.295754][ T3641] usb 4-1: USB disconnect, device number 8 [ 229.668496][ T6311] loop1: detected capacity change from 0 to 32768 [ 229.697026][ T6311] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop1 scanned by syz-executor.1 (6311) [ 229.767193][ T6311] BTRFS info (device loop1): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 229.812833][ T6311] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm [ 229.857044][ T6311] BTRFS info (device loop1): force zlib compression, level 3 [ 229.899159][ T6311] BTRFS info (device loop1): force clearing of disk cache [ 229.933526][ T6311] BTRFS info (device loop1): setting nodatasum [ 229.966205][ T6311] BTRFS info (device loop1): allowing degraded mounts [ 230.001471][ T6311] BTRFS info (device loop1): enabling disk space caching [ 230.029469][ T6311] BTRFS info (device loop1): disk space caching is enabled [ 230.050950][ T3641] usb 5-1: USB disconnect, device number 8 [ 230.070705][ C0] usbtouchscreen 5-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 230.301674][ T6311] BTRFS info (device loop1): rebuilding free space tree [ 230.341965][ T6311] BTRFS info (device loop1): disabling free space tree [ 230.349271][ T6311] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 230.361381][ T6311] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 230.389615][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.479344][ T6342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 230.536890][ T6341] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 230.541429][ T6311] BTRFS info (device loop1): balance: start -susage=0..0 [ 230.558593][ T6311] BTRFS info (device loop1): balance: ended with status: 0 [ 230.559447][ T6345] TCP: request_sock_subflow_v6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 230.603268][ T5382] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 230.771797][ T4645] BTRFS info (device loop1): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 231.424292][ T6352] loop3: detected capacity change from 0 to 4096 [ 231.636606][ T6354] loop0: detected capacity change from 0 to 256 [ 231.708474][ T6354] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 231.927157][ T6358] VFS: Lookup of 'file0' in exfat loop0 would have caused loop [ 231.932590][ T6361] loop3: detected capacity change from 0 to 64 [ 232.165565][ T6318] loop2: detected capacity change from 0 to 32768 [ 232.197151][ T6318] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 232.260865][ T6318] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 232.302973][ T6318] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms [ 232.322958][ T155] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 232.329794][ T155] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 232.518115][ T155] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 188ms [ 232.536280][ T5377] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 232.554582][ T155] gfs2: fsid=syz:syz.0: jid=0: Done [ 232.559899][ T6318] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 232.763375][ T6374] loop3: detected capacity change from 0 to 1024 [ 232.810858][ T5377] usb 2-1: Using ep0 maxpacket: 32 [ 232.841546][ T5900] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 232.853098][ T6379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.932715][ T5377] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 232.943820][ T6379] 8021q: adding VLAN 0 to HW filter on device bond2 [ 233.125022][ T6373] loop0: detected capacity change from 0 to 32768 [ 233.131512][ T5377] usb 2-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 233.131560][ T5377] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.131584][ T5377] usb 2-1: Product: syz [ 233.131603][ T5377] usb 2-1: Manufacturer: syz [ 233.131619][ T5377] usb 2-1: SerialNumber: syz [ 233.137514][ T5377] usb 2-1: config 0 descriptor?? [ 233.186429][ T6373] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz-executor.0 (6373) [ 233.248163][ T6373] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 233.251220][ T6364] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 233.265805][ T6373] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 233.286095][ T6373] BTRFS info (device loop0): force zlib compression, level 3 [ 233.291655][ T5377] hub 2-1:0.0: bad descriptor, ignoring hub [ 233.299795][ T5377] hub: probe of 2-1:0.0 failed with error -5 [ 233.322773][ T5377] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11 [ 233.381082][ T6373] BTRFS info (device loop0): force clearing of disk cache [ 233.444168][ T6373] BTRFS info (device loop0): setting nodatasum [ 233.471390][ T6386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.520415][ T6373] BTRFS info (device loop0): allowing degraded mounts [ 233.578512][ T6373] BTRFS info (device loop0): enabling disk space caching [ 233.637973][ T6373] BTRFS info (device loop0): disk space caching is enabled [ 233.985988][ T6409] loop4: detected capacity change from 0 to 64 [ 234.142533][ T6373] BTRFS info (device loop0): rebuilding free space tree [ 234.181512][ T6373] BTRFS info (device loop0): disabling free space tree [ 234.208880][ T6373] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 234.240955][ T6373] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 234.379077][ T6373] BTRFS info (device loop0): balance: start -susage=0..0 [ 234.397891][ T6373] BTRFS info (device loop0): balance: ended with status: 0 [ 234.558214][ T4831] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 235.194463][ T6444] loop4: detected capacity change from 0 to 256 [ 235.212220][ T5381] usb 2-1: USB disconnect, device number 3 [ 235.220741][ C0] usbtouchscreen 2-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 235.248225][ T6452] loop2: detected capacity change from 0 to 128 [ 235.371261][ T6452] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 235.395912][ T6457] loop1: detected capacity change from 0 to 64 [ 235.429205][ T6452] ext4 filesystem being mounted at /root/syzkaller-testdir4077043468/syzkaller.l6tsTg/69/mnt supports timestamps until 2038 (0x7fffffff) [ 235.608691][ T4786] EXT4-fs (loop2): unmounting filesystem. [ 236.040585][ T6476] loop1: detected capacity change from 0 to 512 [ 237.705735][ T6480] loop4: detected capacity change from 0 to 4096 [ 237.776281][ T6497] loop0: detected capacity change from 0 to 128 [ 237.803336][ T3641] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 237.824435][ T6497] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 237.824795][ T6497] ext4 filesystem being mounted at /root/syzkaller-testdir2699164667/syzkaller.I1vdqc/55/mnt supports timestamps until 2038 (0x7fffffff) [ 238.001294][ T4831] EXT4-fs (loop0): unmounting filesystem. [ 238.070721][ T3641] usb 3-1: Using ep0 maxpacket: 32 [ 238.191237][ T3641] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 238.361037][ T3641] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 238.388770][ T3641] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 238.430720][ T3641] usb 3-1: Product: syz [ 238.444435][ T3641] usb 3-1: Manufacturer: syz [ 238.472932][ T3641] usb 3-1: SerialNumber: syz [ 238.501410][ T3641] usb 3-1: config 0 descriptor?? [ 238.521029][ T6490] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 238.551564][ T3641] hub 3-1:0.0: bad descriptor, ignoring hub [ 238.561232][ T3641] hub: probe of 3-1:0.0 failed with error -5 [ 238.589505][ T6509] loop0: detected capacity change from 0 to 1024 [ 238.637256][ T3641] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input12 [ 239.490438][ T6525] loop4: detected capacity change from 0 to 2048 [ 239.531739][ T6525] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 239.589511][ T6525] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 239.667195][ T6525] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 239.790904][ T6174] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 240.029696][ T6537] loop0: detected capacity change from 0 to 128 [ 240.050331][ T6174] usb 4-1: Using ep0 maxpacket: 16 [ 240.058195][ T6537] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 240.073091][ T6537] ext4 filesystem being mounted at /root/syzkaller-testdir2699164667/syzkaller.I1vdqc/57/mnt supports timestamps until 2038 (0x7fffffff) [ 240.113941][ T6535] loop4: detected capacity change from 0 to 64 [ 240.182085][ T6174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 240.249538][ T6174] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 240.264329][ T4831] EXT4-fs (loop0): unmounting filesystem. [ 240.300149][ T6174] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 240.316182][ T6174] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 240.326300][ T6174] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 240.351968][ T6174] usb 4-1: config 0 descriptor?? [ 240.665232][ T6543] loop1: detected capacity change from 0 to 4096 [ 240.721197][ T3641] usb 3-1: USB disconnect, device number 5 [ 240.750720][ C1] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 240.862588][ T6174] microsoft 0003:045E:07DA.0006: unknown main item tag 0x0 [ 240.892104][ T6174] microsoft 0003:045E:07DA.0006: item 0 0 0 9 parsing failed [ 240.900140][ T6174] microsoft 0003:045E:07DA.0006: parse failed [ 240.924606][ T6550] loop2: detected capacity change from 0 to 256 [ 240.959633][ T6174] microsoft: probe of 0003:045E:07DA.0006 failed with error -22 [ 241.133879][ T6174] usb 4-1: USB disconnect, device number 9 [ 241.710733][ T6174] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 242.625676][ T6567] loop3: detected capacity change from 0 to 512 [ 242.755168][ T5900] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 242.933530][ T6174] usb 1-1: Using ep0 maxpacket: 16 [ 243.112842][ T6174] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 243.320850][ T6174] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 243.338634][ T6174] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 243.353400][ T6174] usb 1-1: config 0 descriptor?? [ 243.404052][ T6174] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input13 [ 243.653971][ T6578] loop3: detected capacity change from 0 to 512 [ 243.680970][ T2988] bcm5974 1-1:0.0: could not read from device [ 243.692310][ T6578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 243.753996][ T6578] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 243.777734][ T6578] ext4 filesystem being mounted at /root/syzkaller-testdir4136382445/syzkaller.EieOuu/74/file0 supports timestamps until 2038 (0x7fffffff) [ 243.811269][ T6561] bcm5974 1-1:0.0: could not read from device [ 243.932618][ T5382] usb 1-1: USB disconnect, device number 6 [ 243.941013][ T2988] bcm5974 1-1:0.0: could not read from device [ 243.985766][ T5900] bcm5974 1-1:0.0: could not read from device [ 244.012801][ T6578] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 244.092087][ T6578] EXT4-fs error (device loop3): ext4_dirty_inode:6072: inode #2: comm syz-executor.3: mark_inode_dirty error [ 244.127234][ T6578] EXT4-fs error (device loop3): ext4_do_update_inode:5210: inode #2: comm syz-executor.3: corrupted inode contents [ 244.160436][ T6578] EXT4-fs error (device loop3): __ext4_ext_dirty:202: inode #2: comm syz-executor.3: mark_inode_dirty error [ 244.172734][ T155] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 244.278816][ T4680] EXT4-fs (loop3): unmounting filesystem. [ 244.378582][ T6560] loop1: detected capacity change from 0 to 32768 [ 244.387616][ T6588] loop3: detected capacity change from 0 to 16 [ 244.406523][ T6588] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 244.413663][ T155] usb 3-1: Using ep0 maxpacket: 32 [ 244.493767][ T6588] cramfs: Error -3 while decompressing! [ 244.499974][ T6588] cramfs: ffffffff91e22568(27)->ffff8880505d9000(4096) [ 244.531164][ T155] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 36 [ 244.566667][ T6588] cramfs: Error -3 while decompressing! [ 244.570867][ T5900] I/O error, dev loop1, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 244.581901][ T6588] cramfs: ffffffff91e22568(27)->ffff8880505d9000(4096) [ 244.648890][ T26] audit: type=1800 audit(1718905847.633:34): pid=6588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file3" dev="loop3" ino=348 res=0 errno=0 [ 244.671501][ T6592] cramfs: Error -3 while decompressing! [ 244.721185][ T155] usb 3-1: New USB device found, idVendor=14c8, idProduct=0003, bcdDevice= 5.6c [ 244.730301][ T155] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 244.730536][ T6592] cramfs: ffffffff91e22568(27)->ffff8880505d9000(4096) [ 244.747230][ T6595] loop0: detected capacity change from 0 to 4096 [ 244.753740][ T155] usb 3-1: Product: syz [ 244.758805][ T155] usb 3-1: Manufacturer: syz [ 244.784042][ T26] audit: type=1800 audit(1718905847.773:35): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="file2" dev="loop3" ino=348 res=0 errno=0 [ 244.804250][ T6595] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 244.822750][ T155] usb 3-1: SerialNumber: syz [ 244.839236][ T155] usb 3-1: config 0 descriptor?? [ 244.861176][ T6584] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 244.895038][ T155] hub 3-1:0.0: bad descriptor, ignoring hub [ 244.907002][ T155] hub: probe of 3-1:0.0 failed with error -5 [ 244.943091][ T155] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14 [ 245.023105][ T3592] Bluetooth: hci2: adv larger than maximum supported [ 245.023201][ T3592] Bluetooth: hci2: Unknown advertising packet type: 0x3331 [ 245.029960][ T6603] syz-executor.4 (6603): attempted to duplicate a private mapping with mremap. This is not supported. [ 245.030480][ T3592] Bluetooth: hci2: Malformed LE Event: 0x0d [ 246.187654][ T6609] loop4: detected capacity change from 0 to 64 [ 246.570771][ T5381] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 246.810297][ T155] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 246.818284][ T5381] usb 4-1: Using ep0 maxpacket: 16 [ 246.866548][ T5382] usb 3-1: USB disconnect, device number 6 [ 246.880845][ C0] usbtouchscreen 3-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 246.940975][ T5381] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 246.957985][ T5381] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 247.003745][ T6630] loop2: detected capacity change from 0 to 16 [ 247.010535][ T5381] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.046378][ T6630] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 247.055672][ T5381] usb 4-1: config 0 descriptor?? [ 247.070739][ T155] usb 1-1: Using ep0 maxpacket: 16 [ 247.096947][ T6630] cramfs: Error -3 while decompressing! [ 247.106428][ T6630] cramfs: ffffffff91e22568(27)->ffff888051e55000(4096) [ 247.120067][ T5381] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input15 [ 247.137980][ T6630] cramfs: Error -3 while decompressing! [ 247.166479][ T6630] cramfs: ffffffff91e22568(27)->ffff888051e55000(4096) [ 247.174954][ T26] audit: type=1800 audit(1718905850.173:36): pid=6630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file3" dev="loop2" ino=348 res=0 errno=0 [ 247.196495][ T155] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 247.208034][ T6631] cramfs: Error -3 while decompressing! [ 247.219477][ T6631] cramfs: ffffffff91e22568(27)->ffff888051e55000(4096) [ 247.233295][ T26] audit: type=1800 audit(1718905850.223:37): pid=6631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="file2" dev="loop2" ino=348 res=0 errno=0 [ 247.371240][ T155] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 247.381129][ T155] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 247.389408][ T155] usb 1-1: Product: syz [ 247.394755][ T2988] bcm5974 4-1:0.0: could not read from device [ 247.403115][ T155] usb 1-1: Manufacturer: syz [ 247.412945][ T155] usb 1-1: SerialNumber: syz [ 247.430284][ T155] usb 1-1: config 0 descriptor?? [ 247.482545][ T155] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 247.496462][ T6625] bcm5974 4-1:0.0: could not read from device [ 247.518606][ T155] usb 1-1: Detected FT232R [ 247.560971][ T5381] usb 4-1: USB disconnect, device number 10 [ 247.571044][ T5900] bcm5974 4-1:0.0: could not read from device [ 247.595991][ T2988] bcm5974 4-1:0.0: could not read from device [ 247.768582][ T6619] loop1: detected capacity change from 0 to 32768 [ 247.811984][ T6619] gfs2: fsid=(œ[{{{+: Trying to join cluster "lock_nolock", "(œ[{{{+" [ 247.827244][ T6619] gfs2: fsid=(œ[{{{+: Now mounting FS (format 0)... [ 247.859275][ T6619] gfs2: fsid=(œ[{{{+.0: journal 0 mapped with 22 extents in 0ms [ 247.876055][ T3641] gfs2: fsid=(œ[{{{+.0: jid=0, already locked for use [ 247.884645][ T3641] gfs2: fsid=(œ[{{{+.0: jid=0: Looking at journal... [ 247.888731][ T6638] loop2: detected capacity change from 0 to 512 [ 247.914805][ T6627] loop0: detected capacity change from 0 to 512 [ 247.956351][ T6627] EXT4-fs (loop0): can't mount with both data=journal and delalloc [ 248.605351][ T3592] Bluetooth: hci2: adv larger than maximum supported [ 248.605384][ T3592] Bluetooth: hci2: Unknown advertising packet type: 0x3331 [ 248.612980][ T3592] Bluetooth: hci2: Malformed LE Event: 0x0d [ 248.685144][ T3641] gfs2: fsid=(œ[{{{+.0: jid=0: Journal head lookup took 800ms [ 248.715854][ T3641] gfs2: fsid=(œ[{{{+.0: jid=0: Done [ 248.722566][ T6619] gfs2: fsid=(œ[{{{+.0: first mount done, others may mount [ 248.811049][ T155] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 248.830879][ T155] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 248.861876][ T155] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 248.970273][ T155] usb 1-1: USB disconnect, device number 7 [ 248.988792][ T155] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 248.999701][ T155] ftdi_sio 1-1:0.0: device disconnected [ 249.170959][ T26] audit: type=1326 audit(1718905852.163:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.241040][ T26] audit: type=1326 audit(1718905852.193:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.279210][ T6651] loop3: detected capacity change from 0 to 764 [ 249.361808][ T6651] rock: directory entry would overflow storage [ 249.377256][ T26] audit: type=1326 audit(1718905852.193:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.381600][ T6651] rock: sig=0x4654, size=5, remaining=4 [ 249.457612][ T26] audit: type=1326 audit(1718905852.193:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.532206][ T26] audit: type=1326 audit(1718905852.193:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.569515][ T26] audit: type=1326 audit(1718905852.193:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.657771][ T6665] loop2: detected capacity change from 0 to 512 [ 249.670869][ T26] audit: type=1326 audit(1718905852.193:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f34f607cf29 code=0x7ffc0000 [ 249.686645][ T6667] loop4: detected capacity change from 0 to 512 [ 249.717726][ T6662] overlayfs: statfs failed on './file0' [ 249.729158][ T26] audit: type=1326 audit(1718905852.193:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34f607a6a7 code=0x7ffc0000 [ 249.765527][ T6665] EXT4-fs (loop2): can't mount with commit=1, fs mounted w/o journal [ 249.778251][ T6667] EXT4-fs: Ignoring removed nobh option [ 249.802233][ T26] audit: type=1326 audit(1718905852.193:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34f6040379 code=0x7ffc0000 [ 249.817295][ T6667] EXT4-fs: Ignoring removed i_version option [ 249.870243][ T6665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.884143][ T6667] EXT4-fs: Ignoring removed nomblk_io_submit option [ 249.890246][ T26] audit: type=1326 audit(1718905852.193:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34f607a6a7 code=0x7ffc0000 [ 249.929069][ T26] audit: type=1326 audit(1718905852.193:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34f6040379 code=0x7ffc0000 [ 249.966375][ T26] audit: type=1326 audit(1718905852.193:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34f607a6a7 code=0x7ffc0000 [ 249.993931][ T26] audit: type=1326 audit(1718905852.193:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34f6040379 code=0x7ffc0000 [ 250.018266][ T26] audit: type=1326 audit(1718905852.193:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34f607a6a7 code=0x7ffc0000 [ 250.020276][ T6667] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 250.042215][ T26] audit: type=1326 audit(1718905852.193:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f34f6040379 code=0x7ffc0000 [ 250.074422][ T26] audit: type=1326 audit(1718905852.193:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6648 comm="syz-executor.4" exe="/root/syz-executor.4" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f34f607a6a7 code=0x7ffc0000 [ 250.115438][ T6667] ext4 filesystem being mounted at /root/syzkaller-testdir1620786901/syzkaller.V2y5mW/109/file0 supports timestamps until 2038 (0x7fffffff) [ 250.151920][ T6680] loop3: detected capacity change from 0 to 512 [ 250.160950][ T6667] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 46 vs 39667 free clusters [ 250.231715][ T4582] EXT4-fs (loop4): unmounting filesystem. [ 250.905436][ T6687] loop2: detected capacity change from 0 to 512 [ 250.942838][ T6687] EXT4-fs: Ignoring removed mblk_io_submit option [ 250.991119][ T6687] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 251.031085][ T6689] loop4: detected capacity change from 0 to 8192 [ 251.058086][ T6687] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016e118, mo2=0002] [ 251.068751][ T6687] System zones: 1-12 [ 251.073519][ T6689] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 251.090443][ T6689] REISERFS (device loop4): found reiserfs format "3.5" with non-standard journal [ 251.100473][ T6687] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2213: inode #15: comm syz-executor.2: corrupted in-inode xattr [ 251.113209][ T6689] REISERFS (device loop4): using ordered data mode [ 251.119936][ T6689] reiserfs: using flush barriers [ 251.130385][ T6689] REISERFS (device loop4): journal params: device loop4, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 251.153053][ T6687] EXT4-fs error (device loop2): ext4_orphan_get:1401: comm syz-executor.2: couldn't read orphan inode 15 (err -117) [ 251.154440][ T6689] REISERFS (device loop4): checking transaction log (loop4) [ 251.182332][ T6689] REISERFS (device loop4): Using r5 hash to sort names [ 251.189676][ T6687] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 251.200316][ T6689] reiserfs: enabling write barrier flush mode [ 251.233986][ T6689] REISERFS (device loop4): Created .reiserfs_priv - reserved for xattr storage. [ 251.376029][ T4786] EXT4-fs (loop2): unmounting filesystem. [ 251.488325][ T6708] loop2: detected capacity change from 0 to 8 [ 251.546009][ T6704] REISERFS warning (device loop4): super-6502 reiserfs_getopt: unknown mount option "ÿ0xffffffffffffffff" [ 252.062747][ T6709] loop1: detected capacity change from 0 to 4096 [ 252.341258][ T6718] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 252.562962][ T6720] loop2: detected capacity change from 0 to 512 [ 252.767638][ T3576] Bluetooth: hci1: command 0x0406 tx timeout [ 252.772213][ T3592] Bluetooth: hci0: command 0x040f tx timeout [ 253.412411][ T6733] overlayfs: statfs failed on './file0' [ 253.456395][ T6706] loop3: detected capacity change from 0 to 40427 [ 253.469168][ T6706] F2FS-fs (loop3): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 253.485357][ T6706] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 253.497865][ T6706] F2FS-fs (loop3): invalid crc_offset: 5705724 [ 253.516605][ T6706] F2FS-fs (loop3): Found nat_bits in checkpoint [ 253.613656][ T6706] F2FS-fs (loop3): recover fsync data on readonly fs [ 253.631385][ T6706] F2FS-fs (loop3): Try to recover 2th superblock, ret: -30 [ 253.638814][ T6706] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 253.762320][ T6742] loop4: detected capacity change from 0 to 1024 [ 253.769775][ T6746] loop1: detected capacity change from 0 to 512 [ 253.799903][ T6742] syz-executor.4: attempt to access beyond end of device [ 253.799903][ T6742] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024 [ 253.825272][ T6746] EXT4-fs: Ignoring removed nobh option [ 253.845905][ T6746] EXT4-fs: Ignoring removed i_version option [ 253.845935][ T6746] EXT4-fs: Ignoring removed nomblk_io_submit option [ 253.896843][ T6746] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 253.897114][ T6746] ext4 filesystem being mounted at /root/syzkaller-testdir2861345029/syzkaller.VW89PC/107/file0 supports timestamps until 2038 (0x7fffffff) [ 253.918754][ T6746] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 46 vs 39667 free clusters [ 254.050025][ T4645] EXT4-fs (loop1): unmounting filesystem. [ 254.161748][ T6754] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.169045][ T6754] IPv6: NLM_F_CREATE should be set when creating new route [ 254.176417][ T6754] IPv6: NLM_F_CREATE should be set when creating new route [ 254.321798][ T6731] loop2: detected capacity change from 0 to 40427 [ 254.356264][ T6731] F2FS-fs (loop2): invalid crc value [ 254.395336][ T6731] F2FS-fs (loop2): Found nat_bits in checkpoint [ 254.527476][ T6731] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 254.586715][ T6731] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 254.600174][ T6744] loop0: detected capacity change from 0 to 32768 [ 254.647077][ T6744] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 254.667023][ T6744] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 254.676238][ T6744] BTRFS info (device loop0): using free space tree [ 254.895811][ T6769] loop4: detected capacity change from 0 to 64 [ 254.969744][ T6744] BTRFS info (device loop0): enabling ssd optimizations [ 255.192482][ T4831] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 255.623623][ T6761] loop3: detected capacity change from 0 to 32768 [ 255.663960][ T6761] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz-executor.3 (6761) [ 255.728215][ T6761] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 255.759274][ T6761] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 255.783062][ T6761] BTRFS info (device loop3): using free space tree [ 255.796672][ T6799] loop4: detected capacity change from 0 to 8 [ 255.806128][ T1256] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.812955][ T1256] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.849916][ T6799] SQUASHFS error: Failed to read block 0x6a4: -5 [ 255.856646][ T6799] SQUASHFS error: Unable to read metadata cache entry [6a2] [ 256.059038][ T6793] loop1: detected capacity change from 0 to 32768 [ 256.103619][ T6761] BTRFS info (device loop3): enabling ssd optimizations [ 256.119942][ T6793] ERROR: (device loop1): diRead: i_ino != di_number [ 256.119942][ T6793] [ 256.164386][ T6793] ERROR: (device loop1): remounting filesystem as read-only [ 256.194499][ T6829] loop4: detected capacity change from 0 to 4096 [ 256.204349][ T6829] __ntfs_warning: 17 callbacks suppressed [ 256.204368][ T6829] ntfs: (device loop4): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel. [ 256.231411][ T6829] ntfs: (device loop4): parse_options(): Invalid mft_zone_multiplier option argument: 0x0000000000000004*fmask=00000000000020000000001 [ 256.266340][ T4680] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 256.770744][ T3630] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 256.916579][ T6835] loop0: detected capacity change from 0 to 40427 [ 256.934343][ T6835] F2FS-fs (loop0): invalid crc value [ 256.955937][ T6835] F2FS-fs (loop0): Found nat_bits in checkpoint [ 257.037783][ T3630] usb 5-1: Using ep0 maxpacket: 16 [ 257.077905][ T6835] F2FS-fs (loop0): Cannot turn on quotas: -2 on 1 [ 257.106369][ T6835] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 257.160976][ T6853] loop1: detected capacity change from 0 to 4096 [ 257.177192][ T6853] ntfs3: loop1: Different NTFS' sector size (4096) and media sector size (512) [ 257.355730][ T3630] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 257.369079][ T3630] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 257.378374][ T3630] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 257.388310][ T3630] usb 5-1: config 0 descriptor?? [ 257.394757][ T6853] ntfs3: loop1: Mark volume as dirty due to NTFS errors [ 257.413032][ T6853] ntfs3: loop1: Failed to load $MFT. [ 257.432875][ T3630] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input16 [ 258.472692][ T3592] Bluetooth: hci2: command 0x0406 tx timeout [ 258.490907][ T2988] bcm5974 5-1:0.0: could not read from device [ 258.508315][ T6864] loop3: detected capacity change from 0 to 1024 [ 258.541116][ T6839] bcm5974 5-1:0.0: could not read from device [ 258.567519][ T52] block nbd3: Attempted send on invalid socket [ 258.574314][ T52] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 258.587182][ T3867] usb 5-1: USB disconnect, device number 9 [ 258.610848][ T2988] bcm5974 5-1:0.0: could not read from device [ 258.671393][ T4046] hfsplus: b-tree write err: -5, ino 4 [ 258.792226][ T6870] loop2: detected capacity change from 0 to 2048 [ 258.822836][ T6870] hpfs: filesystem error: improperly stopped; already mounted read-only [ 258.832417][ T6870] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 258.863332][ T6876] loop1: detected capacity change from 0 to 2048 [ 258.874588][ T6876] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 258.978356][ T6880] sctp: [Deprecated]: syz-executor.2 (pid 6880) Use of int in maxseg socket option. [ 258.978356][ T6880] Use struct sctp_assoc_value instead [ 259.020874][ T3624] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 259.368527][ T6888] loop1: detected capacity change from 0 to 4096 [ 259.380964][ T3624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 259.400724][ T3624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 259.414259][ T6889] loop4: detected capacity change from 0 to 4096 [ 259.420818][ T3624] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 259.432395][ T3624] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.440568][ T6889] ntfs3: loop4: Different NTFS' sector size (4096) and media sector size (512) [ 259.462420][ T3624] usb 4-1: config 0 descriptor?? [ 259.480549][ T6889] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 259.507316][ T6889] ntfs3: loop4: Failed to load $MFT. [ 259.767610][ T6884] loop2: detected capacity change from 0 to 40427 [ 259.780386][ T6898] loop4: detected capacity change from 0 to 512 [ 259.789397][ T6884] F2FS-fs (loop2): invalid crc value [ 259.796127][ T6898] EXT4-fs: Ignoring removed mblk_io_submit option [ 259.813140][ T6898] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 259.825650][ T6884] F2FS-fs (loop2): Found nat_bits in checkpoint [ 259.872274][ T6898] EXT4-fs (loop4): warning: maximal mount count reached, running e2fsck is recommended [ 259.896722][ T6898] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz-executor.4: inode #15: comm syz-executor.4: iget: illegal inode # [ 259.918839][ T6898] EXT4-fs (loop4): Remounting filesystem read-only [ 259.919796][ T6884] F2FS-fs (loop2): Cannot turn on quotas: -2 on 1 [ 259.926315][ T6898] EXT4-fs error (device loop4): ext4_orphan_get:1401: comm syz-executor.4: couldn't read orphan inode 15 (err -117) [ 259.944988][ T6884] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 259.952833][ T3624] isku 0003:1E7D:319C.0007: unknown main item tag 0x0 [ 259.954636][ T3624] isku 0003:1E7D:319C.0007: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.3-1/input0 [ 259.971449][ T6898] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 260.032985][ T6908] loop1: detected capacity change from 0 to 2048 [ 260.060461][ T6908] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 260.211064][ T3624] isku 0003:1E7D:319C.0007: couldn't init struct isku_device [ 260.219181][ T3624] isku 0003:1E7D:319C.0007: couldn't install keyboard [ 260.232002][ T3624] isku: probe of 0003:1E7D:319C.0007 failed with error -71 [ 260.257011][ T3624] usb 4-1: USB disconnect, device number 11 [ 260.343987][ T4582] EXT4-fs (loop4): unmounting filesystem. [ 260.427333][ T6912] loop1: detected capacity change from 0 to 2048 [ 260.446275][ T6912] hpfs: filesystem error: improperly stopped; already mounted read-only [ 260.461409][ T6912] hpfs: filesystem error: sector(s) 'dir_band' badly placed at 7b318cc2 [ 260.476131][ T6914] sctp: [Deprecated]: syz-executor.4 (pid 6914) Use of int in maxseg socket option. [ 260.476131][ T6914] Use struct sctp_assoc_value instead [ 260.723156][ T6918] loop1: detected capacity change from 0 to 512 [ 260.734380][ T6918] EXT4-fs: Ignoring removed nobh option [ 260.740048][ T6918] EXT4-fs: Ignoring removed i_version option [ 260.780710][ T6918] EXT4-fs: Ignoring removed nomblk_io_submit option [ 260.810943][ T6921] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 260.834221][ T6918] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 260.894864][ T6918] ext4 filesystem being mounted at /root/syzkaller-testdir2861345029/syzkaller.VW89PC/119/file0 supports timestamps until 2038 (0x7fffffff) [ 260.894864][ T6926] loop2: detected capacity change from 0 to 1024 [ 260.923622][ T6926] hfsplus: catalog name length corrupted [ 260.948212][ T6918] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 46 vs 39667 free clusters [ 260.985788][ T6928] loop3: detected capacity change from 0 to 512 [ 261.023740][ T6928] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended [ 261.048378][ T4645] EXT4-fs (loop1): unmounting filesystem. [ 261.054882][ T6928] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 261.105824][ T6928] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 261.117645][ T6928] System zones: 0-2, 18-18, 34-34 [ 261.129241][ T6928] EXT4-fs warning (device loop3): ext4_update_dynamic_rev:1085: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 261.153536][ T6928] EXT4-fs (loop3): 1 truncate cleaned up [ 261.159219][ T6928] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 261.275070][ T6916] loop4: detected capacity change from 0 to 40427 [ 261.290225][ T6928] EXT4-fs error (device loop3): ext4_xattr_block_get:546: inode #15: comm syz-executor.3: corrupted xattr block 19 [ 261.312279][ T6916] F2FS-fs (loop4): Wrong secs_per_zone / total_sections (67108865, 24) [ 261.330526][ T6916] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 261.348018][ T6916] F2FS-fs (loop4): invalid crc value [ 261.375454][ T4680] EXT4-fs error (device loop3): ext4_readdir:260: inode #2: block 3: comm syz-executor.3: path /root/syzkaller-testdir4136382445/syzkaller.EieOuu/96/file0: bad entry in directory: inode out of bounds - offset=0, inode=63, rec_len=12, size=4096 fake=1 [ 261.398495][ T6934] loop1: detected capacity change from 0 to 8192 [ 261.418066][ T6934] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 261.418657][ T6916] F2FS-fs (loop4): Found nat_bits in checkpoint [ 261.468804][ T6940] loop2: detected capacity change from 0 to 2048 [ 261.486484][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.502060][ T6934] FAT-fs (loop1): Filesystem has been set read-only [ 261.516444][ T6940] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 261.524109][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.530352][ T4680] EXT4-fs (loop3): unmounting filesystem. [ 261.541785][ T6916] F2FS-fs (loop4): Try to recover 2th superblock, ret: 0 [ 261.548939][ T6916] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 261.563305][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.601273][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.618724][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.628893][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.643264][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.668527][ T6916] syz-executor.4: attempt to access beyond end of device [ 261.668527][ T6916] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 261.692988][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.705874][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.717300][ T6934] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 261.749200][ T26] audit: type=1800 audit(1718905864.733:71): pid=6934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="file2" dev="loop1" ino=1048697 res=0 errno=0 [ 261.781393][ T4582] syz-executor.4: attempt to access beyond end of device [ 261.781393][ T4582] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 261.840809][ T6934] syz-executor.1 (6934) used greatest stack depth: 17104 bytes left [ 262.017802][ T6948] sctp: [Deprecated]: syz-executor.1 (pid 6948) Use of int in maxseg socket option. [ 262.017802][ T6948] Use struct sctp_assoc_value instead [ 262.036129][ T1099] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.211025][ T1099] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.226214][ T6950] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 262.299698][ T6946] loop0: detected capacity change from 0 to 8192 [ 262.344301][ T1099] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.382878][ T6946] loop0: AHDI p1 p2 p3 [ 262.387216][ T6946] loop0: p1 start 4278255615 is beyond EOD, truncated [ 262.400920][ T6946] loop0: p2 size 4164158976 extends beyond EOD, truncated [ 262.440001][ T1099] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 262.726463][ T6964] loop0: detected capacity change from 0 to 128 [ 262.782090][ T6961] loop4: detected capacity change from 0 to 2048 [ 262.815227][ T6961] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 262.962434][ T6944] loop2: detected capacity change from 0 to 40427 [ 263.007788][ T6944] F2FS-fs (loop2): invalid crc value [ 263.026111][ T6944] F2FS-fs (loop2): Found nat_bits in checkpoint [ 263.057202][ T3592] Bluetooth: hci0: ISO packet too small [ 263.075971][ T3592] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 263.092196][ T3592] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 263.107151][ T3592] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 263.120979][ T3592] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 263.130113][ T3592] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 263.150194][ T3592] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 263.164763][ T6976] loop4: detected capacity change from 0 to 64 [ 263.180798][ T6944] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 263.340846][ T3622] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 263.464221][ T6980] loop4: detected capacity change from 0 to 2048 [ 263.494843][ T6980] UDF-fs: bad mount option "ÿ" or missing value [ 263.505032][ T6983] loop0: detected capacity change from 0 to 1024 [ 263.560047][ T6985] fuse: blksize only supported for fuseblk [ 263.980521][ T6983] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock [ 264.031161][ T6983] EXT4-fs (loop0): group descriptors corrupted! [ 264.058546][ T4786] syz-executor.2: attempt to access beyond end of device [ 264.058546][ T4786] loop2: rw=524288, sector=45064, nr_sectors = 8 limit=40427 [ 264.075280][ T4786] syz-executor.2: attempt to access beyond end of device [ 264.075280][ T4786] loop2: rw=0, sector=45064, nr_sectors = 8 limit=40427 [ 264.142624][ T6968] chnl_net:caif_netlink_parms(): no params data found [ 264.171010][ T3622] usb 2-1: Using ep0 maxpacket: 16 [ 264.202974][ T4046] kworker/u4:9: attempt to access beyond end of device [ 264.202974][ T4046] loop2: rw=2049, sector=45096, nr_sectors = 24 limit=40427 [ 264.310702][ T3622] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 264.429107][ T3622] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 264.438868][ T3630] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 264.453943][ T3622] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.603962][ T3622] usb 2-1: config 0 descriptor?? [ 264.740774][ T3630] usb 1-1: Using ep0 maxpacket: 8 [ 264.871746][ T3630] usb 1-1: config 179 has an invalid interface number: 65 but max is 0 [ 264.919897][ T3630] usb 1-1: config 179 has no interface number 0 [ 264.934965][ T3622] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input17 [ 264.960881][ T3630] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 264.988280][ T3630] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 265.010806][ T3630] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 265.022409][ T3622] bcm5974 2-1:0.0: could not read from device [ 265.037302][ T3630] usb 1-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 265.048837][ T3630] usb 1-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 265.062335][ T3630] usb 1-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 265.073727][ T3630] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.102237][ T6983] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 265.130744][ T2988] bcm5974 2-1:0.0: could not read from device [ 265.169933][ T3622] input: failed to attach handler mousedev to device input17, error: -5 [ 265.192920][ T3622] usb 2-1: USB disconnect, device number 4 [ 265.202992][ T2988] bcm5974 2-1:0.0: could not read from device [ 265.240923][ T3584] Bluetooth: hci2: command tx timeout [ 265.343723][ T6968] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.351255][ T6968] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.359970][ T6968] device bridge_slave_0 entered promiscuous mode [ 265.386718][ T6993] loop4: detected capacity change from 0 to 40427 [ 265.395350][ T6968] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.401189][ T6993] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0) [ 265.417484][ T6993] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 265.428700][ T6993] F2FS-fs (loop4): invalid crc_offset: 5705724 [ 265.429107][ T3630] input: Generic X-Box pad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input18 [ 265.447583][ T6968] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.448013][ T6993] F2FS-fs (loop4): Found nat_bits in checkpoint [ 265.459361][ T6968] device bridge_slave_1 entered promiscuous mode [ 265.525934][ T6993] F2FS-fs (loop4): recover fsync data on readonly fs [ 265.535601][ T6993] F2FS-fs (loop4): Try to recover 2th superblock, ret: -30 [ 265.552060][ T6993] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 265.698430][ T6968] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 265.730387][ T6968] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 265.816103][ T1099] device hsr_slave_0 left promiscuous mode [ 265.823963][ T3867] usb 1-1: USB disconnect, device number 8 [ 265.830679][ C0] xpad 1-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 265.839019][ C0] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 265.848559][ C0] ================================================================== [ 265.856669][ C0] BUG: KASAN: use-after-free in register_lock_class+0x8e8/0x990 2024/06/20 17:51:08 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 265.864401][ C0] Read of size 1 at addr ffff8880213dd091 by task syz-executor.1/6998 [ 265.872583][ C0] [ 265.874945][ C0] CPU: 0 PID: 6998 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0 [ 265.883299][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 265.893393][ C0] Call Trace: [ 265.896685][ C0] [ 265.899635][ C0] dump_stack_lvl+0x1e3/0x2cb [ 265.904363][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 265.909853][ C0] ? panic+0x764/0x764 [ 265.913933][ C0] ? _printk+0xd1/0x111 [ 265.918100][ C0] ? __virt_addr_valid+0x17f/0x520 [ 265.923228][ C0] ? __virt_addr_valid+0x17f/0x520 [ 265.928356][ C0] print_report+0x15f/0x4f0 [ 265.932870][ C0] ? __virt_addr_valid+0x17f/0x520 [ 265.937997][ C0] ? __virt_addr_valid+0x17f/0x520 [ 265.943125][ C0] ? __virt_addr_valid+0x44a/0x520 [ 265.948252][ C0] ? __phys_addr+0xb6/0x170 [ 265.952772][ C0] ? register_lock_class+0x8e8/0x990 [ 265.958080][ C0] kasan_report+0x136/0x160 [ 265.962631][ C0] ? register_lock_class+0x8e8/0x990 [ 265.967937][ C0] register_lock_class+0x8e8/0x990 [ 265.973066][ C0] ? is_dynamic_key+0x260/0x260 [ 265.977927][ C0] ? printk_sprint+0x490/0x490 [ 265.982704][ C0] ? vscnprintf+0x80/0x80 [ 265.987039][ C0] ? unwind_get_return_address+0x49/0x80 [ 265.992680][ C0] __lock_acquire+0xd3/0x1f80 [ 265.997372][ C0] ? read_word_at_a_time+0xe/0x20 [ 266.002439][ C0] ? mark_lock+0x9a/0x340 [ 266.006790][ C0] ? __lock_acquire+0x125b/0x1f80 [ 266.011853][ C0] lock_acquire+0x1f8/0x5a0 [ 266.016397][ C0] ? __wake_up+0xfd/0x1c0 [ 266.020764][ C0] ? read_lock_is_recursive+0x10/0x10 [ 266.026181][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 266.031509][ C0] ? __wake_up+0xfd/0x1c0 [ 266.035854][ C0] ? _raw_spin_lock+0x40/0x40 [ 266.040584][ C0] ? kcov_remote_stop+0x579/0x6f0 [ 266.045621][ C0] ? kcov_remote_stop+0x6b/0x6f0 [ 266.050583][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 266.055681][ C0] __wake_up+0xfd/0x1c0 [ 266.059886][ C0] ? __wake_up_bit+0x2b0/0x2b0 [ 266.064711][ C0] __usb_hcd_giveback_urb+0x3a8/0x530 [ 266.070140][ C0] dummy_timer+0x8ad/0x3200 [ 266.074723][ C0] ? dummy_free_streams+0x310/0x310 [ 266.079987][ C0] call_timer_fn+0x1ad/0x6b0 [ 266.084630][ C0] ? dummy_free_streams+0x310/0x310 [ 266.090047][ C0] ? call_timer_fn+0xc2/0x6b0 [ 266.094809][ C0] ? __run_timers+0x890/0x890 [ 266.099539][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 266.104787][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 266.110034][ C0] ? dummy_free_streams+0x310/0x310 [ 266.115285][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 266.120532][ C0] ? dummy_free_streams+0x310/0x310 [ 266.125783][ C0] __run_timers+0x67c/0x890 [ 266.130373][ C0] ? detach_timer+0x380/0x380 [ 266.135096][ C0] ? print_irqtrace_events+0x210/0x210 [ 266.140641][ C0] run_timer_softirq+0x63/0xf0 [ 266.145455][ C0] handle_softirqs+0x2ee/0xa40 [ 266.150278][ C0] ? __irq_exit_rcu+0x157/0x240 [ 266.155190][ C0] ? do_softirq+0x240/0x240 [ 266.159737][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 266.164971][ C0] __irq_exit_rcu+0x157/0x240 [ 266.169696][ C0] ? irq_exit_rcu+0x20/0x20 [ 266.174276][ C0] irq_exit_rcu+0x5/0x20 [ 266.178572][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 266.184264][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.190327][ C0] RIP: 0033:0x7f6ff9028a2b [ 266.194812][ C0] Code: cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 <45> 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 [ 266.214474][ C0] RSP: 002b:00007f6ff9e1d480 EFLAGS: 00000202 [ 266.220580][ C0] RAX: 000000000013d535 RBX: 00007f6ff9e1d520 RCX: 00000000000000d0 [ 266.228645][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f6ff9e1d5c0 [ 266.236653][ C0] RBP: 0000000000000102 R08: 00007f6fef7f7000 R09: 0000000000000000 [ 266.244661][ C0] R10: 0000000000000000 R11: 00007f6ff9e1d530 R12: 0000000000000001 [ 266.252679][ C0] R13: 00007f6ff90ec020 R14: 0000000000000000 R15: 00007f6ff9e1d5c0 [ 266.260703][ C0] [ 266.263743][ C0] [ 266.266075][ C0] Allocated by task 3630: [ 266.270420][ C0] kasan_set_track+0x4b/0x70 [ 266.275057][ C0] __kasan_kmalloc+0x97/0xb0 [ 266.279691][ C0] xpad_probe+0x3be/0x1b10 [ 266.284153][ C0] usb_probe_interface+0x5c0/0xaf0 [ 266.289306][ C0] really_probe+0x2ab/0xcb0 [ 266.293841][ C0] __driver_probe_device+0x1a2/0x3d0 [ 266.299150][ C0] driver_probe_device+0x50/0x420 [ 266.304197][ C0] __device_attach_driver+0x2cf/0x510 [ 266.309603][ C0] bus_for_each_drv+0x183/0x200 [ 266.314525][ C0] __device_attach+0x359/0x570 [ 266.319313][ C0] bus_probe_device+0xba/0x1e0 [ 266.324114][ C0] device_add+0xb48/0xfd0 [ 266.328477][ C0] usb_set_configuration+0x19dd/0x2020 [ 266.333981][ C0] usb_generic_driver_probe+0x84/0x140 [ 266.339477][ C0] usb_probe_device+0x130/0x260 [ 266.344409][ C0] really_probe+0x2ab/0xcb0 [ 266.348941][ C0] __driver_probe_device+0x1a2/0x3d0 [ 266.354262][ C0] driver_probe_device+0x50/0x420 [ 266.359313][ C0] __device_attach_driver+0x2cf/0x510 [ 266.364712][ C0] bus_for_each_drv+0x183/0x200 [ 266.369600][ C0] __device_attach+0x359/0x570 [ 266.374379][ C0] bus_probe_device+0xba/0x1e0 [ 266.379158][ C0] device_add+0xb48/0xfd0 [ 266.383497][ C0] usb_new_device+0xbdd/0x18f0 [ 266.388272][ C0] hub_event+0x2efe/0x5730 [ 266.392702][ C0] process_one_work+0x8a9/0x11d0 [ 266.397662][ C0] worker_thread+0xa47/0x1200 [ 266.402346][ C0] kthread+0x28d/0x320 [ 266.406416][ C0] ret_from_fork+0x1f/0x30 [ 266.410847][ C0] [ 266.413169][ C0] Freed by task 3867: [ 266.417149][ C0] kasan_set_track+0x4b/0x70 [ 266.421754][ C0] kasan_save_free_info+0x27/0x40 [ 266.426782][ C0] ____kasan_slab_free+0xd6/0x120 [ 266.431824][ C0] __kmem_cache_free+0x25c/0x3c0 [ 266.436773][ C0] xpad_disconnect+0x355/0x480 [ 266.441556][ C0] usb_unbind_interface+0x1cd/0x840 [ 266.446771][ C0] device_release_driver_internal+0x59e/0x880 [ 266.452843][ C0] bus_remove_device+0x2e5/0x400 [ 266.457791][ C0] device_del+0x6e2/0xbd0 [ 266.462148][ C0] usb_disable_device+0x3b8/0x840 [ 266.467180][ C0] usb_disconnect+0x33c/0x8c0 [ 266.471860][ C0] hub_event+0x1f78/0x5730 [ 266.476284][ C0] process_one_work+0x8a9/0x11d0 [ 266.481231][ C0] worker_thread+0xa47/0x1200 [ 266.485912][ C0] kthread+0x28d/0x320 [ 266.489982][ C0] ret_from_fork+0x1f/0x30 [ 266.494408][ C0] [ 266.496732][ C0] Last potentially related work creation: [ 266.502444][ C0] kasan_save_stack+0x3b/0x60 [ 266.507135][ C0] __kasan_record_aux_stack+0xb0/0xc0 [ 266.512513][ C0] insert_work+0x54/0x3d0 [ 266.516849][ C0] __queue_work+0xb4b/0xf90 [ 266.521358][ C0] queue_work_on+0x14b/0x250 [ 266.525952][ C0] xpad_irq_in+0xaac/0x2500 [ 266.530459][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 266.535860][ C0] dummy_timer+0x8ad/0x3200 [ 266.540375][ C0] call_timer_fn+0x1ad/0x6b0 [ 266.544982][ C0] __run_timers+0x67c/0x890 [ 266.549504][ C0] run_timer_softirq+0x63/0xf0 [ 266.554277][ C0] handle_softirqs+0x2ee/0xa40 [ 266.559054][ C0] __irq_exit_rcu+0x157/0x240 [ 266.563744][ C0] irq_exit_rcu+0x5/0x20 [ 266.568000][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 266.573642][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.579639][ C0] [ 266.581963][ C0] Second to last potentially related work creation: [ 266.588563][ C0] kasan_save_stack+0x3b/0x60 [ 266.593267][ C0] __kasan_record_aux_stack+0xb0/0xc0 [ 266.598697][ C0] insert_work+0x54/0x3d0 [ 266.603032][ C0] __queue_work+0xb4b/0xf90 [ 266.607544][ C0] queue_work_on+0x14b/0x250 [ 266.612154][ C0] xpad_irq_in+0xaac/0x2500 [ 266.616670][ C0] __usb_hcd_giveback_urb+0x371/0x530 [ 266.622060][ C0] dummy_timer+0x8ad/0x3200 [ 266.626597][ C0] call_timer_fn+0x1ad/0x6b0 [ 266.631212][ C0] __run_timers+0x67c/0x890 [ 266.635724][ C0] run_timer_softirq+0x63/0xf0 [ 266.640491][ C0] handle_softirqs+0x2ee/0xa40 [ 266.645275][ C0] __irq_exit_rcu+0x157/0x240 [ 266.649964][ C0] irq_exit_rcu+0x5/0x20 [ 266.654225][ C0] sysvec_apic_timer_interrupt+0x91/0xb0 [ 266.659863][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 266.665871][ C0] [ 266.668196][ C0] The buggy address belongs to the object at ffff8880213dd000 [ 266.668196][ C0] which belongs to the cache kmalloc-1k of size 1024 [ 266.682255][ C0] The buggy address is located 145 bytes inside of [ 266.682255][ C0] 1024-byte region [ffff8880213dd000, ffff8880213dd400) [ 266.695640][ C0] [ 266.697991][ C0] The buggy address belongs to the physical page: [ 266.704453][ C0] page:ffffea000084f600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x213d8 [ 266.714629][ C0] head:ffffea000084f600 order:3 compound_mapcount:0 compound_pincount:0 [ 266.722958][ C0] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 266.730956][ C0] raw: 00fff00000010200 dead000000000100 dead000000000122 ffff888012441dc0 [ 266.739586][ C0] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 266.748224][ C0] page dumped because: kasan: bad access detected [ 266.754690][ C0] page_owner tracks the page as allocated [ 266.760442][ C0] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 33, tgid 33 (kworker/u4:2), ts 136781206881, free_ts 136470547957 [ 266.780989][ C0] post_alloc_hook+0x18d/0x1b0 [ 266.785795][ C0] get_page_from_freelist+0x31a1/0x3320 [ 266.791383][ C0] __alloc_pages+0x28d/0x770 [ 266.796012][ C0] alloc_slab_page+0x6a/0x150 [ 266.800730][ C0] new_slab+0x84/0x2d0 [ 266.804844][ C0] ___slab_alloc+0xc20/0x1270 [ 266.809565][ C0] __kmem_cache_alloc_node+0x19f/0x260 [ 266.815067][ C0] __kmalloc+0xa1/0x230 [ 266.819264][ C0] ieee802_11_parse_elems_full+0xc4/0x1380 [ 266.825121][ C0] ieee80211_ibss_rx_queued_mgmt+0x430/0x2dd0 [ 266.831229][ C0] ieee80211_iface_work+0x7aa/0xce0 [ 266.836481][ C0] process_one_work+0x8a9/0x11d0 [ 266.841468][ C0] worker_thread+0xa47/0x1200 [ 266.846183][ C0] kthread+0x28d/0x320 [ 266.850281][ C0] ret_from_fork+0x1f/0x30 [ 266.854736][ C0] page last free stack trace: [ 266.859449][ C0] free_unref_page_prepare+0xf63/0x1120 [ 266.865057][ C0] free_unref_page+0x33/0x3e0 [ 266.869768][ C0] __unfreeze_partials+0x1b7/0x210 [ 266.874921][ C0] put_cpu_partial+0x17b/0x250 [ 266.879717][ C0] qlist_free_all+0x76/0xe0 [ 266.884257][ C0] kasan_quarantine_reduce+0x156/0x170 [ 266.889750][ C0] __kasan_slab_alloc+0x1f/0x70 [ 266.894647][ C0] slab_post_alloc_hook+0x52/0x3a0 [ 266.899801][ C0] kmem_cache_alloc+0x10c/0x2d0 [ 266.904694][ C0] getname_flags+0xb8/0x4f0 [ 266.909234][ C0] do_sys_openat2+0xd2/0x500 [ 266.913861][ C0] __x64_sys_openat+0x243/0x290 [ 266.918757][ C0] do_syscall_64+0x3b/0xb0 [ 266.923236][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 266.929190][ C0] [ 266.931573][ C0] Memory state around the buggy address: [ 266.937234][ C0] ffff8880213dcf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 266.945325][ C0] ffff8880213dd000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.953420][ C0] >ffff8880213dd080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.961541][ C0] ^ [ 266.966146][ C0] ffff8880213dd100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.974233][ C0] ffff8880213dd180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 266.982321][ C0] ================================================================== [ 266.990414][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 266.997624][ C0] CPU: 0 PID: 6998 Comm: syz-executor.1 Not tainted 6.1.94-syzkaller #0 [ 267.005954][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 267.016020][ C0] Call Trace: [ 267.019307][ C0] [ 267.022242][ C0] dump_stack_lvl+0x1e3/0x2cb [ 267.026937][ C0] ? nf_tcp_handle_invalid+0x642/0x642 [ 267.032414][ C0] ? panic+0x764/0x764 [ 267.036489][ C0] ? lock_release+0xd6/0xa20 [ 267.041100][ C0] ? vscnprintf+0x59/0x80 [ 267.045446][ C0] panic+0x318/0x764 [ 267.049350][ C0] ? check_panic_on_warn+0x1d/0xa0 [ 267.054494][ C0] ? memcpy_page_flushcache+0xfc/0xfc [ 267.059889][ C0] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 267.065799][ C0] ? _raw_spin_unlock+0x40/0x40 [ 267.070661][ C0] ? print_report+0x4a3/0x4f0 [ 267.075346][ C0] check_panic_on_warn+0x7e/0xa0 [ 267.080302][ C0] ? register_lock_class+0x8e8/0x990 [ 267.085600][ C0] end_report+0x66/0x110 [ 267.089846][ C0] kasan_report+0x143/0x160 [ 267.094362][ C0] ? register_lock_class+0x8e8/0x990 [ 267.099681][ C0] register_lock_class+0x8e8/0x990 [ 267.104810][ C0] ? is_dynamic_key+0x260/0x260 [ 267.109689][ C0] ? printk_sprint+0x490/0x490 [ 267.114470][ C0] ? vscnprintf+0x80/0x80 [ 267.118813][ C0] ? unwind_get_return_address+0x49/0x80 [ 267.124458][ C0] __lock_acquire+0xd3/0x1f80 [ 267.129160][ C0] ? read_word_at_a_time+0xe/0x20 [ 267.134194][ C0] ? mark_lock+0x9a/0x340 [ 267.138537][ C0] ? __lock_acquire+0x125b/0x1f80 [ 267.143584][ C0] lock_acquire+0x1f8/0x5a0 [ 267.148097][ C0] ? __wake_up+0xfd/0x1c0 [ 267.152440][ C0] ? read_lock_is_recursive+0x10/0x10 [ 267.157839][ C0] _raw_spin_lock_irqsave+0xd1/0x120 [ 267.163179][ C0] ? __wake_up+0xfd/0x1c0 [ 267.167523][ C0] ? _raw_spin_lock+0x40/0x40 [ 267.172211][ C0] ? kcov_remote_stop+0x579/0x6f0 [ 267.177244][ C0] ? kcov_remote_stop+0x6b/0x6f0 [ 267.182189][ C0] ? __lock_acquire+0x1f80/0x1f80 [ 267.187225][ C0] __wake_up+0xfd/0x1c0 [ 267.191395][ C0] ? __wake_up_bit+0x2b0/0x2b0 [ 267.196180][ C0] __usb_hcd_giveback_urb+0x3a8/0x530 [ 267.201577][ C0] dummy_timer+0x8ad/0x3200 [ 267.206117][ C0] ? dummy_free_streams+0x310/0x310 [ 267.211340][ C0] call_timer_fn+0x1ad/0x6b0 [ 267.215946][ C0] ? dummy_free_streams+0x310/0x310 [ 267.221156][ C0] ? call_timer_fn+0xc2/0x6b0 [ 267.225840][ C0] ? __run_timers+0x890/0x890 [ 267.230534][ C0] ? do_raw_spin_unlock+0x137/0x8a0 [ 267.235742][ C0] ? _raw_spin_unlock_irq+0x1f/0x40 [ 267.240948][ C0] ? dummy_free_streams+0x310/0x310 [ 267.246163][ C0] ? lockdep_hardirqs_on+0x94/0x130 [ 267.251380][ C0] ? dummy_free_streams+0x310/0x310 [ 267.256589][ C0] __run_timers+0x67c/0x890 [ 267.261105][ C0] ? detach_timer+0x380/0x380 [ 267.265797][ C0] ? print_irqtrace_events+0x210/0x210 [ 267.271272][ C0] run_timer_softirq+0x63/0xf0 [ 267.276049][ C0] handle_softirqs+0x2ee/0xa40 [ 267.280840][ C0] ? __irq_exit_rcu+0x157/0x240 [ 267.285712][ C0] ? do_softirq+0x240/0x240 [ 267.290233][ C0] ? irqtime_account_irq+0xd0/0x1e0 [ 267.295439][ C0] __irq_exit_rcu+0x157/0x240 [ 267.300139][ C0] ? irq_exit_rcu+0x20/0x20 [ 267.304666][ C0] irq_exit_rcu+0x5/0x20 [ 267.308923][ C0] sysvec_apic_timer_interrupt+0x43/0xb0 [ 267.314567][ C0] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 267.320559][ C0] RIP: 0033:0x7f6ff9028a2b [ 267.324974][ C0] Code: cd 48 01 c1 49 39 4f 08 72 4c 8d 4d ff 85 ed 74 33 66 0f 1f 44 00 00 48 39 f0 72 1b 4d 8b 07 49 89 c1 49 29 f1 47 0f b6 0c 08 <45> 84 c9 74 08 45 88 0c 00 49 8b 47 10 48 83 c0 01 49 89 47 10 83 [ 267.344589][ C0] RSP: 002b:00007f6ff9e1d480 EFLAGS: 00000202 [ 267.350664][ C0] RAX: 000000000013d535 RBX: 00007f6ff9e1d520 RCX: 00000000000000d0 [ 267.358743][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 00007f6ff9e1d5c0 [ 267.366729][ C0] RBP: 0000000000000102 R08: 00007f6fef7f7000 R09: 0000000000000000 [ 267.374729][ C0] R10: 0000000000000000 R11: 00007f6ff9e1d530 R12: 0000000000000001 [ 267.382711][ C0] R13: 00007f6ff90ec020 R14: 0000000000000000 R15: 00007f6ff9e1d5c0 [ 267.390695][ C0] [ 267.394072][ C0] Kernel Offset: disabled [ 267.398406][ C0] Rebooting in 86400 seconds..