last executing test programs: 15.029199242s ago: executing program 1 (id=6048): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c406", 0xbe5}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 14.031198755s ago: executing program 1 (id=6049): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000001c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r4, 0x0, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9c) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@utf8}, {@numtail}, {@rodir}, {@fat=@nfs}, {@uni_xlate}]}, 0x0, 0x237, &(0x7f0000000300)="$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") 13.892925976s ago: executing program 0 (id=6050): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_pgetevents(0x0, 0x5, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680}, 0x0) 12.854120594s ago: executing program 1 (id=6052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00'}, 0x10) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) io_setup(0x7fff, &(0x7f0000000300)=0x0) io_pgetevents(r5, 0x5, 0x0, 0x0, &(0x7f0000000440)={0x0, 0x989680}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) 11.234467732s ago: executing program 4 (id=6055): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 11.080258686s ago: executing program 4 (id=6056): syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f00000000c0)='./file2\x00', 0x1008000, &(0x7f0000005780)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6a71666d743d7666736f6c6400696e6c696e655f78617474725f73697a653d304fb23030303030303030303030306361372c6e6f71756f74612c64697361626c655f6578745c4964656e746966792c66617374626f6f742c6e6f61636cf5f8440630c5403499932c7265736769643de6ceb2f73cf94abb79a6a84a5d1e3e742ae8d8c206d235f5dfa3e4eea111eebdce7a13fd12bb2541d0b4c39a77ad39900369f63b12a124ed6c39d30740dcb78cbdf8b5f8bf7ccf7d73954d36ca4847d629bea1d23228de731f87842081d8d81238ef31a696213ea804bd1966fee0ac45e5ac5120fb0baab70a273e66d0816a8e83f7fe00eabe5754838f8c46577f32a49324e4e990e3dcdf876d7ec17aa56afe2a9a5af2bea152", @ANYRESHEX=0x0, @ANYBLOB="2c6e6f6508106500745f637c6368652c6e000000f30800000000"], 0x1, 0x54fd, &(0x7f0000000280)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) syz_mount_image$fuse(0x0, &(0x7f0000000340)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) lgetxattr(&(0x7f0000000380)='./file2\x00', &(0x7f00000000c0)=@known='system.advise\x00', 0x0, 0x0) 9.768425816s ago: executing program 3 (id=6058): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x0, 0x5, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r2}, &(0x7f0000000200), &(0x7f0000000280)}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x2bcb2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000004000000000000000000850000002300000095"], &(0x7f0000000180)='GPL\x00', 0x4}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='sched_switch\x00', r6}, 0x10) syz_mount_image$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) mount_setattr(0xffffffffffffff9c, 0x0, 0x0, &(0x7f0000000180), 0x20) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000000000000008000008500000050000000a50000009700000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) dup2(r8, r8) connect$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, 0x10) close(0xffffffffffffffff) read$FUSE(r7, &(0x7f00000023c0)={0x2020}, 0x2020) timerfd_create(0x0, 0x0) 9.767902746s ago: executing program 2 (id=6059): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000020850000000100000018"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.time_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c406", 0xbe5}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r3, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1}, 0x40000100) 8.794865946s ago: executing program 2 (id=6060): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x2e, 0x4, 0x0, 0x0, 0xb8, 0x2000, 0x0, 0x0, 0x0, 0x0, @broadcast, @remote, {[@timestamp={0x44, 0x4, 0x0, 0x0, 0x9}, @timestamp_prespec={0x44, 0x3c, 0xc0, 0x3, 0x0, [{@private=0xa010100}, {@multicast1}, {@remote}, {@dev={0xac, 0x14, 0x14, 0x32}, 0x658}, {@broadcast}, {@remote}, {@private=0xa010100}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@dev}, {@remote}, {@multicast2}, {@private=0xa010121}, {}, {@broadcast, 0x52b1}, {@multicast2}]}, @noop, @noop, @noop, @lsrr={0x83, 0xf, 0xdc, [@private=0xa010102, @rand_addr=0x64010102, @multicast1]}, @rr={0x7, 0x13, 0x0, [@remote, @multicast1, @private=0xa010102, @remote]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) 8.669255694s ago: executing program 3 (id=6061): prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) bpf$ENABLE_STATS(0x20, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000080000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r3, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f00000006c0)=[0x0, 0x0, 0x0], &(0x7f0000000700)=[0x0], 0x0, 0xaf, &(0x7f0000000740)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0x73, 0x8, 0x8, &(0x7f0000000880)}}, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000005c0)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r4, 0x0) 8.539129125s ago: executing program 0 (id=6062): sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000900000f0100000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) ioctl$USBDEVFS_DROP_PRIVILEGES(0xffffffffffffffff, 0x4004551e, &(0x7f00000001c0)) r3 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r3, 0x0, 0x0, 0x4) 8.30994291s ago: executing program 1 (id=6063): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\f\x00\x00\x00\a'], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000300)={0x20, 0x5, 0x102, {0x102, 0x5, "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"}}, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x51a0a5eb33bcb4b9}}, &(0x7f0000000040)={0x0, 0x22, 0x13, {[@local=@item_4={0x3, 0x2, 0x7, "01db1bdd"}, @local=@item_012={0x1, 0x2, 0x3, 'f'}, @global=@item_012={0x0, 0x1, 0x8}, @global=@item_012={0x0, 0x1, 0x2}, @local=@item_4={0x3, 0x2, 0x3, "53cd4bc2"}, @local=@item_4={0x3, 0x2, 0x8, "516bb379"}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x1, 0x5, 0x1, {0x22, 0xa87}}}}, &(0x7f0000000680)={0x2c, &(0x7f00000004c0)={0x40, 0x4, 0xcf, "f5d411811536dfa51131f952b0fe0255ddff1ca9196322f989e9e465474ea6f5bf76b32fe2495924147d0923edfe7d07fae373cab30af52e05e31821a877becebc36f7b6756d17cd19128ae404d5d8b0cad83cca792601b995f04a70f775a49e96a6952a9d86805271775a852eeed4943351098040dc9583dc812c833815878b643f8eaabe1294c0e7f33c32b57ab177788d09d05d69ce87d62df82fb8edc2c5c8943a1acf4f83d4cac86f68415db857ac5779b41b9cd8a74b57fc30f2e678ea6e786d689ece583d88b3bd1ec26635"}, &(0x7f0000000200)={0x0, 0xa, 0x1, 0x81}, &(0x7f0000000280)={0x0, 0x8, 0x1}, &(0x7f00000005c0)={0x20, 0x1, 0x4f, "9961ec5a95d8fd86bae95dd454ea8e61033c0f9a08f903be6766f884ae0183c28aa2812b13d5613133522d2572b180340f8f03c250dbfe8116a84d1ad5054a1d9e698f6a8157627ac4c4a138248690"}, &(0x7f0000000640)={0x20, 0x3, 0x1, 0x3f}}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r2}, 0x10) syz_usb_control_io(r0, 0x0, 0x0) 8.138196906s ago: executing program 4 (id=6064): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='pids.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) socket$packet(0x11, 0x0, 0x300) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) sendmmsg$sock(r4, &(0x7f0000003bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000002240)="d18fa444fe030b1c7b32a5b705c504ec43ee97950376d976c9b77dc552527e30b2c5b6afddbe0e78ec255a6cbf080c9e72317e7a35bdf9f28ceb1150deb2676871377d4602899310bb15377f2500771601b7c22665f2f904eee0234e096bebc03454186fdd514695bcc02c33ee21a16c93aada19aff02356ebe0df169663a46728b3c67a8a92518ed78e00d25c74e50c851329b8ef1a4e8e2328d62833a7eb8f9ecea2cc6bb25507b699371051368620d858da0b5cd86d7708384602eefdbce6c1827c9192c6425303b7b67b4a26ec6fcc54164dea2d1289ce9c2a2bfa4eaa2359d531a645838f25a03a0337eefe036787a2e88d25", 0xf5}, {&(0x7f0000002340)="a27ed28b91aed973e67374102f5b5fc69ca84ca09a79f64ed5c185e1d292f2a28186f17b769beef7478287083aa1d72dab57a49e9d26214f772db9f44343052ec4dc7c001271831541145b54bebd6a86be4dc2386ddbeab4a978277b7b20ccbe825020a33611a4c006f337875c470a04c07c2f8cec41d208", 0x78}, {&(0x7f00000023c0)="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", 0x354}, {&(0x7f0000000540)="09b0177a2c21d32e338f5a83b0814fa2413bf77360d46b94bc7b9a6073eb0d7c5e80204798025cd505d5cec40cc3daa4bd37ff3774f2ee29da0c2ded816e78b5af191c496a20e571e1ac460bb423b656d17baf4550d1cbd0532b89394cb332b9e47c43b29233f1f279ec6917f7960933a36440345bac9f3ce2ddf421e5cead564269b973c85ea89d5a4f6d04ba3fe3993088b84d3dbd2fa05acb94d7d82caad97da3402ada29942791dc0aebbdc9263ff8ae74a4afefc694b9eff1502d987faa48e4097e77620bfce2aa", 0xca}], 0x4}}], 0x3, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x0, 0x0, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 7.786033299s ago: executing program 2 (id=6065): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES16], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001540)={0x24, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="00220f0000005b574e69622bf85eda07b3"], 0x0}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCGCOLLECTIONINDEX(r1, 0x40184810, &(0x7f0000000000)={0x0, 0xffffffff, 0x3, 0x0, 0x1000}) 6.723213792s ago: executing program 3 (id=6066): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff018400"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 6.659934172s ago: executing program 0 (id=6067): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000003c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc7, 0xc7, 0x4, [@volatile={0x2}, @struct={0x8, 0x0, 0x0, 0x4, 0x0, 0x3}, @typedef={0xe}, @datasec={0xf, 0x1, 0x0, 0xf, 0x3, [{0x2, 0x5, 0x3}], "d79b77"}, @int={0x8, 0x0, 0x0, 0x1, 0x0, 0x75, 0x0, 0x14, 0x5}, @enum={0xc, 0x6, 0x0, 0x6, 0x4, [{0xf, 0x80}, {0x2, 0x6}, {0x4, 0x20}, {0x2, 0x8}, {0xe, 0x20}, {0x7, 0x8}]}, @enum={0xffffffff, 0x4, 0x0, 0x6, 0x4, [{0xb, 0x3f}, {0xb}, {0x9}, {0x6, 0x8}]}, @int={0xb, 0x0, 0x0, 0x1, 0x0, 0x72, 0x0, 0x40}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000240)=""/155, 0xe4, 0x9b, 0x0, 0x2}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, r0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xb, &(0x7f0000000c00)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='tlb_flush\x00', r1}, 0x10) epoll_create1(0x0) r2 = epoll_create1(0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/bus/input/devices\x00', 0x0, 0x0) syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./bus\x00', 0x1808014, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/716], 0x5, 0x558b, &(0x7f00000079c0)="$eJzs3EtvG2UXAOAzTtP71y9CLNh1pAopkWqrTi+CFQVacRGtKi4LVuDYruXW9kSx64auumCJWPBPEEisWPIbWMASdogFiB1SkWcmULdJC63jQPs80vjMHL8+874jK9KZiRzAU2sp/e2XJI7FoYhYiIijSeT7SblF3I44X4x9LiKOR0Tlri0p838m9kfE4Yg4Nile1EzKtz47OT5x9uc3f/362wP7jnz+1Xd7unBgTz0fEf31Yv9mv4hZJw93Fsp8Y9zNY//MuIzrUzX6WZG/2V7LK9xsbI1r5PF0pxifrd8YTuLVXqM5iZ3u1Ty/PihOOBx3tupMPpBea2zkx632Wh67wyyPnVvFeTdvFX/bbg1HRZ1WWe+jvHyMRluxyLc328V61q/nsTkYlfmibtZqb07iuIzl6aKZ9Vr5PNYe9Sr/+73VHdzYTMftjWE3G6Rna/UXavVz1fpG1mqP2meqjX7r3Jl0udObDKuO2o3++U6WdXrtWjPrr6TLnWazWq+nyxfaa93GIK3Xa6drp6pnV8q9k+lrl99Le610eRJf6Q5ujLq9YXo120iLT6ykq7XTL66kJ+rpO5eupFfevnjx0pV3P7jw/uWXL73xajnovmmly6unVler9VPV1frKU7T+j8tJ/4P1J9unf/j+8S4bFHb4ggGws/v6/7i3/w/9PzBzD+j/49pD+v/+9fJ4d/r/2Lb/r0z3/zHL/n/SUun/H97/Vvag/10M/f8urh8ey6P1//tnPg8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAObux8UvXs93lorjI2X+f2XqmfI4iYhKRNzZxkLsn6q5UNZZ3GH84j1z+CaJvMLkHAfK7XBEnC+33/+/21cBAAAAnlxf3j7+adGtFy9Lez0h5qm4aVM5+uGM6iURsbj004yqVSYvz86oWP793hebM6qW38A6OKNixS23fbOq9rcsTIWDd4WkCJW5TgcAAJiL6U5gvl0IAAAA8/TJA999aW7zYM6S2HqUufUsOP/P+78eCB6aeg8AAAD4D0r2egIAAADArsv7f7//BwAAAE+24vf/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+YOd+ctMGojgAPxsM/auiqvtepTs4Ro/QZZeFA/QSHIGeoFIvwBmolEWOkIQIe4LkBKRIjHGCvk+ynRlHP88AmzeWBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAu/a9Wsz+/vv4+Mebv7fY0maYDAAAAHLCpVrP6j0nTfp/6P6auz6ldREQZEYdq90GMWpmDlFMd+f/q0Rj+RdQJu/5xOt5FxLd03Hzq+lMAAACAy7VeLKdNtd6c0hLAVb+j4kyaRZvyw/dMeUVEVJPrTGnl7vQlU1j9+x7Gz0xp9QLWm0xhzZLb8PC9Ua6HtA1al4eZzOsvsW6V3TwXAADoU7sSOFKFAAAAcAF+9D0AzuFpaV/sT/v3jOPmkl4Ivm21AAAAgFeo6HsAAAAAQOfq+v8l7f9X2P8PAAAAsmv2/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKBLm2o1Wy+W02P358/MudueJt+MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIB79ucdBUIgDMJg7/rOZO5/WGnQ0NikCoSPvzEYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAN787i//J6bGmWTutbH0PJKsnRpbp8beuXH0h/H1awAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYn5cUCIEgiII5438nff/DSoKeQYQIaHhUUYsGAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAL/rdL/8npsaZZO60sXQ8kqxdNbauGnsPGkcPxtu/AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALjYt2PfNqowAOCffbbbFBAhoEgEUJE6wEJTt7R0RQgUMfAnIEWpUwIuhTYDrSJKFjaUuQuCESEkUNjyP3RupC5l65AhSEwMQXe+S8+JoVFp79zm95Oe3+fz9b3vna0qn98ZAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKCw9W682szjJH2YHMTFsdvbKwtpv7mnT22s3ZlJWxo3Ks77CfBa+cnx6foSAQAA4PBIivo+Iu621+fSvjmZ1f/t4py05v/huUFc1PN76/7N7ZWj+UszRf3/+2/3XtqdaDLJ5kkHXVzq907tT6X1mJY49p5/4Bmt7Mpn370k2RvS/HD1xa12dj0b39269X4nC49UkS0A8DBOFn0eFH8PpX23zsQAODRapcK7qP+TyXpzAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKjC1mo8U8SNiJhp3Y9Tm9srC6P6b9buzGzk7dzNm2vlMdMh2hGxuNTvnapwLeOruJrXP5vv93tXrl6rOjgeESNeunGwf57k6f/rOZ2IGDpy4uUR43x8gLn2jLMvyD+eUe01nEjX98CTG0NHGvsu+Hs7A3V8AKoKmvn7My75PMqg+Ow9+pEr/u8IAICnXjtvaSV6t70+lx5rTEXs/Dhc/79RimOo7t+5MTgyeL5Rqv/vfXLudnmucv3frWh9T4LZ5UtfzF69dv2tpUvzF3sXe5+/fbr7TvfM+bNnz89m35XMLkbTNyYAAAD8D528lev/5tT+/f9jpTj+Y/+/XP9/+X336/Jcifp/pPubfnVnAgAAcBh1dqMXXv/rz8aIMxqdTnw1v7x8pTt43H1+evBYaboP6UjeyvV/MlV3VgAAAEAVtlYbQ/v/F0pxHHD//9mfXvmlPGYSERMRlyOid3Lhcv9CdcsZa1X8UDmbqFP3SgEAAKjLRN7K+//t7P7/5u4tD82IePNExN/5b/jjgPV/8sG3P5fnKt//f6bSVY6f5vTgemT9dERruu6MAAAAeJodzVta7P/RXp/79NdjH3Xc/w8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABQtX8CAAD//4ztMoY=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='sched_switch\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0xa18402, 0x0, 0x1, 0x0, &(0x7f0000000000)) chdir(&(0x7f0000000140)='./file0\x00') r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000340)={'#! ', './file0'}, 0xb) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) 6.631461156s ago: executing program 3 (id=6068): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000000000405e049d000000000000010902240001000000000904000001030000000b2100000001220500090581030000000000"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x6, 0x8, 0x5, 0x101, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r1}, &(0x7f0000000080), &(0x7f0000000200)='%pi6 \x00'}, 0x20) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000000c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x10, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@call={0x85, 0x0, 0x0, 0x2a}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='ext4_request_inode\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0x40010) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="002205eb0e00008156cc10"], 0x0}, 0x0) syz_usb_connect$printer(0x5, 0x2d, &(0x7f0000000300)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x60, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0xa0, 0x4, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x7, 0x1, 0x1, 0x7, "", {{{0x9, 0x5, 0x1, 0x2, 0x40, 0x16, 0x2, 0x8}}}}}]}}]}}, &(0x7f0000000600)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x201, 0xcd, 0x6, 0x6, 0x8, 0x3f}, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0x4, [{0x10, &(0x7f00000003c0)=@string={0x10, 0x3, "a4fd8745d09f4cc3759a3c7adeb5"}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x44d}}, {0x4, &(0x7f0000000500)=@lang_id={0x4, 0x3, 0x1823}}, {0x5, &(0x7f00000005c0)=@string={0x5, 0x3, "80680f"}}]}) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x80) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, r5, 0x10}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x400, 0x10001, &(0x7f0000000b40)=0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r8}, 0x10) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r6, &(0x7f0000000040)={0x50, 0x0, r9, {0x7, 0x1f}}, 0x50) syz_fuse_handle_req(r6, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000340)='./file0\x00', 0x0, 0x0) 6.595640702s ago: executing program 4 (id=6069): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = dup3(r1, r0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$key(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="02130000050000000000000000000000030018"], 0x28}}, 0x0) 6.552888938s ago: executing program 4 (id=6070): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x5}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r3, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x7, 0x0, 0x140000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@nouid32}, {@lazytime}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}]}, 0x1, 0x5ff, &(0x7f0000001680)="$eJzs3c9vVNUeAPDvnU5LS3mvhby893iLxyTGQKK0tIBpjImwNaTBH3HjxkoLIgUaWqNFE0qCGxPjxhgTVy7E/0KJbFnpyoULXRkSooaliWNmem/ptHdaOrS92Pv5JEPvPWfunHOZfnvOPXPOnQBKq9b4pxKxPyJmkoiBZGEprxppZm3xefd/f/9M45FEvf7yr0kkaVr2/CT92Z8e3BsR332bxL6u1eXOzl+9MDE9PXUl3R+euzgzPDt/9fD5ixPnps5NXRp9ZnSsGsfHRo50dF7XctJO3XjrnYEPx1/78vM/kpGvfhxP4kS8kD5x+XlsllrUmv8nyeqs/rHNLqwgXenvyfK3OKkWWCE2JHv/uiPiPzEQXfHgzRuID14stHLAlqonEXWgpBLxDyWV9QOya/uV18GVQnolwHa4d3JxAGB1/FcXxwajtzk2sPt+EsuHdZKI6GxkrtWeiLhze/zG2dvjN2KLxuGAfAvXI+K/efGfNON/MHpjsBn/lZb4b/QLTqc/G+kvdVj+yqFi8Q/bZzH+e9eM/2gT/68vi/83Oiy/9mDzzb6W+O/r9JQAAAAAAACgtG6djIin8z7/ryzN/4mc+T/9EXFiE8qvrdhf/fl/5e4mFAPkuHcy4rnc+b+VbPbvYFe69Y/mfIDu5Oz56akjEfHPiDgU3bsa+yNrlHH4o32ftcurpfP/skej/DvpXMC0Hneru1qPmZyYm3jU8wYi7l2P+F/u/N9kqf1Pctr/xt+DmYcsY9+TN0+3y1s//oGtUv8i4mBu+//grhVJu/tzHD92fGzkyHCzPzCc9QpW+/97H3/drvxO498tJuDRNdr/3WvH/2Cy/H49sxsv4+h8td4ur9P+f0/ySvOWMz1p2rsTc3NXRiJ6klNdjdSW9NGN1xl2oiwesnhpxP+hJ9Ye/8vr//dFxMKK105+a11TnPn3n/0/t6uP/j8UpxH/kxtq/ze+MXpz8JvsxU6suBnew7X/x5pt/aE0xfgfLPo0i6ee1vSccKzmZW13fQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgJ6hExJ5IKkNL25XK0FBEf0T8K3ZXpi/Pzj119vLblyYbec3v/69k3/Q7sLifZN//P7hsf3TF/tGI2BsRn3T1NfeHzlyeniz65AEAAAAAAAAAAAAAAAAAAOAx0b96/f9P/WneL10FVw7YetWiKwAUJif+vy+iHsD20/5DeXUS/z1bUA9g+2n/obzEP5SX+IfyEv9QXuIfykv8AwAAAADAjrL3wK0fkohYeLav+YhlU/u7C60ZsNUqRVcAKIxb/EB5mfoD5eUaH0jWye9te9B6R65l5swjHAwAAAAAAAAAAAAApXNwv/X/UFbW/0N5Wf8P5ZWt/z9QcD2A7ecaH4h1VvLnrv9f9ygAAAAAAAAAAAAAYDPNzl+9MDE9PXXl77nxfERs1gu+WujpVCJiM16ntpEn1+v1a43fgsfhrdwBG9lU+MelPis2srV+D3dUcX+TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAVn8FAAD//3UZIcI=") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@ld}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x0, 0x10000) read$msr(r4, &(0x7f00000041c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x39d, &(0x7f0000001200)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa000800445d038f00670000402f9078e0000001640101018917bcffffffff7f0000010a0101016401010264010101830bb4e00000027f000001440c2d010a01010000000007832701e00000010a01010200000000ac1414bbe000000164010100e0000002ac1e00016401010244147100000000070000000300000040000007ff830f7fac1414aaac1414117f000001000000000420880b002d000100099a97f46ba11d4c877774f23fbefc4ec8fbad2bf7853aa3ca8f4d3fe54e001bc637436867c09ef87866be12618d0400080000058001a4039b93ae82eb82a182dd1460ede797d4faf1793465f6904d8790b73daee7b61947db82cff9b4583529582719e289feef156a643843de1ae77475e6d98f68c529a05d3d457d27f974201ccb1ba6ec377e531aade6a14e3ae934698ece104e73c859a849c35955ae5c83679c0b9fcb885f622e3f12b369276e77d3706a9c2403c382e270ee39c1fd276bbc21ad0b5ed21341c2381f300b18a1c706860e89419038d3fd4cabf5777d8fa2194ee15964c539e5621c3c72f4fefeaa37379c24222476aa64c144e39f5da960422dab0ab9914d0a47ed07a91ecc0496f631981829f7fcf9cb1deb87f4248a7b0c5d010086dd0008e5da0414fc33e6e7365e6f5535aceecb86d69fd85fae191d409d55cd1bdf761b66bf769e7b407f65c5fb2e6420324ebaf24390e21e27874055886d0e0f89c0b4f607d8991475c49594e1d6a0362f2dea9fdcd5e6547915e5228a748971c19fd601200000000000000d5a105ee6045a390ddc563b39972027a989cfa3f2d5ea72f2d772aff8f942496855018a0238a62eb691ffc64ed2300e44774752e4cec04c77b9f8982c080ff6fa6c8703d65dcac7f675b5282ca9e2516838266ef0c65dae13e61de47cc11fb52a5ac7e1c60752067226abd28a86b1ac9db843ef235e4a8dd868aefec58614d990a7eb9ca69625d789c74440f5b42d4545080088be00000004100337070100000000000080080022eb0000000021108eff0200000000000005003f10150800655800000002e1ea54d62b1b51c9df6db83042e469502bd9036bfc0e27c0c2f24dda5f1d34896321daf95d5a46d3161c7884c87cd6769fb77311b9ce0ad7882d49ee73d7f1f750288bed2599870cea21f22595f7ebe58a8a3577605f6ccfb1f26ecd4ac4a2c1369f0dc6f899b916664d1b5f9e312c2ddf69232434bdbcbd8556469426a4a911403c6d0255e94483c18830d241a6f225c79785e878b6a7fc5451e1b5af8ca07817a1aaa9671c944f302725f3532706aa882ff4f1366c813294a7dedc01abd470063917e4fb1d1e2e76d06808e727f2a799d89c56517f92fc98ed8fab797c2123e7ccb72f7499d6828fa0d674ce1d5a643aa242ad7bf21a509ece9aad50a97cb8cabd5770826d0c2f20182353406f85606f3e551c5387580e79ae64e734e609a88d7b73ad24b02b6bd47c09f6cd1c887aea4d6e179a4a3134969f6a220d3c6ebd3925bb5bef82bdeb44d5e268ef2a9282af4f08836b3ea87ae63e8534e5466fb5c769430b4e2c45958a8ba3564b66fe3f52"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000080), 0xe0000000) 6.276150161s ago: executing program 1 (id=6071): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000001440)={0x24, 0x0, 0x0, &(0x7f00000013c0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000c80)={0x2c, 0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="0003040000000403"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000d8ffffffb703000008000000b70400000000925e8500000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_usb_control_io$hid(r0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, 0x0, &(0x7f0000000bc0)=ANY=[@ANYBLOB="000304"], 0x0, 0x0, 0x0}, 0x0) 5.277768213s ago: executing program 0 (id=6072): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) socket$unix(0x1, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) io_pgetevents(0x0, 0x5, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680}, 0x0) 4.376901391s ago: executing program 2 (id=6073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000900000f0100000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xba, &(0x7f000000cf3d)=""/186, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x3a) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0xf5, 0x103000) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f00000001c0)) r4 = open(&(0x7f0000000080)='./bus\x00', 0x400141042, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fadvise64(r4, 0x0, 0x0, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f0000000040)='cpuset.cpus\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9c) syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x400, &(0x7f0000000680)={[{@fat=@gid={'gid', 0x3d, 0xee01}}, {@shortname_win95}, {@uni_xlate}, {@fat=@showexec}, {@utf8}, {@numtail}, {@rodir}, {@fat=@nfs}, {@uni_xlate}]}, 0x0, 0x237, &(0x7f0000000300)="$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") 1.998706775s ago: executing program 1 (id=6074): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, &(0x7f0000000400), &(0x7f0000000280), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cpu.stat\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec8500000050000000850000000f0000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000100)='kfree\x00', r3}, 0x10) io_setup(0x8, &(0x7f00000002c0)=0x0) r5 = openat$sysfs(0xffffff9c, &(0x7f00000037c0)='/sys/kernel/notes', 0x0, 0x0) io_submit(r4, 0x1, &(0x7f00000004c0)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0}]) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000001380)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000480)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r8, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r9}, 0x10) process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) getdents(r7, &(0x7f0000001000)=""/4085, 0xff5) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.987032287s ago: executing program 4 (id=6075): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f0000000180)=@v1={0x0, @adiantum, 0x0, @desc1}) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000a40)={0x14, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.909405728s ago: executing program 0 (id=6076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getrlimit(0xe, &(0x7f0000000340)) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$inet6_udplite(0xa, 0x2, 0x88) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000100), 0x1001) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x0, 0x0, 0x1004}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) 1.653925557s ago: executing program 3 (id=6077): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="186e649ce5000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$unix(0x1, 0x2, 0x0) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000005640)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00'}, 0x90) ioctl$UFFDIO_CONTINUE(0xffffffffffffffff, 0xc020aa07, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) io_setup(0x7fff, &(0x7f0000000300)=0x0) io_pgetevents(r5, 0x5, 0x4, &(0x7f0000000340)=[{}, {}, {}, {}], &(0x7f0000000440)={0x0, 0x989680}, 0x0) 1.57555523s ago: executing program 2 (id=6078): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kmem_cache_free\x00', r1}, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r3, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff0184001108003950"], 0x15) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r2, @ANYBLOB=',wfdno=', @ANYRESHEX=r3]) 1.393973397s ago: executing program 2 (id=6079): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000003c0)={0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="e39e2818be3ee32c1674aa8c3bb372268f003b4f0d7889809911bc2491139158a10968398c3b9960d95775dfc15eb9b669297ab74c285a45db13c1a42f409b487ee78faf5ca398e97a1bc2b88c6f20b58840e09d84a23e0768d36871ede34c0701aa4d4864b3d30885110d5bab4473a8c1fc537cc6a867b2da47e1f62f5264ef35c663deb0700b185fc09c8da4fd06c9a621a9f62b86e2afc94ce8203a7ad947a98a39e5cce2e9a6cbf1c68fbc61996fa4b3c13c7ed99f", @ANYRES8=r1], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={r0, 0x0, &(0x7f0000000280)=@udp}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r7, &(0x7f0000002d80)={0x2020}, 0x2025) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./bus\x00', 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) fchmodat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', 0x0) 1.037759842s ago: executing program 0 (id=6080): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000d50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r0}, 0x11) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x5}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b702000003"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89101) mount_setattr(r2, &(0x7f0000001d80)='.\x00', 0x0, &(0x7f0000001dc0)={0x7, 0x0, 0x140000}, 0x20) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, 0x0) syz_usb_connect(0x1, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0) syz_mount_image$ext4(&(0x7f0000000580)='ext4\x00', &(0x7f00000005c0)='./file0\x00', 0x1008002, &(0x7f00000003c0)={[{}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x84}}, {@resuid}, {@nouid32}, {@lazytime}, {@jqfmt_vfsold}, {@dioread_lock}, {@data_err_abort}]}, 0x1, 0x5ff, &(0x7f0000001680)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x0, 0x0, 0x0, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) remap_file_pages(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x8, 0x0, 0x0) read$msr(r3, &(0x7f00000041c0)=""/102400, 0x19000) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) memfd_create(0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) syz_emit_ethernet(0x39d, &(0x7f0000001200)=ANY=[@ANYBLOB="0180c2000003aaaaaaaaaa000800445d038f00670000402f9078e0000001640101018917bcffffffff7f0000010a0101016401010264010101830bb4e00000027f000001440c2d010a01010000000007832701e00000010a01010200000000ac1414bbe000000164010100e0000002ac1e00016401010244147100000000070000000300000040000007ff830f7fac1414aaac1414117f000001000000000420880b002d000100099a97f46ba11d4c877774f23fbefc4ec8fbad2bf7853aa3ca8f4d3fe54e001bc637436867c09ef87866be12618d0400080000058001a4039b93ae82eb82a182dd1460ede797d4faf1793465f6904d8790b73daee7b61947db82cff9b4583529582719e289feef156a643843de1ae77475e6d98f68c529a05d3d457d27f974201ccb1ba6ec377e531aade6a14e3ae934698ece104e73c859a849c35955ae5c83679c0b9fcb885f622e3f12b369276e77d3706a9c2403c382e270ee39c1fd276bbc21ad0b5ed21341c2381f300b18a1c706860e89419038d3fd4cabf5777d8fa2194ee15964c539e5621c3c72f4fefeaa37379c24222476aa64c144e39f5da960422dab0ab9914d0a47ed07a91ecc0496f631981829f7fcf9cb1deb87f4248a7b0c5d010086dd0008e5da0414fc33e6e7365e6f5535aceecb86d69fd85fae191d409d55cd1bdf761b66bf769e7b407f65c5fb2e6420324ebaf24390e21e27874055886d0e0f89c0b4f607d8991475c49594e1d6a0362f2dea9fdcd5e6547915e5228a748971c19fd601200000000000000d5a105ee6045a390ddc563b39972027a989cfa3f2d5ea72f2d772aff8f942496855018a0238a62eb691ffc64ed2300e44774752e4cec04c77b9f8982c080ff6fa6c8703d65dcac7f675b5282ca9e2516838266ef0c65dae13e61de47cc11fb52a5ac7e1c60752067226abd28a86b1ac9db843ef235e4a8dd868aefec58614d990a7eb9ca69625d789c74440f5b42d4545080088be00000004100337070100000000000080080022eb0000000021108eff0200000000000005003f10150800655800000002e1ea54d62b1b51c9df6db83042e469502bd9036bfc0e27c0c2f24dda5f1d34896321daf95d5a46d3161c7884c87cd6769fb77311b9ce0ad7882d49ee73d7f1f750288bed2599870cea21f22595f7ebe58a8a3577605f6ccfb1f26ecd4ac4a2c1369f0dc6f899b916664d1b5f9e312c2ddf69232434bdbcbd8556469426a4a911403c6d0255e94483c18830d241a6f225c79785e878b6a7fc5451e1b5af8ca07817a1aaa9671c944f302725f3532706aa882ff4f1366c813294a7dedc01abd470063917e4fb1d1e2e76d06808e727f2a799d89c56517f92fc98ed8fab797c2123e7ccb72f7499d6828fa0d674ce1d5a643aa242ad7bf21a509ece9aad50a97cb8cabd5770826d0c2f20182353406f85606f3e551c5387580e79ae64e734e609a88d7b73ad24b02b6bd47c09f6cd1c887aea4d6e179a4a3134969f6a220d3c6ebd3925bb5bef82bdeb44d5e268ef2a9282af4f08836b3ea87ae63e8534e5466fb5c769430b4e2c45958a8ba3564b66fe3f52"], 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000002180)={0x2020}, 0x2020) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe0000000) 0s ago: executing program 3 (id=6081): write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) mkdir(&(0x7f0000000380)='./file0\x00', 0x0) pipe2$9p(0x0, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(0xffffffffffffffff) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f0000000580)={'trans=fd,', {}, 0x2c, {'wfdno', 0x3d, r2}}) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000d00)) fchownat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.645993][ T30] audit: type=1326 audit(1853583258.004:6129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.689950][ T30] audit: type=1326 audit(1853583258.044:6130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.790766][ T30] audit: type=1326 audit(1853583258.084:6131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.837283][ T30] audit: type=1326 audit(1853583258.084:6132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.871299][ T30] audit: type=1326 audit(1853583258.274:6133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1565.907296][ T30] audit: type=1326 audit(1853583258.274:6134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1566.032086][T19602] binder: 19597:19602 ioctl c0306201 0 returned -14 [ 1566.241852][ T30] audit: type=1326 audit(1853583258.274:6135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1566.722087][ T30] audit: type=1326 audit(1853583258.274:6136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1566.817620][ T30] audit: type=1326 audit(1853583258.274:6137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19586 comm="syz.3.5617" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb385bccae9 code=0x7ffc0000 [ 1567.276310][T19593] loop1: detected capacity change from 0 to 40427 [ 1567.314944][T19593] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1567.333293][T19593] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1567.352396][T19593] F2FS-fs (loop1): invalid crc value [ 1567.383230][T19593] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1567.537291][T19593] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1567.544371][T19593] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1567.656651][T19605] loop4: detected capacity change from 0 to 40427 [ 1567.754858][T19605] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1567.770485][T19605] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1567.801102][T19605] F2FS-fs (loop4): invalid crc value [ 1567.825815][T19605] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1567.952764][T19605] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1567.961202][T19605] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1568.907436][T18060] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1568.922250][T18060] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1568.952053][T19052] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1569.312211][T19052] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1569.338412][T19052] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1569.362752][T19052] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1569.371711][T19052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1569.408012][T19052] usb 4-1: config 0 descriptor?? [ 1569.453560][T19052] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1569.594345][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1569.603790][ T10] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1569.842089][T16248] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 1570.092040][T16248] usb 5-1: Using ep0 maxpacket: 8 [ 1570.964419][T19052] usb 4-1: USB disconnect, device number 22 [ 1571.044883][T16248] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1571.061980][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1571.073299][T16248] usb 5-1: config 0 descriptor?? [ 1571.542121][T19665] binder: 19659:19665 ioctl c0306201 0 returned -14 [ 1572.047193][T16248] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1572.086353][T19668] loop0: detected capacity change from 0 to 128 [ 1572.162062][T16248] asix: probe of 5-1:0.0 failed with error -71 [ 1572.183068][T16248] usb 5-1: USB disconnect, device number 32 [ 1574.572164][T16248] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 1575.832336][T16248] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1575.851878][T16248] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1575.877225][T16248] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1575.886830][T16248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1577.648067][T16248] usb 2-1: config 0 descriptor?? [ 1577.692408][T19727] loop0: detected capacity change from 0 to 128 [ 1577.713593][T16248] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1577.915530][T16248] usb 2-1: USB disconnect, device number 3 [ 1578.354305][ T30] kauditd_printk_skb: 54 callbacks suppressed [ 1578.354340][ T30] audit: type=1326 audit(1853583270.764:6192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="syz.2.5652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1578.434465][ T30] audit: type=1326 audit(1853583270.804:6193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="syz.2.5652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1578.506985][ T30] audit: type=1326 audit(1853583270.804:6194): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="syz.2.5652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1578.610118][ T30] audit: type=1326 audit(1853583270.804:6195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19734 comm="syz.2.5652" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1579.471993][ T2285] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 1579.746548][T19746] loop0: detected capacity change from 0 to 40427 [ 1579.789241][T19746] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1579.804965][T19746] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1579.824503][T19746] F2FS-fs (loop0): invalid crc value [ 1579.832150][ T2285] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1579.853692][ T2285] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1579.877949][T19746] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1579.897588][ T2285] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1579.917636][ T2285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1580.328746][T19746] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1580.341580][T19746] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1580.745703][ T2285] usb 4-1: config 0 descriptor?? [ 1580.783404][ T2285] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1581.734355][T19748] syz.3.5655[19748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1581.734592][T19748] syz.3.5655[19748] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1581.885584][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1581.908103][ T10] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1582.202132][ T2285] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 1582.592493][ T2285] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1582.602554][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1582.649226][ T2285] usb 2-1: config 0 descriptor?? [ 1582.659273][T19773] UDC core: couldn't find an available UDC or it's busy: -16 [ 1582.667167][T19773] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1582.930913][T19768] loop1: detected capacity change from 0 to 1024 [ 1582.952570][T19768] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1582.995153][T19768] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1583.061578][ T30] audit: type=1326 audit(1853583275.464:6196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.135087][ T30] audit: type=1326 audit(1853583275.504:6197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.228653][ T30] audit: type=1326 audit(1853583275.504:6198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.303847][ T30] audit: type=1326 audit(1853583275.504:6199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.381663][ T30] audit: type=1326 audit(1853583275.504:6200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.464321][ T30] audit: type=1326 audit(1853583275.504:6201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.536549][ T30] audit: type=1326 audit(1853583275.504:6202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.609829][ T30] audit: type=1326 audit(1853583275.504:6203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.693227][ T30] audit: type=1326 audit(1853583275.504:6204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.781278][ T30] audit: type=1326 audit(1853583275.504:6205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.860235][ T30] audit: type=1326 audit(1853583275.504:6206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1583.952386][ T30] audit: type=1326 audit(1853583275.504:6207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1584.004949][T16248] usb 4-1: USB disconnect, device number 23 [ 1584.041275][ T30] audit: type=1326 audit(1853583275.504:6208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1584.072312][ T2285] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1584.086136][T19790] loop4: detected capacity change from 0 to 128 [ 1584.092121][ T2285] asix: probe of 2-1:0.0 failed with error -71 [ 1584.130102][ T2285] usb 2-1: USB disconnect, device number 4 [ 1584.133386][ T30] audit: type=1326 audit(1853583275.514:6209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19776 comm="syz.2.5662" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1584.861656][T19787] loop2: detected capacity change from 0 to 40427 [ 1585.084162][T19787] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1585.102762][T19787] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1585.141788][T19787] F2FS-fs (loop2): invalid crc value [ 1585.203208][T19787] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1585.496332][T19787] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1585.514091][T19787] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1585.914984][T19809] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 1589.322475][T10931] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 1590.402296][T10931] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1590.438680][T10931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1590.513845][T19858] overlayfs: failed to create directory ./file0/work (errno: 126); mounting read-only [ 1590.687843][T10931] usb 1-1: config 0 descriptor?? [ 1591.085075][ T39] usb 4-1: new low-speed USB device number 24 using dummy_hcd [ 1591.125040][T19835] loop0: detected capacity change from 0 to 1024 [ 1591.224582][T19835] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1591.291345][T19835] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1591.728322][ T39] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1591.764720][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1591.886371][ T39] usb 4-1: config 0 descriptor?? [ 1592.335362][T19857] loop3: detected capacity change from 0 to 1024 [ 1592.444567][T19857] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1592.490584][T19857] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1592.619724][T19844] loop1: detected capacity change from 0 to 40427 [ 1592.733413][T19844] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1592.747231][T19844] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1592.770443][T19844] F2FS-fs (loop1): invalid crc value [ 1592.821688][T19844] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1592.992271][T10931] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1593.003856][T10931] asix: probe of 1-1:0.0 failed with error -71 [ 1593.023229][T10931] usb 1-1: USB disconnect, device number 3 [ 1593.652135][ T39] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1593.663332][ T39] asix: probe of 4-1:0.0 failed with error -71 [ 1593.679141][ T39] usb 4-1: USB disconnect, device number 24 [ 1596.882470][T19934] loop4: detected capacity change from 0 to 128 [ 1597.979905][T19920] loop2: detected capacity change from 0 to 40427 [ 1598.303279][T19920] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1598.463041][T19920] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1598.954910][T19920] F2FS-fs (loop2): invalid crc value [ 1598.960639][T19920] F2FS-fs (loop2): Failed to start F2FS issue_checkpoint_thread (-12) [ 1598.969990][T10910] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 1599.232041][T10910] usb 5-1: Using ep0 maxpacket: 8 [ 1599.362147][T10910] usb 5-1: unable to get BOS descriptor or descriptor too short [ 1599.460462][T10910] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 1599.470550][T10910] usb 5-1: can't read configurations, error -71 [ 1600.775354][T19954] loop1: detected capacity change from 0 to 128 [ 1601.220121][T19974] loop4: detected capacity change from 0 to 128 [ 1602.562034][T15611] usb 3-1: new low-speed USB device number 22 using dummy_hcd [ 1602.922090][T15611] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1602.940588][T15611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1602.979520][T15611] usb 3-1: config 0 descriptor?? [ 1603.267940][T19985] loop2: detected capacity change from 0 to 1024 [ 1603.342353][T19985] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1603.405505][T19985] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1603.481089][T19990] loop0: detected capacity change from 0 to 40427 [ 1603.568916][T19990] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1603.608480][T19990] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1603.640607][T19990] F2FS-fs (loop0): invalid crc value [ 1603.684259][T19990] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1603.861658][T19990] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1603.883023][T19990] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1605.314951][T19813] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1605.338627][T19813] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1605.622213][T15611] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1605.656668][T15611] asix: probe of 3-1:0.0 failed with error -71 [ 1605.684384][T15611] usb 3-1: USB disconnect, device number 22 [ 1605.772089][T16248] usb 5-1: new low-speed USB device number 35 using dummy_hcd [ 1606.113133][T20030] loop0: detected capacity change from 0 to 128 [ 1606.132439][T16248] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1606.152274][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1606.193604][T16248] usb 5-1: config 0 descriptor?? [ 1606.445994][T20018] loop4: detected capacity change from 0 to 1024 [ 1606.511439][T20018] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1606.564971][T20018] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1608.642210][T16248] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1608.671759][T16248] asix: probe of 5-1:0.0 failed with error -71 [ 1608.707389][T16248] usb 5-1: USB disconnect, device number 35 [ 1608.919198][T20054] loop1: detected capacity change from 0 to 128 [ 1610.772240][T15611] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 1611.552027][T15611] usb 1-1: Using ep0 maxpacket: 32 [ 1611.812110][T15611] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1611.832001][T15611] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1611.841175][T15611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1611.882549][T15611] usb 1-1: config 0 descriptor?? [ 1612.016804][T20089] loop4: detected capacity change from 0 to 128 [ 1612.672126][T16248] usb 3-1: new low-speed USB device number 23 using dummy_hcd [ 1612.735140][T15611] usb 1-1: can't set config #0, error -71 [ 1612.754311][T15611] usb 1-1: USB disconnect, device number 4 [ 1613.072179][T16248] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1613.091549][T16248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1613.130431][T16248] usb 3-1: config 0 descriptor?? [ 1614.115096][T20087] loop2: detected capacity change from 0 to 1024 [ 1614.246318][T20087] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1614.356090][T20087] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1614.476565][T16248] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1614.507008][T16248] asix: probe of 3-1:0.0 failed with error -71 [ 1614.542168][T16248] usb 3-1: USB disconnect, device number 23 [ 1614.742038][ T39] usb 5-1: new low-speed USB device number 36 using dummy_hcd [ 1615.252924][ T39] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1615.346948][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1615.614019][ T39] usb 5-1: config 0 descriptor?? [ 1616.132189][T10910] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 1616.254728][T20120] loop4: detected capacity change from 0 to 1024 [ 1616.284303][T20120] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1616.306396][T20120] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1616.942778][T16248] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 1617.222162][T10910] usb 2-1: Using ep0 maxpacket: 32 [ 1617.352195][T10910] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.368544][T10910] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1617.387252][T10910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.408101][T10910] usb 2-1: config 0 descriptor?? [ 1617.454111][T10910] hub 2-1:0.0: bad descriptor, ignoring hub [ 1617.461000][T10910] hub: probe of 2-1:0.0 failed with error -5 [ 1617.483057][T10910] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1617.532099][T16248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1617.561990][T16248] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1617.571820][T16248] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1617.582201][T16248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1617.617197][T16248] usb 3-1: config 0 descriptor?? [ 1617.672022][ T2285] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1617.682157][ T39] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1617.694624][ T39] asix: probe of 5-1:0.0 failed with error -71 [ 1617.714551][ T39] usb 5-1: USB disconnect, device number 36 [ 1618.062154][ T2285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1618.074258][ T2285] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1618.090063][ T2285] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1618.102784][ T2285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1618.114135][ T2285] usb 4-1: config 0 descriptor?? [ 1618.604941][ T2285] plantronics 0003:047F:FFFF.0084: ignoring exceeding usage max [ 1618.627763][ T2285] plantronics 0003:047F:FFFF.0084: No inputs registered, leaving [ 1618.658936][ T2285] plantronics 0003:047F:FFFF.0084: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1618.852119][T16248] uclogic 0003:256C:006D.0083: failed retrieving Huion firmware version: -71 [ 1618.864351][T16248] uclogic 0003:256C:006D.0083: failed probing parameters: -71 [ 1618.881714][T16248] uclogic: probe of 0003:256C:006D.0083 failed with error -71 [ 1618.908970][T16248] usb 3-1: USB disconnect, device number 24 [ 1619.032009][ T39] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1619.041175][T20157] loop4: detected capacity change from 0 to 131072 [ 1619.167310][T20157] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1619.249967][T20157] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1619.402129][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1619.532247][T16248] usb 2-1: USB disconnect, device number 5 [ 1619.611390][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1619.623729][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1619.633939][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1619.661290][ T39] usb 1-1: config 0 descriptor?? [ 1620.562062][T10910] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 1620.932945][T10910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1620.949193][T10910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1620.963019][T10910] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1620.975191][T10910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1620.993691][T10910] usb 3-1: config 0 descriptor?? [ 1621.192091][ T39] usb 1-1: string descriptor 0 read error: -71 [ 1621.212166][ T39] uclogic 0003:256C:006D.0085: failed retrieving string descriptor #200: -71 [ 1621.221912][ T39] uclogic 0003:256C:006D.0085: failed retrieving pen parameters: -71 [ 1621.230989][ T39] uclogic 0003:256C:006D.0085: failed probing pen v2 parameters: -71 [ 1621.240698][ T39] uclogic 0003:256C:006D.0085: failed probing parameters: -71 [ 1621.249304][ T39] uclogic: probe of 0003:256C:006D.0085 failed with error -71 [ 1621.263578][ T39] usb 1-1: USB disconnect, device number 5 [ 1622.072120][T15611] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1622.182103][ T39] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1622.521176][T15611] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.534880][T15611] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1622.551525][T15611] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1622.564755][T15611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.575346][T15611] usb 2-1: config 0 descriptor?? [ 1622.613463][T15611] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1622.662211][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1622.675811][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1622.686517][ T39] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1622.703547][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1622.712427][T10910] uclogic 0003:256C:006D.0086: failed retrieving Huion firmware version: -71 [ 1622.726280][T10910] uclogic 0003:256C:006D.0086: failed probing parameters: -71 [ 1622.726608][ T39] usb 1-1: config 0 descriptor?? [ 1622.741453][T10910] uclogic: probe of 0003:256C:006D.0086 failed with error -71 [ 1622.760605][T10910] usb 3-1: USB disconnect, device number 25 [ 1622.856649][T20195] loop4: detected capacity change from 0 to 40427 [ 1622.952810][T20195] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1622.962172][T20195] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1622.975401][T20195] F2FS-fs (loop4): invalid crc value [ 1622.985587][T20195] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1623.075932][T20195] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1623.083133][T20195] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1624.261167][T19813] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1624.272812][T19813] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1624.512496][ T39] uclogic 0003:256C:006D.0087: failed retrieving Huion firmware version: -71 [ 1624.522768][ T39] uclogic 0003:256C:006D.0087: failed probing parameters: -71 [ 1624.537539][ T39] uclogic: probe of 0003:256C:006D.0087 failed with error -71 [ 1624.569095][ T39] usb 1-1: USB disconnect, device number 6 [ 1624.738377][T16248] usb 2-1: USB disconnect, device number 6 [ 1624.862021][T10910] usb 5-1: new low-speed USB device number 37 using dummy_hcd [ 1625.102174][T16248] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1625.222233][T10910] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1625.236639][T10910] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1625.360933][T20219] loop0: detected capacity change from 0 to 128 [ 1625.896760][ T20] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 1625.998802][T10910] usb 5-1: config 0 descriptor?? [ 1626.142194][T16248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1626.153619][T16248] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1626.164485][T16248] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1626.180437][T16248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.199731][T16248] usb 2-1: config 0 descriptor?? [ 1626.256684][T20210] loop4: detected capacity change from 0 to 1024 [ 1626.342777][T20210] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1626.359462][T20210] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1626.362245][ T20] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1626.420992][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1626.446963][ T20] usb 3-1: config 0 descriptor?? [ 1626.458891][T10910] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1626.471536][T10910] asix: probe of 5-1:0.0 failed with error -71 [ 1626.485257][T10910] usb 5-1: USB disconnect, device number 37 [ 1626.710418][T20214] loop2: detected capacity change from 0 to 1024 [ 1626.785420][T20214] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1626.804710][T20214] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1626.952501][T16248] usb 2-1: language id specifier not provided by device, defaulting to English [ 1627.182578][ T20] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1627.194147][ T20] asix: probe of 3-1:0.0 failed with error -71 [ 1627.217327][T16248] uclogic 0003:256C:006D.0088: failed retrieving Huion firmware version: -71 [ 1627.235971][ T20] usb 3-1: USB disconnect, device number 26 [ 1627.243398][T16248] uclogic 0003:256C:006D.0088: failed probing parameters: -71 [ 1627.275546][T16248] uclogic: probe of 0003:256C:006D.0088 failed with error -71 [ 1627.305823][T16248] usb 2-1: USB disconnect, device number 7 [ 1629.565506][T20246] loop1: detected capacity change from 0 to 128 [ 1629.612176][T20150] plantronics 0003:047F:FFFF.0084: timeout initializing reports [ 1629.844327][T20239] bridge0: port 1(bridge_slave_0) entered blocking state [ 1629.851708][T20239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1629.956449][T20239] device bridge_slave_0 entered promiscuous mode [ 1629.964996][T20239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1629.972948][T20239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1629.984134][T20239] device bridge_slave_1 entered promiscuous mode [ 1630.018904][T20238] loop0: detected capacity change from 0 to 40427 [ 1630.064363][T20238] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1630.092256][T20238] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1630.117118][T20238] F2FS-fs (loop0): invalid crc value [ 1630.149275][T10910] usb 4-1: USB disconnect, device number 25 [ 1630.156815][T16248] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 1630.246238][T20238] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1630.423534][T20238] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1630.434057][T20238] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1630.500341][T20239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1630.507738][T20239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1630.642362][T20262] binder: 20258:20262 ioctl c0306201 0 returned -14 [ 1631.219189][T19052] bridge0: port 2(bridge_slave_1) entered disabled state [ 1631.682816][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1631.694476][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1632.126799][T16248] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1632.175987][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1632.184249][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1632.202230][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1632.210927][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1632.220492][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 1632.227696][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1632.242189][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1632.266540][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1632.283731][T16248] usb 5-1: config 0 descriptor?? [ 1632.299436][T15770] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1632.328452][T15770] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1632.429018][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1632.437572][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 1632.444629][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1632.474934][T19052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1632.490551][T19052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1632.501622][T19052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1632.515859][T19052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1632.672434][T20272] loop1: detected capacity change from 0 to 128 [ 1633.358428][T19813] device bridge_slave_1 left promiscuous mode [ 1633.373255][T19813] bridge0: port 2(bridge_slave_1) entered disabled state [ 1633.407744][T19813] device bridge_slave_0 left promiscuous mode [ 1633.424135][T19813] bridge0: port 1(bridge_slave_0) entered disabled state [ 1633.442277][T16248] usbhid 5-1:0.0: can't add hid device: -32 [ 1633.455581][T16248] usbhid: probe of 5-1:0.0 failed with error -32 [ 1633.456843][T19813] device veth1_macvtap left promiscuous mode [ 1633.473834][T19813] device veth0_vlan left promiscuous mode [ 1634.202318][ T39] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1634.561482][T10931] usb 5-1: USB disconnect, device number 38 [ 1634.602033][ T39] usb 1-1: Using ep0 maxpacket: 32 [ 1634.682535][T16248] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1634.691604][T16248] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1634.715815][T20239] device veth0_vlan entered promiscuous mode [ 1634.725851][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1634.897974][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1634.908852][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1634.922222][ T39] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1634.943386][ T39] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1634.962062][ T39] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1634.971778][T20239] device veth1_macvtap entered promiscuous mode [ 1635.007281][ T39] usb 1-1: config 0 descriptor?? [ 1635.899263][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1635.906478][ T39] hub 1-1:0.0: USB hub found [ 1635.912457][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1635.920625][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1635.930389][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1635.939581][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1635.982973][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1636.012332][ T39] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1636.028405][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1636.057308][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1636.082303][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1636.502276][ T39] usbhid 1-1:0.0: can't add hid device: -71 [ 1636.531842][ T39] usbhid: probe of 1-1:0.0 failed with error -71 [ 1636.572899][ T39] usb 1-1: USB disconnect, device number 7 [ 1636.764801][T15611] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 1637.093083][T20295] loop4: detected capacity change from 0 to 40427 [ 1637.130140][T20295] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1637.202192][T16248] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 1637.239933][T20295] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1637.248841][T15611] usb 4-1: config 0 has an invalid descriptor of length 235, skipping remainder of the config [ 1637.259809][T15611] usb 4-1: too many endpoints for config 0 interface 0 altsetting 199: 83, using maximum allowed: 30 [ 1637.274499][T15611] usb 4-1: config 0 interface 0 altsetting 199 has 0 endpoint descriptors, different from the interface descriptor's value: 83 [ 1637.288160][T15611] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1637.311164][T10545] attempt to access beyond end of device [ 1637.311164][T10545] loop4: rw=2049, want=45104, limit=40427 [ 1637.452150][T16248] usb 3-1: Using ep0 maxpacket: 8 [ 1637.472714][T15611] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1637.484279][T15611] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1637.492521][T15611] usb 4-1: Product: syz [ 1637.496906][T15611] usb 4-1: Manufacturer: syz [ 1637.501804][T15611] usb 4-1: SerialNumber: syz [ 1637.509209][T15611] usb 4-1: config 0 descriptor?? [ 1637.573059][T16248] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1637.584867][T16248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1637.597100][T16248] usb 3-1: config 0 descriptor?? [ 1637.812688][ T39] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 1637.862136][T16248] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1637.863651][T15611] usb 4-1: selecting invalid altsetting 0 [ 1637.873184][T16248] asix: probe of 3-1:0.0 failed with error -71 [ 1637.885395][T15611] snd-usb-audio: probe of 4-1:0.0 failed with error -2 [ 1638.023125][T20318] binder: 20314:20318 ioctl c0306201 0 returned -14 [ 1638.094498][T15611] usb 4-1: USB disconnect, device number 26 [ 1638.382783][ T39] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1638.695327][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1638.759859][ T39] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1638.820628][T16248] usb 3-1: USB disconnect, device number 27 [ 1638.941159][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1639.768147][ T39] usb 2-1: config 0 descriptor?? [ 1640.104519][ T39] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1641.196957][ T20] usb 2-1: USB disconnect, device number 8 [ 1642.362060][T16248] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 1642.602016][ T2285] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 1642.802052][T20348] overlayfs: failed to resolve './file2': -2 [ 1643.712413][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.725008][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.736346][T16248] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1643.745632][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1643.755450][T16248] usb 5-1: config 0 descriptor?? [ 1643.772104][ T2285] usb 4-1: Using ep0 maxpacket: 32 [ 1643.892162][ T2285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1643.916541][ T2285] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1643.942084][ T2285] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1643.981643][ T2285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1644.003809][ T2285] usb 4-1: config 0 descriptor?? [ 1644.218531][T20355] loop1: detected capacity change from 0 to 128 [ 1644.843497][ T2285] hub 4-1:0.0: USB hub found [ 1644.886455][ T2285] hub 4-1:0.0: config failed, can't read hub descriptor (err -90) [ 1644.895972][T10910] usb 3-1: new low-speed USB device number 28 using dummy_hcd [ 1645.242613][ T2285] usbhid 4-1:0.0: can't add hid device: -71 [ 1645.262352][ T2285] usbhid: probe of 4-1:0.0 failed with error -71 [ 1645.287895][T20360] loop0: detected capacity change from 0 to 40427 [ 1645.295048][T10910] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1645.305697][ T2285] usb 4-1: USB disconnect, device number 27 [ 1645.315243][T10910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1645.326190][T10910] usb 3-1: config 0 descriptor?? [ 1645.376831][T20360] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1645.396748][T20360] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1645.414429][T20360] F2FS-fs (loop0): invalid crc value [ 1645.439413][T20360] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1645.482251][T16248] uclogic 0003:256C:006D.0089: failed retrieving Huion firmware version: -71 [ 1645.490942][T16248] uclogic 0003:256C:006D.0089: failed probing parameters: -71 [ 1645.917777][T20360] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1645.981458][T20360] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1646.025355][T20351] loop2: detected capacity change from 0 to 1024 [ 1646.251495][T16248] uclogic: probe of 0003:256C:006D.0089 failed with error -71 [ 1646.407889][T16248] usb 5-1: USB disconnect, device number 39 [ 1646.432666][T20351] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1646.515069][T20351] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1647.510383][T15770] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1647.521844][T15770] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1647.662008][T16248] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 1647.702118][ T2285] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1648.032549][T16248] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 1648.062535][ T2285] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1648.074089][ T2285] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1648.102042][ T2285] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1648.111285][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1648.136561][ T2285] usb 2-1: config 0 descriptor?? [ 1648.187351][ T2285] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1648.242619][T16248] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1648.265378][T16248] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1648.285929][T16248] usb 4-1: Product: syz [ 1648.302091][T10910] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1648.313360][T16248] usb 4-1: Manufacturer: syz [ 1648.318805][T16248] usb 4-1: SerialNumber: syz [ 1648.326747][T10910] asix: probe of 3-1:0.0 failed with error -71 [ 1648.345696][T16248] usb 4-1: config 0 descriptor?? [ 1648.359378][T10910] usb 3-1: USB disconnect, device number 28 [ 1648.382135][T20388] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 1648.413172][T20390] syz.1.5816[20390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.413415][T20390] syz.1.5816[20390] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1648.662545][T16248] usb 4-1: USB disconnect, device number 28 [ 1649.372145][T20382] loop4: detected capacity change from 0 to 131072 [ 1649.492663][T20382] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-4) [ 1649.753318][T15611] usb 2-1: USB disconnect, device number 9 [ 1651.162048][T15611] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 1651.202087][ T39] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 1651.852798][T15611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.864184][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1651.919399][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1651.936508][T15611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1652.032559][ T39] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1652.047415][T15611] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1652.117081][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.135461][T15611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1652.542722][ T39] usb 2-1: config 0 descriptor?? [ 1652.548459][T15611] usb 3-1: config 0 descriptor?? [ 1653.205201][T20447] binder: 20442:20447 ioctl c0306201 0 returned -14 [ 1654.452044][T16248] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1654.502021][T10910] usb 4-1: new low-speed USB device number 29 using dummy_hcd [ 1654.692098][T16248] usb 1-1: Using ep0 maxpacket: 32 [ 1654.812155][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1654.823504][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1654.833882][T16248] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1654.843424][T16248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.860092][T16248] usb 1-1: config 0 descriptor?? [ 1654.867521][T10910] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1654.876920][T10910] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1654.896058][T10910] usb 4-1: config 0 descriptor?? [ 1654.913483][T16248] hub 1-1:0.0: USB hub found [ 1655.032176][T15611] uclogic 0003:256C:006D.008B: failed retrieving Huion firmware version: -71 [ 1655.041317][T15611] uclogic 0003:256C:006D.008B: failed probing parameters: -71 [ 1655.049228][T15611] uclogic: probe of 0003:256C:006D.008B failed with error -71 [ 1655.067895][T15611] usb 3-1: USB disconnect, device number 29 [ 1655.089435][T20453] loop4: detected capacity change from 0 to 131072 [ 1655.139438][T20451] loop3: detected capacity change from 0 to 1024 [ 1655.162169][T16248] hub 1-1:0.0: config failed, can't read hub descriptor (err -90) [ 1655.182148][T20453] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1655.199146][T20451] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1655.244906][T20451] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1655.362988][ T39] uclogic 0003:256C:006D.008A: failed retrieving Huion firmware version: -71 [ 1655.376980][ T39] uclogic 0003:256C:006D.008A: failed probing parameters: -71 [ 1655.379107][T20453] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1655.385351][ T39] uclogic: probe of 0003:256C:006D.008A failed with error -71 [ 1655.581708][ T39] usb 2-1: USB disconnect, device number 10 [ 1655.672102][T10910] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1655.682633][T10910] asix: probe of 4-1:0.0 failed with error -71 [ 1655.699020][T10910] usb 4-1: USB disconnect, device number 29 [ 1655.762121][T16248] usbhid 1-1:0.0: can't add hid device: -71 [ 1655.768001][T16248] usbhid: probe of 1-1:0.0 failed with error -71 [ 1655.804223][T16248] usb 1-1: USB disconnect, device number 8 [ 1656.224134][T20469] overlayfs: failed to resolve './file2': -2 [ 1660.862032][T10931] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 1660.894392][T20513] device bridge_slave_1 left promiscuous mode [ 1660.911387][T20513] bridge0: port 2(bridge_slave_1) entered disabled state [ 1661.342152][T10931] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1661.363523][T10931] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1661.442880][T10931] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1661.475475][T10931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1661.507078][T10931] usb 5-1: config 0 descriptor?? [ 1661.563419][T10931] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1661.801122][T20508] syz.4.5845[20508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1661.801362][T20508] syz.4.5845[20508] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1662.020948][T20526] loop1: detected capacity change from 0 to 128 [ 1662.040000][T10931] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 1662.778978][T10931] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1662.790829][T10931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1662.801842][T10931] usb 1-1: config 0 descriptor?? [ 1662.979336][T20508] UDC core: couldn't find an available UDC or it's busy: -16 [ 1663.015632][T20508] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1663.035155][T20516] loop3: detected capacity change from 0 to 40427 [ 1663.052891][T20521] loop0: detected capacity change from 0 to 1024 [ 1663.239667][T20516] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1663.294101][T20521] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1663.331828][T20516] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1663.594573][T20516] F2FS-fs (loop3): invalid crc value [ 1663.630142][T20521] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1663.863647][T20516] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1664.429682][ T2285] usb 5-1: USB disconnect, device number 40 [ 1664.442123][T10931] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1664.457274][T10931] asix: probe of 1-1:0.0 failed with error -71 [ 1664.479340][T10931] usb 1-1: USB disconnect, device number 9 [ 1664.986962][T20541] loop1: detected capacity change from 0 to 40427 [ 1665.028529][T20541] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1665.062362][T20541] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1665.075540][T20541] F2FS-fs (loop1): invalid crc value [ 1665.250769][T10931] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 1665.256807][T20541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 1665.275438][T20570] device bridge_slave_1 left promiscuous mode [ 1665.281705][T20570] bridge0: port 2(bridge_slave_1) entered disabled state [ 1665.703698][T15611] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 1665.753992][T10931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1665.800569][T10931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1666.172202][T10931] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1666.181607][T10931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1666.195720][T15611] usb 3-1: Using ep0 maxpacket: 32 [ 1666.202481][T10931] usb 4-1: config 0 descriptor?? [ 1666.430662][T15611] usb 3-1: config 0 has an invalid interface number: 155 but max is 0 [ 1666.439185][T15611] usb 3-1: config 0 has no interface number 0 [ 1666.445671][T15611] usb 3-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1666.456472][T15611] usb 3-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1666.762667][T15611] usb 3-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 1666.915693][T15611] usb 3-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 1666.993844][T15611] usb 3-1: Product: syz [ 1667.168582][T15611] usb 3-1: Manufacturer: syz [ 1667.182381][T15611] usb 3-1: SerialNumber: syz [ 1667.882687][T15611] usb 3-1: config 0 descriptor?? [ 1667.902166][T10931] uclogic 0003:256C:006D.008C: failed retrieving Huion firmware version: -71 [ 1667.921249][T10931] uclogic 0003:256C:006D.008C: failed probing parameters: -71 [ 1667.939440][T10931] uclogic: probe of 0003:256C:006D.008C failed with error -71 [ 1667.953816][T15611] ftdi_sio 3-1:0.155: FTDI USB Serial Device converter detected [ 1667.977519][T10931] usb 4-1: USB disconnect, device number 30 [ 1667.985284][T15611] usb 3-1: Detected FT-X [ 1667.989402][T15611] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 3 [ 1668.204266][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 1668.204301][ T30] audit: type=1326 audit(1853583360.614:6216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.258651][ T30] audit: type=1326 audit(1853583360.654:6217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.342127][ T30] audit: type=1326 audit(1853583360.654:6218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.347825][T15611] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1668.374265][ T30] audit: type=1326 audit(1853583360.654:6219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.397975][T15611] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1668.406266][ T30] audit: type=1326 audit(1853583360.654:6220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.431866][ T30] audit: type=1326 audit(1853583360.654:6221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.456426][T15611] ftdi_sio 3-1:0.155: GPIO initialisation failed: -71 [ 1668.463526][ T30] audit: type=1326 audit(1853583360.654:6222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.488682][T15611] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1668.502970][T15611] usb 3-1: USB disconnect, device number 30 [ 1668.511238][T15611] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1668.521776][T15611] ftdi_sio 3-1:0.155: device disconnected [ 1668.570177][ T30] audit: type=1326 audit(1853583360.654:6223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.712051][ T30] audit: type=1326 audit(1853583360.654:6224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.766283][ T30] audit: type=1326 audit(1853583360.654:6225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20594 comm="syz.4.5866" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1668.862050][T10931] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 1669.102013][ T7688] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 1669.222135][T10931] usb 2-1: Using ep0 maxpacket: 32 [ 1669.362341][T10931] usb 2-1: config 0 has an invalid interface number: 155 but max is 0 [ 1669.386779][T10931] usb 2-1: config 0 has no interface number 0 [ 1669.446329][T10931] usb 2-1: config 0 interface 155 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1669.492604][ T7688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1669.540062][ T7688] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1669.554496][T10931] usb 2-1: config 0 interface 155 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 1669.634179][ T7688] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1669.712599][ T7688] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1670.061660][ T7688] usb 5-1: config 0 descriptor?? [ 1670.092185][T10931] usb 2-1: New USB device found, idVendor=05d1, idProduct=1002, bcdDevice=c5.61 [ 1670.101263][T10931] usb 2-1: New USB device strings: Mfr=225, Product=1, SerialNumber=3 [ 1670.121999][T10931] usb 2-1: Product: syz [ 1670.126136][T10931] usb 2-1: Manufacturer: syz [ 1670.130563][T10931] usb 2-1: SerialNumber: syz [ 1670.153650][T10931] usb 2-1: config 0 descriptor?? [ 1670.193756][T10931] ftdi_sio 2-1:0.155: FTDI USB Serial Device converter detected [ 1670.222167][T10931] usb 2-1: Detected FT-X [ 1670.226318][T10931] ftdi_sio ttyUSB0: Overriding wMaxPacketSize on endpoint 3 [ 1670.402136][T10931] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 1670.432597][T10931] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 1670.452094][T10931] ftdi_sio 2-1:0.155: GPIO initialisation failed: -71 [ 1670.462845][T10931] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1670.501748][T10931] usb 2-1: USB disconnect, device number 11 [ 1670.534451][T10931] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1670.559438][T10931] ftdi_sio 2-1:0.155: device disconnected [ 1670.724366][T20614] loop3: detected capacity change from 0 to 40427 [ 1670.739779][T20614] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 1670.749205][T20614] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1670.762762][T20614] F2FS-fs (loop3): invalid crc value [ 1670.793870][T20614] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1670.971491][T20621] loop0: detected capacity change from 0 to 40427 [ 1671.002364][T20621] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1671.010922][T20614] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 1671.019909][T20621] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1671.028804][T20614] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1671.037707][T20621] F2FS-fs (loop0): invalid crc value [ 1671.076848][T20621] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1671.508064][T20621] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1671.516777][ T7688] uclogic 0003:256C:006D.008D: failed retrieving Huion firmware version: -71 [ 1671.554951][T20621] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1671.577896][ T7688] uclogic 0003:256C:006D.008D: failed probing parameters: -71 [ 1671.649245][ T7688] uclogic: probe of 0003:256C:006D.008D failed with error -71 [ 1671.841676][ T7688] usb 5-1: USB disconnect, device number 41 [ 1674.802043][T16248] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 1674.877832][ T330] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1674.894642][ T330] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1674.900098][T19813] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1674.932199][T19813] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1675.064575][T20655] loop2: detected capacity change from 0 to 128 [ 1675.982253][T16248] usb 2-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1676.002220][T16248] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1676.022070][T15611] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 1676.025093][T16248] usb 2-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1676.044320][T16248] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1676.054472][T16248] usb 2-1: config 0 descriptor?? [ 1676.093433][T16248] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 1676.168224][ T30] kauditd_printk_skb: 47 callbacks suppressed [ 1676.168264][ T30] audit: type=1326 audit(1853583368.574:6273): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.202292][T10910] usb 3-1: new low-speed USB device number 31 using dummy_hcd [ 1676.216281][ T30] audit: type=1326 audit(1853583368.614:6274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.240668][ T30] audit: type=1326 audit(1853583368.614:6275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.264667][ T30] audit: type=1326 audit(1853583368.614:6276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.288401][ T30] audit: type=1326 audit(1853583368.614:6277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.602234][T15611] usb 5-1: Using ep0 maxpacket: 32 [ 1676.678805][ T30] audit: type=1326 audit(1853583368.614:6278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1676.752967][T15611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1676.821848][T15611] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1677.039836][ T30] audit: type=1326 audit(1853583368.624:6279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1677.069649][T15611] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1677.078726][T15611] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.099720][ T30] audit: type=1326 audit(1853583368.624:6280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1677.178950][ T30] audit: type=1326 audit(1853583368.624:6281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1677.208660][T15611] usb 5-1: config 0 descriptor?? [ 1677.231200][ T30] audit: type=1326 audit(1853583368.624:6282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20663 comm="syz.0.5880" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1677.287346][T20647] syz.1.5877[20647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.287575][T20647] syz.1.5877[20647] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1677.312209][T10910] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1677.352039][T10910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1677.378667][T10910] usb 3-1: config 0 descriptor?? [ 1677.393211][T15611] hub 5-1:0.0: USB hub found [ 1677.676346][T20660] loop2: detected capacity change from 0 to 1024 [ 1677.701875][T15611] hub 5-1:0.0: config failed, can't read hub descriptor (err -90) [ 1677.722739][T20660] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1678.149832][T20660] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1678.602424][T20647] UDC core: couldn't find an available UDC or it's busy: -16 [ 1678.650629][T20647] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1678.712142][T15611] usbhid 5-1:0.0: can't add hid device: -71 [ 1678.718193][T15611] usbhid: probe of 5-1:0.0 failed with error -71 [ 1678.763652][T15611] usb 5-1: USB disconnect, device number 42 [ 1679.182101][T10910] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1679.200254][T10910] asix: probe of 3-1:0.0 failed with error -71 [ 1679.219532][T10910] usb 3-1: USB disconnect, device number 31 [ 1679.689271][T15611] usb 2-1: USB disconnect, device number 12 [ 1681.674577][T15611] usb 4-1: new low-speed USB device number 31 using dummy_hcd [ 1681.962224][T10931] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 1682.052948][T15611] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1682.067465][T15611] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.102097][T15611] usb 4-1: config 0 descriptor?? [ 1682.322141][T10931] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1682.339830][T10931] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1682.382246][T10931] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1682.402075][T10931] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1682.432094][T10931] usb 5-1: config 0 descriptor?? [ 1682.582018][ T7688] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 1682.821986][ T7688] usb 3-1: Using ep0 maxpacket: 8 [ 1682.904446][T10931] plantronics 0003:047F:FFFF.008E: ignoring exceeding usage max [ 1682.939096][T10931] plantronics 0003:047F:FFFF.008E: No inputs registered, leaving [ 1682.972123][ T7688] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1683.002497][T10931] plantronics 0003:047F:FFFF.008E: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 1683.016225][ T7688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1683.032232][ T7688] usb 3-1: config 0 descriptor?? [ 1683.372448][ T7688] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1683.392562][T15611] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1683.404007][ T7688] asix: probe of 3-1:0.0 failed with error -71 [ 1683.410707][T15611] asix: probe of 4-1:0.0 failed with error -71 [ 1683.428517][ T7688] usb 3-1: USB disconnect, device number 32 [ 1683.636888][T15611] usb 4-1: USB disconnect, device number 31 [ 1684.349745][T20735] loop1: detected capacity change from 0 to 1024 [ 1684.442669][T20735] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1684.470895][T20735] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1684.917816][T15611] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 1685.282815][T15611] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1685.406254][T15611] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1685.461364][T15611] usb 1-1: config 0 descriptor?? [ 1685.483380][ T7688] usb 5-1: USB disconnect, device number 43 [ 1685.730695][T20737] loop0: detected capacity change from 0 to 1024 [ 1685.759063][T20737] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1685.783869][T20737] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1687.415135][T20760] loop2: detected capacity change from 0 to 128 [ 1688.132107][T15611] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1688.152125][T15611] asix: probe of 1-1:0.0 failed with error -71 [ 1688.175614][T15611] usb 1-1: USB disconnect, device number 10 [ 1688.451874][ T39] usb 5-1: new low-speed USB device number 44 using dummy_hcd [ 1688.645655][ T7688] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 1688.822727][ T39] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1688.844061][ T39] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1688.931521][ T39] usb 5-1: config 0 descriptor?? [ 1689.032846][ T7688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1689.103083][ T7688] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1689.426523][T20762] loop4: detected capacity change from 0 to 1024 [ 1689.465769][ T7688] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1689.475375][ T7688] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1689.498919][ T7688] usb 3-1: config 0 descriptor?? [ 1689.501503][T20762] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1690.058525][T20762] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1690.532130][ T39] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1690.572698][ T39] asix: probe of 5-1:0.0 failed with error -71 [ 1690.587854][ T39] usb 5-1: USB disconnect, device number 44 [ 1690.692026][ T20] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 1691.097733][T20797] loop0: detected capacity change from 0 to 128 [ 1691.192631][ T7688] uclogic 0003:256C:006D.008F: failed retrieving Huion firmware version: -71 [ 1691.235433][ T7688] uclogic 0003:256C:006D.008F: failed probing parameters: -71 [ 1691.292833][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1691.305742][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1691.310662][ T7688] uclogic: probe of 0003:256C:006D.008F failed with error -71 [ 1691.328092][ T20] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1691.394878][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1691.414329][ T7688] usb 3-1: USB disconnect, device number 33 [ 1691.882320][ T20] usb 2-1: config 0 descriptor?? [ 1693.183994][ T7688] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 1694.032175][ T7688] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1694.042883][ T7688] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1694.145533][ T20] usbhid 2-1:0.0: can't add hid device: -32 [ 1694.155489][ T20] usbhid: probe of 2-1:0.0 failed with error -32 [ 1694.206493][ T20] usb 2-1: USB disconnect, device number 13 [ 1694.832167][ T7688] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1694.841983][ T7688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1694.863115][ T7688] usb 4-1: config 0 descriptor?? [ 1694.902615][ T26] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 1694.913794][ T7688] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1694.973849][ T7688] usb 4-1: USB disconnect, device number 32 [ 1695.055219][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 1695.055252][ T30] audit: type=1326 audit(1853583387.464:6333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.112314][ T30] audit: type=1326 audit(1853583387.494:6334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.147781][ T30] audit: type=1326 audit(1853583387.494:6335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.182247][T16248] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 1695.211796][ T30] audit: type=1326 audit(1853583387.494:6336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.253899][ T30] audit: type=1326 audit(1853583387.494:6337): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.284086][ T30] audit: type=1326 audit(1853583387.494:6338): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.292413][ T26] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1695.308901][ T30] audit: type=1326 audit(1853583387.494:6339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.341307][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.349344][ T30] audit: type=1326 audit(1853583387.494:6340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.371400][ T26] usb 1-1: config 0 descriptor?? [ 1695.373858][ T30] audit: type=1326 audit(1853583387.494:6341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.390421][T20826] loop2: detected capacity change from 0 to 40427 [ 1695.401890][ T30] audit: type=1326 audit(1853583387.494:6342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20831 comm="syz.1.5923" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1695.463826][T20826] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1695.472182][T20826] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1695.483918][T20826] F2FS-fs (loop2): invalid crc value [ 1695.508281][T20826] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1695.585280][ T7688] usb 4-1: new low-speed USB device number 33 using dummy_hcd [ 1695.606537][T20826] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1695.622410][T20826] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1695.623378][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1695.631237][T20819] loop0: detected capacity change from 0 to 1024 [ 1695.640915][T16248] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1695.641004][T16248] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1695.667208][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1695.676879][T16248] usb 5-1: config 0 descriptor?? [ 1697.112166][ T26] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1697.153123][ T26] asix: probe of 1-1:0.0 failed with error -71 [ 1697.742125][ T7688] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1697.761387][ T7688] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1697.772563][ T26] usb 1-1: USB disconnect, device number 11 [ 1697.996884][ T7688] usb 4-1: config 0 descriptor?? [ 1698.008553][ T330] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1698.017505][ T330] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1698.129474][T20854] loop1: detected capacity change from 0 to 128 [ 1698.562706][ T7688] usb 4-1: can't set config #0, error -71 [ 1698.709946][ T7688] usb 4-1: USB disconnect, device number 33 [ 1698.902098][T16248] usb 5-1: language id specifier not provided by device, defaulting to English [ 1699.142134][T16248] uclogic 0003:256C:006D.0090: failed retrieving Huion firmware version: -71 [ 1699.166960][T16248] uclogic 0003:256C:006D.0090: failed probing parameters: -71 [ 1699.181689][T16248] uclogic: probe of 0003:256C:006D.0090 failed with error -71 [ 1699.201176][T16248] usb 5-1: USB disconnect, device number 45 [ 1699.412566][ T7688] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 1699.862713][ T7688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1699.923862][ T7688] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1700.127506][ T7688] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1700.165100][ T7688] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1700.202496][ T7688] usb 2-1: config 0 descriptor?? [ 1701.323032][T20883] loop3: detected capacity change from 0 to 128 [ 1701.552040][T16248] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 1701.799016][T20888] overlayfs: failed to resolve './file2': -2 [ 1701.932130][T16248] usb 5-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1701.952524][T16248] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1701.994832][T16248] usb 5-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1702.020732][T16248] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1702.054081][T16248] usb 5-1: config 0 descriptor?? [ 1702.093377][T16248] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 1702.162122][ T7688] usb 2-1: string descriptor 0 read error: -71 [ 1702.182101][ T7688] uclogic 0003:256C:006D.0091: failed retrieving string descriptor #200: -71 [ 1702.199103][ T7688] uclogic 0003:256C:006D.0091: failed retrieving pen parameters: -71 [ 1702.213487][ T7688] uclogic 0003:256C:006D.0091: failed probing pen v2 parameters: -71 [ 1702.221682][ T7688] uclogic 0003:256C:006D.0091: failed probing parameters: -71 [ 1702.229907][ T7688] uclogic: probe of 0003:256C:006D.0091 failed with error -71 [ 1702.246836][ T7688] usb 2-1: USB disconnect, device number 14 [ 1702.297265][T20881] syz.4.5934[20881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1702.297524][T20881] syz.4.5934[20881] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1703.001994][ T2285] usb 2-1: new low-speed USB device number 15 using dummy_hcd [ 1703.118817][T20902] UDC core: couldn't find an available UDC or it's busy: -16 [ 1703.127916][T20902] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1703.602280][ T39] usb 3-1: new low-speed USB device number 34 using dummy_hcd [ 1704.202113][ T2285] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1704.225841][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.260216][ T2285] usb 2-1: config 0 descriptor?? [ 1704.356163][T16248] usb 5-1: USB disconnect, device number 46 [ 1704.692268][ T39] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1704.737278][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1704.751314][T20896] loop1: detected capacity change from 0 to 1024 [ 1704.766431][ T39] usb 3-1: config 0 descriptor?? [ 1704.844074][T20896] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1704.873394][T20896] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1705.062357][ T7688] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 1705.068752][T20901] loop2: detected capacity change from 0 to 1024 [ 1705.117026][T20901] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1705.159045][T20901] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1706.132286][ T39] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1706.153162][ T7688] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 1706.176683][ T39] asix: probe of 3-1:0.0 failed with error -71 [ 1706.202478][ T39] usb 3-1: USB disconnect, device number 34 [ 1706.342117][ T7688] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1706.361527][ T7688] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1706.371640][ T7688] usb 4-1: Product: syz [ 1706.379672][ T2285] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1706.389644][ T2285] asix: probe of 2-1:0.0 failed with error -71 [ 1706.397528][ T2285] usb 2-1: USB disconnect, device number 15 [ 1706.406949][ T7688] usb 4-1: Manufacturer: syz [ 1706.411448][ T7688] usb 4-1: SerialNumber: syz [ 1706.437769][ T7688] usb 4-1: config 0 descriptor?? [ 1706.492302][T20914] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1706.738230][ T7688] usb 4-1: USB disconnect, device number 34 [ 1707.118542][T20936] loop4: detected capacity change from 0 to 128 [ 1708.928984][T20939] loop3: detected capacity change from 0 to 128 [ 1709.782025][T16248] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 1710.162167][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1710.185468][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1710.229569][T16248] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1710.254343][T16248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1710.387831][T20959] binder: 20956:20959 ioctl c0306201 0 returned -14 [ 1711.033985][T16248] usb 1-1: config 0 descriptor?? [ 1711.812212][ T20] usb 2-1: new low-speed USB device number 16 using dummy_hcd [ 1712.092101][T16248] usb 1-1: string descriptor 0 read error: -71 [ 1712.112114][T16248] uclogic 0003:256C:006D.0092: failed retrieving string descriptor #200: -71 [ 1712.122821][T16248] uclogic 0003:256C:006D.0092: failed retrieving pen parameters: -71 [ 1712.134979][T16248] uclogic 0003:256C:006D.0092: failed probing pen v2 parameters: -71 [ 1712.143226][T16248] uclogic 0003:256C:006D.0092: failed probing parameters: -71 [ 1712.151078][T16248] uclogic: probe of 0003:256C:006D.0092 failed with error -71 [ 1712.160701][T16248] usb 1-1: USB disconnect, device number 12 [ 1712.252145][ T20] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1712.261092][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1712.283541][ T20] usb 2-1: config 0 descriptor?? [ 1712.512012][ T39] usb 4-1: new low-speed USB device number 35 using dummy_hcd [ 1712.551710][T20969] loop1: detected capacity change from 0 to 1024 [ 1712.652949][T20969] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1712.674244][T20969] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1712.922927][ T39] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1712.955200][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1713.091719][ T39] usb 4-1: config 0 descriptor?? [ 1713.132104][ T20] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1713.143564][ T20] asix: probe of 2-1:0.0 failed with error -71 [ 1713.163379][ T20] usb 2-1: USB disconnect, device number 16 [ 1713.271487][T20984] loop2: detected capacity change from 0 to 40427 [ 1713.342453][T20984] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1713.369385][T20995] loop4: detected capacity change from 0 to 128 [ 1713.407372][T20980] loop3: detected capacity change from 0 to 1024 [ 1713.463879][T20986] loop0: detected capacity change from 0 to 40427 [ 1713.492392][T20980] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1713.529784][T20986] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1713.541681][T20986] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1713.567294][T20986] F2FS-fs (loop0): invalid crc value [ 1713.580161][T20980] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1713.617556][T20984] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1713.623423][T20986] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1713.778958][T20986] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1713.786900][T15020] attempt to access beyond end of device [ 1713.786900][T15020] loop2: rw=2049, want=45104, limit=40427 [ 1713.799000][T20986] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1714.934042][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1714.957923][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1715.532122][ T39] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1715.547445][ T39] asix: probe of 4-1:0.0 failed with error -71 [ 1715.568752][ T39] usb 4-1: USB disconnect, device number 35 [ 1715.632181][T15611] usb 2-1: new low-speed USB device number 17 using dummy_hcd [ 1715.745537][T21022] binder: 21019:21022 ioctl c0306201 0 returned -14 [ 1716.302202][T15611] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1716.313068][T15611] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1716.335962][T15611] usb 2-1: config 0 descriptor?? [ 1716.633626][T21018] loop1: detected capacity change from 0 to 1024 [ 1716.680883][T21018] EXT4-fs (loop1): Quota format mount options ignored when QUOTA feature is enabled [ 1716.725932][T21018] EXT4-fs (loop1): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1717.352118][T15611] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1717.392091][T15611] asix: probe of 2-1:0.0 failed with error -71 [ 1717.428064][T15611] usb 2-1: USB disconnect, device number 17 [ 1717.509308][T21025] loop4: detected capacity change from 0 to 40427 [ 1717.528187][T21029] loop3: detected capacity change from 0 to 40427 [ 1717.539405][T21025] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 1717.549428][T21025] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1717.560332][T21025] F2FS-fs (loop4): invalid crc value [ 1717.570693][T21025] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1717.612536][T21029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1717.732571][T21025] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1717.749896][T21025] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1717.812127][T21029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1717.953477][T20239] attempt to access beyond end of device [ 1717.953477][T20239] loop3: rw=2049, want=45104, limit=40427 [ 1719.613995][T21056] attempt to access beyond end of device [ 1719.613995][T21056] loop4: rw=2049, want=45104, limit=40427 [ 1720.235064][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1720.235103][ T30] audit: type=1326 audit(1853583411.974:6389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.264949][ T30] audit: type=1326 audit(1853583411.974:6390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.290796][ T30] audit: type=1326 audit(1853583411.974:6391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.344108][ T30] audit: type=1326 audit(1853583411.974:6392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.555988][ T30] audit: type=1326 audit(1853583411.974:6393): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.589937][T15770] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1720.609901][T15770] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1720.648174][ T30] audit: type=1326 audit(1853583411.974:6394): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.686422][ T30] audit: type=1326 audit(1853583411.974:6395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1720.869620][T21068] loop2: detected capacity change from 0 to 128 [ 1721.173592][ T30] audit: type=1326 audit(1853583411.974:6396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1721.474025][ T30] audit: type=1326 audit(1853583411.974:6397): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1721.522345][ T30] audit: type=1326 audit(1853583411.974:6398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21054 comm="syz.2.5976" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe23179eae9 code=0x7ffc0000 [ 1721.762604][T21073] loop2: detected capacity change from 0 to 128 [ 1722.694574][T21081] loop3: detected capacity change from 0 to 128 [ 1724.309527][T21088] loop4: detected capacity change from 0 to 128 [ 1724.702029][ T20] usb 3-1: new low-speed USB device number 35 using dummy_hcd [ 1724.999902][T21109] loop1: detected capacity change from 0 to 128 [ 1725.003015][T21100] loop0: detected capacity change from 0 to 40427 [ 1725.027020][T21111] 9pnet: Insufficient options for proto=fd [ 1725.062138][ T20] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1725.078479][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1725.109165][T21100] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1725.122504][ T20] usb 3-1: config 0 descriptor?? [ 1725.212211][T21103] loop3: detected capacity change from 0 to 40427 [ 1725.231287][T21100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1725.270480][T13233] attempt to access beyond end of device [ 1725.270480][T13233] loop0: rw=2049, want=45104, limit=40427 [ 1725.293199][T21103] F2FS-fs (loop3): Found nat_bits in checkpoint [ 1725.376607][T21105] loop2: detected capacity change from 0 to 1024 [ 1725.417696][T21105] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 1725.455873][T21105] EXT4-fs (loop2): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1725.512756][T21103] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 1725.732104][ T20] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1725.746862][ T20] asix: probe of 3-1:0.0 failed with error -71 [ 1725.771076][ T20] usb 3-1: USB disconnect, device number 35 [ 1725.792598][T20239] attempt to access beyond end of device [ 1725.792598][T20239] loop3: rw=2049, want=45104, limit=40427 [ 1728.186585][T21151] 9pnet: Insufficient options for proto=fd [ 1728.251051][T21157] loop3: detected capacity change from 0 to 128 [ 1728.365493][ T39] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 1728.585523][T16248] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 1728.752053][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 1728.883126][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1728.895346][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1728.909641][ T39] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1728.920118][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1728.944148][ T39] usb 2-1: config 0 descriptor?? [ 1729.009268][ T39] hub 2-1:0.0: USB hub found [ 1729.040833][T16248] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 1729.552160][ T39] hub 2-1:0.0: config failed, can't read hub descriptor (err -90) [ 1730.162548][ T39] usbhid 2-1:0.0: can't add hid device: -71 [ 1730.169821][ T39] usbhid: probe of 2-1:0.0 failed with error -71 [ 1730.352491][ T39] usb 2-1: USB disconnect, device number 18 [ 1730.472167][T16248] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1730.481127][T16248] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1730.492112][T16248] usb 1-1: Product: syz [ 1730.496571][T16248] usb 1-1: Manufacturer: syz [ 1730.501044][T16248] usb 1-1: SerialNumber: syz [ 1730.522556][T16248] usb 1-1: config 0 descriptor?? [ 1730.546394][T21159] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 1730.664359][T21168] loop2: detected capacity change from 0 to 40427 [ 1730.708992][T21168] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 1730.732050][T21168] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 1730.745532][T19052] usb 4-1: new low-speed USB device number 36 using dummy_hcd [ 1730.770664][T21168] F2FS-fs (loop2): invalid crc value [ 1730.808047][T21168] F2FS-fs (loop2): Found nat_bits in checkpoint [ 1730.950014][T21168] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 1730.959255][T21168] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 1731.292593][T19052] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1731.301662][T19052] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1731.395444][T19052] usb 4-1: config 0 descriptor?? [ 1732.218454][T21174] loop3: detected capacity change from 0 to 1024 [ 1732.239493][T16248] usb 1-1: USB disconnect, device number 13 [ 1732.246204][T15770] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1732.259819][T15770] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1732.262817][T15558] udevd[15558]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 1732.339026][T21174] EXT4-fs (loop3): Quota format mount options ignored when QUOTA feature is enabled [ 1732.484811][T21174] EXT4-fs (loop3): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1732.587750][T21199] 9pnet: Insufficient options for proto=fd [ 1733.594921][T15611] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 1733.747500][T19052] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1734.218146][T19052] asix: probe of 4-1:0.0 failed with error -71 [ 1734.235026][T19052] usb 4-1: USB disconnect, device number 36 [ 1734.983356][T15611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.019580][T15611] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.070776][T15611] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1735.102192][ T39] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1735.129420][T15611] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.217578][T15611] usb 3-1: config 0 descriptor?? [ 1735.466596][T16248] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 1735.762135][ T39] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 18 [ 1735.832169][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1735.851986][T16248] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1735.872061][T16248] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1735.880998][T16248] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1735.911259][T16248] usb 1-1: config 0 descriptor?? [ 1735.972238][ T39] usb 4-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 1735.991552][ T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1736.001646][ T39] usb 4-1: Product: syz [ 1736.011751][ T39] usb 4-1: Manufacturer: syz [ 1736.021858][ T39] usb 4-1: SerialNumber: syz [ 1736.047057][ T39] usb 4-1: config 0 descriptor?? [ 1736.082173][T21234] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 1736.332043][T10910] usb 2-1: new low-speed USB device number 19 using dummy_hcd [ 1736.636006][T21240] loop4: detected capacity change from 0 to 131072 [ 1736.662149][T16248] usb 1-1: language id specifier not provided by device, defaulting to English [ 1736.692169][T10910] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1736.704395][T10910] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1736.715020][T10910] usb 2-1: config 0 descriptor?? [ 1736.727265][T21240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1736.772197][T15611] uclogic 0003:256C:006D.0093: failed retrieving Huion firmware version: -71 [ 1736.781151][T15611] uclogic 0003:256C:006D.0093: failed probing parameters: -71 [ 1736.788947][T15611] uclogic: probe of 0003:256C:006D.0093 failed with error -71 [ 1736.799688][T15611] usb 3-1: USB disconnect, device number 36 [ 1736.826593][T21240] F2FS-fs (loop4): Mounted with checkpoint version = 753bd00b [ 1736.902118][T16248] uclogic 0003:256C:006D.0094: failed retrieving Huion firmware version: -71 [ 1736.911057][T16248] uclogic 0003:256C:006D.0094: failed probing parameters: -71 [ 1736.918648][T16248] uclogic: probe of 0003:256C:006D.0094 failed with error -71 [ 1736.929309][T16248] usb 1-1: USB disconnect, device number 14 [ 1737.352135][T10910] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1737.362389][T10910] asix: probe of 2-1:0.0 failed with error -71 [ 1737.387595][T10910] usb 2-1: USB disconnect, device number 19 [ 1737.844522][T16248] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 1737.857566][ T39] usb 4-1: USB disconnect, device number 37 [ 1738.292298][ T39] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1738.655092][T10910] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 1738.852191][ T39] usb 4-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0xFF, skipping [ 1738.871984][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1738.892009][ T39] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1738.901102][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1738.923490][ T39] usb 4-1: config 0 descriptor?? [ 1738.942163][T16248] usb 3-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1738.952911][T16248] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1738.966544][T16248] usb 3-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1738.973492][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1738.978866][T16248] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.001139][T16248] usb 3-1: config 0 descriptor?? [ 1739.043693][T16248] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 1739.092143][ T26] usb 5-1: new high-speed USB device number 47 using dummy_hcd [ 1739.092171][T10910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.110684][T10910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.121356][T10910] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1739.130674][T10910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.140990][T10910] usb 1-1: config 0 descriptor?? [ 1739.250189][T21251] syz.2.6027[21251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1739.250428][T21251] syz.2.6027[21251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1739.462138][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1739.484408][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1739.495248][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1739.504299][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1739.523355][ T26] usb 5-1: config 0 descriptor?? [ 1739.980886][T21279] UDC core: couldn't find an available UDC or it's busy: -16 [ 1739.988504][T21279] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1740.222121][T10910] usb 1-1: string descriptor 0 read error: -71 [ 1740.242173][T10910] uclogic 0003:256C:006D.0095: failed retrieving string descriptor #200: -71 [ 1740.256002][T10910] uclogic 0003:256C:006D.0095: failed retrieving pen parameters: -71 [ 1740.272863][T10910] uclogic 0003:256C:006D.0095: failed probing pen v2 parameters: -71 [ 1740.289919][T10910] uclogic 0003:256C:006D.0095: failed probing parameters: -71 [ 1740.302512][ T26] usb 5-1: language id specifier not provided by device, defaulting to English [ 1740.306261][T10910] uclogic: probe of 0003:256C:006D.0095 failed with error -71 [ 1740.345803][T10910] usb 1-1: USB disconnect, device number 15 [ 1740.542119][ T26] uclogic 0003:256C:006D.0096: failed retrieving Huion firmware version: -71 [ 1740.560979][ T26] uclogic 0003:256C:006D.0096: failed probing parameters: -71 [ 1740.592860][ T26] uclogic: probe of 0003:256C:006D.0096 failed with error -71 [ 1740.624493][ T26] usb 5-1: USB disconnect, device number 47 [ 1740.737909][ T39] usb 4-1: USB disconnect, device number 38 [ 1741.385282][T21288] loop3: detected capacity change from 0 to 128 [ 1742.179911][T16248] usb 3-1: USB disconnect, device number 37 [ 1742.191626][ T30] kauditd_printk_skb: 66 callbacks suppressed [ 1742.191661][ T30] audit: type=1326 audit(1853583434.604:6465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1742.302151][ T30] audit: type=1326 audit(1853583434.634:6466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1742.351275][ T30] audit: type=1326 audit(1853583434.634:6467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1742.533707][T21299] loop4: detected capacity change from 0 to 128 [ 1742.940964][ T30] audit: type=1326 audit(1853583434.644:6468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.123346][ T2285] usb 4-1: new low-speed USB device number 39 using dummy_hcd [ 1743.245896][ T30] audit: type=1326 audit(1853583434.644:6469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.374351][ T30] audit: type=1326 audit(1853583434.644:6470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.404911][ T30] audit: type=1326 audit(1853583434.644:6471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.428658][ T30] audit: type=1326 audit(1853583434.644:6472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.460914][T21306] 9pnet: Insufficient options for proto=fd [ 1743.487129][ T30] audit: type=1326 audit(1853583434.644:6473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.502193][ T2285] usb 4-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1743.522642][ T30] audit: type=1326 audit(1853583434.644:6474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21290 comm="syz.0.6038" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1743.540223][ T2285] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1743.562761][ T2285] usb 4-1: config 0 descriptor?? [ 1743.788364][T21304] loop0: detected capacity change from 0 to 40427 [ 1743.820210][T21304] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1743.835005][T21304] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1743.846030][T21304] F2FS-fs (loop0): invalid crc value [ 1743.873728][T21304] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1743.922110][ T39] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 1744.262574][ T26] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 1744.622154][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.643354][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1744.657837][T21304] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1744.672007][T21304] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1744.682534][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1744.702491][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1744.720365][ T39] usb 3-1: config 0 descriptor?? [ 1744.792155][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1744.810120][ T26] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1744.819951][ T2285] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1744.829898][ T2285] asix: probe of 4-1:0.0 failed with error -71 [ 1744.838388][ T2285] usb 4-1: USB disconnect, device number 39 [ 1744.988812][ T26] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1744.998398][ T26] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1745.009003][ T26] usb 5-1: config 0 descriptor?? [ 1745.837179][ T39] plantronics 0003:047F:FFFF.0097: ignoring exceeding usage max [ 1745.852492][ T39] plantronics 0003:047F:FFFF.0097: No inputs registered, leaving [ 1746.005324][T21060] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1746.014420][T21060] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1746.033505][ T39] plantronics 0003:047F:FFFF.0097: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1746.259611][T21331] loop1: detected capacity change from 0 to 128 [ 1746.522472][ T26] usb 5-1: string descriptor 0 read error: -71 [ 1746.552359][ T26] uclogic 0003:256C:006D.0098: failed retrieving string descriptor #200: -71 [ 1746.877165][ T26] uclogic 0003:256C:006D.0098: failed retrieving pen parameters: -71 [ 1746.932169][ T26] uclogic 0003:256C:006D.0098: failed probing pen v2 parameters: -71 [ 1746.964301][ T26] uclogic 0003:256C:006D.0098: failed probing parameters: -71 [ 1746.971701][ T26] uclogic: probe of 0003:256C:006D.0098 failed with error -71 [ 1747.025536][ T26] usb 5-1: USB disconnect, device number 48 [ 1747.302124][ T39] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 1748.390826][ T30] kauditd_printk_skb: 46 callbacks suppressed [ 1748.390864][ T30] audit: type=1326 audit(1853583440.114:6521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.452150][ T30] audit: type=1326 audit(1853583440.124:6522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.476116][ T30] audit: type=1326 audit(1853583440.204:6523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.515943][ T30] audit: type=1326 audit(1853583440.204:6524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.543723][ T2260] usb 3-1: USB disconnect, device number 38 [ 1748.629167][ T30] audit: type=1326 audit(1853583440.204:6525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.694623][ T30] audit: type=1326 audit(1853583440.274:6526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.819921][ T30] audit: type=1326 audit(1853583440.274:6527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.843533][ T30] audit: type=1326 audit(1853583440.284:6528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.867701][ T39] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1748.878029][ T30] audit: type=1326 audit(1853583440.384:6529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1748.901542][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1748.936084][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1749.629783][ T30] audit: type=1326 audit(1853583440.384:6530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21341 comm="syz.4.6053" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0160ba8ae9 code=0x7ffc0000 [ 1749.694919][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1749.752370][ T39] usb 4-1: config 0 descriptor?? [ 1749.903940][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1750.034432][ T20] usb 4-1: USB disconnect, device number 40 [ 1751.266139][T21358] loop4: detected capacity change from 0 to 40427 [ 1751.428976][T21358] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1751.650012][T21358] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1751.719068][T10545] attempt to access beyond end of device [ 1751.719068][T10545] loop4: rw=2049, want=45104, limit=40427 [ 1751.862211][ T2285] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 1752.112191][ T2285] usb 2-1: Using ep0 maxpacket: 32 [ 1752.232167][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.262018][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1752.271678][ T2285] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1752.311644][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.343651][ T2285] usb 2-1: config 0 descriptor?? [ 1752.383366][ T2285] hub 2-1:0.0: USB hub found [ 1752.402195][ T39] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 1752.602108][ T2285] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 1752.812124][ T39] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1752.842005][ T39] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1752.865132][ T39] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1752.882012][ T39] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1752.901907][ T39] usb 3-1: config 0 descriptor?? [ 1753.092305][ T2285] usbhid 2-1:0.0: can't add hid device: -71 [ 1753.098485][ T2285] usbhid: probe of 2-1:0.0 failed with error -71 [ 1753.142657][ T2285] usb 2-1: USB disconnect, device number 20 [ 1753.384477][ T39] plantronics 0003:047F:FFFF.0099: ignoring exceeding usage max [ 1753.403207][ T39] plantronics 0003:047F:FFFF.0099: No inputs registered, leaving [ 1753.426438][ T39] plantronics 0003:047F:FFFF.0099: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 1753.522921][T21399] loop0: detected capacity change from 0 to 40427 [ 1753.593524][T21399] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 1753.602056][ T20] usb 5-1: new low-speed USB device number 49 using dummy_hcd [ 1753.602361][ T39] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 1753.620110][T21399] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 1753.632164][T21399] F2FS-fs (loop0): invalid crc value [ 1753.640346][T21399] F2FS-fs (loop0): Found nat_bits in checkpoint [ 1753.718657][T21399] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 1753.725679][T21399] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 1753.852019][ T2285] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 1754.182559][ T39] usb 4-1: config 0 has an invalid descriptor of length 129, skipping remainder of the config [ 1754.207455][ T39] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1754.362058][ T39] usb 4-1: New USB device found, idVendor=045e, idProduct=009d, bcdDevice= 0.00 [ 1754.381390][ T39] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.408860][ T39] usb 4-1: config 0 descriptor?? [ 1754.453620][ T39] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1754.575661][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 1754.584683][ T330] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 1754.602130][ T20] usb 5-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1754.611071][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.632589][ T20] usb 5-1: config 0 descriptor?? [ 1754.680931][T21401] syz.3.6068[21401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1754.681157][T21401] syz.3.6068[21401] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1754.802298][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1754.824697][ T2285] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1754.834573][ T2285] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 1754.843518][ T2285] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1754.852905][ T2285] usb 2-1: config 0 descriptor?? [ 1754.885467][T21405] loop4: detected capacity change from 0 to 1024 [ 1754.932899][T21405] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 1754.948307][T21405] EXT4-fs (loop4): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1755.131735][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1755.131783][ T30] audit: type=1326 audit(1853583447.534:6538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1755.161626][ T30] audit: type=1326 audit(1853583447.544:6539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1755.185617][ T30] audit: type=1326 audit(1853583447.544:6540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1755.209419][ T30] audit: type=1326 audit(1853583447.544:6541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21418 comm="syz.0.6072" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbf804d4ae9 code=0x7ffc0000 [ 1755.433780][T21426] UDC core: couldn't find an available UDC or it's busy: -16 [ 1755.441098][T21426] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1755.474077][T10910] usb 3-1: USB disconnect, device number 39 [ 1755.492100][ T20] asix 5-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1755.510761][ T20] asix: probe of 5-1:0.0 failed with error -71 [ 1755.533024][ T20] usb 5-1: USB disconnect, device number 49 [ 1757.836981][T21429] loop2: detected capacity change from 0 to 128 [ 1757.892103][ T2285] uclogic 0003:256C:006D.009A: failed retrieving Huion firmware version: -71 [ 1757.918893][ T2285] uclogic 0003:256C:006D.009A: failed probing parameters: -71 [ 1757.942199][ T2285] uclogic: probe of 0003:256C:006D.009A failed with error -71 [ 1757.990611][ T2285] usb 2-1: USB disconnect, device number 21 [ 1758.131535][T10910] usb 4-1: USB disconnect, device number 41 [ 1758.220032][ T30] audit: type=1326 audit(1853583450.624:6542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1758.332380][ T30] audit: type=1326 audit(1853583450.664:6543): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1758.392562][ T30] audit: type=1326 audit(1853583450.774:6544): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1758.482020][ T30] audit: type=1326 audit(1853583450.824:6545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1758.773673][ T30] audit: type=1326 audit(1853583450.824:6546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1758.832062][ T30] audit: type=1326 audit(1853583451.004:6547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21443 comm="syz.3.6077" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5eab2fae9 code=0x7ffc0000 [ 1759.877225][ T330] ================================================================== [ 1759.885174][ T330] BUG: KASAN: use-after-free in down_read_trylock+0x7c/0x300 [ 1759.892380][ T330] Read of size 8 at addr ffff88810dfed070 by task kworker/u4:3/330 [ 1759.900117][ T330] [ 1759.902286][ T330] CPU: 1 PID: 330 Comm: kworker/u4:3 Not tainted 5.15.150-syzkaller-00330-g9044d25b8ff5 #0 [ 1759.912084][ T330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1759.922077][ T330] Workqueue: writeback wb_workfn (flush-7:0) [ 1759.927988][ T330] Call Trace: [ 1759.931112][ T330] [ 1759.933887][ T330] dump_stack_lvl+0x151/0x1b7 [ 1759.938403][ T330] ? io_uring_drop_tctx_refs+0x190/0x190 [ 1759.943868][ T330] ? __wake_up_klogd+0xd5/0x110 [ 1759.948569][ T330] ? panic+0x751/0x751 [ 1759.952464][ T330] print_address_description+0x87/0x3b0 [ 1759.957857][ T330] kasan_report+0x179/0x1c0 [ 1759.962199][ T330] ? down_read_trylock+0x7c/0x300 [ 1759.967042][ T330] ? down_read_trylock+0x7c/0x300 [ 1759.971907][ T330] kasan_check_range+0x293/0x2a0 [ 1759.976680][ T330] __kasan_check_read+0x11/0x20 [ 1759.981369][ T330] down_read_trylock+0x7c/0x300 [ 1759.986051][ T330] ? __init_rwsem+0x1c0/0x1c0 [ 1759.990585][ T330] trylock_super+0x1f/0xf0 [ 1759.994819][ T330] __writeback_inodes_wb+0x101/0x3f0 [ 1759.999954][ T330] wb_writeback+0x3cd/0x9e0 [ 1760.004297][ T330] ? inode_cgwb_move_to_attached+0x3c0/0x3c0 [ 1760.010100][ T330] ? irqentry_exit_cond_resched+0x2a/0x30 [ 1760.015657][ T330] ? __kasan_check_write+0x14/0x20 [ 1760.020603][ T330] ? cpumask_next+0x8a/0xb0 [ 1760.024973][ T330] wb_workfn+0xb3d/0x1110 [ 1760.029109][ T330] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 1760.034593][ T330] ? inode_wait_for_writeback+0x280/0x280 [ 1760.040157][ T330] ? _raw_spin_unlock_irqrestore+0x5c/0x80 [ 1760.045772][ T330] ? try_to_wake_up+0x697/0x1160 [ 1760.050557][ T330] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 1760.056624][ T330] ? __kasan_check_write+0x14/0x20 [ 1760.061573][ T330] ? __kasan_check_read+0x11/0x20 [ 1760.066428][ T330] ? read_word_at_a_time+0x12/0x20 [ 1760.071379][ T330] ? strscpy+0x9c/0x260 [ 1760.075374][ T330] process_one_work+0x6bb/0xc10 [ 1760.080071][ T330] worker_thread+0xad5/0x12a0 [ 1760.084597][ T330] kthread+0x421/0x510 [ 1760.088479][ T330] ? worker_clr_flags+0x180/0x180 [ 1760.093336][ T330] ? kthread_blkcg+0xd0/0xd0 [ 1760.097763][ T330] ret_from_fork+0x1f/0x30 [ 1760.102032][ T330] [ 1760.104879][ T330] [ 1760.107054][ T330] Allocated by task 21025: [ 1760.111312][ T330] ____kasan_kmalloc+0xdb/0x110 [ 1760.115991][ T330] __kasan_kmalloc+0x9/0x10 [ 1760.120333][ T330] kmem_cache_alloc_trace+0x115/0x210 [ 1760.125537][ T330] alloc_super+0x5d/0x7d0 [ 1760.129705][ T330] sget+0x1e5/0x4c0 [ 1760.133350][ T330] mount_bdev+0xea/0x3b0 [ 1760.137435][ T330] f2fs_mount+0x34/0x40 [ 1760.141425][ T330] legacy_get_tree+0xf1/0x190 [ 1760.145942][ T330] vfs_get_tree+0x88/0x290 [ 1760.150189][ T330] do_new_mount+0x2ba/0xb30 [ 1760.154532][ T330] path_mount+0x671/0x1070 [ 1760.158784][ T330] __se_sys_mount+0x2c4/0x3b0 [ 1760.163300][ T330] __x64_sys_mount+0xbf/0xd0 [ 1760.167729][ T330] do_syscall_64+0x3d/0xb0 [ 1760.171976][ T330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1760.177708][ T330] [ 1760.179882][ T330] Last potentially related work creation: [ 1760.185435][ T330] kasan_save_stack+0x3b/0x60 [ 1760.189942][ T330] __kasan_record_aux_stack+0xd3/0xf0 [ 1760.195152][ T330] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1760.200968][ T330] insert_work+0x56/0x320 [ 1760.205141][ T330] __queue_work+0x92a/0xcd0 [ 1760.209475][ T330] queue_work_on+0x105/0x170 [ 1760.213904][ T330] destroy_super_rcu+0xd1/0xe0 [ 1760.218504][ T330] rcu_do_batch+0x57a/0xc10 [ 1760.222839][ T330] rcu_core+0x517/0x1020 [ 1760.226930][ T330] rcu_core_si+0x9/0x10 [ 1760.231004][ T330] __do_softirq+0x26d/0x5bf [ 1760.235341][ T330] [ 1760.237511][ T330] Second to last potentially related work creation: [ 1760.243940][ T330] kasan_save_stack+0x3b/0x60 [ 1760.248456][ T330] __kasan_record_aux_stack+0xd3/0xf0 [ 1760.253656][ T330] kasan_record_aux_stack_noalloc+0xb/0x10 [ 1760.259297][ T330] call_rcu+0x135/0x1310 [ 1760.263382][ T330] __put_super+0x26d/0x2e0 [ 1760.267637][ T330] deactivate_locked_super+0xe1/0x110 [ 1760.272837][ T330] deactivate_super+0xbe/0xf0 [ 1760.277350][ T330] cleanup_mnt+0x45c/0x510 [ 1760.281606][ T330] __cleanup_mnt+0x19/0x20 [ 1760.285859][ T330] task_work_run+0x129/0x190 [ 1760.290284][ T330] exit_to_user_mode_loop+0xc4/0xe0 [ 1760.295320][ T330] exit_to_user_mode_prepare+0x5a/0xa0 [ 1760.300622][ T330] syscall_exit_to_user_mode+0x26/0x160 [ 1760.306005][ T330] do_syscall_64+0x49/0xb0 [ 1760.310261][ T330] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 1760.315980][ T330] [ 1760.318152][ T330] The buggy address belongs to the object at ffff88810dfed000 [ 1760.318152][ T330] which belongs to the cache kmalloc-2k of size 2048 [ 1760.332045][ T330] The buggy address is located 112 bytes inside of [ 1760.332045][ T330] 2048-byte region [ffff88810dfed000, ffff88810dfed800) [ 1760.345326][ T330] The buggy address belongs to the page: [ 1760.350801][ T330] page:ffffea000437fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88810dfed000 pfn:0x10dfe8 [ 1760.362250][ T330] head:ffffea000437fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 1760.370583][ T330] flags: 0x4000000000010200(slab|head|zone=1) [ 1760.376612][ T330] raw: 4000000000010200 ffffea000444b608 ffffea0004849008 ffff888100043200 [ 1760.385026][ T330] raw: ffff88810dfed000 0000000000080002 00000001ffffffff 0000000000000000 [ 1760.393419][ T330] page dumped because: kasan: bad access detected [ 1760.399682][ T330] page_owner tracks the page as allocated [ 1760.405235][ T330] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3129, ts 192182861469, free_ts 192127419466 [ 1760.425805][ T330] post_alloc_hook+0x1a3/0x1b0 [ 1760.430398][ T330] prep_new_page+0x1b/0x110 [ 1760.434732][ T330] get_page_from_freelist+0x3550/0x35d0 [ 1760.440117][ T330] __alloc_pages+0x27e/0x8f0 [ 1760.444543][ T330] new_slab+0x9a/0x4e0 [ 1760.448454][ T330] ___slab_alloc+0x39e/0x830 [ 1760.452970][ T330] __slab_alloc+0x4a/0x90 [ 1760.457129][ T330] kmem_cache_alloc_trace+0x142/0x210 [ 1760.462335][ T330] ipv6_add_dev+0xd1/0x1140 [ 1760.466683][ T330] addrconf_notify+0x593/0xdd0 [ 1760.471276][ T330] raw_notifier_call_chain+0x8c/0xf0 [ 1760.476403][ T330] call_netdevice_notifiers+0x145/0x1b0 [ 1760.481780][ T330] register_netdevice+0x1035/0x1390 [ 1760.486820][ T330] veth_newlink+0x94f/0xe20 [ 1760.491153][ T330] rtnl_newlink+0x1495/0x2050 [ 1760.495665][ T330] rtnetlink_rcv_msg+0x951/0xc40 [ 1760.500452][ T330] page last free stack trace: [ 1760.504955][ T330] free_unref_page_prepare+0x7c8/0x7d0 [ 1760.510274][ T330] free_unref_page+0xe8/0x750 [ 1760.514863][ T330] __free_pages+0x61/0xf0 [ 1760.519033][ T330] __free_slab+0xec/0x1d0 [ 1760.523207][ T330] __unfreeze_partials+0x165/0x1a0 [ 1760.528146][ T330] put_cpu_partial+0xc4/0x120 [ 1760.532659][ T330] __slab_free+0x1c8/0x290 [ 1760.536909][ T330] ___cache_free+0x109/0x120 [ 1760.541341][ T330] qlink_free+0x4d/0x90 [ 1760.545332][ T330] qlist_free_all+0x44/0xb0 [ 1760.549673][ T330] kasan_quarantine_reduce+0x15a/0x180 [ 1760.554971][ T330] __kasan_slab_alloc+0x2f/0xe0 [ 1760.559742][ T330] slab_post_alloc_hook+0x53/0x2c0 [ 1760.564693][ T330] kmem_cache_alloc+0xf5/0x200 [ 1760.569289][ T330] __alloc_skb+0xbe/0x550 [ 1760.573462][ T330] netlink_sendmsg+0x797/0xd20 [ 1760.578062][ T330] [ 1760.580224][ T330] Memory state around the buggy address: [ 1760.585703][ T330] ffff88810dfecf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1760.593697][ T330] ffff88810dfecf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1760.601593][ T330] >ffff88810dfed000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.609482][ T330] ^ [ 1760.617040][ T330] ffff88810dfed080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.624939][ T330] ffff88810dfed100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1760.632831][ T330] ================================================================== [ 1760.641045][ T330] Disabling lock debugging due to kernel taint [ 1760.687720][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 1760.687754][ T30] audit: type=1326 audit(1853583453.094:6585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1760.760935][ T30] audit: type=1326 audit(1853583453.144:6586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1760.809457][ T30] audit: type=1326 audit(1853583453.144:6587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4f0ac2ae9 code=0x7ffc0000 [ 1760.873096][T21459] 9pnet: Insufficient options for proto=fd [ 1760.901418][ T30] audit: type=1326 audit(1853583453.204:6588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1760.927398][T21459] 9pnet: Insufficient options for proto=fd [ 1760.940966][T10910] usb 1-1: new low-speed USB device number 16 using dummy_hcd [ 1760.948970][ T30] audit: type=1326 audit(1853583453.204:6589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.003444][ T30] audit: type=1326 audit(1853583453.204:6590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.030330][ T30] audit: type=1326 audit(1853583453.204:6591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.073039][ T30] audit: type=1326 audit(1853583453.204:6592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.096817][ T30] audit: type=1326 audit(1853583453.204:6593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.125173][ T30] audit: type=1326 audit(1853583453.204:6594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=21433 comm="syz.1.6074" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fe4f0ac26eb code=0x7ffc0000 [ 1761.352155][T10910] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 1761.361123][T10910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1761.370297][T10910] usb 1-1: config 0 descriptor?? [ 1761.628413][T21452] loop0: detected capacity change from 0 to 1024 [ 1761.712779][T21452] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled [ 1761.726660][T21452] EXT4-fs (loop0): mounted filesystem without journal. Opts: bsddf,debug_want_extra_isize=0x0000000000000084,resuid=0x0000000000000000,nouid32,lazytime,jqfmt=vfsold,dioread_lock,data_err=abort,,errors=continue. Quota mode: writeback. [ 1762.122173][T10910] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1762.132154][T10910] asix: probe of 1-1:0.0 failed with error -71 [ 1762.139688][T10910] usb 1-1: USB disconnect, device number 16