last executing test programs: 53.58240991s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 52.677136543s ago: executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) dup2(r0, r3) 51.660840788s ago: executing program 1: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 51.07478481s ago: executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 50.702610663s ago: executing program 1: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xe2, [@local, @dev, @remote]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x2000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000006a0a00ff0000000035000000000000001849", @ANYRES32, @ANYBLOB="102200000000002505006bd7da0b2cab1900000000000095"], 0x0, 0xdb5, 0x95, &(0x7f0000000180)=""/149}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$eJzs3c9vHGf9B/D3rje2N99+UzdN2hRVitVIgLBI/EMumAsBIeRDhapy4GwlTmNlkxbbRW6FqMvPaw/5A8rBN05I3COVCxe49epjJQSXXjCnRTM7a29tr38Ux2uX1yuafZ6ZZ+Z5Ps9nZ3Z214o2wP+s+Yk0nqSW+YnX1or1zY2Z1ubGzMNuPclIknrS6BSp/avdbn+c3E5nyUvFxqq7Wr9xHi/NvfHJZ5ufdtYa1VLuXz/ouKNZr5aMJxmqypPq785h/Y0e1l1te4ZFwm50EweDdiFJu/SPx50tP/3LM9stPZr7HX3omQ+cA7XOfXOPseRidaEX7wM6d8XOPftcWx90AAAAAHAKnt3KVtZyadBxAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwHlS/f5/rVrq3fp4at3f/x+utqWqny3Xj7f7k6cVBwAAAAAAAACcoutb2cpaLnXX27Xyb/6vlCtXysf/yztZyWKWczNrWchqVrOcqSRjPR0Nry2sri5PHeHI6X2PnD4k0JGqbJ7MvAEAAAAAAADgS+aXmd/5+z8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJwFtWSoU5TLlW59LPVGktEkw8V+68nfuvXz7MmgAwAAAIBT8OxWtrKWS931dq38zP9C+bl/NO/kUVazlNW0spi75XcBnU/99c2NmdbmxszDYtnb7/f+eawwyh7T+e5h/5GvlXs0cy9L5ZabuZO30srd1MsjC9e68ewf1wdFTLXvVo4Y2d2qLGb+YVXu8f6xJtvPMb9MGSszcmE7I5NVbEU2njs4E8d8dnaPNJX6drBXdo20axJfKOcXq7KYz2/75Xwgdmdiuufse+HgnCdf+9MffnK/9ejB/XsrE2dnSgdbr8qhqmyXj829mZjpycSLX8ZM9DVZZuLq9vp8fpgfZyLjeT3LWcrPspDVLGY8PyhrC9X5XOu55Ptk6vbn1l4/LJLh6gztPFnHi+mV8thLWcqP8lbuZjGvlv+mM5VvZTazmet5hq8e4ZW23ueqb///vsHf+HpVaSb5XVWeDUVen+vJa+9r7ljZ1rtlJ0uXT/5+1PhKVSnG+FVVng27MzHVk4nnD87E78uXlZXWowfL9xfePtpwlz+sKsV19JszdZcozpfLxZNVrn3+7Cjant+3bapsu7LdVt/TdnW7rXOlrve9Uoer93B7e5ou217ct22mbLvW07bf+y0AzryL37g43Px786/Nj5q/bt5vvjb6/ZFvj7w8nAt/vvCdxuTQV+sv1/6Yj/KLnc//AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAF7fy7nsPFlqtxeVdlXa7/X6fpvNc6f6c2SkO+tIzyaCmPJzkbGT+3+12u9pSOwvxHFxpF0bSfupjNZLs13S9d8sHAzl/BvzCBDx1t1Yfvn1r5d33vrn0cOHNxTcXH83Nzs5Nzs2+OnPr3lJrcbLzOOgogadh56Y/6EgAAAAAAAAAAACAozqZ/zPQTNJ/n/6jj57mVAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBzan4ijSepZWry5mSxvrkx0yqWbn1nz0aSepLaz5Pax8ntdJaM9XRX6zfO46W5Nz75bPPTnb4a3f3rBx13NOvVkvEkQ1V5Uv3d+a/7q23PsEjYjW7iYND+EwAA//9nMgTf") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000140), 0x26, 0x4f6, &(0x7f0000000bc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014000905000000000000000002180000", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) 50.286201315s ago: executing program 0: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) dup2(r0, r3) 50.196182012s ago: executing program 1: r0 = syz_io_uring_setup(0x366d, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000100)) syz_io_uring_setup(0x7a0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r2, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB='P'], 0x10}, 0x0, 0xb0f085959838e300}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 50.064923368s ago: executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000000)=0x17) 49.892934462s ago: executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 49.240429911s ago: executing program 0: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, 0xffffffffffffffff) 48.344877423s ago: executing program 2: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002580)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x47f, 0xc055, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, {0x9}}}]}}]}}, &(0x7f0000002ac0)={0x0, 0x0, 0x0, 0x0, 0x2, [{0x4, &(0x7f0000002640)=@lang_id={0x4, 0x3, 0x447}}, {0x100, &(0x7f0000002680)=@string={0x100, 0x3, "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"}}]}) 48.245289484s ago: executing program 0: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xe2, [@local, @dev, @remote]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x2000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000006a0a00ff0000000035000000000000001849", @ANYRES32, @ANYBLOB="102200000000002505006bd7da0b2cab1900000000000095"], 0x0, 0xdb5, 0x95, &(0x7f0000000180)=""/149}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000140), 0x26, 0x4f6, &(0x7f0000000bc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014000905000000000000000002180000", @ANYRES32=r8, @ANYBLOB], 0x28}}, 0x0) 47.967310224s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 46.888394044s ago: executing program 2: r0 = openat$qrtrtun(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket(0x2a, 0x2, 0x0) sendto(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) dup2(r0, r3) 45.968240041s ago: executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f00000003c0)='mm_page_alloc\x00'}, 0x10) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) dup3(r1, r0, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000000)=0x17) 45.214152265s ago: executing program 2: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xe2, [@local, @dev, @remote]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x2000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000006a0a00ff0000000035000000000000001849", @ANYRES32, @ANYBLOB="102200000000002505006bd7da0b2cab1900000000000095"], 0x0, 0xdb5, 0x95, &(0x7f0000000180)=""/149}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000140), 0x26, 0x4f6, &(0x7f0000000bc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014000905000000000000000002180000", @ANYRES32=r8, @ANYBLOB="080002007f011900"], 0x28}}, 0x0) 33.630917437s ago: executing program 4: r0 = syz_io_uring_setup(0x366d, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f00000003c0), &(0x7f0000000100)=0x0) syz_io_uring_setup(0x7a0, &(0x7f0000000280), &(0x7f0000000040)=0x0, &(0x7f0000000180)) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r2, r1, &(0x7f00000001c0)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x0, 0xb0f085959838e300}) io_uring_enter(r0, 0xa3d, 0x0, 0x0, 0x0, 0x0) 33.554460292s ago: executing program 4: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)) r2 = socket(0x2a, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, r2) 33.408061813s ago: executing program 4: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3a000c0, &(0x7f0000000340)=ANY=[@ANYBLOB='file_umask=00000000000000000010001,file_umask=00000000000000000003342,umask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d69736f383835392d332c71756965742c6469725f756d61736b3d30303030303030303030303030303030303130303030312c747970653d731472bb2c747970653da0a408e02c756d61736b3d30303030303030303030303030303030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030303030372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d3031373748373737d6d5ec257e0555ee37373737322c40000000", @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000002055,gid=', @ANYRESHEX=0x0, @ANYBLOB=',obj_type=,rootcontext=unconfined_u,\x00'], 0x4, 0x331, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000008c0), 0xfecc) 32.838682252s ago: executing program 3: syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000300)='./file0\x00', 0x2008410, &(0x7f00000000c0)=ANY=[@ANYRES8=0x0, @ANYRES8=0x0], 0xfd, 0x557d, &(0x7f00000057c0)="$eJzs3EtvG9UXAPA7dtJ3+4/+YsGuI1VIiVRbdfoQ7Aq04iFaVTwWrMCxXcut7YlixzVdIcESseCbIJBYseQzsGDNDrEAsUMq8twxbdqkahXHIenvJ43PzJ3xmXtGVqwzEzkAL6yl9K8/knAmHA8hlEMIp5KQryfFkrsaw8shhLMhhNIjS1KM/ztwJIRwIoRwZpI85kyKXd+cH527/Pu7f/7489GFk9/+8Mv+VQ3st1dCCL31uH6vF2PWjvFOMV4fdfLYuzQqYtzRu1tsZzHea63lGe7Vp8fV83ixHY/P1jcHk3i7W29MYrtzOx9f78cTDkbtaZ78DXfqG/l2s7WWx84gy2P7fpzX+H7823Z/MIx5mkW+z/L0YTicxjjeGrdiPet389joD4vxmDdrtsaTOCpicbrQyLrNfB5ru7nS/23vdfqb43TU2hh0sn56uVp7tVq7UqltZM3WsHWpUu81r1xKl9vdzvQL6Wo7y9rdVrWR9VbS5XajUanV0uVrrbVOvZ/WatWL1QuVyyvF2vn0rZsfpd1mujyJb3T6m0c63UF6O9tI4ztW0tXqxddW0nO19IMbt9Jb71+/fuPWh59c+/jm6zfeebM46IlppcurF1ZXK7ULldXayh7Uf6zY+Wj9/c1xZdiq97arf/K9+4z1D3dT/5fFvJ6j/mR3lwee7uEHLFnY14kAHBxP9P9B/w/svbn2/w/KMeEM+/8wy/5/0lLp/5/e/0/639IO/e9z9P+76n/n1f/vVP9O/f8Brh92xQ0mAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAX1q+L372dryzF7ZPF+Oli6P/FdhJCKIUQHmyjHI5syVku8izucPziY3P4KQl5hsk5jhbLiRDC1WL5+397fRUAAADg8Pr+87Nfx249vizt94SYp3jTpnTq0xnlS0IIi0u/zShbafLy0oyS5Z/vhTCeUbb8BtaxGSWLt9wWZpXtmZSn4YvTDwfzgpIYSnOdDgAAMBflLWG+XQgAAADz9NXjA579HD7lbcaSMH2UOX0WnP/n/cNHm8e37AMAAAAOoGS/JwAAAADsubz/9/t/AAAAcLjF3/8DAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPiHnfu5URuI4gD8bHAg/xQU5Z6UkhuUkRJyzC2BAtIEJZAW0gA1kFtKQHEEM0JrFqSVbGMt+j7J9tpj/fxmxeWNJQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADQpz/VZvHrx8efbXPquv5et9DNbAAAAIBLdtVmcfxjls5f5+tv86X3+byIiDL1+Y+M4kUjc5Rzqiv3V2c1/I44JhyeMcnbq4j4nLf9u77/CwAAAHC/tqv1PHXraTd7MPZpsKq4kbRoU7750lFeERHV7G9HaeVh9yFOdbZz+H2P41sHSZEXtmLaUVhachtfHuti7heMGoc8k+kyYp+X6Mp+ngsAAAyp2Qlc6UIAAAC4A1+HLoDbO728LNIhv2ecNEZfnt0LAAAAPDvF0AUAAAAAvTr1/r7/BwAAAPctff8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAPu2qzWK7Ws+vjS+fmPOvbqe7GQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD/2Z93FAiBMAiDves7k7n/YaVBQ2OTKhA+/sZgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB487u//J+YGmeSudfG0vNIsnZqbJ0ae+fG0R/G168BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBif15SIASCIArmjP+d9P0PKwl6BhEioOFRRS0aAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAL7od7/8n5gaZ5K508bS8UiydtXYumrsPWgcPRhv/wYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBi5/554yiiAIC/3ftDHEAYg1wYUJAooCH2JSSkhAJkUfARkCznHAwXAokLElmAG6iQ6zQISoSQQKbLd0gdS2lCl8KFkaiD9m7XGSeGWBbZvdi/nzQ7b8+jnTd7J8vPszYAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEBl6914OS/jVnGYHMXVa7e2VxeLfvOBvnBj/fZM0Yo4e8Q897575zFkP9ZeSU9OTCcnX9efDAAAAEdDq6rvI+JOZ2O+6PPJYf3fqcYUNf+Pz47iqp5/sO7f3F49Vn5ppqr///j97os7E02O5ikuurQ86M89nEr7MS1x7D33yBHt4Z0f/u6lNXxD8g/WXtjqDO9n9v3Nm+91h+FTdWQLABzEyaovg+rnoaLvNZkYAEdGOym8q/q/NdlsTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB12FqLp6s4i4iZ9v24sLm9urhXf2P99kzVzl6/vp5es7hEJyKWlgf9To1rGXdXrl77dGEw6F+uPzgREc3NXgYf7WNMxH+PKT+e0dwq/j3IxiONRoO8fH/GJZ//M6g+e3uNmYiIg1+5oW9IAAAcWp2yFXX9nc7GfPFaNhVx76fd9f/rSRy76v5813la/9/9+OytdK60/u/VtcAnwOzKxc9nr1y99ubyxYUL/Qv9z9461Xu7d/rcmTPnZot7NTe7FHl/ruk0AQAAeIJ1y5bW//nUw/v/x5M49rn//8UPva/SuVrq/z3d3/RrOhMAAICjqLsTPf/q339le4zIut34cmFl5XJvdNw5PzU61pruAX1T9mn935pqNicAAACgHltr2a79//NJHPvc/3/m55d+Ta/ZioiJiEsR0T+5eGlwvr7ljLU6/lB5OFG36ZUCAADQlImypfv/neHz//nOIw95RLzx2iiu/tfVfur/1vvf/pLOlT7/f7q+JY6jPKZH9yMv+umI9nTTKQEAAHCYHStblkX82dmY/+S34x92Pf8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAULd/AgAA//+iWTW/") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) 32.415751784s ago: executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000440), 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000240)="58000000140091d427323b4725458db4560200000000ff81000e224e227f0000017b00092b1e58e6000001e809000000fff7ffef3ac7100003ffffffffffff00000000000003000000deff0000", 0x4d}], 0x1) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000100)) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f0000000040)=ANY=[@ANYRES64=r0]) 32.20967825s ago: executing program 4: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xe2, [@local, @dev, @remote]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x2000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000006a0a00ff0000000035000000000000001849", @ANYRES32, @ANYBLOB="102200000000002505006bd7da0b2cab1900000000000095"], 0x0, 0xdb5, 0x95, &(0x7f0000000180)=""/149}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000140), 0x26, 0x4f6, &(0x7f0000000bc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014000905000000000000000002180000", @ANYRES32=r8, @ANYBLOB="080002007f01190008000400ffffff"], 0x28}}, 0x0) 31.643391444s ago: executing program 3: ioctl$TCSETAF(0xffffffffffffffff, 0x5408, &(0x7f0000000080)={0x0, 0x0, 0x0, 0xfdff, 0x0, "ec28a144f13d7607"}) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, "0062ba7d82000000000000000000f7ffffff00"}) r0 = syz_open_pts(0xffffffffffffffff, 0x0) r1 = dup3(r0, 0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r1, 0x5412, &(0x7f0000000000)=0x17) 31.210987414s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000040)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x0, 0x8, 0x0, 0x0, 0xf}) read(r0, &(0x7f00000002c0)=""/184, 0xb8) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 31.080191574s ago: executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x3fe}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66ba4300b006ee0f01c40f009b27000000b9800000c00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a000000328fe858b660002fb90d090000b800680000ba000000000f30", 0x5a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 30.036556013s ago: executing program 3: syz_emit_ethernet(0x5a, &(0x7f0000000200)={@local, @local, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0xf, 0xe2, [@local, @dev, @remote]}, @timestamp={0x44, 0xc, 0x5, 0x3, 0x0, [0x2000, 0x0]}, @cipso={0x86, 0x6}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="85000000000000006a0a00ff0000000035000000000000001849", @ANYRES32, @ANYBLOB="102200000000002505006bd7da0b2cab1900000000000095"], 0x0, 0xdb5, 0x95, &(0x7f0000000180)=""/149}, 0x90) syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000440)=[{&(0x7f0000000000)=""/9, 0x9}], 0x1) r1 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000080), &(0x7f0000000140)='./file1\x00', 0x3000c00, &(0x7f0000000200)=ANY=[], 0x1, 0x654, &(0x7f0000000a40)="$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") r2 = inotify_init1(0x0) inotify_add_watch(r2, &(0x7f0000000000)='.\x00', 0x50007a2) lsetxattr$trusted_overlay_upper(&(0x7f0000000040)='./file1\x00', &(0x7f0000000140), &(0x7f0000000240)=ANY=[], 0xbed, 0x0) removexattr(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000200)=@known='trusted.overlay.upper\x00') socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r3, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback=0xac1414aa}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x44}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = dup(r4) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20000c2, &(0x7f0000000140), 0x26, 0x4f6, &(0x7f0000000bc0)="$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") r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="2800000014000905000000000000000002180000", @ANYRES32=r8, @ANYBLOB="080002007f01190008000400ffff"], 0x28}}, 0x0) 17.952648533s ago: executing program 0: r0 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000040), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) r2 = socket(0x2a, 0x2, 0x0) sendto(r2, 0x0, 0x0, 0x0, &(0x7f0000000040)=@qipcrtr, 0x80) read$qrtrtun(r0, 0x0, 0x0) dup2(r0, r2) 15.179623422s ago: executing program 2: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000090003206d0414c340000000000109022400010000a00009040000010301010009210008000122010009", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000dc0)=ANY=[@ANYBLOB="00020c0000000c0002"], 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) 2.161866192s ago: executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000040)={[{}, {}, {0x3fe}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00'}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 0s ago: executing program 3: creat(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x9}, 0x6b) syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x3a000c0, &(0x7f0000000340)=ANY=[@ANYBLOB='file_umask=00000000000000000010001,file_umask=00000000000000000003342,umask=00000000000000000000001,uid=', @ANYRESHEX=0x0, @ANYBLOB="2c636f6465706167653d69736f383835392d332c71756965742c6469725f756d61736b3d30303030303030303030303030303030303130303030312c747970653d731472bb2c747970653da0a408e02c756d61736b3d30303030303030303030303030303030303030303030372c66696c655f756d61736b3d30303030303030303030303030303030303030303030372c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c6469725f756d61736b3d3031373748373737d6d5ec257e0555ee37373737322c40000000", @ANYRESHEX=0x0, @ANYBLOB=',dir_umask=00000000000000000002055,gid=', @ANYRESHEX=0x0, @ANYBLOB=',obj_type=,rootcontext=unconfined_u,\x00'], 0x4, 0x331, &(0x7f0000000880)="$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") r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000008c0), 0xfecc) kernel console output (not intermixed with test programs): alNumber=0 [ 95.682074][ T5162] usb 2-1: config 0 descriptor?? [ 95.715662][ T5847] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 95.729200][ T5159] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 96.004355][ T25] usb 5-1: USB disconnect, device number 4 [ 96.185857][ T5852] loop0: detected capacity change from 0 to 32768 [ 96.220017][ T5852] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (5852) [ 96.250918][ T5162] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 96.299878][ T5852] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 96.313440][ T5162] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 96.337879][ T5852] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 96.370148][ T5852] BTRFS info (device loop0): disk space caching is enabled [ 96.514094][ T5852] BTRFS info (device loop0): rebuilding free space tree [ 96.567399][ T5160] usb 2-1: USB disconnect, device number 3 [ 96.593052][ T5852] BTRFS info (device loop0): disabling free space tree [ 96.619379][ T5852] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 96.684671][ T5852] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 96.965121][ T5107] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 97.203105][ T5887] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.290639][ T5859] loop3: detected capacity change from 0 to 32768 [ 97.316518][ T5889] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 97.344064][ T5861] loop2: detected capacity change from 0 to 32768 [ 97.367059][ T5861] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (5861) [ 97.421229][ T5861] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 97.492050][ T5861] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 97.571724][ T5861] BTRFS info (device loop2): using free-space-tree [ 97.640621][ T5859] bcachefs (loop3): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 97.765492][ T5859] bcachefs (loop3): recovering from clean shutdown, journal seq 7 [ 97.877216][ T5163] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 97.913251][ T5859] bcachefs (loop3): alloc_read... done [ 97.918948][ T5859] bcachefs (loop3): stripes_read... done [ 97.926765][ T5859] bcachefs (loop3): snapshots_read... done [ 97.935663][ T5859] bcachefs (loop3): journal_replay... done [ 97.942369][ T5859] bcachefs (loop3): resume_logged_ops... done [ 98.113361][ T5859] bcachefs (loop3): going read-write [ 98.120496][ T5163] usb 2-1: Using ep0 maxpacket: 32 [ 98.148189][ T5163] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 98.248088][ T5859] bcachefs (loop3): done starting filesystem [ 98.321452][ T5163] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 98.712880][ T5163] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.731235][ T5163] usb 2-1: config 0 descriptor?? [ 98.754251][ T5163] hub 2-1:0.0: bad descriptor, ignoring hub [ 98.761165][ T5163] hub 2-1:0.0: probe with driver hub failed with error -5 [ 98.770628][ T5163] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 98.900022][ T5112] bcachefs (loop3): shutting down [ 98.927776][ T5112] bcachefs (loop3): going read-only [ 98.933039][ T5112] bcachefs (loop3): finished waiting for writes to stop [ 98.954902][ T5112] bcachefs (loop3): flushing journal and stopping allocators, journal seq 9 [ 99.033809][ T5883] loop4: detected capacity change from 0 to 32768 [ 99.060708][ T5112] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 10 [ 99.070666][ T5160] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 99.102074][ T5112] bcachefs (loop3): shutdown complete, journal seq 11 [ 99.116798][ T5112] bcachefs (loop3): marking filesystem clean [ 99.143820][ T5109] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 99.183456][ T5112] bcachefs (loop3): shutdown complete [ 99.237467][ T5883] bcachefs (loop4): mounting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,nojournal_transaction_names [ 99.251514][ T5883] bcachefs (loop4): recovering from clean shutdown, journal seq 8 [ 99.258362][ T5160] usb 1-1: Using ep0 maxpacket: 16 [ 99.282192][ T5160] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 99.325140][ T5883] bcachefs (loop4): alloc_read... done [ 99.345775][ T5160] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 99.346388][ T5883] bcachefs (loop4): stripes_read... done [ 99.375054][ T5883] bcachefs (loop4): snapshots_read... done [ 99.376440][ T5160] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.394760][ T5883] bcachefs (loop4): journal_replay... done [ 99.401626][ T5160] usb 1-1: Product: и [ 99.405771][ T5160] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 99.421577][ T5883] bcachefs (loop4): resume_logged_ops... done [ 99.458708][ T5883] bcachefs (loop4): going read-write [ 99.480664][ T5883] bcachefs (loop4): done starting filesystem [ 99.660536][ T5108] bcachefs (loop4): shutting down [ 99.689347][ T5108] bcachefs (loop4): going read-only [ 99.696926][ T5108] bcachefs (loop4): finished waiting for writes to stop [ 99.701860][ T5160] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 99.715016][ T5108] bcachefs (loop4): flushing journal and stopping allocators, journal seq 8 [ 99.733305][ T5160] usb 1-1: USB disconnect, device number 3 [ 99.741772][ T5108] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 8 [ 99.793276][ T5108] bcachefs (loop4): shutdown complete, journal seq 9 [ 99.829720][ T5108] bcachefs (loop4): marking filesystem clean [ 99.953725][ T5108] bcachefs (loop4): shutdown complete [ 100.136484][ T5159] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 100.314430][ T5943] loop3: detected capacity change from 0 to 32768 [ 100.356362][ T5159] usb 3-1: Using ep0 maxpacket: 16 [ 100.357653][ T5943] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (5943) [ 100.368427][ T5159] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 100.420743][ T5943] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 100.472344][ T5159] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 100.486464][ T5943] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 100.513581][ T5159] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.536586][ T5943] BTRFS info (device loop3): using free-space-tree [ 100.546485][ T5159] usb 3-1: Product: и [ 100.588946][ T5159] usb 3-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 100.682771][ T5162] usb 2-1: USB disconnect, device number 4 [ 100.780671][ T5958] loop0: detected capacity change from 0 to 64 [ 101.539222][ T5159] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 101.655611][ T5112] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 101.807923][ T5972] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.828308][ T5160] usb 3-1: USB disconnect, device number 3 [ 101.915049][ T5974] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 101.967521][ T25] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 102.166459][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 102.193121][ T25] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 102.265321][ T25] usb 5-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 102.322246][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 102.331237][ T25] usb 5-1: Product: и [ 102.335508][ T25] usb 5-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 103.240972][ T25] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 103.493792][ T25] usb 5-1: USB disconnect, device number 5 [ 103.493834][ T5990] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 104.083469][ T45] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 104.159323][ T5996] loop3: detected capacity change from 0 to 64 [ 104.434861][ T5980] loop0: detected capacity change from 0 to 32768 [ 104.488215][ T45] usb 3-1: device descriptor read/64, error -71 [ 104.910918][ T6003] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 104.996318][ T45] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 105.152404][ T6013] loop4: detected capacity change from 0 to 1024 [ 105.166380][ T45] usb 3-1: device descriptor read/64, error -71 [ 105.213013][ T6015] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 105.213088][ T5980] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 105.269081][ T5980] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 105.286967][ T45] usb usb3-port1: attempt power cycle [ 105.293666][ T5980] bcachefs (loop0): bch2_journal_reclaim_start(): error creating journal reclaim thread EINTR [ 105.309914][ T6013] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 105.311330][ T5980] bcachefs (loop0): bch2_fs_recovery(): error EINTR [ 105.369381][ T5980] bcachefs (loop0): bch2_fs_start(): error starting filesystem EINTR [ 105.390044][ T5980] bcachefs (loop0): shutting down [ 105.428051][ T5980] bcachefs (loop0): shutdown complete [ 105.866667][ T45] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 106.012064][ T45] usb 3-1: device descriptor read/8, error -71 [ 106.566667][ T45] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 106.618004][ T45] usb 3-1: device descriptor read/8, error -71 [ 106.629755][ T6011] loop1: detected capacity change from 0 to 40427 [ 106.638474][ T6011] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 106.689803][ T6011] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 106.732885][ T6018] kvm: emulating exchange as write [ 106.776801][ T45] usb usb3-port1: unable to enumerate USB device [ 107.017752][ T6011] F2FS-fs (loop1): invalid crc value [ 107.115093][ T6034] loop2: detected capacity change from 0 to 64 [ 107.135552][ T6011] F2FS-fs (loop1): Found nat_bits in checkpoint [ 107.926377][ T6011] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 107.969533][ T6011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 108.836362][ T6045] loop4: detected capacity change from 0 to 64 [ 109.510516][ T6029] loop3: detected capacity change from 0 to 40427 [ 109.575448][ T6029] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 109.592476][ T5158] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 109.626277][ T6029] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 109.665497][ T6029] F2FS-fs (loop3): invalid crc value [ 109.685048][ T6049] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.714588][ T6029] F2FS-fs (loop3): Found nat_bits in checkpoint [ 109.796310][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 109.815808][ T6054] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 109.817656][ T5158] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 109.884081][ T5158] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 109.898597][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.928819][ T5158] usb 1-1: Product: и [ 109.943019][ T5158] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 110.053704][ T6037] loop2: detected capacity change from 0 to 40427 [ 110.065739][ T6037] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 110.074916][ T6037] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 110.102254][ T6037] F2FS-fs (loop2): Found nat_bits in checkpoint [ 110.179968][ T6062] loop1: detected capacity change from 0 to 64 [ 110.903367][ T6037] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 110.928964][ T6037] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 110.956838][ T5158] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 110.971515][ T5158] usb 1-1: USB disconnect, device number 4 [ 111.179684][ T25] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 111.338979][ T25] usb 5-1: device descriptor read/64, error -71 [ 111.819580][ T25] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 111.963741][ T6080] loop2: detected capacity change from 0 to 64 [ 111.986535][ T25] usb 5-1: device descriptor read/64, error -71 [ 112.108667][ T25] usb usb5-port1: attempt power cycle [ 112.726586][ T25] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 112.788030][ T25] usb 5-1: device descriptor read/8, error -71 [ 113.076475][ T25] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 113.128436][ T25] usb 5-1: device descriptor read/8, error -71 [ 113.257246][ T25] usb usb5-port1: unable to enumerate USB device [ 113.283464][ T6076] loop0: detected capacity change from 0 to 40427 [ 113.305795][ T6076] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 113.331032][ T6071] loop1: detected capacity change from 0 to 32768 [ 113.338942][ T6076] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.363186][ T6076] F2FS-fs (loop0): invalid crc value [ 113.396328][ T6076] F2FS-fs (loop0): Found nat_bits in checkpoint [ 113.409928][ T6075] loop3: detected capacity change from 0 to 32768 [ 113.507811][ T6076] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 113.530107][ T6076] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 113.575027][ T6075] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 113.586690][ T6071] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 113.606552][ T6075] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 113.617455][ T6071] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 113.710859][ T6071] bcachefs (loop1): alloc_read... done [ 113.726106][ T6071] bcachefs (loop1): stripes_read... done [ 113.733637][ T5107] syz-executor.0: attempt to access beyond end of device [ 113.733637][ T5107] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427 [ 113.748276][ T6071] bcachefs (loop1): snapshots_read... done [ 113.754546][ T6082] loop2: detected capacity change from 0 to 32768 [ 113.759400][ T6071] bcachefs (loop1): journal_replay... done [ 113.776827][ T5107] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.787849][ T6071] bcachefs (loop1): resume_logged_ops... done [ 113.796444][ T5107] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 113.810714][ T6071] bcachefs (loop1): going read-write [ 113.829703][ T6071] bcachefs (loop1): done starting filesystem [ 113.945128][ T6082] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): filesystem UUID already open [ 114.000579][ T6082] bcachefs (1e246536-b1b3-4f86-83c2-3dfcc2979a4c): shutdown complete [ 114.032292][ T6109] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.233468][ T5119] bcachefs (loop1): shutting down [ 114.247098][ T5119] bcachefs (loop1): going read-only [ 114.252562][ T5119] bcachefs (loop1): finished waiting for writes to stop [ 114.270556][ T6111] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 114.356828][ T5119] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 114.395929][ T5119] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 9 [ 114.414821][ T5119] bcachefs (loop1): shutdown complete, journal seq 10 [ 114.447263][ T5119] bcachefs (loop1): marking filesystem clean [ 114.550292][ T5119] bcachefs (loop1): shutdown complete [ 115.246521][ T45] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 115.276414][ T5162] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 115.467172][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 115.488734][ T45] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 115.506364][ T5162] usb 1-1: Using ep0 maxpacket: 16 [ 115.521942][ T45] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 115.522592][ T5162] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 115.542493][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.565444][ T45] usb 3-1: Product: и [ 115.574832][ T45] usb 3-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 115.607197][ T5162] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 115.617479][ T5162] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.639969][ T5162] usb 1-1: Product: и [ 115.644342][ T45] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 115.655263][ T5162] usb 1-1: SerialNumber: 씌솧Ⲕ탽ꑮ龟齼染엍ᅁ换陵ꇱЅ瑣❞랃ɗ᳜⨝댓⍢禵섎跮⦥仙⋑꤇㏆䨱ƹ눼볗蠥Ɬᚃ梷⣹눗☔ﶖ跍䙃璨䭖飇 [ 115.681338][ T6116] loop3: detected capacity change from 0 to 40427 [ 115.708255][ T6116] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 115.729992][ T6116] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 115.747747][ T5162] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 115.805439][ T6116] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.876051][ T5163] usb 3-1: USB disconnect, device number 8 [ 115.937830][ T6116] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 115.966722][ T6116] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 115.986792][ T5162] usb 1-1: USB disconnect, device number 5 [ 116.033611][ T6116] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 116.054468][ T6116] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 116.236422][ T45] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 116.322001][ T6126] loop1: detected capacity change from 0 to 40427 [ 116.334849][ T6126] F2FS-fs (loop1): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 116.359333][ T6126] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 116.388630][ T6126] F2FS-fs (loop1): invalid crc value [ 116.397920][ T6126] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.446359][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 116.454074][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 116.486538][ T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 116.536575][ T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 116.546012][ T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.584085][ T6126] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 116.600290][ T45] usb 5-1: config 0 descriptor?? [ 116.605975][ T6132] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 116.616719][ T6126] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.646434][ T6141] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 116.667715][ T45] hub 5-1:0.0: USB hub found [ 116.778163][ T29] kauditd_printk_skb: 45 callbacks suppressed [ 116.778205][ T29] audit: type=1800 audit(1716940056.096:218): pid=6126 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=14 res=0 errno=0 [ 116.806627][ T5162] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 116.816970][ T6126] syz-executor.1: attempt to access beyond end of device [ 116.816970][ T6126] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 116.858019][ T45] hub 5-1:0.0: 2 ports detected [ 116.935125][ T5119] syz-executor.1: attempt to access beyond end of device [ 116.935125][ T5119] loop1: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 116.957998][ T5119] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 116.971920][ T5162] usb 3-1: device descriptor read/64, error -71 [ 116.980435][ T5119] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 117.257467][ T5162] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 117.426535][ T1147] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 117.434850][ T5162] usb 3-1: device descriptor read/64, error -71 [ 117.457638][ T6143] loop0: detected capacity change from 0 to 32768 [ 117.566984][ T5162] usb usb3-port1: attempt power cycle [ 117.598645][ T6143] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 117.610796][ T6143] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 117.634007][ T6143] bcachefs (loop0): alloc_read... done [ 117.640899][ T6143] bcachefs (loop0): stripes_read... done [ 117.647020][ T6143] bcachefs (loop0): snapshots_read... done [ 117.654987][ T6143] bcachefs (loop0): journal_replay... done [ 117.661637][ T1147] usb 4-1: Using ep0 maxpacket: 32 [ 117.679075][ T1147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 117.691044][ T6143] bcachefs (loop0): resume_logged_ops... done [ 117.697392][ T1147] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 117.708809][ T6143] bcachefs (loop0): going read-write [ 117.719002][ T1147] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 117.729898][ T1147] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.738527][ T6143] bcachefs (loop0): done starting filesystem [ 117.752431][ T1147] usb 4-1: config 0 descriptor?? [ 117.779172][ T6147] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 117.798428][ T1147] hub 4-1:0.0: USB hub found [ 117.829182][ T5161] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 117.882641][ T5107] bcachefs (loop0): shutting down [ 117.888228][ T5107] bcachefs (loop0): going read-only [ 117.893785][ T5107] bcachefs (loop0): finished waiting for writes to stop [ 117.903161][ T5107] bcachefs (loop0): flushing journal and stopping allocators, journal seq 8 [ 117.925658][ T5107] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 117.960145][ T5107] bcachefs (loop0): shutdown complete, journal seq 11 [ 117.976414][ T5107] bcachefs (loop0): marking filesystem clean [ 118.004162][ T5107] bcachefs (loop0): shutdown complete [ 118.016507][ T5162] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 118.047817][ T1147] hub 4-1:0.0: 2 ports detected [ 118.056328][ T5161] usb 2-1: Using ep0 maxpacket: 32 [ 118.062362][ T5162] usb 3-1: device descriptor read/8, error -71 [ 118.064144][ T5161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 118.096775][ T25] usb 5-1: USB disconnect, device number 10 [ 118.106338][ T45] hub 5-1:0.0: hub_ext_port_status failed (err = -71) [ 118.119575][ T5161] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 118.137793][ T5161] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 118.149384][ T5161] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.191445][ T5161] usb 2-1: config 0 descriptor?? [ 118.211182][ T6155] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 118.228131][ T5161] hub 2-1:0.0: USB hub found [ 118.336572][ T5162] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 118.379475][ T5162] usb 3-1: device descriptor read/8, error -71 [ 118.446504][ T5161] hub 2-1:0.0: 2 ports detected [ 118.516462][ T5162] usb usb3-port1: unable to enumerate USB device [ 118.742360][ T6162] loop4: detected capacity change from 0 to 512 [ 118.757863][ T6162] EXT4-fs: Ignoring removed nobh option [ 118.807393][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 118.815655][ T6162] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -61 [ 118.825212][ T6162] EXT4-fs error (device loop4): ext4_orphan_get:1394: inode #13: comm syz-executor.4: casefold flag without casefold feature [ 118.839262][ T6162] EXT4-fs error (device loop4): ext4_orphan_get:1399: comm syz-executor.4: couldn't read orphan inode 13 (err -117) [ 118.857439][ T5161] hub 2-1:0.0: set hub depth failed [ 118.866953][ T5161] usb 2-1: USB disconnect, device number 5 [ 118.870050][ T6162] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.949509][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 118.982954][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.010730][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.032902][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.046038][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.064646][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.074551][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.091163][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.120135][ T6162] fscrypt (loop4, inode 2): Error -61 getting encryption context [ 119.165935][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 119.233742][ T6160] loop0: detected capacity change from 0 to 32768 [ 119.342749][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 119.351542][ T5161] usb 4-1: USB disconnect, device number 3 [ 119.452892][ T6160] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 119.486694][ T6160] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 119.506976][ T6174] loop1: detected capacity change from 0 to 64 [ 119.589725][ T6160] bcachefs (loop0): alloc_read... done [ 119.601234][ T6160] bcachefs (loop0): stripes_read... done [ 119.616524][ T6160] bcachefs (loop0): snapshots_read... done [ 119.648942][ T6160] bcachefs (loop0): journal_replay... done [ 119.654868][ T6160] bcachefs (loop0): resume_logged_ops... done [ 119.686050][ T6160] bcachefs (loop0): going read-write [ 119.717736][ T6160] bcachefs (loop0): done starting filesystem [ 119.932406][ T6183] loop1: detected capacity change from 0 to 1024 [ 119.991301][ T5107] bcachefs (loop0): shutting down [ 120.056499][ T5107] bcachefs (loop0): going read-only [ 120.061760][ T5107] bcachefs (loop0): finished waiting for writes to stop [ 120.089592][ T6166] loop4: detected capacity change from 0 to 32768 [ 120.128318][ T5107] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 120.137981][ T6166] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6166) [ 120.184122][ T5107] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 120.211507][ T6166] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.229670][ T5107] bcachefs (loop0): shutdown complete, journal seq 11 [ 120.252860][ T6166] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 120.257223][ T5107] bcachefs (loop0): marking filesystem clean [ 120.299933][ T6166] BTRFS info (device loop4): using free-space-tree [ 120.325322][ T6185] loop3: detected capacity change from 0 to 1024 [ 120.430200][ T5107] bcachefs (loop0): shutdown complete [ 120.581515][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.965176][ T6204] loop1: detected capacity change from 0 to 1024 [ 121.022496][ T6177] loop2: detected capacity change from 0 to 40427 [ 121.041506][ T6177] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 121.078712][ T6177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 121.155533][ T6177] F2FS-fs (loop2): Found nat_bits in checkpoint [ 121.282422][ T6177] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 121.295034][ T6217] loop4: detected capacity change from 0 to 1024 [ 121.301804][ T6177] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 121.331421][ T6177] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 121.349912][ T6177] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 121.826526][ T5162] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 122.704725][ T6231] loop3: detected capacity change from 0 to 1024 [ 122.859734][ T5162] usb 2-1: Using ep0 maxpacket: 32 [ 122.867047][ T5162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 122.896780][ T5159] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 122.911156][ T5162] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 122.948620][ T5162] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 122.964690][ T5162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.991865][ T5162] usb 2-1: config 0 descriptor?? [ 123.017963][ T6223] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 123.033565][ T5162] hub 2-1:0.0: USB hub found [ 123.079983][ T5159] usb 5-1: device descriptor read/64, error -71 [ 123.233858][ T5162] hub 2-1:0.0: 2 ports detected [ 123.266350][ T5158] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 123.366616][ T5159] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 123.418634][ T6234] loop0: detected capacity change from 0 to 32768 [ 123.432492][ T6234] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6234) [ 123.457197][ T5158] usb 3-1: Using ep0 maxpacket: 32 [ 123.470141][ T6234] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 123.471184][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 123.485057][ T6234] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 123.496874][ T5158] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 123.510514][ T6234] BTRFS info (device loop0): disk space caching is enabled [ 123.512386][ T5158] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 123.530659][ T5159] usb 5-1: device descriptor read/64, error -71 [ 123.588334][ T5158] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 123.624117][ T5158] usb 3-1: config 0 descriptor?? [ 123.673073][ T6236] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 123.681099][ T5159] usb usb5-port1: attempt power cycle [ 123.713516][ T5158] hub 3-1:0.0: USB hub found [ 123.728944][ T6234] BTRFS info (device loop0): rebuilding free space tree [ 123.784268][ T6234] BTRFS info (device loop0): disabling free space tree [ 123.791494][ T6234] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 123.803832][ T6234] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 123.886343][ T5163] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 123.937241][ T5158] hub 3-1:0.0: 2 ports detected [ 123.995048][ T5107] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 124.106313][ T5163] usb 4-1: Using ep0 maxpacket: 32 [ 124.116888][ T5159] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 124.148685][ T5163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has an invalid bInterval 255, changing to 11 [ 124.168099][ T5159] usb 5-1: device descriptor read/8, error -71 [ 124.186316][ T5163] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xFF has invalid maxpacket 59391, setting to 1024 [ 124.226731][ T5163] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 124.245479][ T5163] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.269762][ T5163] usb 4-1: config 0 descriptor?? [ 124.300291][ T6248] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 124.335660][ T5163] hub 4-1:0.0: USB hub found [ 124.343553][ T5158] hub 3-1:0.0: set hub depth failed [ 124.372533][ T5158] usb 3-1: USB disconnect, device number 13 [ 124.457715][ T5159] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 124.507110][ T5159] usb 5-1: device descriptor read/8, error -71 [ 124.572676][ T5163] hub 4-1:0.0: 2 ports detected [ 124.578606][ T5204] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 124.580032][ T5160] usb 2-1: USB disconnect, device number 6 [ 124.639705][ T5159] usb usb5-port1: unable to enumerate USB device [ 125.056038][ T6265] loop4: detected capacity change from 0 to 1024 [ 125.351516][ T6261] loop0: detected capacity change from 0 to 32768 [ 125.366188][ T6261] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6261) [ 125.682687][ T6261] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 125.900404][ T5158] usb 4-1: USB disconnect, device number 4 [ 125.950844][ T6261] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 126.426683][ T6261] BTRFS info (device loop0): using free-space-tree [ 126.693200][ T6292] loop3: detected capacity change from 0 to 64 [ 126.883569][ T5107] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 127.718829][ T5158] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 127.900054][ T5158] usb 2-1: device descriptor read/64, error -71 [ 127.943509][ T6294] loop4: detected capacity change from 0 to 32768 [ 127.975817][ T6294] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6294) [ 128.058207][ T6307] loop3: detected capacity change from 0 to 64 [ 128.066388][ T6294] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.106541][ T6294] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 128.115253][ T6294] BTRFS info (device loop4): using free-space-tree [ 128.197159][ T5158] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 128.231029][ T6303] loop0: detected capacity change from 0 to 32768 [ 128.270012][ T6303] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz-executor.0 (6303) [ 128.359553][ T6303] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 128.370593][ T6303] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 128.379638][ T6303] BTRFS info (device loop0): disk space caching is enabled [ 128.396764][ T5158] usb 2-1: device descriptor read/64, error -71 [ 128.498704][ T6303] BTRFS info (device loop0): rebuilding free space tree [ 128.525263][ T29] audit: type=1800 audit(1716940067.836:219): pid=6342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=263 res=0 errno=0 [ 128.529768][ T5158] usb usb2-port1: attempt power cycle [ 128.577852][ T6294] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 128.622577][ T6303] BTRFS info (device loop0): disabling free space tree [ 128.656539][ T6303] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 128.685228][ T6303] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 128.927706][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 128.944265][ T5107] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 129.050235][ T5158] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 129.129498][ T5158] usb 2-1: device descriptor read/8, error -71 [ 129.412864][ T5158] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 129.482358][ T5158] usb 2-1: device descriptor read/8, error -71 [ 129.625299][ T5158] usb usb2-port1: unable to enumerate USB device [ 129.631676][ T6351] loop0: detected capacity change from 0 to 1024 [ 129.902789][ T6323] loop2: detected capacity change from 0 to 40427 [ 129.988092][ T6323] F2FS-fs (loop2): Found nat_bits in checkpoint [ 130.847821][ T6323] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 131.134972][ T29] audit: type=1800 audit(1716940070.446:220): pid=6365 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 131.258022][ T6365] syz-executor.2: attempt to access beyond end of device [ 131.258022][ T6365] loop2: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 131.906907][ T5109] syz-executor.2: attempt to access beyond end of device [ 131.906907][ T5109] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 131.977652][ T5109] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 132.177441][ T6373] loop3: detected capacity change from 0 to 8 [ 132.186466][ T6371] loop0: detected capacity change from 0 to 1024 [ 132.208368][ T6371] hfsplus: unable to parse mount options [ 132.236275][ T6373] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 132.287784][ T6066] I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 133.026526][ T6382] loop2: detected capacity change from 0 to 512 [ 133.056816][ T6382] EXT4-fs: Ignoring removed nobh option [ 133.073774][ T6364] loop4: detected capacity change from 0 to 32768 [ 133.092695][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.106566][ T6382] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -61 [ 133.114801][ T6382] EXT4-fs error (device loop2): ext4_orphan_get:1394: inode #13: comm syz-executor.2: casefold flag without casefold feature [ 133.156140][ T6369] loop1: detected capacity change from 0 to 32768 [ 133.167130][ T6364] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6364) [ 133.225350][ T6382] EXT4-fs error (device loop2): ext4_orphan_get:1399: comm syz-executor.2: couldn't read orphan inode 13 (err -117) [ 133.279158][ T6364] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.298079][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.306331][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.328951][ T6382] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 133.331659][ T6364] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 133.456644][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.498653][ T6364] BTRFS info (device loop4): using free-space-tree [ 133.511609][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.522680][ T6369] bcachefs (loop1): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 133.527360][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.563922][ T6369] bcachefs (loop1): recovering from clean shutdown, journal seq 7 [ 133.589668][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.612148][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.614554][ T6369] bcachefs (loop1): alloc_read... [ 133.635872][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.643018][ T6369] done [ 133.666704][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.682257][ T6369] bcachefs (loop1): stripes_read... done [ 133.687465][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.706381][ T6369] bcachefs (loop1): snapshots_read... done [ 133.714822][ T6369] bcachefs (loop1): journal_replay... done [ 133.733834][ T6382] fscrypt (loop2, inode 2): Error -61 getting encryption context [ 133.774599][ T6369] bcachefs (loop1): resume_logged_ops... done [ 133.813431][ T6369] bcachefs (loop1): going read-write [ 133.857135][ T6369] bcachefs (loop1): done starting filesystem [ 133.887221][ T6380] loop3: detected capacity change from 0 to 32768 [ 133.919368][ T6380] BTRFS: device /dev/loop3 (7:3) using temp-fsid bd0178c8-f0e2-40f4-b68f-fca8625c2b70 [ 133.935418][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.966119][ T6380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6380) [ 133.985160][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.083928][ T6380] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 134.171411][ T6380] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 134.242493][ T6417] loop2: detected capacity change from 0 to 8 [ 134.268806][ T6380] BTRFS info (device loop3): using free-space-tree [ 134.288316][ T6417] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 134.316140][ T5119] bcachefs (loop1): shutting down [ 134.330599][ T5119] bcachefs (loop1): going read-only [ 134.356155][ T5119] bcachefs (loop1): finished waiting for writes to stop [ 134.472875][ T5119] bcachefs (loop1): flushing journal and stopping allocators, journal seq 8 [ 134.537881][ T5119] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 10 [ 134.557747][ T5204] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 134.596422][ T5119] bcachefs (loop1): shutdown complete, journal seq 11 [ 134.620732][ T5119] bcachefs (loop1): marking filesystem clean [ 134.628930][ T6380] BTRFS info (device loop3): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 134.693116][ T5126] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 134.699952][ T29] audit: type=1800 audit(1716940074.016:221): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 134.728488][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 134.744325][ T5126] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 134.760927][ T5204] usb 5-1: device descriptor read/64, error -71 [ 134.764671][ T5119] bcachefs (loop1): shutdown complete [ 134.773041][ T5126] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 134.788367][ T5126] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 134.801823][ T5126] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 134.949491][ T5112] BTRFS info (device loop3): last unmount of filesystem bd0178c8-f0e2-40f4-b68f-fca8625c2b70 [ 135.046552][ T5204] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 135.139401][ T141] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.236320][ T5204] usb 5-1: device descriptor read/64, error -71 [ 135.354293][ T6443] loop2: detected capacity change from 0 to 8 [ 135.388906][ T5204] usb usb5-port1: attempt power cycle [ 135.391284][ T6443] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 135.420408][ T141] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.664264][ T141] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.768007][ T6449] loop1: detected capacity change from 0 to 16 [ 135.847936][ T5204] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 135.857958][ T6449] erofs: (device loop1): mounted with root inode @ nid 36. [ 135.877603][ T141] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.900947][ T5204] usb 5-1: device descriptor read/8, error -71 [ 135.948672][ T6449] syz-executor.1: attempt to access beyond end of device [ 135.948672][ T6449] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 136.196333][ T5204] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 136.245209][ T5204] usb 5-1: device descriptor read/8, error -71 [ 136.322688][ T6455] loop1: detected capacity change from 0 to 16 [ 136.347207][ T6455] erofs: (device loop1): mounted with root inode @ nid 36. [ 136.374992][ T6436] chnl_net:caif_netlink_parms(): no params data found [ 136.390909][ T5204] usb usb5-port1: unable to enumerate USB device [ 136.406829][ T6455] syz-executor.1: attempt to access beyond end of device [ 136.406829][ T6455] loop1: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 136.474372][ T141] bridge_slave_1: left allmulticast mode [ 136.480806][ T141] bridge_slave_1: left promiscuous mode [ 136.518732][ T141] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.578496][ T141] bridge_slave_0: left allmulticast mode [ 136.600776][ T141] bridge_slave_0: left promiscuous mode [ 136.614933][ T6457] loop2: detected capacity change from 0 to 1024 [ 136.626514][ T141] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.644752][ T6457] hfsplus: unable to parse mount options [ 136.709474][ T5543] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 136.886493][ T5114] Bluetooth: hci0: command tx timeout [ 136.912400][ T6445] loop3: detected capacity change from 0 to 40427 [ 136.945322][ T6459] loop1: detected capacity change from 0 to 1024 [ 136.965782][ T6445] F2FS-fs (loop3): Found nat_bits in checkpoint [ 137.165353][ T6445] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 137.474395][ T6470] syz-executor.3: attempt to access beyond end of device [ 137.474395][ T6470] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 137.496314][ T29] audit: type=1800 audit(1716940076.776:222): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 137.695297][ T5112] syz-executor.3: attempt to access beyond end of device [ 137.695297][ T5112] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 137.731992][ T5112] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 138.053519][ T141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 138.068838][ T6467] loop2: detected capacity change from 0 to 32768 [ 138.080922][ T141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 138.097083][ T6467] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6467) [ 138.112924][ T141] bond0 (unregistering): Released all slaves [ 138.145406][ T6467] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.194209][ T6467] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 138.216330][ T6467] BTRFS info (device loop2): using free-space-tree [ 138.626826][ T6471] loop4: detected capacity change from 0 to 40427 [ 138.670813][ T5109] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 138.686551][ T6471] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 138.694247][ T6471] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 138.813300][ T6471] F2FS-fs (loop4): invalid crc value [ 138.823798][ T6497] loop3: detected capacity change from 0 to 8 [ 138.846178][ T6497] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 138.928721][ T6471] F2FS-fs (loop4): Found nat_bits in checkpoint [ 138.985154][ T5114] Bluetooth: hci0: command tx timeout [ 139.196936][ T6436] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.204180][ T6436] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.260986][ T6436] bridge_slave_0: entered allmulticast mode [ 139.288226][ T6436] bridge_slave_0: entered promiscuous mode [ 139.306991][ T6471] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 139.338426][ T6471] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 139.339438][ T6436] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.411364][ T6436] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.438145][ T6510] loop2: detected capacity change from 0 to 8 [ 139.444964][ T6436] bridge_slave_1: entered allmulticast mode [ 139.468259][ T6510] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 139.488054][ T6436] bridge_slave_1: entered promiscuous mode [ 139.633284][ T6514] loop3: detected capacity change from 0 to 16 [ 139.688699][ T6514] erofs: (device loop3): mounted with root inode @ nid 36. [ 139.721263][ T6514] syz-executor.3: attempt to access beyond end of device [ 139.721263][ T6514] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 139.890099][ T6494] loop1: detected capacity change from 0 to 32768 [ 139.941726][ T6494] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6494) [ 140.023491][ T6522] loop2: detected capacity change from 0 to 8 [ 140.036993][ T6494] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.060437][ T6522] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 140.102973][ T6436] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.118807][ T6494] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 140.182996][ T6436] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.190950][ T6494] BTRFS info (device loop1): using free-space-tree [ 140.571718][ T6553] loop4: detected capacity change from 0 to 1024 [ 140.618054][ T141] hsr_slave_0: left promiscuous mode [ 140.644897][ T141] hsr_slave_1: left promiscuous mode [ 140.663892][ T29] audit: type=1800 audit(1716940079.976:223): pid=6554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=263 res=0 errno=0 [ 140.692909][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.708259][ T6494] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 140.727274][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 140.746579][ T141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.768715][ T141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.786382][ T141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.843900][ T141] veth1_macvtap: left promiscuous mode [ 140.855442][ T141] veth0_macvtap: left promiscuous mode [ 140.864964][ T141] veth1_vlan: left promiscuous mode [ 140.872792][ T5119] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.875731][ T141] veth0_vlan: left promiscuous mode [ 140.920337][ T45] usb 3-1: Using ep0 maxpacket: 32 [ 140.941663][ T45] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 140.977870][ T45] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 140.997004][ T45] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 141.013007][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.047054][ T5114] Bluetooth: hci0: command tx timeout [ 141.069798][ T45] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 141.086451][ T45] usb 3-1: no configuration chosen from 1 choice [ 141.450926][ T6544] loop3: detected capacity change from 0 to 40427 [ 141.490821][ T6544] F2FS-fs (loop3): Found nat_bits in checkpoint [ 141.641303][ T6544] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 141.921728][ T29] audit: type=1800 audit(1716940081.246:224): pid=6561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 141.956133][ T6561] syz-executor.3: attempt to access beyond end of device [ 141.956133][ T6561] loop3: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 142.084526][ T6556] loop1: detected capacity change from 0 to 40427 [ 142.103137][ T6556] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 142.141044][ T6556] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 142.175971][ T5112] syz-executor.3: attempt to access beyond end of device [ 142.175971][ T5112] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 142.185985][ T6556] F2FS-fs (loop1): Found nat_bits in checkpoint [ 142.197313][ T5112] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 142.294555][ T6556] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 142.301890][ T6556] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 142.367535][ T6556] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 142.385844][ T6556] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 142.431593][ T141] team0 (unregistering): Port device team_slave_1 removed [ 142.520406][ T141] team0 (unregistering): Port device team_slave_0 removed [ 143.126448][ T5114] Bluetooth: hci0: command tx timeout [ 143.204194][ T6570] loop1: detected capacity change from 0 to 8 [ 143.236895][ T6570] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 143.390741][ T6568] loop3: detected capacity change from 0 to 32768 [ 143.413457][ T6568] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6568) [ 143.459543][ T5161] usb 3-1: USB disconnect, device number 14 [ 143.531298][ T6568] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 143.553087][ T6568] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 143.581130][ T6568] BTRFS info (device loop3): using free-space-tree [ 143.599668][ T6436] team0: Port device team_slave_0 added [ 143.682601][ T6436] team0: Port device team_slave_1 added [ 143.840099][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.866354][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.922371][ T6594] loop4: detected capacity change from 0 to 8 [ 143.936443][ T6436] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.981864][ T6594] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 143.991683][ T6436] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.002353][ T5112] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 144.008037][ T6436] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.095243][ T6436] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.397998][ T6436] hsr_slave_0: entered promiscuous mode [ 144.467115][ T6436] hsr_slave_1: entered promiscuous mode [ 144.480754][ T6605] loop1: detected capacity change from 0 to 8 [ 144.493755][ T6436] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.509990][ T6605] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 144.529553][ T6436] Cannot create hsr debugfs directory [ 144.654853][ T6612] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 144.694929][ T6613] loop3: detected capacity change from 0 to 8 [ 144.719278][ T6615] loop4: detected capacity change from 0 to 8 [ 144.757837][ T6613] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 144.772736][ T6615] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 145.048127][ T6624] loop2: detected capacity change from 0 to 1024 [ 145.431178][ T6633] loop4: detected capacity change from 0 to 2048 [ 145.589573][ T6633] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 145.823764][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 145.966376][ T1147] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 146.196778][ T1147] usb 3-1: Using ep0 maxpacket: 32 [ 146.217278][ T1147] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 146.248440][ T1147] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 146.267094][ T6436] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 146.283831][ T1147] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 146.307289][ T6436] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 146.318818][ T1147] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.354011][ T6436] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 146.363559][ T1147] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 146.388912][ T1147] usb 3-1: no configuration chosen from 1 choice [ 146.405377][ T6436] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 146.544356][ T6630] loop1: detected capacity change from 0 to 40427 [ 146.617245][ T6630] F2FS-fs (loop1): Found nat_bits in checkpoint [ 146.744856][ T6436] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.814722][ T6436] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.838352][ T6630] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 146.880448][ T5204] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.887661][ T5204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.902060][ T6660] loop3: detected capacity change from 0 to 16 [ 146.940810][ T6660] erofs: (device loop3): mounted with root inode @ nid 36. [ 147.057550][ T6660] syz-executor.3: attempt to access beyond end of device [ 147.057550][ T6660] loop3: rw=0, sector=1049256, nr_sectors = 128 limit=16 [ 147.090950][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.098266][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.169020][ T29] audit: type=1800 audit(1716940086.476:225): pid=6663 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 147.176657][ T6663] syz-executor.1: attempt to access beyond end of device [ 147.176657][ T6663] loop1: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 147.410687][ T5119] syz-executor.1: attempt to access beyond end of device [ 147.410687][ T5119] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 147.452087][ T6644] loop4: detected capacity change from 0 to 32768 [ 147.464048][ T6644] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6644) [ 147.477638][ T5119] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 147.496318][ T6644] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.511416][ T6669] loop3: detected capacity change from 0 to 1024 [ 147.518181][ T6644] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 147.535408][ T6644] BTRFS info (device loop4): using free-space-tree [ 147.826755][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 147.912865][ T6436] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.157042][ T6695] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 148.157155][ T6436] veth0_vlan: entered promiscuous mode [ 148.215083][ T6436] veth1_vlan: entered promiscuous mode [ 148.365900][ T6702] loop4: detected capacity change from 0 to 8 [ 148.408071][ T6702] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 148.410482][ T6436] veth0_macvtap: entered promiscuous mode [ 148.488001][ T6436] veth1_macvtap: entered promiscuous mode [ 148.591105][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.594260][ T6708] loop3: detected capacity change from 0 to 1024 [ 148.636994][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.674916][ T5204] usb 3-1: USB disconnect, device number 15 [ 148.681111][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.710807][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.753073][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.801916][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.829858][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.842924][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.894001][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.928455][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.947322][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.959069][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.971370][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.981557][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.002189][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.012505][ T6436] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.023258][ T6436] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.035358][ T6436] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.044356][ T6716] loop2: detected capacity change from 0 to 1024 [ 149.086145][ T6436] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.112522][ T6436] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.145393][ T6436] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.168785][ T6436] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.201938][ T6720] loop4: detected capacity change from 0 to 2048 [ 149.243454][ T6720] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 149.272359][ T6725] loop3: detected capacity change from 0 to 8 [ 149.285890][ T6725] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 149.428051][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 149.460284][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.480410][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.593443][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.620888][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.861252][ T6736] loop0: detected capacity change from 0 to 8 [ 149.897536][ T6736] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 150.642492][ T6744] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 150.875295][ T6738] loop2: detected capacity change from 0 to 32768 [ 150.895602][ T6738] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (6738) [ 150.901778][ T6729] loop1: detected capacity change from 0 to 40427 [ 150.930095][ T6748] loop4: detected capacity change from 0 to 2048 [ 150.948402][ T6738] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 150.951153][ T6729] F2FS-fs (loop1): Found nat_bits in checkpoint [ 150.999163][ T6738] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 151.022525][ T6748] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 151.026825][ T6738] BTRFS info (device loop2): using free-space-tree [ 151.046458][ T5159] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 151.114457][ T29] audit: type=1804 audit(1716940090.426:226): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3953976754/syzkaller.jtnwxe/47/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 151.166335][ T29] audit: type=1804 audit(1716940090.466:227): pid=6748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3953976754/syzkaller.jtnwxe/47/file1/bus" dev="loop4" ino=18 res=1 errno=0 [ 151.176843][ T6758] loop0: detected capacity change from 0 to 8 [ 151.245993][ T6758] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 151.262086][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 151.262662][ T5159] usb 4-1: Using ep0 maxpacket: 32 [ 151.277244][ T6729] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 151.314061][ T5159] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 151.330466][ T5159] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 151.350759][ T5159] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 151.403934][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.507631][ T5159] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 151.548359][ T5109] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 151.575936][ T6775] syz-executor.1: attempt to access beyond end of device [ 151.575936][ T6775] loop1: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 151.576355][ T29] audit: type=1800 audit(1716940090.876:228): pid=6775 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 151.622739][ T5159] usb 4-1: no configuration chosen from 1 choice [ 151.821459][ T5119] syz-executor.1: attempt to access beyond end of device [ 151.821459][ T5119] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.849468][ T6780] loop2: detected capacity change from 0 to 8 [ 151.969594][ T6780] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 151.989221][ T5119] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 153.092776][ T6790] loop4: detected capacity change from 0 to 8 [ 153.101706][ T6790] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 153.778880][ T45] usb 4-1: USB disconnect, device number 5 [ 153.969460][ T6801] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 154.153319][ T6787] loop0: detected capacity change from 0 to 40427 [ 154.183118][ T6787] F2FS-fs (loop0): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 154.221341][ T6787] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 154.256383][ T6787] F2FS-fs (loop0): invalid crc value [ 154.286422][ T6787] F2FS-fs (loop0): Found nat_bits in checkpoint [ 154.469026][ T6787] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 154.488433][ T6787] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 154.557313][ T6813] loop4: detected capacity change from 0 to 1024 [ 154.618496][ T29] audit: type=1800 audit(1716940093.926:229): pid=6787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 154.641988][ T6787] syz-executor.0: attempt to access beyond end of device [ 154.641988][ T6787] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 154.772796][ T6436] syz-executor.0: attempt to access beyond end of device [ 154.772796][ T6436] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 154.802973][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 154.985062][ T6818] loop2: detected capacity change from 0 to 2048 [ 155.052659][ T6818] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 155.086778][ T6823] loop4: detected capacity change from 0 to 8 [ 155.110010][ T6823] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 155.180937][ T29] audit: type=1804 audit(1716940094.496:230): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir4004774374/syzkaller.yQsBmc/52/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 155.269604][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 155.279550][ T29] audit: type=1804 audit(1716940094.496:231): pid=6818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir4004774374/syzkaller.yQsBmc/52/file1/bus" dev="loop2" ino=18 res=1 errno=0 [ 155.512597][ T6828] loop2: detected capacity change from 0 to 8 [ 155.528577][ T6805] loop1: detected capacity change from 0 to 40427 [ 155.538018][ T6828] MTD: Attempt to mount non-MTD device "/dev/loop2" [ 155.556440][ T6808] loop3: detected capacity change from 0 to 32768 [ 155.589533][ T6808] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz-executor.3 (6808) [ 155.610314][ T6805] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 155.618778][ T6805] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 155.658156][ T6808] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 155.678767][ T6808] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 155.695087][ T6808] BTRFS info (device loop3): using free-space-tree [ 155.712738][ T6805] F2FS-fs (loop1): Found nat_bits in checkpoint [ 155.754195][ T6831] loop4: detected capacity change from 0 to 2048 [ 155.921854][ T6805] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 155.929731][ T6805] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 155.951908][ T6831] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 156.048621][ T6805] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 156.104783][ T5112] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 156.169313][ T6805] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 156.205935][ T5108] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.461028][ T5163] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 156.876390][ T5163] usb 3-1: Using ep0 maxpacket: 32 [ 156.894560][ T5163] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 156.926483][ T5163] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 156.976366][ T5163] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 157.010900][ T5163] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.042378][ T5163] usb 3-1: config 0 descriptor?? [ 157.065448][ T5163] hub 3-1:0.0: bad descriptor, ignoring hub [ 157.091239][ T5163] hub 3-1:0.0: probe with driver hub failed with error -5 [ 157.121852][ T5163] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 157.352629][ T6868] loop3: detected capacity change from 0 to 2048 [ 157.398575][ T6870] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 157.434324][ T6868] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 157.475577][ T6847] loop0: detected capacity change from 0 to 40427 [ 157.562172][ T6847] F2FS-fs (loop0): Found nat_bits in checkpoint [ 157.619617][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.813954][ T6847] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 158.115967][ T29] audit: type=1800 audit(1716940097.426:232): pid=6886 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 158.126623][ T6886] syz-executor.0: attempt to access beyond end of device [ 158.126623][ T6886] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 158.351367][ T6436] syz-executor.0: attempt to access beyond end of device [ 158.351367][ T6436] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 158.376608][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 158.788880][ T6874] loop4: detected capacity change from 0 to 40427 [ 158.824222][ T6874] F2FS-fs (loop4): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 158.856487][ T6874] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 158.887990][ T6874] F2FS-fs (loop4): invalid crc value [ 158.910046][ T6874] F2FS-fs (loop4): Found nat_bits in checkpoint [ 159.081587][ T6874] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 159.098108][ T6874] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 159.132129][ T6893] loop3: detected capacity change from 0 to 1024 [ 159.182617][ T29] audit: type=1800 audit(1716940098.486:233): pid=6874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 159.185975][ T6874] syz-executor.4: attempt to access beyond end of device [ 159.185975][ T6874] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 159.296643][ T25] usb 3-1: USB disconnect, device number 16 [ 159.467699][ T5108] syz-executor.4: attempt to access beyond end of device [ 159.467699][ T5108] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 159.497474][ T5108] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 159.549340][ T6902] loop0: detected capacity change from 0 to 8 [ 159.557173][ T6902] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 159.704261][ T6903] loop2: detected capacity change from 0 to 2048 [ 159.829956][ T6903] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 160.022978][ T5109] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 160.085305][ T6913] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 161.435320][ T25] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 161.647381][ T25] usb 1-1: Using ep0 maxpacket: 32 [ 161.660458][ T25] usb 1-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 161.692046][ T25] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 161.704676][ T6920] loop1: detected capacity change from 0 to 40427 [ 161.733154][ T6926] loop4: detected capacity change from 0 to 32768 [ 161.747829][ T25] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 161.754251][ T6926] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (6926) [ 161.784089][ T6920] F2FS-fs (loop1): Found nat_bits in checkpoint [ 161.786376][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 161.828140][ T25] usb 1-1: config 0 descriptor?? [ 161.851762][ T25] hub 1-1:0.0: bad descriptor, ignoring hub [ 161.866491][ T6926] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 161.876280][ T25] hub 1-1:0.0: probe with driver hub failed with error -5 [ 161.902054][ T6926] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 161.914907][ T25] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 161.944073][ T6926] BTRFS info (device loop4): using free-space-tree [ 162.015246][ T6920] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 162.206672][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 162.299398][ T29] audit: type=1800 audit(1716940101.616:234): pid=6953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 162.333220][ T6953] syz-executor.1: attempt to access beyond end of device [ 162.333220][ T6953] loop1: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 162.567238][ T5119] syz-executor.1: attempt to access beyond end of device [ 162.567238][ T5119] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 162.621175][ T5119] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 162.731027][ T6930] loop2: detected capacity change from 0 to 32768 [ 163.079645][ T6930] bcachefs (loop2): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 163.106690][ T6930] bcachefs (loop2): recovering from clean shutdown, journal seq 7 [ 163.165056][ T6930] bcachefs (loop2): alloc_read... done [ 163.193094][ T6930] bcachefs (loop2): stripes_read... done [ 163.215580][ T6930] bcachefs (loop2): snapshots_read... done [ 163.242581][ T6930] bcachefs (loop2): journal_replay... done [ 163.257409][ T6930] bcachefs (loop2): resume_logged_ops... done [ 163.272186][ T6930] bcachefs (loop2): going read-write [ 163.300121][ T6930] bcachefs (loop2): done starting filesystem [ 163.390686][ T6932] loop3: detected capacity change from 0 to 40427 [ 163.412564][ T6932] F2FS-fs (loop3): Invalid Fs Meta Ino: node(1) meta(2) root(0) [ 163.427398][ T6932] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 163.454568][ T6932] F2FS-fs (loop3): invalid crc value [ 163.480742][ T6932] F2FS-fs (loop3): Found nat_bits in checkpoint [ 163.582946][ T6932] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 163.583401][ T5109] bcachefs (loop2): shutting down [ 163.605086][ T6932] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 163.621908][ T5109] bcachefs (loop2): going read-only [ 163.633805][ T5109] bcachefs (loop2): finished waiting for writes to stop [ 163.651154][ T5109] bcachefs (loop2): flushing journal and stopping allocators, journal seq 9 [ 163.669096][ T6958] loop4: detected capacity change from 0 to 40427 [ 163.702011][ T5109] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 10 [ 163.708766][ T29] audit: type=1800 audit(1716940103.006:235): pid=6932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 163.737067][ T6958] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 163.746980][ T6958] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 163.747333][ T6932] syz-executor.3: attempt to access beyond end of device [ 163.747333][ T6932] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 163.782953][ T6974] loop1: detected capacity change from 0 to 1024 [ 163.783976][ T5109] bcachefs (loop2): shutdown complete, journal seq 11 [ 163.807317][ T5109] bcachefs (loop2): marking filesystem clean [ 163.827048][ T6958] F2FS-fs (loop4): Found nat_bits in checkpoint [ 163.872923][ T5112] syz-executor.3: attempt to access beyond end of device [ 163.872923][ T5112] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 163.896568][ T5112] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 163.945429][ T5109] bcachefs (loop2): shutdown complete [ 163.972933][ T6958] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 163.996364][ T6958] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 164.083433][ T6958] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 164.092038][ T6981] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 164.126856][ T6958] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 164.256721][ T5158] usb 1-1: USB disconnect, device number 6 [ 164.479938][ T6986] loop1: detected capacity change from 0 to 1024 [ 165.246566][ T6994] loop3: detected capacity change from 0 to 2048 [ 165.338233][ T6994] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 165.434314][ T6997] loop2: detected capacity change from 0 to 1024 [ 165.586013][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.092592][ T7014] loop3: detected capacity change from 0 to 512 [ 166.126868][ T7014] EXT4-fs: Ignoring removed nobh option [ 166.155090][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.180961][ T7014] EXT4-fs (loop3): Cannot turn on journaled quota: type 1: error -61 [ 166.264870][ T7014] EXT4-fs error (device loop3): ext4_orphan_get:1394: inode #13: comm syz-executor.3: casefold flag without casefold feature [ 166.286461][ T7014] EXT4-fs error (device loop3): ext4_orphan_get:1399: comm syz-executor.3: couldn't read orphan inode 13 (err -117) [ 166.317492][ T7014] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 166.347996][ T7020] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 166.394533][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.441403][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.472946][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.480909][ T6996] loop1: detected capacity change from 0 to 32768 [ 166.490047][ T6996] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (6996) [ 166.530713][ T6996] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 166.549840][ T7023] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.565502][ T6996] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 166.586466][ T5159] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 166.592121][ T6999] loop0: detected capacity change from 0 to 40427 [ 166.601065][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.612037][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.613286][ T6996] BTRFS info (device loop1): using free-space-tree [ 166.620866][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.672791][ T7022] loop4: detected capacity change from 0 to 1024 [ 166.683004][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.683287][ T6999] F2FS-fs (loop0): Found nat_bits in checkpoint [ 166.692467][ T7014] fscrypt (loop3, inode 2): Error -61 getting encryption context [ 166.826298][ T5159] usb 3-1: Using ep0 maxpacket: 32 [ 166.837584][ T5112] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 166.850517][ T5159] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 166.876878][ T6999] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 166.885801][ T5159] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 166.927466][ T5159] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 166.946358][ T5159] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.985492][ T5159] usb 3-1: config 0 descriptor?? [ 167.028789][ T5159] hub 3-1:0.0: bad descriptor, ignoring hub [ 167.055705][ T5159] hub 3-1:0.0: probe with driver hub failed with error -5 [ 167.129290][ T5159] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 167.146604][ T6996] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 167.174828][ T29] audit: type=1800 audit(1716940106.486:236): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 167.183167][ T5119] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 167.209230][ T7045] syz-executor.0: attempt to access beyond end of device [ 167.209230][ T7045] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 167.479106][ T6436] syz-executor.0: attempt to access beyond end of device [ 167.479106][ T6436] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 167.504545][ T7052] loop4: detected capacity change from 0 to 8 [ 167.521096][ T7052] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 167.542775][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 167.606089][ T7048] loop3: detected capacity change from 0 to 1024 [ 168.054887][ T7057] loop4: detected capacity change from 0 to 1024 [ 168.259762][ T7061] loop3: detected capacity change from 0 to 1024 [ 168.718968][ T7074] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 168.732671][ T7073] loop1: detected capacity change from 0 to 512 [ 168.748078][ T7073] EXT4-fs: Ignoring removed nobh option [ 168.782307][ T7073] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -61 [ 168.806637][ T7073] EXT4-fs error (device loop1): ext4_orphan_get:1394: inode #13: comm syz-executor.1: casefold flag without casefold feature [ 168.849282][ T7073] EXT4-fs error (device loop1): ext4_orphan_get:1399: comm syz-executor.1: couldn't read orphan inode 13 (err -117) [ 168.994219][ T7073] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 169.143609][ T5119] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 170.030757][ T25] usb 3-1: USB disconnect, device number 17 [ 170.324497][ T7067] loop4: detected capacity change from 0 to 40427 [ 170.363851][ T7067] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 170.398454][ T7067] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 170.446777][ T7067] F2FS-fs (loop4): Found nat_bits in checkpoint [ 170.535226][ T7067] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 170.548076][ T7067] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 170.596680][ T7067] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 170.617503][ T7067] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 171.189004][ T7082] loop2: detected capacity change from 0 to 40427 [ 171.257824][ T7082] F2FS-fs (loop2): Found nat_bits in checkpoint [ 171.280986][ T7086] loop1: detected capacity change from 0 to 32768 [ 171.305479][ T7086] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7086) [ 171.359364][ T7086] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 171.375717][ T7086] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 171.402185][ T7086] BTRFS info (device loop1): using free-space-tree [ 171.433732][ T7082] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 171.592644][ T7089] loop0: detected capacity change from 0 to 32768 [ 171.717351][ T29] audit: type=1800 audit(1716940111.036:237): pid=7117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="loop2" ino=10 res=0 errno=0 [ 171.750883][ T7117] syz-executor.2: attempt to access beyond end of device [ 171.750883][ T7117] loop2: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 171.820616][ T7089] bcachefs (loop0): mounting version 1.7: mi_btree_bitmap opts=compression=lz4,nojournal_transaction_names [ 171.831080][ T7086] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 171.838864][ T7089] bcachefs (loop0): recovering from clean shutdown, journal seq 7 [ 171.953999][ T7089] bcachefs (loop0): alloc_read... done [ 171.965475][ T7089] bcachefs (loop0): stripes_read... done [ 171.978742][ T7089] bcachefs (loop0): snapshots_read... done [ 171.985775][ T5109] syz-executor.2: attempt to access beyond end of device [ 171.985775][ T5109] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 172.002513][ T7089] bcachefs (loop0): journal_replay... done [ 172.013985][ T5119] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 172.016473][ T7089] bcachefs (loop0): resume_logged_ops... [ 172.026511][ T5159] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 172.038155][ T5109] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 172.046704][ T7089] done [ 172.053166][ T7089] bcachefs (loop0): going read-write [ 172.093788][ T7089] bcachefs (loop0): done starting filesystem [ 172.284296][ T5159] usb 5-1: Using ep0 maxpacket: 16 [ 172.304887][ T5159] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 172.333728][ T6436] bcachefs (loop0): shutting down [ 172.350925][ T5159] usb 5-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 172.351612][ T6436] bcachefs (loop0): going read-only [ 172.360203][ T5159] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.360233][ T5159] usb 5-1: Product: syz [ 172.360249][ T5159] usb 5-1: Manufacturer: Ⱘ앒쥖颷㰤朄揨椀紕玓ꃄﯗ咸៙棕涑섌敀ᡵ뤜﫶⊦ゆᤍ떇釣恗定聏춝虜㼗况ã⽶⬭숓ꊝ繓蚴칲긣砆卦﷣륺溎᤯♕筇쬶ꖸ濷迟펙劎硁ꄨ [ 172.402990][ T5159] usb 5-1: SerialNumber: syz [ 172.406524][ T6436] bcachefs (loop0): finished waiting for writes to stop [ 172.423451][ T6436] bcachefs (loop0): flushing journal and stopping allocators, journal seq 9 [ 172.428296][ T5159] usbhid 5-1:1.0: couldn't find an input interrupt endpoint [ 172.476496][ T6436] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10 [ 172.499162][ T6436] bcachefs (loop0): shutdown complete, journal seq 11 [ 172.521536][ T6436] bcachefs (loop0): marking filesystem clean [ 172.601716][ T6436] bcachefs (loop0): shutdown complete [ 172.676647][ T5163] usb 5-1: USB disconnect, device number 19 [ 173.025307][ T7142] loop1: detected capacity change from 0 to 1024 [ 173.094658][ T7146] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.267127][ T25] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.456493][ T25] usb 4-1: Using ep0 maxpacket: 32 [ 173.473283][ T25] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 173.526595][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 173.564579][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 173.586127][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 173.594810][ T7156] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 173.612627][ T25] usb 4-1: config 0 descriptor?? [ 173.643500][ T25] hub 4-1:0.0: bad descriptor, ignoring hub [ 173.663995][ T25] hub 4-1:0.0: probe with driver hub failed with error -5 [ 173.699302][ T25] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 174.192845][ T7150] loop4: detected capacity change from 0 to 40427 [ 174.203757][ T7150] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 174.215820][ T7150] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 174.237673][ T7150] F2FS-fs (loop4): Found nat_bits in checkpoint [ 174.299733][ T7150] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 174.307392][ T7150] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 174.343897][ T7150] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 174.381196][ T7150] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 174.748478][ T7161] loop0: detected capacity change from 0 to 40427 [ 174.790376][ T7161] F2FS-fs (loop0): Found nat_bits in checkpoint [ 174.954900][ T7161] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 175.253369][ T29] audit: type=1800 audit(1716940114.566:238): pid=7183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 175.287347][ T7183] syz-executor.0: attempt to access beyond end of device [ 175.287347][ T7183] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 175.367041][ T7169] loop2: detected capacity change from 0 to 32768 [ 175.384695][ T7169] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz-executor.2 (7169) [ 175.568013][ T6436] syz-executor.0: attempt to access beyond end of device [ 175.568013][ T6436] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 175.590979][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 175.681214][ T7169] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 175.694254][ T7169] BTRFS info (device loop2): using sha256 (sha256-avx2) checksum algorithm [ 175.703733][ T7169] BTRFS info (device loop2): using free-space-tree [ 175.815834][ T7202] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.892967][ T7206] loop1: detected capacity change from 0 to 8 [ 175.901558][ T7206] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 175.983798][ T7169] BTRFS info (device loop2): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 176.086856][ T5109] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 176.117096][ T45] usb 4-1: USB disconnect, device number 6 [ 176.161137][ T7211] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 177.112761][ T7227] loop4: detected capacity change from 0 to 40427 [ 177.124458][ T7227] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 177.132681][ T7227] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 177.151626][ T7227] F2FS-fs (loop4): Found nat_bits in checkpoint [ 177.200479][ T7227] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 177.208108][ T7227] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 177.240756][ T7227] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 177.253933][ T7227] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 177.374199][ T7233] loop3: detected capacity change from 0 to 4096 [ 177.411201][ T7233] ntfs3: loop3: ino=3, Correct links count -> 2. [ 178.175974][ T7240] loop4: detected capacity change from 0 to 40427 [ 178.211186][ T7240] F2FS-fs (loop4): Found nat_bits in checkpoint [ 178.262319][ T7240] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 178.500446][ T29] audit: type=1800 audit(1716940117.816:239): pid=7249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 178.530115][ T7249] syz-executor.4: attempt to access beyond end of device [ 178.530115][ T7249] loop4: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 178.742918][ T5108] syz-executor.4: attempt to access beyond end of device [ 178.742918][ T5108] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 178.765137][ T5108] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 179.069182][ T7253] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.079409][ T5158] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 179.238909][ T7257] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 179.266386][ T5158] usb 4-1: Using ep0 maxpacket: 32 [ 179.290121][ T5158] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 179.321034][ T5158] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 179.358648][ T5158] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 179.372652][ T5158] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 179.384742][ T5158] usb 4-1: config 0 descriptor?? [ 179.612084][ T5158] hub 4-1:0.0: bad descriptor, ignoring hub [ 179.618295][ T5158] hub 4-1:0.0: probe with driver hub failed with error -5 [ 179.627343][ T5158] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 179.774306][ T7255] loop4: detected capacity change from 0 to 32768 [ 179.786732][ T7255] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz-executor.4 (7255) [ 179.836490][ T7255] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 179.865093][ T7255] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 179.880279][ T7255] BTRFS info (device loop4): using free-space-tree [ 179.985477][ T7255] BTRFS info (device loop4): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 180.035997][ T5108] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 180.688488][ T7262] loop0: detected capacity change from 0 to 40427 [ 180.711794][ T7262] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 180.719877][ T7262] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 180.741009][ T7262] F2FS-fs (loop0): Found nat_bits in checkpoint [ 180.812126][ T7262] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 180.821015][ T7262] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 180.825594][ T7289] loop1: detected capacity change from 0 to 4096 [ 180.854936][ T7262] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 180.867536][ T7262] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 180.872113][ T7289] ntfs3: loop1: ino=3, Correct links count -> 2. [ 181.264272][ T7298] loop4: detected capacity change from 0 to 4096 [ 181.280976][ T7298] ntfs3: loop4: ino=3, Correct links count -> 2. [ 181.333961][ T7300] loop1: detected capacity change from 0 to 1024 [ 181.401854][ T7300] Zero length message leads to an empty skb [ 181.731517][ T7310] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 181.895302][ T7312] loop4: detected capacity change from 0 to 1024 [ 181.966503][ T5161] usb 4-1: USB disconnect, device number 7 [ 182.654717][ T7314] loop1: detected capacity change from 0 to 32768 [ 182.676374][ T7314] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7314) [ 182.709629][ T7314] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 182.720363][ T7314] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 182.730017][ T7314] BTRFS info (device loop1): using free-space-tree [ 182.815566][ T7306] loop0: detected capacity change from 0 to 40427 [ 182.861011][ T7306] F2FS-fs (loop0): Found nat_bits in checkpoint [ 182.947166][ T7314] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 182.963162][ T7306] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 183.045773][ T5119] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 183.263571][ T29] audit: type=1800 audit(1716940122.576:240): pid=7347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 183.298198][ T7347] syz-executor.0: attempt to access beyond end of device [ 183.298198][ T7347] loop0: rw=2049, sector=53248, nr_sectors = 976 limit=40427 [ 183.519432][ T6436] syz-executor.0: attempt to access beyond end of device [ 183.519432][ T6436] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 183.566507][ T6436] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 183.721905][ T7351] loop4: detected capacity change from 0 to 4096 [ 183.732345][ T7351] ntfs3: loop4: ino=3, Correct links count -> 2. [ 184.254690][ T7353] loop4: detected capacity change from 0 to 4096 [ 184.286330][ T7353] ntfs3: loop4: ino=3, Correct links count -> 2. [ 184.418827][ T7349] loop1: detected capacity change from 0 to 40427 [ 184.437496][ T7349] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 184.453860][ T7349] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 184.470460][ T7349] F2FS-fs (loop1): Found nat_bits in checkpoint [ 184.567403][ T7349] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 184.587136][ T7349] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 184.645408][ T7349] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 184.672076][ T7349] F2FS-fs (loop1): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 184.747434][ T7363] loop4: detected capacity change from 0 to 1024 [ 185.276605][ T1147] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 185.293496][ T7372] loop0: detected capacity change from 0 to 1024 [ 185.329314][ T7375] program syz-executor.1 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 185.486311][ T1147] usb 5-1: Using ep0 maxpacket: 32 [ 185.506813][ T1147] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 185.529690][ T1147] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.572332][ T1147] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 185.595495][ T1147] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.606824][ T1147] usb 5-1: config 0 descriptor?? [ 185.656882][ T1147] hub 5-1:0.0: bad descriptor, ignoring hub [ 185.662863][ T1147] hub 5-1:0.0: probe with driver hub failed with error -5 [ 185.712199][ T1147] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 185.831399][ T7386] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 186.422540][ T7380] loop1: detected capacity change from 0 to 32768 [ 186.448278][ T7380] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz-executor.1 (7380) [ 186.505302][ T7380] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.526092][ T7380] BTRFS info (device loop1): using sha256 (sha256-avx2) checksum algorithm [ 186.545013][ T7380] BTRFS info (device loop1): using free-space-tree [ 186.582582][ T5116] Bluetooth: hci2: command 0x0406 tx timeout [ 186.586359][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 186.589575][ T5120] Bluetooth: hci4: command 0x0406 tx timeout [ 186.597675][ T5114] Bluetooth: hci3: command 0x0406 tx timeout [ 186.740199][ T7385] loop3: detected capacity change from 0 to 40427 [ 186.756573][ T7385] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 186.764878][ T7385] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 186.819311][ T7385] F2FS-fs (loop3): Found nat_bits in checkpoint [ 186.843994][ T7380] BTRFS info (device loop1): setting incompat feature flag for SIMPLE_QUOTA (0x10000) [ 186.897577][ T7385] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 186.909187][ T7385] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 186.940349][ T5119] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 186.956741][ T7385] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 186.987598][ T7385] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 187.244149][ T7395] loop2: detected capacity change from 0 to 40427 [ 187.259135][ T7395] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 187.280449][ T7395] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 187.327087][ T7395] F2FS-fs (loop2): Found nat_bits in checkpoint [ 187.423930][ T7395] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 187.432477][ T7395] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 187.471740][ T7395] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 187.482162][ T7395] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 187.816519][ T7431] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 188.136811][ T1147] usb 5-1: USB disconnect, device number 20 [ 188.736383][ T7458] loop4: detected capacity change from 0 to 1024 [ 189.193048][ T7463] program syz-executor.0 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 189.686710][ T5159] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 189.697456][ T7452] loop2: detected capacity change from 0 to 40427 [ 189.710742][ T7452] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 189.723953][ T7452] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 189.742302][ T7452] F2FS-fs (loop2): Found nat_bits in checkpoint [ 189.792850][ T7452] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 189.800289][ T7452] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 189.824764][ T7452] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 189.835300][ T7452] F2FS-fs (loop2): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 189.876394][ T5159] usb 5-1: Using ep0 maxpacket: 32 [ 189.887881][ T5159] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 189.903250][ T5159] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 189.919083][ T5159] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 189.929090][ T5158] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 189.937737][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 189.974911][ T5159] usb 5-1: config 0 descriptor?? [ 189.986541][ T5159] hub 5-1:0.0: bad descriptor, ignoring hub [ 189.995064][ T5159] hub 5-1:0.0: probe with driver hub failed with error -5 [ 190.023132][ T5159] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 190.126321][ T5158] usb 1-1: Using ep0 maxpacket: 16 [ 190.133691][ T5158] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 190.161320][ T5158] usb 1-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 190.186492][ T5158] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.195698][ T5158] usb 1-1: Product: syz [ 190.226483][ T5158] usb 1-1: SerialNumber: syz [ 190.249316][ T5158] usbhid 1-1:1.0: couldn't find an input interrupt endpoint [ 190.511046][ T5161] usb 1-1: USB disconnect, device number 7 [ 190.730304][ T7491] loop3: detected capacity change from 0 to 1024 [ 190.778720][ T7502] program syz-executor.2 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 190.883036][ T7491] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.124021][ T7507] loop3: detected capacity change from 0 to 1024 [ 191.131811][ T5161] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 191.209007][ T7507] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.326282][ T5161] usb 3-1: Using ep0 maxpacket: 16 [ 191.337130][ T5161] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 191.370472][ T5161] usb 3-1: string descriptor 0 read error: -22 [ 191.382737][ T5161] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 191.394360][ T5161] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 191.433574][ T5161] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 191.668331][ T5161] usb 3-1: USB disconnect, device number 18 [ 191.713189][ T7515] loop1: detected capacity change from 0 to 1024 [ 191.872764][ T7515] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.481173][ T7532] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 192.511252][ T5159] usb 5-1: USB disconnect, device number 21 [ 192.558817][ T1147] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 192.796420][ T1147] usb 3-1: Using ep0 maxpacket: 16 [ 192.814471][ T1147] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 192.858558][ T1147] usb 3-1: string descriptor 0 read error: -22 [ 192.865080][ T1147] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 192.875479][ T7535] loop4: detected capacity change from 0 to 1024 [ 192.897556][ T1147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.961209][ T1147] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 193.055867][ T7535] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.232751][ T1147] usb 3-1: USB disconnect, device number 19 [ 193.467614][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 193.471742][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.488430][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 193.498028][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 193.509825][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 193.518569][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 193.527208][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 193.636126][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.748982][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.956471][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.030956][ T7557] loop0: detected capacity change from 0 to 1024 [ 194.099332][ T7557] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.126360][ T25] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 194.224575][ T7548] chnl_net:caif_netlink_parms(): no params data found [ 194.317376][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 194.341103][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 194.387515][ T25] usb 3-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 194.406233][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.423684][ T25] usb 3-1: Product: syz [ 194.433830][ T25] usb 3-1: SerialNumber: syz [ 194.456962][ T25] usbhid 3-1:1.0: couldn't find an input interrupt endpoint [ 194.630944][ T7566] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 194.688531][ T5159] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 194.689640][ T5161] usb 3-1: USB disconnect, device number 20 [ 194.740875][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.747506][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.896449][ T5159] usb 5-1: Using ep0 maxpacket: 32 [ 194.908173][ T5159] usb 5-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 194.928069][ T5159] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 194.946090][ T5159] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 194.955682][ T5159] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 194.973266][ T5159] usb 5-1: config 0 descriptor?? [ 194.983393][ T5159] hub 5-1:0.0: bad descriptor, ignoring hub [ 194.990923][ T5159] hub 5-1:0.0: probe with driver hub failed with error -5 [ 195.002859][ T5159] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 195.614312][ T5114] Bluetooth: hci4: command tx timeout [ 196.067567][ T1147] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 196.276459][ T1147] usb 4-1: Using ep0 maxpacket: 16 [ 196.288856][ T1147] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 196.325385][ T1147] usb 4-1: string descriptor 0 read error: -22 [ 196.334365][ T1147] usb 4-1: New USB device found, idVendor=047f, idProduct=c055, bcdDevice= 0.40 [ 196.364127][ T1147] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 196.404425][ T1147] usbhid 4-1:1.0: couldn't find an input interrupt endpoint [ 196.650331][ T1147] usb 4-1: USB disconnect, device number 8 [ 197.073425][ T7581] loop2: detected capacity change from 0 to 1024 [ 197.536859][ T1147] usb 5-1: USB disconnect, device number 22 [ 197.686492][ T5114] Bluetooth: hci4: command tx timeout [ 199.212290][ T7597] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 199.413308][ T7598] loop4: detected capacity change from 0 to 4096 [ 199.443889][ T7598] ntfs3: loop4: ino=3, Correct links count -> 2. [ 199.768021][ T5114] Bluetooth: hci4: command tx timeout [ 201.446411][ T5159] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 201.646391][ T5159] usb 4-1: Using ep0 maxpacket: 32 [ 201.659427][ T5159] usb 4-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 201.687238][ T5159] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 201.700747][ T5159] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 201.711063][ T5159] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 201.726054][ T5159] usb 4-1: config 0 descriptor?? [ 201.748256][ T5159] hub 4-1:0.0: bad descriptor, ignoring hub [ 201.756018][ T5159] hub 4-1:0.0: probe with driver hub failed with error -5 [ 201.778073][ T5159] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 201.846806][ T5114] Bluetooth: hci4: command tx timeout [ 203.031219][ T7622] loop4: detected capacity change from 0 to 40427 [ 203.041761][ T7622] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 203.050311][ T7622] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 203.110444][ T7622] F2FS-fs (loop4): Found nat_bits in checkpoint [ 203.168410][ T7622] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 203.175703][ T7622] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 203.195920][ T7622] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 203.206368][ T7622] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 204.256562][ T7634] program syz-executor.3 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 204.307479][ T5158] usb 4-1: USB disconnect, device number 9 [ 205.083207][ T7646] loop4: detected capacity change from 0 to 64 [ 206.406359][ T5160] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 206.431648][ T7653] loop4: detected capacity change from 0 to 40427 [ 206.469147][ T7653] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 206.495156][ T7653] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 206.520341][ T7653] F2FS-fs (loop4): Found nat_bits in checkpoint [ 206.600082][ T7653] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 206.606395][ T5160] usb 4-1: Using ep0 maxpacket: 32 [ 206.613751][ T7653] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 206.614578][ T5160] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 206.644824][ T7653] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 206.654108][ T5160] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 206.664304][ T7653] F2FS-fs (loop4): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 206.681370][ T5160] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.705017][ T5160] usb 4-1: config 0 descriptor?? [ 206.725088][ T5160] hub 4-1:0.0: bad descriptor, ignoring hub [ 206.742536][ T5160] hub 4-1:0.0: probe with driver hub failed with error -5 [ 206.767908][ T5160] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 207.179556][ T7662] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 209.035439][ T7683] loop4: detected capacity change from 0 to 64 [ 209.276780][ T5159] usb 4-1: USB disconnect, device number 10 [ 209.819060][ T7689] program syz-executor.4 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 210.083544][ T7687] loop3: detected capacity change from 0 to 40427 [ 210.132385][ T7687] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 210.151677][ T7687] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 210.183462][ T7691] loop4: detected capacity change from 0 to 1024 [ 210.192021][ T7687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 210.292599][ T7687] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 210.306921][ T7687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 210.352570][ T7687] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix. [ 210.363350][ T7687] F2FS-fs (loop3): f2fs_check_nid_range: out-of-range nid=2, run fsck to fix. [ 212.227043][ T7707] loop3: detected capacity change from 0 to 1024 [ 224.493110][ T5111] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 224.503455][ T5111] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 224.522325][ T5111] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 224.530883][ T5111] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 224.539177][ T5111] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 224.546652][ T5111] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 226.566476][ T5111] Bluetooth: hci5: command tx timeout [ 227.327608][ T5114] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 227.339318][ T5114] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 227.348723][ T5114] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 227.360988][ T5114] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 227.370679][ T5114] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 227.378567][ T5114] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 228.646506][ T5111] Bluetooth: hci5: command tx timeout [ 229.446489][ T5111] Bluetooth: hci6: command tx timeout [ 230.726366][ T5111] Bluetooth: hci5: command tx timeout [ 231.527832][ T5111] Bluetooth: hci6: command tx timeout [ 232.806648][ T5111] Bluetooth: hci5: command tx timeout [ 233.606475][ T5111] Bluetooth: hci6: command tx timeout [ 235.686679][ T5111] Bluetooth: hci6: command tx timeout [ 240.350929][ T5114] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 240.360882][ T5114] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 240.372376][ T5114] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 240.380979][ T5114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 240.392933][ T5114] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 240.422085][ T5114] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 242.447013][ T5114] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 242.457184][ T5114] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 242.465637][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 242.475745][ T5114] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 242.485715][ T5114] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 242.493078][ T5126] Bluetooth: hci7: command tx timeout [ 242.507076][ T5126] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 244.566454][ T5111] Bluetooth: hci7: command tx timeout [ 244.572890][ T5126] Bluetooth: hci8: command tx timeout [ 246.646436][ T5126] Bluetooth: hci8: command tx timeout [ 246.651983][ T5126] Bluetooth: hci7: command tx timeout [ 248.726416][ T5111] Bluetooth: hci8: command tx timeout [ 248.732844][ T5126] Bluetooth: hci7: command tx timeout [ 250.806573][ T5126] Bluetooth: hci8: command tx timeout [ 256.171316][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.177779][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.050419][ T5114] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 258.061862][ T5114] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 258.072124][ T5114] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 258.085295][ T5114] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 258.097069][ T5114] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 258.105644][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 258.256435][ T5126] Bluetooth: hci0: command 0x0406 tx timeout [ 260.167482][ T5111] Bluetooth: hci9: command tx timeout [ 262.255436][ T5111] Bluetooth: hci9: command tx timeout [ 264.336356][ T5111] Bluetooth: hci9: command tx timeout [ 266.406954][ T5111] Bluetooth: hci9: command tx timeout [ 289.517349][ T5126] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 289.527816][ T5126] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 289.536055][ T5126] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 289.547675][ T5126] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 289.555836][ T5126] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 289.563380][ T5126] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 291.606818][ T5111] Bluetooth: hci10: command tx timeout [ 292.290223][ T5126] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 292.300953][ T5126] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 292.309278][ T5126] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 292.318432][ T5126] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 292.326303][ T5126] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 292.333783][ T5126] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 293.686499][ T5111] Bluetooth: hci10: command tx timeout [ 294.416571][ T5111] Bluetooth: hci11: command tx timeout [ 295.766575][ T5111] Bluetooth: hci10: command tx timeout [ 296.486398][ T5111] Bluetooth: hci11: command tx timeout [ 297.846648][ T5111] Bluetooth: hci10: command tx timeout [ 298.566523][ T5111] Bluetooth: hci11: command tx timeout [ 300.646310][ T5111] Bluetooth: hci11: command tx timeout [ 305.359953][ T5126] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 305.374485][ T5126] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 305.383935][ T5126] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 305.393352][ T5126] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 305.407208][ T5126] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 305.414670][ T5126] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 307.446624][ T5126] Bluetooth: hci12: command tx timeout [ 307.494599][ T5111] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 307.504948][ T5111] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 307.517705][ T5111] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 307.526444][ T5111] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 307.534252][ T5111] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 307.542895][ T5111] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 309.526318][ T5111] Bluetooth: hci12: command tx timeout [ 309.606301][ T5111] Bluetooth: hci13: command tx timeout [ 311.606412][ T5111] Bluetooth: hci12: command tx timeout [ 311.690270][ T5111] Bluetooth: hci13: command tx timeout [ 313.686337][ T5111] Bluetooth: hci12: command tx timeout [ 313.776354][ T5111] Bluetooth: hci13: command tx timeout [ 315.846303][ T5111] Bluetooth: hci13: command tx timeout [ 317.618475][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.624815][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.694468][ T5126] Bluetooth: hci4: command 0x0406 tx timeout [ 323.353740][ T5126] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 323.367850][ T5126] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 323.378637][ T5126] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 323.390657][ T5126] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 323.399559][ T5126] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 323.407178][ T5126] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 325.446292][ T5111] Bluetooth: hci14: command tx timeout [ 327.526306][ T5111] Bluetooth: hci14: command tx timeout [ 329.606198][ T5111] Bluetooth: hci14: command tx timeout [ 331.686309][ T5111] Bluetooth: hci14: command tx timeout [ 343.846429][ T30] INFO: task kworker/u8:0:11 blocked for more than 143 seconds. [ 343.854680][ T30] Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 343.875566][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 343.884520][ T30] task:kworker/u8:0 state:D stack:18704 pid:11 tgid:11 ppid:2 flags:0x00004000 [ 343.901950][ T30] Workqueue: netns cleanup_net [ 343.907032][ T30] Call Trace: [ 343.910450][ T30] [ 343.914025][ T30] __schedule+0x17e8/0x4a20 [ 343.935509][ T30] ? __pfx___schedule+0x10/0x10 [ 343.946177][ T30] ? __pfx_lock_release+0x10/0x10 2024/05/28 23:51:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 343.951283][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 343.970156][ T30] ? kthread_data+0x52/0xd0 [ 343.974835][ T30] ? schedule+0x90/0x320 [ 343.986213][ T30] ? wq_worker_sleeping+0x66/0x240 [ 343.991397][ T30] ? schedule+0x90/0x320 [ 343.995770][ T30] schedule+0x14b/0x320 [ 344.005969][ T30] schedule_preempt_disabled+0x13/0x30 [ 344.022954][ T30] __mutex_lock+0x6a4/0xd70 [ 344.027615][ T30] ? __mutex_lock+0x527/0xd70 [ 344.032330][ T30] ? fib_seq_sum+0x31/0x290 [ 344.043736][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 344.049112][ T30] ? net_generic+0x1f/0x240 [ 344.053650][ T30] fib_seq_sum+0x31/0x290 [ 344.058258][ T30] register_fib_notifier+0x2db/0x370 [ 344.063569][ T30] ? register_fib_notifier+0x63/0x370 [ 344.078649][ T30] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 344.084955][ T30] nsim_fib_create+0x902/0xa70 [ 344.095908][ T30] ? __pfx_nsim_fib_create+0x10/0x10 [ 344.104685][ T30] nsim_dev_reload_up+0x3d1/0x8e0 [ 344.109907][ T30] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 344.115544][ T30] devlink_reload+0x478/0x870 [ 344.127394][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 344.132668][ T30] devlink_pernet_pre_exit+0x1f3/0x440 [ 344.142941][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 344.149216][ T30] ? class_remove_file_ns+0x121/0x160 [ 344.154618][ T30] cleanup_net+0x615/0xcc0 [ 344.176195][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 344.181219][ T30] ? process_scheduled_works+0x945/0x1830 [ 344.197305][ T30] process_scheduled_works+0xa2c/0x1830 [ 344.202947][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 344.226181][ T30] ? assign_work+0x364/0x3d0 [ 344.230825][ T30] worker_thread+0x86d/0xd50 [ 344.235452][ T30] ? __kthread_parkme+0x169/0x1d0 [ 344.246173][ T30] ? __pfx_worker_thread+0x10/0x10 [ 344.251339][ T30] kthread+0x2f0/0x390 [ 344.255433][ T30] ? __pfx_worker_thread+0x10/0x10 [ 344.260675][ T30] ? __pfx_kthread+0x10/0x10 [ 344.265936][ T30] ret_from_fork+0x4b/0x80 [ 344.271969][ T30] ? __pfx_kthread+0x10/0x10 [ 344.276667][ T30] ret_from_fork_asm+0x1a/0x30 [ 344.281512][ T30] [ 344.286275][ T30] INFO: task kworker/1:5:5163 blocked for more than 143 seconds. [ 344.294454][ T30] Not tainted 6.10.0-rc1-next-20240528-syzkaller #0 [ 344.303743][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 344.319158][ T30] task:kworker/1:5 state:D stack:23776 pid:5163 tgid:5163 ppid:2 flags:0x00004000 [ 344.333481][ T30] Workqueue: events linkwatch_event [ 344.342344][ T30] Call Trace: [ 344.345666][ T30] [ 344.348796][ T30] __schedule+0x17e8/0x4a20 [ 344.353346][ T30] ? __pfx___schedule+0x10/0x10 [ 344.365314][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 344.374433][ T30] ? __pfx_lock_release+0x10/0x10 [ 344.386202][ T30] ? kick_pool+0x1bd/0x620 [ 344.390687][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 344.396010][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 344.408247][ T30] ? schedule+0x90/0x320 [ 344.412621][ T30] schedule+0x14b/0x320 [ 344.433146][ T30] schedule_preempt_disabled+0x13/0x30 [ 344.446325][ T30] __mutex_lock+0x6a4/0xd70 [ 344.450903][ T30] ? __mutex_lock+0x527/0xd70 [ 344.475416][ T30] ? linkwatch_event+0xe/0x60 [ 344.480508][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 344.485602][ T30] ? process_scheduled_works+0x945/0x1830 [